We take the protection of your personal data seriously. This policy explains, in line with the General Data Protection Regulation (GDPR), which data we process when you visit our website or contact us, why, and what rights you have.
1. Definitions
This policy uses the terms of the GDPR (Art. 4). In short: personal data is any information about an identifiable person; processing is anything done with it, such as collecting, storing or deleting; the controller decides why and how it is processed; a processor handles data on the controller’s behalf.
2. Name and address of the controller
June Gastrobar e.K., owner Narmin Ismayilova
Kolosseumstraße 6, 80469 München
Email: nismayilova2019@gmail.com
Telephone: +49 157 38239614
A data protection officer has not been appointed, as there is no legal obligation to do so.
3. General data and server log files
Every time the website is opened, the hosting provider Vercel Inc. (USA) records technical data: IP address, date and time, the page requested, browser, operating system and referring page. This is needed to deliver the site and keep it secure (Art. 6(1)(f) GDPR). Transfers to the USA are covered by the EU-U.S. Data Privacy Framework and standard contractual clauses. The data is not combined with other sources.
The fonts on this site are served from our own host; no connection to Google Fonts is made. We use no tracking or advertising cookies.
4. Routine erasure and blocking of personal data
We process and store personal data only for as long as the purpose requires, or as long as the law requires us to keep it. Once the purpose no longer applies or a statutory retention period ends, the data is routinely blocked or erased.
5. Reservations and contact
You can reserve by Instagram direct message (preferred), by telephone, or with the form on this website. We note reservations by hand in our reservation book, which stays at the restaurant and is only seen by our team. Requests sent through the website form (name, phone, date, time, number of guests, notes) are forwarded to our team’s Telegram group. Telegram is operated outside the EU, which is why the form asks for your consent first (Art. 49(1)(a) GDPR). Handling a reservation is based on Art. 6(1)(b) GDPR.
Allergies: if you want to tell us about an allergy in advance, please do so by message or phone, not in the website form. We use this health information only to prepare your visit, based on your explicit consent (Art. 9(2)(a) GDPR).
Email is currently provided by Google Ireland Limited (Gmail).
6. Instagram and TikTok
Our site only links to our Instagram and TikTok profiles. No posts, widgets or tracking scripts from these platforms are embedded, so nothing is sent to them until you click a link. Instagram direct messages are processed by Meta Platforms Ireland Ltd.; transfer to Meta Platforms Inc. (USA) under the EU-U.S. Data Privacy Framework is possible. We use TikTok (TikTok Technology Limited, Ireland) for posts only.
7. Google Maps
The map on our home page only loads after you tap “Load map”. Only then does your browser connect to Google Ireland Limited and transmit your IP address; data may also reach Google LLC in the USA. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw with “Remove map” below it.
8. Rights of the data subject
You have the right to confirmation and access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and to withdraw consent at any time for the future (Art. 7(3)). A short message to the address above is enough. You may also complain to a supervisory authority; ours is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach.
9. Legal basis for processing
Where we ask for consent, Art. 6(1)(a) GDPR applies. Processing needed for a reservation or another contract is based on Art. 6(1)(b); where a legal obligation applies, on Art. 6(1)(c); otherwise on our legitimate interests under Art. 6(1)(f).
10. Legitimate interests
Our legitimate interest is running our restaurant: operating a secure, working website and answering your enquiries.
11. Storage period
Reservation data is kept until your visit has taken place and is then deleted.
[OPEN: fix the concrete period — e.g. reservation-book pages destroyed and Instagram/Telegram messages deleted four weeks after the visit]
12. Statutory or contractual requirements
You are not obliged to give us personal data. Without a name and a way to reach you, however, we cannot hold a table for you.
13. Automated decision-making
We do not use automated decision-making or profiling.