Thank you very much for visiting our website www.cube-restaurant.de and for your interest in our company. Protecting your personal data is very important to us. Personal data can be defined as information concerning the personal or material circumstances of an identified or identifiable natural person. Examples include a person’s real name, address, telephone number, and date of birth as well as any other data that can relate to an identifiable person.
Since personal data enjoys special legal protection, we only collect it to the extent needed to provide our website and supply our services. In this Privacy Policy, we outline which personal data we collect when you visit our website and how we use this data. Our data protection practices are in line with statutory provisions, in particular those stipulated in the German Federal Data Protection Act (BDSG), the German Telemedia Act (TMG), and the EU General Data Protection Regulation (GDPR). We will only collect, process, and store your personal data to the extent required to provide fully functional web pages, content, and services as well as to the extent necessary to process inquiries and, if applicable, to manage bookings/perform contracts; however, we will only do this if we have a legitimate reason for doing so within the meaning of Article 6, Paragraph 1, Sentence 1 (f) GDPR or if there is another legal basis for doing so. We will only use your data for other, explicitly specified purposes (e.g. to send promotional information in the form of a newsletter) if you have given your prior, separate consent to this.
1. Data controller within the meaning of Article 4, Paragraph 7 GDPRThe data controller within the meaning of the GDPR, other national data protection laws of the Member States, and other data protection provisions is:
Cube Restaurant GmbH & Co. KG
Schaflandstraße 6
70736 Fellbach
Email: [email protected]
Tel.: +49 (0)711 / 55340 - 555
Fax: +49 (0)711 / 280 - 4442
2. Name and address of the data protection officer
Jens Dinkel
Schaflandstraße 6
70736 Fellbach
Email: [email protected]
Tel.: +49 (0)711 / 55340 430
Fax: +49 (0)711 / 55340 300
3. Provision of the website and creation of log files
Whenever you access our website, our system automatically collects data and information from your computer system. The following data is collected during this process:
Which data is processed?
(1) Information about the browser type and version being used
(2) Your device’s operating system
(3) Your device’s IP address
(4) Date and time of access
(5) The web pages and resources (images, files, other site content) accessed on our website.
(6) Websites from which your system accessed our website (referrer tracking) This data is stored in log files on our system. We do not store this data alongside personal data relating to specific users. This means that we cannot use it to identify individual visitors to our site.
Legal basis for processing the personal data
Article 6, Paragraph 1 (f) GDPR (legitimate interest). We have a legitimate interest in ensuring that the purpose outlined below can be achieved.
Purpose of the data processing
This data is logged to help us ensure that our website remains compatible for all users in so far as possible and to help us combat misuse and rectify errors. To fulfil this objective, it is necessary to log technical data concerning the computer accessing our website so that we can respond to display errors, attacks on our IT systems, and/or errors in our website’s functionality as soon as possible. We also use the data to optimize our website and for the general purpose of ensuring that our IT systems remain secure.
Duration of storage
The aforementioned technical data will be deleted as soon as it is no longer needed to ensure that our website is compatible for all users and no later than within three months after you access our website.
Right to object and right to have your data deleted
Your rights to object and to have your data deleted are in line with the general provisions provided below on your right to object and your right to request that your data be deleted under data protection law.
4. Special features provided on the website
We collect, process, and store your personal data when you use certain features on our website. This section explains how we use this data:
Newsletter registration form:
Which personal data is processed?
The data you enter when registering for our newsletter.
Legal basis for processing the personal data
Article 6, Paragraph 1 (a) GDPR (implied consent).
Purpose of the data processingWe use the data entered into our newsletter registration form exclusively for the purpose of distributing our newsletter, which we use to inform subscribers about all of our services and news. After you register, we will send you a confirmation email containing a link. You need to click on this link to complete the newsletter registration process (double opt-in).
Duration of storageYou can unsubscribe from our newsletter at any time by clicking on the unsubscribe link, which can also be found in each newsletter. If you unsubscribe, we will delete your data immediately. We will also delete your data without undue delay if you do not complete the registration process. We reserve the right to delete your data without specifying our reasons for doing so and without giving prior or subsequent notice.
Right to object and right to have your data deleted
Your rights to object and to have your data deleted are in line with the general provisions provided below on your right to object and your right to request that your data be deleted under data protection law.
Contact form(s):
Which personal data is processed?
The data you enter into our contact form(s).
Legal basis for processing the personal data
Article 6, Paragraph 1 (a) GDPR (implied consent).
Purpose of the data processingWe only use the data entered into our contact form(s) to process specific inquiries submitted through the form(s).
Duration of storageAs soon as we have finished processing your inquiry, we will delete your data immediately, unless we are subject to statutory retention periods.
Right to object and right to have your data deleted
Your rights to object and to have your data deleted are in line with the general provisions provided below on your right to object and your right to request that your data be deleted under data protection law.
Application form:
Which personal data is processed?
he data you enter into the form and, if applicable, the data you upload.
Legal basis for processing the personal data
Article 6, Paragraph 1 (b) GDPR (taking steps prior to entering into a contract).
Purpose of the data processing
To process your application.
Duration of storageWe will delete your data as soon as we have processed your application and no longer have a legitimate interest in storing your application details. This means that if we do not begin an employment relationship with you, we will delete your application documents after six months at the latest.
Right to object and right to have your data deleted
Your rights to object and to have your data deleted are in line with the general provisions provided below on your right to object and your right to request that your data be deleted under data protection law.
5. Statistical evaluation of visits to this website – web tracking
We collect, process, and store the following data when you access this website or individual files on this website: IP address, the web page from which you accessed the file, name of the file, date and time of access, the quantity of data transferred, and notification as to whether the access request was successful (known as a web log). We use this access data exclusively in an anonymous form for the purpose of continuously improving our website and for statistical purposes. To analyze visits to this website, we also use the following web tracking services:
Google Googleadservices/Google AdWords Conversion/Google Dynamic Remarketing
Our website uses a web tracking service provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA (hereinafter: Google Googleadservices/Google AdWords Conversion/Google Dynamic Remarketing). Google Googleadservices/Google AdWords Conversion/Google Dynamic Remarketing uses cookies during the provision of the web tracking service. These cookies are stored on your computer and enable us to analyze how you use our website and your browsing behavior. This process is known as tracking. We conduct this analysis on the basis of the tracking service provided by Google Googleadservices/Google AdWords Conversion/Google Dynamic Remarketing so that we can continuously optimize our website and improve its availability. When you use our website, data (including in particular your IP address and user activities) is transferred to servers belonging to Google Googleadservices/ Google AdWords Conversion/Google Dynamic Remarketing and is processed and stored outside of the European Union, e.g. in the USA. The legal basis for processing this data is Article 6, Paragraph 1 (a) GDPR. Google Googleadservices/Google AdWords Conversion/Google Dynamic Remarketing has self-certified itself under the EU-U.S. Privacy Shield Framework (see https://www.privacyshield.gov/list). Your data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on how the transferred data is handled can be found in the Google Googleadservices/Google AdWords Conversion/Google Dynamic Remarketing Privacy Policy: https://policies.google.com/privacy. You can prevent your personal data (in particular your IP address) from being collected, transferred, and processed by disabling the execution of script code in your browser, by installing a script blocker to your browser (e.g. from www.noscript.net or www.ghostery.com), or by enabling the “Do not track” setting in your browser.
Google Analytics
Which personal data is processed? Our website uses the web tracking service provided by Google LLC, 1600 Amphitheatre Park in 94043 Mountain View, USA (hereinafter: Google Analytics). Google Analytics uses cookies during the provision of the web tracking service. These cookies are stored on your computer and enable us to analyze how you use our website and your browsing behavior. This process is known as tracking. We conduct this analysis on the basis of the tracking service provided by Google Analytics so that we can continuously optimize our website and improve its availability. When you use our website, data (including in particular your IP address and user activities) is transferred to servers belonging to Google LLC and is processed and stored outside of the European Union, e.g. in the USA. The European Commission has determined that an adequate level of data protection can exist in the USA, provided that the data processing company is self-certified under the U.S.-EU Privacy Shield Framework and the export of data to the USA has been made permissible in this way. IP anonymization has been enabled within our website’s Google Analytics tracking code, meaning that your IP address will be made anonymous by Google Analytics before being transferred. This website uses a Google Analytics tracking code that has been extended by the operator gat._anonymizeIp(); in order to ensure that IP addresses are only collected anonymously (known as IP masking).
Legal basis for processing the personal data
Article 6, Paragraph1 (a) GDPR (consent), either as a result of registering with Google (opening a Google account and accepting the data protection policy in place) or, if you have not registered with Google, by explicitly giving your consent when accessing our website.
Purpose of the data processing
Google will use this information on our behalf to analyze your visit to this website, to compile reports about website activities, and to provide us with additional services related to the use of our website and the internet in general. The IP address transferred from your browser during the Google Analytics process will not be combined with other data held by Google LLC.
Duration of storage
Google will store the data needed to provide web tracking for as long as is necessary to perform the requested web service. The data will be collected and stored anonymously. If, however, any references are made to individuals, the data will be deleted immediately, provided that it is not subject to any statutory retention obligations. In any case, it will be deleted after the retention obligation has expired.
Right to object and right to have your data deleted
You can prevent your personal data (in particular your IP address) from being collected, transferred to, and processed by Google by disabling the execution of script code in your browser, by installing a script blocker to your browser (e.g. from www.noscript.net or www.ghostery.com), or by enabling the “Do not track” setting in your browser. You can also prevent Google from capturing and processing the data generated by the Google cookie relating to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. Google’s Privacy Policy and information about its security practices are available at https://policies.google.com/privacy.
Facebook Custom Audience
Our website uses a web tracking service provided by Facebook, Inc., 1601 Willow Road, 94024 Menlo Park, USA (hereinafter: Facebook Custom Audience). Facebook Custom Audience uses cookies during the provision of the web tracking service. These cookies are stored on your computer and enable us to analyze how you use our website and your browsing behavior. This process is known as tracking. We conduct this analysis on the basis of the tracking service provided by Facebook Custom Audience so that we can continuously optimize our website and improve its availability. When you use our website, data (including in particular your IP address and user activities) is transferred to servers belonging to Facebook Custom Audience and is processed and stored outside of the European Union, e.g. in the USA. The legal basis for processing this data is Article 6, Paragraph 1 (a) GDPR. Facebook Custom Audience has self-certified itself under the EU-U.S. Privacy Shield Framework (see https://www.privacyshield.gov/list). Your data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on how the transferred data is handled can be found in the Facebook Custom Audience Data Policy: https://www.facebook.com/privacy/explanation. You can prevent your personal data (in particular your IP address) from being collected, transferred, and processed by disabling the execution of script code in your browser, by installing a script blocker to your browser (e.g. from www.noscript.net or www.ghostery.com), or by enabling the “Do not track” setting in your browser.
Facebook Pixel Custom Audience
Our website uses a web tracking service provided by Facebook, Inc., 1601 Willow Road, 94024 Menlo Park, USA (hereinafter: Facebook Pixel Custom Audience). Facebook Pixel Custom Audience uses cookies during the provision of the web tracking service. These cookies are stored on your computer and enable us to analyze how you use our website and your browsing behavior. This process is known as tracking. We conduct this analysis on the basis of the tracking service provided by Facebook Pixel Custom Audience so that we can continuously optimize our website and improve its availability. When you use our website, data (including in particular your IP address and user activities) is transferred to servers belonging to Facebook Pixel Custom Audience and is processed and stored outside of the European Union, e.g. in the USA. The legal basis for processing this data is Article 6, Paragraph 1 (a) GDPR. Facebook Pixel Custom Audience has self-certified itself under the EU-U.S. Privacy Shield Framework (see https://www.privacyshield.gov/list). Your data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on how the transferred data is handled can be found in the Facebook Pixel Custom Audience Data Policy: https://www.facebook.com/privacy/explanation. You can prevent your personal data (in particular your IP address) from being collected, transferred, and processed by disabling the execution of script code in your browser, by installing a script blocker to your browser (e.g. from www.noscript.net or www.ghostery.com), or by enabling the “Do not track” setting in your browser.
6. Integration of external web services and processing of data outside the EU Our website uses active JavaScript content from external providers (known as web services). When you access our website, these external providers may receive personal information about your visit to our website. It is possible that this data will be processed outside the EU. You can prevent this by installing a JavaScript blocker, e.g. the “NoScript” browser plug-in (www.noscript.net), or by disabling JavaScript in your browser. This may, however, limit the functionality of the websites you visit. We use the following external web services:
DoubleClick
A web service provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA (hereinafter: DoubleClick) is loaded on our website. We use this data to ensure that our website is fully functional. This process may involve your browser transferring personal data to DoubleClick. The legal basis for processing this data is Article 6, Paragraph 1 (f) GDPR. We have a legitimate interest in ensuring that our website works properly without any errors. DoubleClick has self-certified itself under the EU-U.S. Privacy Shield Framework (see https://www.privacyshield.gov/list ). Your data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on how the transferred data is handled can be found in DoubleClick’s Privacy Policy: https://policies.google.com/privacy. You can prevent DoubleClick from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker to your browser (e.g. from www.noscript.net or www.ghostery.com).
Fonts.net/Fonts.com
A web service provided by Monotype GmbH, Werner-Reimers-Straße 2-4, 61352 Bad Homburg, Germany (hereinafter: Fonts.net/Fonts.com) is loaded on our website. We use this data to ensure that our website is fully functional. This process may involve your browser transferring personal data to Fonts.net/Fonts.com. The legal basis for processing this data is Article 6, Paragraph 1 (f) GDPR. We have a legitimate interest in ensuring that our website works properly without any errors. Your data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on how the transferred data is handled can be found in the Fonts.net/Fonts.com Privacy Policy: http://www.monotype.com/legal/privacy-policy. You can prevent Fonts.net/Fonts.com from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker to your browser (e.g. from www.noscript.net or www.ghostery.com).
Google
A web service provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA (hereinafter: Google) is loaded on our website. We use this data to ensure that our website is fully functional. This process may involve your browser transferring personal data to Google. The legal basis for processing this data is Article 6, Paragraph 1 (f) GDPR. We have a legitimate interest in ensuring that our website works properly without any errors. Google has self-certified itself under the EU-U.S. Privacy Shield Framework (see https://www.privacyshield.gov/list ). Your data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on how the transferred data is handled can be found in Google’s Privacy Policy: https://policies.google.com/privacy. You can prevent Google from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker to your browser (e.g. from www.noscript.net or www.ghostery.com).
Google Video
A web service provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA (hereinafter: Google Video) is loaded on our website. We use this data to ensure that our website is fully functional. This process may involve your browser transferring personal data to Google Video. The legal basis for processing the data is Article 6, Paragraph 1 (f) GDPR. We have a legitimate interest in ensuring that our website works properly without any errors. Google Video has self-certified itself under the EU-U.S. Privacy Shield Framework (see https://www.privacyshield.gov/list). Your data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on how the transferred data is handled can be found in Google Video’s Privacy Policy: https://policies.google.com/privacy. You can prevent Google Video from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker to your browser (e.g. from www.noscript.net or www.ghostery.com).
Google APIs
A web service provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA (hereinafter: Google APIs) is loaded on our website. We use this data to ensure that our website is fully functional. This process may involve your browser transferring personal data to Google APIs. The legal basis for processing this data is Article 6, Paragraph 1 (f) GDPR. We have a legitimate interest in ensuring that our website works properly without any errors. Google APIs has self-certified itself under the EU-U.S. Privacy Shield Framework (see https://www.privacyshield.gov/list). Your data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on how the transferred data is handled can be found in Google APIs’ Privacy Policy: https://policies.google.com/privacy. You can prevent Google APIs from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker to your browser (e.g. from www.noscript.net or www.ghostery.com).
intelliAd
A web service provided by intelliAd Media GmbH, Sendlingerstraße 7, 80331 Munich, Germany (hereinafter: intelliAd) is loaded on our website. We use this data to ensure that our website is fully functional. This process may involve your browser transferring personal data to intelliAd. The legal basis for processing this data is Article 6, Paragraph 1 (f) GDPR. We have a legitimate interest in ensuring that our website works properly without any errors. Your data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on how the transferred data is handled can be found in intelliAd’s Privacy Policy: https://www.intelliad.com/privacy-policy/. You can prevent intelliAd from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker to your browser (e.g. from www.noscript.net or www.ghostery.com).
YouTube
A web service provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA (hereinafter: YouTube) is loaded on our website. We use this data to ensure that our website is fully functional. This process may involve your browser transferring personal data to YouTube. The legal basis for processing this data is Article 6, Paragraph 1 (f) GDPR. We have a legitimate interest in ensuring that our website works properly without any errors. YouTube has self-certified itself under the EU-U.S. Privacy Shield Framework (see https://www.privacyshield.gov/list). Your data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on how the transferred data is handled can be found in YouTube’s Privacy Policy: https://policies.google.com/privacy. You can prevent YouTube from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker to your browser (e.g. from www.noscript.net or www.ghostery.com).
ytimg
A web service provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA (hereinafter: ytimg) is loaded on our website. We use this data to ensure that our website is fully functional. This process may involve your browser transferring personal data to ytimg. The legal basis for processing this data is Article 6, Paragraph 1 (f) GDPR. We have a legitimate interest in ensuring that our website works properly without any errors. ytimg has self-certified itself under the EU-U.S. Privacy Shield Framework (see https://www.privacyshield.gov/list). Your data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on how the transferred data is handled can be found in ytimg’s Privacy Policy: https://policies.google.com/privacy. You can prevent ytimg from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker to your browser (e.g. from www.noscript.net or www.ghostery.com).
7. Information on the use of cookies
Which personal data is processed?We use cookies on some of our web pages to enable you to access certain features on our website. Cookies are small text files that your browser may store on your computer. These text files contain a distinctive character string, which allows your browser to be uniquely identified if it is used to access our website again. The process of storing a cookie file can also be referred to as “placing a cookie” on a device.
Legal basis for processing the personal data
Article 6, Paragraph 1 (f) GDPR (legitimate interest). We have a legitimate interest in ensuring that our website remains fully functional, is more user-friendly, and better meets our customers’ requirements. We can only use cookie technology to identify individual visitors to our site if the site visitor has previously given us their personal data and has given us their special consent.
Purpose of the data processing
Our website places cookies on your device to ensure that it remains fully functional and to make it more user-friendly. Cookie technology also enables us to use pseudonyms (e.g. an individual ID number) to identify individual visitors to our site so that we can offer more tailored services.
Duration of storage
Our cookies are stored until you delete them in your browser. Session cookies, on the other hand, are only stored until the session ends. Right to object and right to have your data deleted You can choose to configure your browser in one of the following ways: to prohibit cookies from being stored on your device in general, to be informed about the storage of cookies, to give you the chance to decide whether to accept cookies on a case-by-case basis, or to generally accept cookies. Cookies can be used for a wide variety of purposes, e.g. to recognize that your PC has already connected to our website in the past (permanent cookies) or to save recently viewed websites (session cookies). We place cookies on your device to make our website more user-friendly. To enable you to benefit from these user-friendly features, we recommend that you accept cookies for our website. Your rights to object and to have your data deleted are otherwise in line with the general provisions provided below on your right to object and your right to request that your data be deleted under data protection law.
8. Data security and data protection, communication by email
During the collection, storage, and processing of your personal data, technical and organizational measures are used to protect it from access by third parties. However, there is a risk that unencrypted data sent by email may not remain completely secure as it is being transferred to our IT systems. We therefore recommend that you send highly confidential information to us using an encrypted form of communication or by post.
9. Withdrawal of consent, your right to access the data we have stored, and your right to have this data amended, deleted, and blocked In accordance with the German Federal Data Protection Act (BDSG), you have the right to receive information free of charge about the data we have stored about you and, where appropriate, you have the right to have this data rectified, blocked, or deleted. On request, we will delete your data unless there is a legal reason that prevents us from doing so. You can withdraw at any time your consent for us to use your personal data. You can contact us using the details below at any time to request access to your data, to request that your data be deleted or corrected, or to send us any general comments:
Cube Restaurant GmbH & Co. KG
Schaflandstraße 6
70736 Fellbach
Email: [email protected]
Tel.: +49 (0)711 / 55340 - 555
Fax: +49 (0)711 / 280 - 4442
10. Right to data portability
In terms of the personal data that you have given to us, you have the right to request that we provide this personal data to you in a structured, commonly used, and machine-readable format. You also have the right to demand that we immediately transmit, at your first request, this data to a third party, provided that we are processing this data on the basis of consent pursuant to Article 6, Paragraph 1 (a) GDPR or Article 9, Paragraph 2 (a) GDPR or on the basis of a contract pursuant to Article 6, Paragraph 1 (b) GDPR, and provided that we are carrying out the processing by automated means. When exercising this right to data portability, you also have the right to have your personal data transmitted directly from one controller to another, provided that this is technically feasible. This must not adversely affect the rights and freedoms of others. The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or for the exercise of official authority vested in the controller.
11. The right to lodge a complaint with a supervisory authority pursuant to Article 77, Paragraph 1 GDPR
If you suspect that we are processing your data unlawfully on our website, you may of course request that this be legally clarified at any time. Irrespective of this, you may also contact a supervisory authority. You may lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, and/or the place of the alleged infringement, i.e. you can choose to contact a supervisory authority at one of these locations. The supervisory authority with which you lodge your complaint will then inform you about the progress and the outcome of your complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.