Legal

Privacy Policy

We take the protection of your personal data seriously. This privacy policy explains what data is collected, processed and stored on the IVY Restaurant · Bar website and what rights you have under the EU General Data Protection Regulation (GDPR).

Last updated: September 2026

Note: Items marked with […] must be completed by the responsible party before publication.

1. Controller

The controller responsible for processing data on this website is:

Name
[Insert legal entity name, e.g. IVY Restaurant · Bar GmbH]
Represented by
[Insert legal representative, e.g. Managing Director: Jane Doe]
Address
Karlstraße 34, 76133 Karlsruhe, Germany
Phone
[Insert phone number]
Email
[Insert email address]

If you have any questions about data protection, please contact us at [Insert privacy email, e.g. privacy@example.com].

2. Hosting

This website is hosted by [Insert hosting provider name and address]. When you visit the website, certain technical data is automatically stored in server log files, including your IP address, browser type, operating system, referrer URL, time of request and amount of data transferred. This data is required for the secure operation of the website and is not used to identify individual users.

The legal basis for processing is Article 6(1)(f) GDPR (legitimate interest in a stable and secure website operation).

3. General information on data processing

We only process personal data to the extent necessary to provide our website and services. Personal data means any information relating to an identified or identifiable natural person.

We store and process your data exclusively within the European Union or in a country with an adequate level of data protection according to EU standards, unless expressly stated otherwise.

4. Legal basis for processing

Processing of personal data is based on the following legal grounds under the GDPR:

• Article 6(1)(a) GDPR: processing based on consent.

• Article 6(1)(b) GDPR: processing for the performance of a contract or pre-contractual measures.

• Article 6(1)(f) GDPR: processing to protect legitimate interests, unless your interests override them.

5. Contact form and reservation requests

When you contact us via the contact form or reservation request, we store the information you provide (e.g. name, email address, phone number, preferred date, time, number of guests and special requests) in order to process and respond to your inquiry.

This data is not passed on to third parties without your consent and is only stored for as long as necessary to process your request or to comply with statutory retention obligations.

The legal basis is Article 6(1)(b) GDPR (pre-contractual measures at your request) and Article 6(1)(f) GDPR (legitimate interest in responding to inquiries).

6. Cookies and tracking

This website currently uses [Insert cookies used and their purposes]. We only use technically necessary cookies without prior consent. If we use analytics or marketing cookies, we will obtain your explicit consent.

Analytics/tracking services: [Insert analytics service and purpose, if any].

You can delete or restrict cookies in your browser settings at any time. Please note that some website features may then not be fully available.

7. Disclosure of data

Your personal data is only disclosed to third parties if this is necessary to fulfil our services (e.g. to IT service providers or reservation systems), if we are legally obliged to do so, or if you have given your explicit consent.

We do not sell your data and do not transfer it for advertising purposes without your consent.

8. Storage duration

We only store personal data for as long as necessary for the respective purpose or as required by statutory retention periods. Inquiry data is generally deleted once processing is complete, unless there is a legal obligation to retain it for longer.

9. Data security

We implement technical and organisational security measures to protect your data against loss, misuse, unauthorised access and unauthorised disclosure. These include the use of encrypted transmission channels (SSL/TLS) and adherence to current security standards.

10. Changes to this privacy policy

We reserve the right to amend this privacy policy as needed to reflect changes in legal requirements or changes to our website. The current version is always available on this page.

11. Your rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access to the data we process (Article 15 GDPR)
  • Right to rectification of inaccurate data (Article 16 GDPR)
  • Right to erasure (‘right to be forgotten’) subject to the conditions of Article 17 GDPR
  • Right to restriction of processing (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object to processing (Article 21 GDPR)
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

To exercise your rights or for further questions about data protection, please contact us using the contact details above.