Legal Notice

Privacy

The restaurant list, the detail pages and the open dataset can be used without an account and without providing personal data. Anyone who creates an account, suggests a restaurant or joins a waiting list deliberately provides data — which data and where it goes is set out in the sections below.

Error tracking (Sentry)

To detect and fix technical errors, we use Sentry (Functional Software, Inc.). If an error occurs on our website, technical details such as the time, the page requested and the error message are transmitted to servers in the European Union (Frankfurt am Main). IP addresses and user data are not transmitted. The legal basis is our legitimate interest in the stable and secure operation of the website pursuant to Art. 6(1)(f) GDPR.

Email delivery (Brevo)

We use Brevo (Sendinblue GmbH, Cologne) to send emails — confirmations, notifications, waiting lists. Transmitted are the recipient’s email address and name as well as the content of the message. The legal basis is Art. 6(1)(b) GDPR, or (a) for waiting list sign-ups. A data processing agreement is in place.

Newsletter and campaigns (Brevo)

Anyone who explicitly consents when joining a waiting list or registering is stored as a contact at Brevo (Brevo SA, France) — permanently and for marketing purposes, that is, beyond merely sending an individual message. Transmitted are: email address, contact person’s name, organisation or restaurant name, language, the role in our sales process and the processing status. Free-text messages, phone numbers and locations are explicitly not transmitted. The legal basis is Art. 6(1)(a) GDPR (consent). Consent is voluntary, not a condition for signing up, and can be withdrawn at any time — via the unsubscribe link in every campaign or by deleting the account. After a withdrawal the contact is removed from Brevo.

Nearby stops (Verkéiersverbond)

On restaurant detail pages we show public transport stops. For this we query the Verkéiersverbond interface — only the restaurant’s coordinates are transmitted. No visitor data: neither IP address nor identifier. We cache the response for 24 hours.

Your rights

You have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• erasure of your account and the associated data (Art. 17 GDPR)
• portability — a machine-readable copy of your data (Art. 20 GDPR)
• withdraw your consent, for example to a waiting list sign-up (Art. 7(3) GDPR)
• lodge a complaint with the Commission nationale pour la protection des données (CNPD), Luxembourg

Access, export and erasure you do yourself in your profile — immediately and without a request: go to my profile.

Retention

Account data is kept while the account exists; after deletion it disappears immediately. Waiting list sign-ups remain until withdrawn or until the programme starts. Restaurant information stays permanently — it is factual data and is separated from the person after an account deletion.