Privacy Policy

Last updated: August 2026

1. Controller

Bistro Innovation Labs
Bavarian Restaurant & Bar
Askanischer Pl. 4, 10963 Berlin, Germany
Email: info@bavarianrestaurant.de · Phone: 030 23005060

2. General

We process personal data of our visitors only where necessary to provide a functional website and our content and services. This website uses no tracking or advertising cookies and no analytics services. Fonts are served locally from our own server — no connection is made to Google Fonts or other font services.

Functional language cookie: when you actively choose a language via the language selector, a single functional cookie ("NEXT_LOCALE") stores that choice so the website is shown in your language as you browse and on your next visit. The cookie contains only the language code (e.g. "en"), is not shared with any third party and is not used for tracking. It is strictly necessary for this service you explicitly request (§ 25 (2) No. 2 German TTDSG) and therefore requires no consent.

3. Hosting (Vercel)

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel processes technically necessary data (server log files: IP address, date and time of access, page requested, browser type) to deliver the website and ensure security and stability. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure provision of the website). A data processing agreement (Art. 28 GDPR) is in place with Vercel; transfers to the USA are based on the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

3a. Audience measurement (Vercel Analytics)

To improve our website we use Vercel Analytics, a privacy-friendly service by our hosting provider Vercel Inc. Measurement works without cookies and without cross-device tracking; no persistent identifiers are stored. Only aggregated, anonymised information is collected, such as pages viewed, country of origin, browser type and the source of the visit — individual visitors cannot be identified. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in statistical analysis and improvement of our website); § 25 German TTDSG is not affected, as no information is stored on or read from your device.

4. Reservation form

When you request a table via our reservation form, we process the data you provide (name, email address, optional phone number, date, time, number of guests, message) exclusively to handle your reservation request. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract).

We use Resend (Resend, Inc., USA) as a processor to deliver the reservation email to our reservations inbox (bookings@bavarianrestaurant.de). Transfers are based on the EU Standard Contractual Clauses.

Your reservation data is deleted as soon as it is no longer required for processing, at the latest after statutory retention periods expire.

Local draft storage: while you fill in the reservation form, your entries are cached only locally in your browser (sessionStorage) so they are not lost when switching pages. This storage is strictly necessary for the service you request (§ 25 (2) No. 2 German TTDSG), no data is transmitted to us or third parties, and it is cleared automatically when you submit the form or close the browser tab.

5. Your rights

You have the following rights regarding your personal data: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21 GDPR). An informal email to info@bavarianrestaurant.de is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for Berlin is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany.

6. Google Maps (two-click embed)

Our website can display a map from Google Maps (Google Ireland Limited). The map is only loaded after you actively click "Show map" — only then is data (including your IP address) transmitted to Google. The legal basis is your consent (Art. 6(1)(a) GDPR), given by that click.

7. External links

Our website contains links to external websites (e.g. Google Maps, Instagram, Tripadvisor). When you click these links you leave our website and the privacy policies of the respective providers apply.