Privacy policy

Ullherr UG (haftungsbeschränkt)
Siedlungstr. 37
91230 Happurg

Email: kontakt@handabdruck.it
Phone: 0175 4144442

When you open these pages, our server processes your IP address and the information your browser sends, to deliver the pages to you. To protect against abuse, such as mass sign-in attempts, we count requests per IP address. For this we store only a one-way checksum of the address and delete it after one day at the latest. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

We only use technically necessary cookies. One keeps you signed in, remembers your language and protects forms against misuse by other sites; it ends when you close the browser. A second keeps you signed in after that, for as long as the sign-in lasts (see below). They need no consent (§ 25(2) no. 2 TDDDG). There is no tracking, no analytics and no advertising. Fonts and all other files come from our own server.

Restaurants and their staff sign in with an email address or mobile number; without one of them, signing in is not possible. We process:

• the email address or mobile number, the role (such as Admin) and the locations a login may access,
• sign-in links, which we send by email or text message; they are valid for 15 minutes,
• signed-in devices with browser, operating system and last use, so you can see and sign them out under "Account"; a sign-in ends once the device goes unused for 30 days, for our own team after 7 days,
• for our own team, also the key of the authenticator app,
• in the change log, who changed which setting and when.

The purpose is to provide and secure access and to make changes traceable. The legal basis is the contract with the restaurant (Art. 6(1)(b) GDPR) and our legitimate interest in secure, traceable access for its staff (Art. 6(1)(f) GDPR).

We delete expired sign-in links and sign-ins every hour. When a login is removed, we delete it together with its sign-ins. Change log entries are kept as long as the restaurant uses the service.

We process the data guests enter when they make a reservation on behalf of the restaurant (data processing under Art. 28 GDPR). The restaurant is the controller; its privacy policy has the details.

Your data is processed only on servers in Germany or elsewhere in the EU. It is not transferred to any third country. For sending messages we use these processors:

• Mailjet SAS, Paris, France (sending emails)
• seven communications GmbH & Co. KG, Kiel, Germany (sending text messages)

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on our legitimate interest on grounds relating to your particular situation (Art. 21). To do so, write to kontakt@handabdruck.it.

You can also lodge a complaint with a data protection supervisory authority, for example the one responsible for us: the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht) in Ansbach.