Privacy policy

01Data Controller

02Personal Data We Collect

We may collect and process the following personal data:

a. Information you provide

1. Name
2. Email address
3. Phone number
4. Reservation details (date, time, number of guests)
5. Messages or inquiries submitted through forms

b. Automatically collected data — when you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• Referring URLs

This data is collected via cookies and analytics tools.

03Purpose of Data Processing

We process your personal data for the following purposes:

• Managing restaurant reservations
• Responding to inquiries and requests
• Improving website performance and user experience
• Analyzing website traffic and behavior
• Marketing and advertising performance measurement
• Legal and security purposes

04Legal Basis for Processing

We process your data based on one or more of the following legal grounds:

• Consent (Article 6(1)(a) GDPR)
• Contractual necessity (Article 6(1)(b) GDPR)
• Legal obligation (Article 6(1)(c) GDPR)
• Legitimate interest (Article 6(1)(f) GDPR), such as website optimization and security

05Reservations via Third-Party Services (Zenchef)

Online reservations are handled through Zenchef, a third-party reservation system. When making a reservation, your data is processed according to Zenchef’s own privacy policy. We recommend reviewing Zenchef’s privacy policy for more information about how your data is handled by them.

06Analytics and Tracking Tools

We use the following tools to understand website usage and improve our services:

• Google Analytics 4 (GA4)
• Google Tag Manager
• Google Ads Conversion Tracking

These tools may collect anonymized or pseudonymized data such as:

• Pages visited
• Interaction events
• Approximate location
• Device and browser information

IP anonymization is enabled where applicable.

07Cookies

Our website uses cookies to:

• Ensure proper website functionality
• Analyze traffic and performance
• Improve user experience

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect website functionality. A cookie consent banner may be displayed where required by law.

08Data Storage and Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. Your data is stored only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

09Data Sharing

We do not sell your personal data. We may share data with:

• Service providers (e.g., hosting, analytics, reservation tools)
• Legal authorities when required by law

All third parties are contractually obligated to protect your data.

10International Data Transfers

Some service providers (e.g., Google) may process data outside the European Union. In such cases, appropriate safeguards such as Standard Contractual Clauses (SCCs) are applied.

11Your Rights Under GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise your rights, contact us at: mail@umbra.restaurant

12Right to Lodge a Complaint

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with your local data protection authority in Germany.

13Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated revision date.

14Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: