Privacy

The controller responsible for data processing on this website is [owner or company still missing], Lucca Bar & Kitchen, Arndtstraße 1, 30167 Hannover, Germany. Phone +49 511 21951416, email info@luccahannover.de.

This website sets no cookies and uses no analytics, tracking or advertising services. We serve fonts, images and videos from our own server. So when you visit, no data is passed to Google, Instagram, Facebook or other third parties. We only process personal data as far as it is needed to run the website and to handle your requests.

The website is hosted by Vercel Inc. (USA). When you visit, Vercel processes technically necessary data: IP address, date and time, the page requested, the page visited before (referrer), and browser and operating system. This is used to deliver the pages and for security, for example to fend off attacks.

The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). We have a data processing agreement with Vercel. Transfers to the USA are based on the EU Commission's adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses. Log data is only stored as long as needed for these purposes. More information: vercel.com/legal/privacy-policy.

When you send a table request, we process your name, phone number, email address if you give one, date, time, number of people, preferred area and your message. We use these details only to handle your request and arrange the booking with you. The legal basis is Art. 6(1)(b) GDPR (steps prior to and performance of your booking).

The request is not stored on this website. It is delivered as an email to our inbox via the email service Resend (Resend, USA). If you gave an email address, you receive a confirmation of receipt the same way. We have a data processing agreement with Resend; transfers to the USA are based on the EU Commission's standard contractual clauses. More information: resend.com/legal/privacy-policy.

To protect against automated spam, we briefly process your IP address when you submit, to limit too many requests in a short time (Art. 6(1)(f) GDPR). It is not stored permanently.

We delete table requests as soon as they are no longer needed, usually after your visit, unless statutory retention obligations apply.

When you call or write to us, we process your details to deal with your request. The legal basis is Art. 6(1)(b) GDPR where it concerns a booking or an order, otherwise our legitimate interest in answering your request (Art. 6(1)(f) GDPR).

Maps and social networks are only linked, not embedded. Posts and videos from our Instagram account are stored as copies on our own server. Data is only passed to the respective provider once you follow a link. Their privacy policy then applies.

You have the right to access the data stored about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data based on legitimate interests, you can object on grounds relating to your particular situation (Art. 21 GDPR). An informal message to the address above is enough.

You can also lodge a complaint with a data protection supervisory authority, for example the one responsible for us: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.