Privacy Policy
We take the protection of your personal data seriously. This policy explains what data we process, why, and how — in accordance with the EU General Data Protection Regulation (GDPR / DSGVO) and applicable German law.
1. Data controller
The controller within the meaning of Art. 4(7) GDPR is:
【 Firmenname GmbH — bitte ergänzen 】
Torstraße 12
10119 Berlin
Germany
Tel:+49 30 1234 5678
E-Mail:hello@doza.example
Data Protection Officer: 【 Name und Kontakt des Datenschutzbeauftragten — bitte ergänzen oder streichen, falls nicht benannt 】
2. Hosting & server log files
This website is hosted by 【 Hosting-Anbieter — bitte ergänzen 】. When you visit any page, your browser automatically sends information that our server logs record:
IP address (anonymised after processing), browser type and version, operating system, referring URL, pages visited, date and time of the request, and volume of data transferred.
Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in operating a stable and secure website. Logs are retained for 7 days and then deleted automatically.
3. Reservation & contact form
When you make a table reservation or send a message via the contact form, we collect the following data: family name, e-mail address, requested date and time, and party size.
We use this data solely to process your reservation or enquiry and to contact you about it. The data is not used for any other purpose, nor shared with third parties outside the group of companies necessary to handle your request.
Legal basis: Art. 6(1)(b) GDPR — processing is necessary to take steps at your request prior to entering into a contract (the restaurant visit). Reservation data is retained for 3 months after the date of the reservation and then deleted.
4. Interactive map (CARTO / Leaflet)
The Visit section embeds an interactive map powered by Leaflet (open-source, runs locally in your browser) and map tiles served by CARTO (basemaps.cartocdn.com).
The map is NOT loaded until you give explicit cookie consent. Before consent, a static placeholder is shown.
Once you consent, your browser loads tile images directly from CARTO's CDN. In doing so, your IP address is transmitted to CARTO. CARTO is a processor acting under a Data Processing Agreement with us. For details see: https://carto.com/privacy
Legal basis for loading the map after consent: Art. 6(1)(a) GDPR. You may withdraw consent at any time via the cookie settings link in the footer.
5. Fonts (Manrope, self-hosted)
This website uses the Manrope typeface. The font files are self-hosted on our server via @nuxt/fonts — no request is made to Google Fonts or any other external font service. No data relating to font loading is transmitted to third parties.
6. Local storage
We store the following items in your browser's localStorage: your language preference (en / ko), your display-theme preference (light / dark), and your cookie-consent choice. These values never leave your device and are not transmitted to our server. No tracking cookies or cross-site identifiers are used on this website.
7. Newsletter
If you subscribe to our newsletter, we collect your e-mail address for the sole purpose of sending you the DOZA newsletter.
Legal basis: Art. 6(1)(a) GDPR — your consent. You may unsubscribe (revoke consent) at any time, for example by using the unsubscribe link included in every newsletter e-mail or by contacting us at hello@doza.example. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Note: once our newsletter dispatch service is connected, subscriptions will additionally be protected by a double opt-in step — you will receive a confirmation e-mail and must click the link it contains before the subscription becomes active. 【 E-Mail-Dienstleister — bitte ergänzen, z.B. Mailchimp / Brevo — und Datenverarbeitungsvertrag erwähnen 】
8. Your rights as a data subject
You have the following rights under the GDPR:
- Right of access (Art. 15) — you may request a copy of the personal data we hold about you.
- Right to rectification (Art. 16) — you may ask us to correct inaccurate data.
- Right to erasure (Art. 17) — you may ask us to delete your data under certain conditions.
- Right to restrict processing (Art. 18) — you may ask us to limit how we use your data.
- Right to data portability (Art. 20) — you may receive your data in a structured, machine-readable format.
- Right to object (Art. 21) — you may object to processing based on legitimate interests.
- Right to withdraw consent (Art. 7(3)) — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise your rights, please contact us at hello@doza.example.
9. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. The competent authority for DOZA is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin