Clear and transparent
Privacy information
Here you can find out which data is processed when you visit our website or contact us, and what rights you have.
Controller
Hager und Etterer GbR (Restaurant Café Zeis), Obstmarkt 3, 96047 Bamberg. Represented by: Julian Etterer and Nadine Hager. Email: [email protected], Phone: 0951 2082466.
Hosting and server logs
This website runs on a VPS provided by IDHosting / ID Group ApS, Denmark, and managed by our technical service provider. When you access it, the web server processes your IP address, the time and target of the request, response status, transferred data volume and information supplied by your browser, such as its identifier and, where provided, the referring page. This is used to deliver the website, diagnose errors and prevent misuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website.
Local Apache logs are checked for rotation daily; no more than 14 rotated log files are retained. Records relating to a specific security incident may be preserved separately until it has been investigated.
Protection and delivery through Cloudflare
Connections to this website pass through Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare receives technically necessary connection and request data, including your IP address, and processes traffic passing through its service. It protects against attacks and supports reliable, fast delivery. The legal basis is Article 6(1)(f) GDPR. Processing may also take place outside the EU or EEA. Cloudflare provides information about processing and international transfers.
Cloudflare privacy information
Contact and reservation enquiries
If you contact us through the form or by email, we process your name, email address and message, together with any contact details and information about your visit, celebration or meeting that you provide voluntarily. The enquiry is stored securely on our web server and emailed to our restaurant. We use this information to handle and answer your enquiry. Depending on its purpose, the legal basis is Article 6(1)(b) GDPR (a contract or pre-contractual enquiry) or Article 6(1)(f) GDPR (handling general correspondence). The required fields are necessary to handle your request. A table enquiry through the contact form is not a confirmed reservation.
Sending and receiving email
The website sends form notifications and necessary account emails through Migadu-Mail GmbH, Rohnen 587, 9414 Schachen, Switzerland. Message contents and addressing data needed for transmission and delivery are processed. Form enquiries are sent to [email protected]; the existing receiving mailbox uses Google's mail infrastructure. Processing serves to answer enquiries and provide requested account functions, on the legal bases described in the enquiry and friend-account sections.
Email providers may process data outside the EU or EEA under their privacy and data-processing terms. Please do not send particularly sensitive information through the form or by unencrypted email.
Online table reservations
We use DISH Reservation by DISH Digital Solutions GmbH for online table reservations. The form loads only when you open it on the reservation page. This connects your browser to DISH, which receives technically necessary connection data such as your IP address and browser information. The details of your reservation are processed directly in the DISH form. Alternatively, you can contact us by phone or through our contact form.
DISH Reservation privacy information
Friends of the house
If you use a friend account, we process the information needed to manage it, in particular your name, email address and a password hash. Your password is not stored as plain text. Member content and account settings are accessible only after login. The legal basis for account management is Article 6(1)(b) GDPR; security-related processing is based on Article 6(1)(f) GDPR.
Providing your birthday is optional and it is stored without the year. You receive email updates and birthday greetings only if you expressly select the respective option. The basis is your consent under Article 6(1)(a) GDPR. You can disable each option independently or contact us to withdraw your consent.
Technically necessary sessions
To operate forms and login securely, the CMS uses technically necessary session information and safeguards, for example against forged form requests. Necessary session cookies may be used for these functions, not for advertising. Where storage or access on your device is strictly necessary for this purpose, Section 25(2)(2) TDDDG applies; associated processing of personal data relies on the applicable basis under Article 6 GDPR.
Storage and deletion
Enquiries and related correspondence are needed for as long as required to handle the matter, perform a resulting contract or establish, exercise or defend legal claims. They must then be deleted unless statutory retention duties require otherwise. Account data is tied to the period of account use; consent applies until withdrawal. Evidence of consent or withdrawal may be retained where necessary to fulfil legal duties or provide proof.
External links and self-hosted fonts
Links to the voucher shop, Instagram, Facebook or other external websites take you to the respective provider only when you click them. Its privacy information then applies. No social media feeds are embedded here. The font files used on this website are loaded from our own web server; loading them does not connect your browser to Google Fonts.
Your rights
You may request access, rectification, erasure, restriction, data portability and, where the requirements are met, object to processing. You may withdraw consent with effect for the future. Please contact [email protected]. You also have the right to lodge a complaint with a competent data protection supervisory authority.