PRIVACY POLICY
This is a translation for your convenience. Only the German version is legally binding.
This page summarises how we handle your personal data. The complete, legally binding privacy policy is available in German on our German website. If anything here differs from the German version, the German version applies.
1. Who is responsible
KonVinum - Owner: Konstantin Sill
Hochstr. 99
52525 Heinsberg
Germany
Phone: +49 (0) 2452 988 64 64
Email: info@konvinum.de
2. Cookies
We only use one technically necessary cookie ("kv_consent"). It stores your choice from the cookie banner for 12 months and contains no personal data. Other content (Google Maps) is only loaded after you have agreed. You can change your choice at any time via "Cookie settings" in the footer.
3. Hosting and server log files
Our website, reservation system and email accounts are hosted by LimTec GmbH, Augsburg, Germany (brand "host4free"), which processes data only on our behalf (data processing agreement, Art. 28 GDPR). All fonts and other website components are loaded from this server – there is no connection to Google Fonts. To protect our forms against spam, a checksum derived from your IP address is kept for 10 minutes when you submit a form and then discarded.
When you visit our website, our web server automatically records technical information such as browser type, operating system, referring page, date and time and IP address. We use this information only to deliver the website reliably and to protect it against attacks.
4. Anonymous visitor statistics
We count visits, pages viewed, approximate time on site, rough origin (e.g. "via Google") and device type. This is done without cookies and without storing IP addresses. A daily changing random value makes it impossible to recognise you across days. The figures are stored only on our own server and are not passed on to anyone.
5. Google Maps
You can load a Google Maps map on our website. It is only loaded after your consent. Your IP address and technical data may then be transmitted to Google (Google Ireland Limited, Dublin, Ireland) and processed outside the EU. More information: https://policies.google.com/privacy
6. Table and room reservations, celebration requests
When you send a reservation request, we process the data you enter (name, email address, phone number, date and time or arrival and departure dates, number of guests and your optional message) in order to handle your request and contact you. For celebration and event requests we additionally process the occasion, preferred date and start time, number of guests, your optional wishes regarding food, drinks, budget and accommodation, an optional company name and your message; you receive an automatic acknowledgement with a summary by email. The data is stored in our password-protected reservation system on our own server and can only be accessed by our staff. Completed reservations are deleted automatically 60 days after the reservation date or departure. Only an anonymous record without name, contact details or message remains for our statistics; so that we can recognise returning guests, it contains an encrypted identifier of your email address from which the address cannot be recovered (legitimate interest, Art. 6(1)(f) GDPR). It is deleted together with the record after 14 months at the latest.
For table and room bookings you will receive a reminder email the day before. Each of these confirmations and reminders contains a personal link you can use to cancel your reservation yourself. Only if you explicitly agree in the form will we send you a single email the day after your visit asking for a review on Google; you can withdraw this consent at any time.
7. Newsletter
If you subscribe to our newsletter, we use your name and email address to send you news about our dishes, events and offers. You will first receive an email with a confirmation button (double opt-in); only after confirming will you receive the newsletter. You can unsubscribe at any time using the link in every email. Your data will then be deleted.
8. Social media
We only link to our Facebook and Instagram profiles with simple links. No data is transferred to Meta when you visit our website – only when you click such a link.
9. Your rights
Under the EU General Data Protection Regulation (GDPR) you have the right to access, rectification, erasure, restriction of processing, data portability and objection, and you can withdraw your consent at any time. You also have the right to lodge a complaint with a data protection supervisory authority; the authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Düsseldorf, www.ldi.nrw.de. To exercise your rights, simply contact us using the details above.
10. No automated decision-making
We do not use automated decision-making or profiling.
