Privacy policy

1. Controller

This privacy policy explains which personal data we process when you use our website, order from us or reserve a table, and which rights you have.

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Ella RestaurantBauer Landstraße 3 24939 FlensburgPhone: 015563 393357Email: info@ellarestaurant.de

2. Technical provision

This website, online ordering, table reservations and the related management functions are technically provided via the GastryFood platform. GastryFood processes personal data on our behalf and according to our instructions as a processor (Art. 28 GDPR) and uses the technical service providers named in this policy for this purpose.

3. Website access and hosting

The website is hosted by Vercel (Vercel Inc., USA) and delivered via its content delivery network. When you access it, the hosting service processes technically necessary data such as your IP address, date and time, the page requested, browser and device information and the previously visited page (referrer) in server logs.

Images and files on this website (e.g. logo and menu images) are delivered via the Vercel Blob storage service; your IP address is transmitted to Vercel in the process.

The purpose is the secure, stable and fast provision of the website and the analysis of errors and misuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and functioning online service.

4. Database

The data described in the following sections (e.g. orders and customer accounts) is stored in a PostgreSQL database provided by Neon. The database is operated in a data centre region within the European Union.

5. Security and abuse prevention

To protect against misuse, such as automated sign-in attempts or mass requests, we limit the number of certain requests. We do not store IP addresses in plain text for this, only check values (hashes) of your IP address or of a random device identifier, computed with a secret key. We log security-relevant events, e.g. failed sign-ins, without IP addresses, email addresses or passwords in plain text. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the security of our service.

6. Cookies and local storage

We only use technically necessary cookies and comparable storage technologies in your browser. We do not use analytics, tracking or advertising services.

• Your cookie choice: 180 days
• Sign-in and security (session after sign-in, random identifier for abuse prevention): up to one year
• Linking your orders to your browser (random identifier): 30 days
• Selected language and current restaurant: for the session, up to one year
• Cart, order type and delivery area in your browser's local storage: until you empty the cart or clear your browser data
• Contact and delivery details for future orders: only if you enable saving them in the order form, in your browser's local storage, until you disable the option or clear your browser data

The legal basis for storing and reading this information is § 25(2) no. 2 of the German TDDDG, and Art. 6(1)(b) and (f) GDPR for further processing. You can open your cookie settings here at any time:

7. Orders

When you order from us, we process the details required to handle the order: name, contact details (email address and/or phone number), for deliveries the delivery address including floor, doorbell name and delivery notes, order contents and prices, requested time, your notes, the payment method chosen and the payment status, and any voucher code redeemed.

For orders placed at the table via a QR code, the table number is also stored.

The purpose is to accept, prepare, hand over or deliver and invoice your order and to answer queries. The legal basis is Art. 6(1)(b) GDPR, and Art. 6(1)(c) GDPR for statutory retention obligations. These details are required for the order; without them we cannot fulfil it.

We are notified of new orders by email; this email contains the order details.

8. Customer account

You can order as a guest without a customer account. If you voluntarily create a customer account, we process the data provided during registration (in particular name, email address, phone number and address details), your password only as a hash, saved delivery addresses and your order history. To reset your password, we send you an email on request. The purpose is to provide the account and simplify ordering; the legal basis is Art. 6(1)(b) GDPR.

Alternatively, you can sign in with your Google account. You are redirected to Google, and we receive from Google in particular your name, your email address and an account identifier. The legal basis is Art. 6(1)(b) GDPR.

9. Table reservations

For an online reservation we process name, email address, phone number, date, time and party size and, optionally, the occasion and your notes. You receive confirmation and status messages by email; we are notified of new reservations by email. The legal basis is Art. 6(1)(b) GDPR.

10. Reviews

After a completed and paid order you can voluntarily submit a review. We process your star rating, your optional comment and an optionally provided name. The review is linked to the order and displayed publicly on this website together with the comment and name. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is displaying authentic guest reviews.

11. Push notifications

With a customer account you can activate push notifications about the status of your orders. This requires your consent in your browser's permission prompt. For this we store the push address generated by your browser with the associated keys; delivery takes place via the push service of your browser vendor (e.g. Google, Mozilla, Apple or Microsoft). The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time in your browser settings.

12. Contacting us

If you contact us by email or phone, we process your details to handle your enquiry (Art. 6(1)(b) or (f) GDPR). The contact form on this website transmits your details (name, email address, country, message) to our server, which forwards them to us as an email via the Resend email service; your email address is set as the reply address. The form details are not stored in our database.

13. Sending emails

System messages such as notifications of new orders, reservation messages and password reset emails are sent via the Resend email service. The recipient address and the content of the respective email are processed. The legal basis is Art. 6(1)(b) or (f) GDPR.

14. Map display

On our homepage we show our location on an OpenStreetMap map. For this, your browser loads the map tiles and the coordinates of our address directly from servers of the OpenStreetMap Foundation (United Kingdom); your IP address is transmitted to them in the process. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is showing our location in an easy-to-find way.

15. Fonts

We do not load fonts from external servers (e.g. Google Fonts). The website uses the system fonts available on your device.

16. Recipients and transfers to third countries

Where necessary for the purposes described, personal data is received by the following recipients:

• GastryFood – platform operation as a processor
• Vercel Inc. (USA) – hosting, delivery and file storage (Vercel Blob)
• Neon – database (data centre region in the EU)
• Resend – sending emails
• Google – sign-in with a Google account or spam protection (reCAPTCHA)
• OpenStreetMap Foundation (United Kingdom) – map display
• Your browser vendor's push service – delivery of push notifications

Beyond this, we only disclose personal data if we are legally obliged to do so or you have consented.

Some of these recipients are based outside the European Union, in particular in the USA or the United Kingdom, or may process data there. Such a transfer only takes place under the conditions of Art. 44 et seq. GDPR, e.g. on the basis of an adequacy decision of the EU Commission or EU standard contractual clauses.

17. Storage period

• Order and payment data: as long as required for processing and, beyond that, for the statutory retention periods (in particular under § 147 of the German Fiscal Code and § 257 of the German Commercial Code, up to ten years).
• Customer account: until the account is deleted; orders already placed are then kept as described above without a link to the account.
• Addresses you have deleted: permanently deleted 30 days after you delete them.
• Status notifications in the customer account: read notifications after 7 days, all others after 30 days at the latest.
• Reservations: deleted automatically 90 days after completion (completed, cancelled, declined or no-show).
• Check values for abuse prevention: deleted automatically when the respective time window expires; expired session and security tokens are deleted daily.
• Low or medium severity security logs: deleted automatically after 180 days; serious events as long as required for investigation.
• Server logs of the hosting service: for a limited period according to the hosting service's specifications.
• Cookies and local storage: as stated in section 6.

18. Your rights

Subject to the statutory requirements, you have the following rights:

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)
• Lodging a complaint with a data protection supervisory authority (Art. 77 GDPR)

To exercise your rights, a message to info@ellarestaurant.de is sufficient.

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.

You can contact the data protection supervisory authority of your habitual residence, your place of work or the place of the alleged infringement, or the supervisory authority responsible for us.

19. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Additional information from the restaurant