Privacy policy

01Controller

Long Gastronomie GmbH (HA TIEN)
Drei-Mohren-Straße 1
93047 Regensburg, Germany
Phone: +49 941 53888
Email: info@hatien-regensburg.de
Represented by the Managing Director Ducanh Nguyen Long

02The key points

You can use our website without registering. Analytics and marketing services only run if you agree in the cookie banner. Our fonts and the directions map are hosted on our own servers. No connection to Google Fonts or Google Maps is made when you load a page. Content and data from partners such as our reservation system or gift card shop are only loaded when you actively open them.

03Hosting and server log files

Our website is hosted by Shopify (Shopify International Limited, Victoria Buildings, 2nd floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland). When you visit, Shopify processes technically necessary data such as your IP address, date and time, the page requested, browser and operating system in order to deliver the page and protect it against misuse. The legal basis is Art. 6 (1) (f) GDPR (secure and stable operation). We have a data processing agreement with Shopify. Where data is transferred to Shopify Inc. in Canada or the USA, this is done on the basis of an adequacy decision of the EU Commission or the EU standard contractual clauses.

The Shopify system also includes a script from shop.app (also Shopify), which Shopify loads on every page, for example for signing in with “Shop”. In the process, your IP address is transmitted to Shopify and the script places a technical entry in your browser’s storage (signInWithShop). The legal basis is Art. 6 (1) (f) GDPR and § 25 (2) No. 2 TDDDG.

04Cookies and consent

We use technically necessary cookies and storage functions (e.g. for security, for the basket and to save your cookie choice) on the basis of § 25 (2) No. 2 TDDDG and Art. 6 (1) (f) GDPR. We only use all other cookies and similar technologies (analytics, marketing, preferences) with your consent pursuant to § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You can change or withdraw your consent at any time with effect for the future via the “Cookie settings” link at the bottom of the page.

These are the cookies and storage entries we use:

Details on the Shopify cookies: shopify.com/legal/cookies. We do not currently use marketing cookies.

05Analytics with Google Analytics (with consent only)

If you agree, we use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to analyse how our website is used (e.g. pages visited, time spent, approximate location, device type). According to Google, Google Analytics 4 does not store complete IP addresses. Data may also be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6 (1) (a) GDPR). On our site, the Google Analytics cookies expire after 13 months. More information: policies.google.com/privacy.

06Shopify analytics features (with consent only)

With your consent, Shopify also collects usage statistics (e.g. page views, session duration), which are made available to us in aggregated form. The legal basis is Art. 6 (1) (a) GDPR.

07Contact form, email and phone

If you contact us via the contact form, by email or by phone, we process your details (e.g. name, email address, phone number, topic, preferred date and number of guests for event enquiries) in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract (e.g. a reservation or event), otherwise Art. 6 (1) (f) GDPR. Messages from the form are forwarded to us via Shopify. We delete your data as soon as your enquiry has been dealt with, unless statutory retention obligations apply.

08Features that store data only on your device

The saved list on our menu and a temporary copy of the menu for the search are stored exclusively in your browser’s storage (local storage / session storage) and are not transmitted to us. The image of your saved list is also created directly in your browser. The legal basis is § 25 (2) No. 2 TDDDG, as this storage is strictly necessary for the function you requested. You can delete this data at any time in your browser settings.

09Reservations, online orders, gift cards and delivery

We use specialised platforms for these services. Data processing by the respective provider only begins when you actively open the service:

• Table reservations via the allO reservation system (reservations.allo.restaurant)
• Online orders for pick-up via our ordering page eat.hatien-regensburg.de (allO)
• Gift cards via the allO gift card shop (eat.allo.restaurant)
• Delivery via Uber Eats: you order directly from the provider, and its privacy notice applies

We use your details to process your reservation or order (Art. 6 (1) (b) GDPR). For further details, please refer to the privacy notice of the respective platform.

Email about your reservation. When you book a table, we can see your name, email address, phone number, date, time and number of guests in our allO system. We then send you a one-time email with everything you need for your visit, for example the time, directions and a link to add the booking to your calendar. If you reply, for example because you will be late, need to cancel or the number of guests changes, we note this on your reservation. The legal basis is Art. 6 (1) (b) GDPR. On the calendar page, the date, time and number of guests are placed in the link only after the “#” character and are not transmitted to our server; the calendar entry is created directly in your browser.

Feedback after your visit. After your visit, we email you once to ask how you enjoyed it and to invite you to leave a review. The legal basis is our legitimate interest in improving our service (Art. 6 (1) (f) GDPR in conjunction with § 7 (3) of the German Act against Unfair Competition, UWG). You can object to this use of your email address at any time without incurring any costs other than the transmission costs at the basic rates: simply reply with “Unsubscribe” or write to us at info@hatien-regensburg.de.

We send both emails via our email provider STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

10Printable gift card

When you buy a gift card from us online via allO, we can see your first and last name, your email address, the gift card code, the amount and the date of purchase in our allO point-of-sale system. We use this information to send you a one-time email with a link to a printable version of your gift card. The legal basis is Art. 6 (1) (b) GDPR, as the printable version is part of your gift card purchase. We send the email via our email provider STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

The code, amount, date and name are placed in the link only after the “#” character. This part is not transmitted to our server when the page is opened. The PDF is created directly in your browser; all program components and fonts required for this are hosted on our own servers at Shopify. If you do not wish to receive this email, simply write to us at info@hatien-regensburg.de.

11Links to social media and map services

Our website contains simple links to Instagram, Facebook, Google Maps, Apple Maps and the Regensburg transport association. These are normal links without embedded content: data is only transmitted when you click a link and open the provider’s page.

12Storage period

We only store personal data for as long as is necessary for the respective purpose or as required by statutory retention periods (e.g. under commercial and tax law). In detail:

• Cookies and browser storage: as stated in the table in section 4
• Enquiries via contact form, email or phone: until your enquiry has been dealt with, unless a retention obligation applies
• Invoices and accounting records: 8 years, commercial and business letters 6 years, books and annual financial statements 10 years (§ 147 German Fiscal Code, § 257 German Commercial Code)
• Server log files at Shopify: according to Shopify’s specifications, only as long as necessary for secure operation

13Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7 (3) GDPR). Simply write to us at info@hatien-regensburg.de.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

14No automated decisions

We do not make automated decisions within the meaning of Art. 22 GDPR.

15SSL/TLS encryption

Our website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol and “https://” in the address bar.