Privacy information

This information applies to all-american-diner.de and the contact channels described below when operated through ALL-INKL.

1. Controller and privacy contact

Medet Göcer · All American Diner
Sole proprietorship
Bahnweg 8, 66887 St. Julian
Germany

Email: info@all-american-diner.de
Landline: 06387 999164
Mobile: 0179 4260175

Medet Göcer is the controller for the processing described here. Please send privacy enquiries to the general contact above.

2. Website and email hosting

We use ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, for our website and email mailboxes. The provider processes data on our behalf on servers in Germany. We have concluded a data processing agreement with the provider under Article 28 GDPR.

When you access the website, data including your IP address, the time of access and the requested content are processed. These connection data are needed to deliver the website, maintain secure and stable operation and detect misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is providing a secure and functional website. ALL-INKL is the recipient and processor.

Website access logs are retained for 30 days. The IP addresses they contain are shortened, but shortening does not necessarily make them fully anonymous. The 30-day period applies only to these access logs, not to emails, backups or other logs.

ALL-INKL privacy information on website and email hosting (external link)

3. Contact and reservation enquiries

If you email us at info@all-american-diner.de or call us, we process the contact details and enquiry content that you provide. For emails, these data particularly include sender and recipient addresses, time, subject, message text and any attachments. Depending on the telephone service, a call may generate phone number and connection data.

The reservation helper prepares an email to Reservierung@all-american-diner.de. It asks for the date, time, party size and a reservation name as required details. A callback number and an additional message are optional. A full legal name is not required. Please do not use it to provide health data or other particularly sensitive information.

Your details are checked and compiled only in your browser. Selecting “Send email” passes the valid details to your chosen mail application, which may already save the message as a draft. You must review and send the message there yourself. We receive your enquiry only when you send the email.

We handle your enquiry ourselves or through authorised staff. A reservation becomes binding only when we confirm it personally by email or phone. Without the date, time, party size and reservation name, the reservation helper cannot prepare a complete enquiry. You can instead contact us by phone or use the blank reservation email.

Where your enquiry concerns a contract or steps that you request before entering into one, we process the data under Article 6(1)(b) GDPR. Other enquiries are handled under Article 6(1)(f) GDPR, based on our legitimate interest in responding to them and maintaining business communication. Storage required by law is based on Article 6(1)(c) GDPR. Further retention where necessary to establish, exercise or defend legal claims is based on Article 6(1)(f) GDPR and our legitimate interest in pursuing or defending those claims.

Recipients may include the operator, authorised staff, ALL-INKL and the telephone and email service providers involved. For emails, the mail service that you choose is also involved.

4. Retention

We retain contact and reservation data only for as long as necessary to handle your enquiry or reservation.

Where individual documents are subject to statutory retention duties, we keep them for longer as required: business correspondence generally for six years, invoices and accounting vouchers for eight years, in each case calculated from the end of the relevant calendar year. We retain data beyond that only where required by statutory duties or to establish, exercise or defend legal claims. We then delete the data.

5. Cookies, local content and language selection

Our own website functions do not set cookies or use analytics or tracking services. Fonts, the logo, images, icons and the software used to display the map are provided by our website. Only the map tiles are loaded from OpenStreetMap after your consent; see Section 6 for details. The website access logs described in Section 2 remain unaffected.

When you open the general entry address, an explicit language choice in that address takes priority. Otherwise, the website checks your browser’s language preferences once and selects the first matching German or English version; if none matches, German is displayed. You can switch languages yourself at any time. This function uses no cookies or separate user identifier, creates no language profile and does not transmit the language list it reads. The language page you open (/de/ or /en/) may appear alongside ordinary access data in the logs described in Section 2.

For the query used solely to select the display language, we rely on Section 25(2)(2) TDDDG. Where personal data are processed, we separately rely on Article 6(1)(f) GDPR and our legitimate interest in presenting the website in a language you can understand.

6. OpenStreetMap map and external links

Our location map is provided by the OpenStreetMap Foundation (OSMF), St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. It is loaded only when you select “Agree and load map”. Your browser then connects to the OSMF and its delivery network. Data transmitted include, in particular, your IP address, browser and device information, the time of access, the map content requested and, where applicable, the referring page. This transmission takes place in connection with the map display. Our website does not request your device’s location for this purpose.

The legal basis for our integration of the map is your consent under Article 6(1)(a) GDPR. The map is optional; the address and contact details remain available without it. Your decision applies only to the current page visit and is not stored by us in cookies or local browser storage. You can withdraw your consent at any time for the future by selecting “Disable map”. Processing that took place before withdrawal remains unaffected.

Your browser may temporarily store content that is technically necessary to display the map you requested. Section 25(2)(2) TDDDG applies to this storage. The OSMF processes connection data generated when the map is accessed under its own responsibility, including to operate and secure its services. It does not specify a fixed retention period for map requests.

The OSMF uses Fastly’s global delivery network for map tiles. Data may therefore also be processed outside the EU and the European Economic Area. The European Commission has adopted an adequacy decision for the United Kingdom. For further information about the OSMF’s processing, please see its privacy policy (external link).

The linked address and “Plan route” open Google Maps directions in the app or browser. We pass only the diner’s address as the destination, not your location. You choose the starting point in the map service; any location permission is handled there. A connection to Google is made only when you open the link. For more information, see Google’s privacy policy (external link).

Other labelled source links also lead to external websites. Your browser connects to the relevant provider only when you open such a link. We do not transmit your device-detected location through these links.

7. Your data protection rights and right to complain

Subject to the applicable legal conditions, you may request access to your personal data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Please use the privacy contact in Section 1. These rights are not unlimited; in particular, statutory retention duties may prevent immediate erasure.

Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority, particularly where you habitually reside, work or where the alleged infringement occurred. The following authority is a relevant contact for a private restaurant business in Rhineland-Palatinate:

State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
Postfach 3040
55020 Mainz
Germany
Contact the Rhineland-Palatinate data protection authority (external link)

You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. Following an objection, we may continue processing only if we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or if it serves the establishment, exercise or defence of legal claims. To object, simply send a message to the privacy contact in Section 1.

9. Necessary data and automated decisions

The website cannot be delivered without the technical connection data. The consequences of missing reservation details are described in Section 3. We do not make automated decisions that produce legal or similarly significant effects, and we do not carry out profiling.