Privacy policy

1. Controller

The controller responsible for processing personal data on these pages (https://res.viet360.de/mrle/mrle-limburg) within the meaning of the General Data Protection Regulation (GDPR) is:

Mr. Le Doktor-Wolff-Straße 1 65549 Limburg Deutschland Phone: 06431 9719983 Email: reservierungmrlelimburg@gmail.com

For questions about data protection, please contact us at reservierungmrlelimburg@gmail.com.

2. Technical service provider (data processing on our behalf)

These pages run on the Res.Viet360 platform, operated by BLA Germany GmbH, Lange Straße 51, 70174 Stuttgart, Deutschland. It processes data solely on our behalf and on our instructions under a data processing agreement (Art. 28 GDPR).

The servers are hosted by Contabo GmbH, Aschauer Straße 32a, 81549 München, Deutschland, in the European Union. We do not transfer your data to countries outside the EU or the EEA.

3. Visiting the pages

When you open the pages, the server processes technically necessary data: IP address, date and time, the address requested, the amount of data transferred, and the browser and device type. This is used to deliver the pages, for security and to prevent abuse (for example automated mass requests).

The legal basis is our legitimate interest in a secure and working service (Art. 6(1)(f) GDPR). To limit requests, the IP address is kept in counters for at most 2 days and is not linked to what you enter (order, reservation, feedback). Server logs are deleted automatically at regular intervals.

4. Cookies and storage in your browser

We do not use cookies or tools for analytics, advertising or tracking, and we do not embed third-party content (fonts are loaded from our own server, maps are only linked). We only store what is strictly necessary for the functions you use (§ 25(2) no. 2 TDDDG); no consent is required for this:

You can delete cookies and stored data in your browser at any time; some functions (language choice, cart) will then no longer remember your choice.

5. Table reservation

For a reservation we process your name, your phone number, optionally your email address and your message, as well as date, time and number of guests, in order to hold the table for you, contact you about changes and send you a confirmation (Art. 6(1)(b) GDPR).

We delete contact details and the message 30 days after the reservation date; the remaining details (date, time, number of guests) are used without reference to you for our planning and deleted after 24 months.

6. Confirmations and notifications

If you give an email address, you receive confirmations and status messages about your order or reservation by email. We do not send advertising.

Our staff may additionally be notified of new orders and reservations via WhatsApp. These messages contain no guest names, phone numbers or email addresses; only signed-in staff can see the details in our management interface.

7. Feedback and complaints

On the feedback page (for example via the QR code on your table) you can send us a rating, ratings of individual criteria, a comment and photos or videos. We use this to improve our service (Art. 6(1)(f) GDPR). No name is needed. For photos we remove embedded additional data such as the location where they were taken.

With a complaint you can voluntarily give your name, email address or phone number so that we can contact you. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future; we store the time and wording of the consent.

We keep feedback for 24 months. We delete the name, contact details and files of a complaint 12 months after it has been resolved.

After a very good rating we may show you a link to Google reviews. Google’s privacy policy applies only once you follow that link.

8. Links to other providers

Links to Google Maps, Google reviews or social networks open the page of the respective provider. Data is only transferred when you click such a link; from then on that provider’s privacy policy applies.

9. Storage period and backups

We keep data only as long as necessary for the respective purpose or as required by statutory retention obligations; the periods are listed in the sections above. Deleted data may remain in backups for up to 30 days and is then overwritten.

10. Your rights

You have the right to

• access the data we hold about you (Art. 15 GDPR),
• rectification of incorrect data (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

To do so, contact reservierungmrlelimburg@gmail.com. You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your residence, place of work or the place of the alleged infringement.

11. Obligation to provide data, no automated decisions

For orders and reservations we need your name and phone number; without them we cannot accept them. Feedback is voluntary. There is no automated decision-making, including profiling (Art. 22 GDPR).

12. Changes

We update this privacy policy when our services or the law change. The version published here applies.