Privacy

The controller for data processing on this website is Bavaria Soul GmbH, Nymphenburger Str. 117, 80636 München, Germany. You can reach us by telephone on 089 / 606 661 68 or by email at info@bavaria-soul.de.

This website runs on web space provided by STRATO AG, based in Berlin, Germany. The provider processes the data arising when our pages are accessed on our behalf – in particular the server log files described in the next section.

This is governed by a data processing agreement pursuant to Article 28 GDPR, under which the provider is obliged to process the data solely on our instructions and solely for the operation of the website. The servers are located in Germany.

When you access our pages, our hosting provider automatically stores data in so-called server log files: the page requested, the time of access, the volume of data transferred, the notification of successful retrieval, browser type and operating system, and the IP address.

This processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and trouble-free operation of the website and in investigating faults and attempted attacks. The data is not merged with other data sources and is not used to identify you as a person.

The log files are deleted automatically by our hosting provider as soon as they are no longer required for these purposes. They are examined only when there is a specific reason to do so, such as a technical fault or an attempted attack.

This website sets no cookies of its own, uses no analytics or tracking tools, and creates no usage profiles. A consent banner is therefore not required.

The sole exception is the map on the contact page. It stays switched off until you explicitly load it – only then can Google set cookies. See the section “Map display on the contact page”.

When you open the “Book a table” page, our booking service provider DISH sets a technically necessary session cookie. See the section “Online table booking”.

The typefaces used are served from our own server. No connection is established to third-party servers – such as Google Fonts – when you visit our website.

On the contact page you can choose to display our location on a Google Maps map. The map is deliberately not loaded automatically: at first you see only a placeholder area showing our address. The map is retrieved from Google only once you tap “Load map”. Until that moment there is no connection to Google whatsoever and no data is transmitted.

When you tap the button, your browser transmits to Google in particular your IP address, information about your browser and device, and the page you are viewing. Google may set cookies or store and read information on your device in the process. If you are signed in to a Google account at that time, Google may associate the request with that account.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the United States. Google bases this transfer on the European Commission's standard contractual clauses and is certified under the EU-US Data Privacy Framework. Despite these safeguards, access by US authorities cannot be entirely ruled out.

The legal basis is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Tapping “Load map” constitutes that consent. It is entirely voluntary: without the map the website remains fully usable, and our address is shown in plain text directly above it.

Withdrawal: we do not store your decision. If you reload the page or return later, the map is switched off again. Your withdrawal therefore takes effect immediately and without any further action. Google's privacy policy is available at policies.google.com/privacy.

On the “Book a table” page we embed the DISH Reservation booking system. The provider is DISH Digital Solutions GmbH, Metro-Straße 1, 40235 Düsseldorf, Germany. The booking form is loaded directly from the provider's servers when you open this page. For technical reasons your IP address, information about your browser and device, and the page you are viewing are transmitted to DISH. The form is not loaded on any other page of our website.

If you make a booking, DISH processes the details you enter – usually your name, email address, telephone number, date, time, number of guests and any comments – on our behalf in order to create and confirm your booking and pass it on to us. The legal basis is Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract). We use these details solely to handle your booking.

To run the booking process, DISH sets a technically necessary session cookie. Storing it is permitted without consent under Section 25(2) no. 2 TDDDG, as it is required to provide the service you have expressly requested – the booking.

We have concluded a data processing agreement with DISH under Article 28 GDPR. Booking data is deleted as soon as it is no longer required for handling the booking and no statutory retention obligations apply. You can always book by telephone instead; using the form is voluntary.

In the footer and on the contact page we link to our profile on Instagram (Meta Platforms Ireland Limited, Dublin). This is an ordinary link, not an embedded window: as long as you do not click it, no data is transmitted to Instagram.

On our home page we link to our Google business profile (Google Ireland Limited, Dublin), where you can read reviews or write one yourself. This too is an ordinary link: nothing is loaded from Google and no data is transmitted to Google before you click it.

The respective provider is solely responsible for any processing carried out on the linked sites, and its privacy policy applies. We have no influence over its content or scope.

If you contact us by email or telephone, we process your details solely in order to handle your enquiry. The legal basis is Article 6(1)(b) or (f) GDPR. We delete the data as soon as it is no longer required and no statutory retention obligations apply.

We deliberately do not offer a contact form. As a result, no data accumulates with us beyond the message you send yourself.

This website transmits all content encrypted using current technology (TLS). You can recognise this by the “https://” in the address bar and the padlock symbol in your browser. If you access the site unencrypted, we redirect you automatically to the encrypted version.

You have the right to information about the data stored about you, to its rectification and erasure, to restriction of processing, and to data portability. Please use the contact details above.

Where processing is based on your consent – on this website that concerns the map display – you may withdraw it at any time with effect for the future. The lawfulness of processing carried out up to that point remains unaffected.

You also have the right to lodge a complaint with a supervisory authority. The authority competent for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.