Privacy policy

Privacy Notice of Big Squadra Trattoria GmbH (www.bigsquadra.com)

The Big Squadra Trattoria GmbH, Leopoldstr. 31, 80802 München, represented by its managing director Mr. Adrian Storp (“we”) operates the Website www.bigsquadra.com (“website”).

The Big Squadra Trattoria GmbH is the controller of your personal data within the meaning of Art. 4 No. 7 of the EU General Data Protection Regulation 2016/679 (“GDPR”) and as such your direct point of contact related to data protection. You can reach us at any time using the following contact options:

Postal: Big Squadra Trattoria GmbH, Leopoldstr. 31, 80802 München

What personal data do we collect about you?

When visiting our website, we collect technical data, which your browser transfers automatically (in particular your IP-Address, time of access, requested websites/data, referrer URL, operating system) (“technical data”).

When you book a private reservation or exclusive reservation of larger rooms and several tables, we collect your name, email address and phone number (“contractual data”).

When you register to our Newsletter, we only collect your email address and your technical data. The input of further, separately marked data is voluntary and will be used to address you personally.

For what purposes do we process your personal data?

We process your technical data solely for the purpose to provide you the website, to ensure the security and functionality of the website, as well as for the evaluation of the use of the website (Art. 6 (1) lit. f GDPR).

The contractual data is solely processed in order to perform the contract concluded with you (Art. 6 (1) lit. b GDPR)

We process the email address you provide when registering for our newsletter, for the purpose of sending you information about latest and interesting offers and on the basis of your previously given consent (Art. 6 (1) lit. a GDPR). For the registration to our newsletter we use the so called Double-Opt-In-Procedure. This means, that we will send you an email asking for your confirmation that you actually wish to receive our newsletter after your registration. The purpose of this procedure is to prove your registration and, if necessary, to investigate a potential abuse of your personal data.

Use of cookies and similar technologies, particularly Google Analytics

1- We may also collect information about your use of our website through the use of so called cookies. These are small text files that are stored on your device and store certain settings and data for the exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier. Cookies enable our systems to recognize the user's device and make any preferences immediately available. As soon as a user accesses the platform, a cookie is transferred to the hard drive of the computer or device of the respective user. Cookies help us to improve our website and to provide you with a better service tailored to your needs. They allow us to recognize your computer when you return to our website and thereby:

• Store information about your preferred activities on the website and thereby tailor our website to your individual interests. This includes, for example, advertisements that match your personal interests.

• To speed up the processing of your request.

2- In the cookies we use, only the technical data about your use of the website as outlined above is stored. This is not done by assigning it to you personally, but by assigning an identification number to the cookie (cookie ID). A combination of the cookie ID with your name, your IP address or with similar data enabling an association of the cookie to you, does not take place. You can find out how to prevent the use of cookies in sections 4.3 and 5.

3- Our website uses so called tracking technologies. We use these technologies to enhance the interest of our website for you. This technology makes it possible to address Internet users, who are already interested in our website, with advertisement on the websites of our partners. The display of these advertisements on our partners' websites is based on cookie technology and an analysis of previous user behavior. We only use this technology if you have consented to it, if its use is necessary for the conclusion or performance of a contract with you, or if other legal provisions allow it.

4- We use the analysis tool "Google Analytics", a web tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of this tool is to enable the analysis of your user interactions on websites and in apps and to improve our offers through the statistics and reports obtained and to make them more interesting for you as a user.

4.1. We primarily track the interaction between you as a user of the website and our website with the help of cookies, data on the device/browser, IP addresses and website or app activities. Google Analytics also collects your IP addresses to ensure the security of the service and to provide us, as the website operator, with information about which country, region or location the respective user originates from (so called IP location determination). For your protection, however, we use the anonymization function (IP masking), which means that Google truncates the IP addresses by the last octet within the European Union/European Economic Area before the data is transmitted to servers outside the EU.

4.2 Google acts as a joint controller within the meaning of Article 26 GDPR according to the opinion of the independent data protection supervisory authorities in the context of the data protection conference on 12.05.2020. As a contact for all data protection related inquiries regarding data processing in connection with Google Analytics, you can contact us at the contact options listed above.

4.3 The legal basis for the collection and further processing of the information, which takes place for a maximum of 14 months, is your consent (Art. 6 para. 1 p. 1 lit. a GDPR). The withdrawal of your consent is possible at any time, without affecting the legitimacy of the processing until the withdrawal. In apps, you can reset the advertising ID under the Android or iOS settings. The easiest way to withdraw your consent is via our Consent Manager or by installing the Google browser add-on, which can be accessed via the following link: https://tools.google.com/dlpage/gaoptout?hl=de/.

4.4 More information about the scope of services provided by Google Analytics can be found at https://marketingplatform.google.com/about/analytics/terms/de/. Google provides information on data processing when using Google Analytics at the following link: https://support.google.com/analytics/answer/6004245?hl=de/. General information on data processing, which according to Google should also apply to Google Analytics, can be found in Google's privacy policy at www.google.de/intl/de/policies/privacy/.

5. Any processing of personal data that is not absolutely necessary to provide the services you have requested requires your explicit consent. This includes in particular cookies for analysis, tracking or advertising purposes. Respective data will only be processed with your explicit consent. This also applies in the event of personal data being passed on to business partners or third parties. Consent can be withdrawn in your privacy settings on the website at any time with effect for the future.

6. We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so called Web Beacons or Tracking Pixels, which are one-pixel image files that are stored on our website. For the evaluations, we link the aforementioned data and the web beacons with your email address and an individual ID. Links contained in the newsletter also contain this ID. The data is collected solely on a pseudonymous basis. This means that the IDs are not linked to your other personal data and a direct personal reference is hence excluded. Upon subscribing to the newsletter, you give us your express consent to the above-mentioned evaluation. If you do not want this, you can withdraw your consent at any time by clicking on the corresponding link in every newsletter e-mail with effect for the future.

7. If personal data is sent to external servers in a third country, we take appropriate measures to ensure that the recipient complies with the requirements of data protection law. You can request further information on these measures at any time using the contact details above.

Use of Social-Media Plugins

1. We currently use social media plugins of Facebook and Instagram, which are solely loaded if you have previously activated the function by giving your consent. Through the plugins, we offer you the opportunity to interact with the social networks and other users of these networks. The legal basis for the use of the plugins is your consent within the meaning of Art. 6 (1) lit. a) GDPR.

2. The plugin provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of such user profiles, whereby you must contact the respective plugin provider to exercise this right. The data transmission takes place regardless of whether you have a user account with the plugin provider and are logged in. If you are logged in to the plugin provider, the data we collect is directly assigned to your user account with the plugin provider. If you click the activate button and, for example, link to the website, the plugin provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your personal profile with the plugin provider.

3. If the provider of the social plugins stores the collected data or transfers the data to servicers outside the European Economic Area, the social plugin provider ensures by using the EU Standard Data Protection Clauses and, if necessary, additional safety measures, an adequate level of data protection at the recipient.

4. For more information on the purposes and scope of data collection and processing by the plugin provider, please refer to the privacy statements of the respective plugin providers linked below. There you will also find further information about your respective rights and settings regarding the protection of your privacy.

Addresses of the respective plugin providers and URL to their privacy notice:

Facebook: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland; Privacy notice: https://www.facebook.com/about/privacy/update?ref=old_policy

Instagram: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland; Privacy notice: https://help.instagram.com/519522125107875/?helpref=hc_fnav

With whom do we share your personal data?

Contractual data is only passed on to our service providers, in particular our hosting providers or other technical service providers in connection with the provision of the website. If these service providers are located outside the EU, we take appropriate measures to provide guarantees that the recipient complies with the requirements of data protection law. You can request further information on these measures taken at any time using the contact details above. Otherwise, we will only disclose your personal data to third parties when you have given your consent to the disclosure or when we are entitled or obliged to disclose data on the grounds of statutory provisions and/or official or court orders. This may involve, in particular, the disclosure of information for the purposes of law enforcement, the prevention of danger or the enforcement of intellectual property rights.

When do we delete your personal data?

The technical data is regularly deleted or aggregated immediately after leaving the website.

Your contractual data is generally deleted as soon as it is no longer required for the performance of the contract, unless there is no other legitimate purpose (in particular the fulfillment of commercial or tax retention obligations).

The newsletter data will be stored as long as you have subscribed to the newsletter.

Data Protection and third party websites

The website may contain hyperlinks to and from third party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or warranty for third-party content or data protection conditions. These third parties are themselves controllers within the meaning of data protection laws. Insofar, the data protection conditions of the respective controllers apply to the use of these third-party websites. Please make sure you are aware of these applicable data protection conditions before you transmit personal data to these websites. In particular, we use hyperlinks to websites of the following service providers on our website in order to provide the table reservation system, the Click & Collect service, and to forward to a job exchange and to our social media presences:

• Job offers of the job portal Jobvite: [insert link to job portal]; The privacy notice of [insert company name of the job portal] can be found here: [insert link to relevant privacy notice/privacy policy].

• Links to our social media presences on Facebook and Instagram:

Facebook (Meta Platforms Ireland Limited): https://www.facebook.com/Big Squadra-Trattoria-München-101621422479628;; The privacy notice of the German Facebook page can be found here: https://www.facebook.com/about/privacy/update?ref=old_policy

Instagram (Meta Platforms Ireland Limited): https://www.instagram.com/bigsquadra/); The privacy notice of the German Instagram page can be found here: https://help.instagram.com/519522125107875/?helpref=hc_fnav

Which rights do you have?

You have the right to request information about the data we have stored about you in accordance with Art. 15 GDPR, to request the rectification of inaccurate data in accordance with Art. 16 GDPR and to request the erasure of data in accordance with Art. 17 GDPR or the restriction of data processing in accordance with Art. 18 GDPR. Under the conditions of Art. 20 GDPR, you may also request the transmission of personal data to you or a third party. Furthermore, in accordance with Art. 21 GDPR, you have the right to object to the processing of your data, provided that the reason for the objection arises from your particular situation and it concerns data that we process to protect one of our interests worthy of protection or if it concerns the use of your data for direct marketing.

Furthermore, you have a right to lodge a complaint with a competent supervisory authority pursuant to Article 77 GDPR if you consider that we are not processing your personal data in accordance with applicable law.

If you have given us consent to process your personal data, you can withdraw this consent at any time without providing reasons and with effect for the future at the email address provided above under the contact details. You can additionally withdraw your consent to the sending of the newsletter at any time by clicking on the link provided in each newsletter email. You can additionally and most easily withdraw the consent you provided for the use of the social media plugins via our Consent Manager or via the functions of the social media providers.

Furthermore, you can object to the tracking in the newsletter at any time by clicking on the link provided separately in each e-mail, or by informing us via another contact channel.