Area of application

This privacy policy provides the user with information about the type, scope and purpose of the collection and use of their data by the provider responsible as well as information on how this data is collected and used.
The legal framework for data protection is provided by the German Data Protection Act [Bundesdatenschutzgesetz (BDSG)] and the Telemedia Act [Telemediengesetz (TMG)].

Collection and storage of personal data as well as the type and purpose of their use
With each access to this offer, information is automatically collected by us or by the WebSpace provider. This information, also known as server log files, is of a general nature and does not allow any conclusions about your person.

a) When visiting the website

When you call up our website, the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and is stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which the access takes place (referrer URL),
• The browser used and, if applicable, the operating system of your computer and the name of your access provider.

We process the above data for the following purposes:

• To ensure smooth connection to the website,
• To guarantee comfortable use of our website,
• To evaluate system security and stability and
• for other administrative purposes.

The legal basis for data processing is Article 6(1) sentence 1 point f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.
In addition, we use cookies and analysis services when you visit our website. More detailed information can be found under the relevant points of this privacy policy.

b) When using our contact form

For questions of any kind, please use the form provided on our website to contact us. You will need to provide your name and a valid telephone number so that we know who is making the request and can respond to it. Further information can be provided voluntarily.
Data processing for the purpose of contacting us is carried out in accordance with Article 6(1) sentence 1 point a GDPR on the basis of the consent that you have voluntarily given.
Should you contact us via the online form, the call-back service or by email, we will store the information you provide in order to answer your inquiry and ask possible follow-up questions.

Data transfer

Your personal data will not be transferred to third parties for any purposes other than those listed below.

We only transfer your personal data to third parties if:

• you have given your express consent in accordance with Article 6(1) sentence 1 point a GDPR,
• the transfer pursuant to Article 6(1) sentence 1 point f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• in the event that there is a legal obligation for disclosure under Article 6(1) sentence 1 point c GDPR, and
• this is legally permissible and required under Article 6(1) sentence 1 point b GDPR for the processing of contractual relationships with you.

Cookies

We use cookies on our website. These are small files that are automatically created by your browser and stored on your device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware.

Information is stored in the cookie which arises in connection with the specifically used terminal device. This does not mean, however, that we obtain immediate knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our services more convenient for you. We use so-called session cookies to recognise that you have previously accessed individual pages of our website. These are automatically deleted when you leave our webpage.

In addition, we also use temporary cookies, which are stored on your end device for a certain fixed period of time to optimise user-friendliness. If you visit our site to use our services again, we will automatically recognise that you have already been here and what entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies in order to record the use of our website statistically and evaluate it for the purpose of optimising our services for you (see point 5). When you visit our site again, these cookies enable us to automatically recognise that you have been here before. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is required for the above-mentioned purposes in order to safeguard our legitimate interests and those of third parties in accordance with Article 6(1) sentence 1 point f GDPR.
Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you will not be able to use all the functions of our website.

Analysis tools

a) Tracking tools

The tracking activities listed below and used by us are carried out on the basis of Article 6(1) sentence 1 point f GDPR. With the tracking methods we use, we want to ensure that our website is designed to meet the needs of our customers and that it is continuously optimised. On the other hand, we implement tracking activities in order to record the use of our website statistically and to evaluate it for the purpose of optimising our services for you. These interests are to be considered legitimate within the meaning of the aforementioned provision.
The respective data processing purposes and data categories can be taken from the corresponding tracking tools.

b) Google Analytics

For the purpose of designing our pages to meet your needs and for their continuous optimisation, we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymous user profiles are created and cookies (see point 4) are used. The information generated by the cookie about your use of this website such as

- Browser type/version,
- The operating system used,
- Referrer URL (the previously visited page),
- Host name of the accessing computer (IP address),
- Time of the server request,

are transferred to the Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the website activities and to provide further services associated with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with certain requirements. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are made anonymous, so that an assignment is not possible (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full function of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie is set to prevent future collection of your information when you visit this site. The opt-out cookie is valid only in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).

c) Google Ads Conversion Tracking

In order to record the use of our website statistically and evaluate it for the purpose of optimising our website for you, we also use Google Conversion Tracking. Google Ads will set a cookie (see point 4) on your computer if you have reached our website via a Google ad.

These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Ads client's website and the cookie has not expired, Google and the client will be able to tell that the user clicked on the ad and was directed to that page.

Every Google Ads customer receives a different cookie. As a result, cookies cannot be tracked on the websites of Google Ads clients. The information collected using the conversion cookie is used to compile conversion statistics for Google Ads customers who have opted for conversion tracking. Google Ads customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they will not receive any information that can be used to identify users personally.

If you do not wish to take part in the tracking process, you can also refuse the necessary setting of a cookie - for example, by changing the browser setting that generally deactivates the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com". Google's privacy policy on conversion tracking can be found here (https://services.google.com/sitestats/en.html)

Integration of third-party services and content

Our offer can include content and services from other providers. These are, for example, maps provided by Google Maps, videos from YouTube and graphics and images from other websites. In order for this data to be accessed and displayed in the user's browser, it is absolutely necessary to transmit the IP address. The providers (hereinafter referred to as "third-party providers") thus become aware of the IP address of the respective user.

Although we make every effort to use only third-party providers who only need the IP address to deliver content, we have no influence on whether the IP address may be stored. In this case, this process serves statistical purposes, among others. If we have knowledge that the IP address is being stored, we point this out to our users.

*Rights of the data subject
You have the right:*

• to request information about your personal data processed by us in accordance with Article 15 GDPR. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making, including profiling and, where applicable, meaningful information on the details thereof;

• to request the correction of incorrect or incomplete personal data stored by us without undue delay in accordance with Article 16 GDPR;

• to demand the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims in accordance with Article 17 GDPR;

• pursuant to Article 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or if you have lodged an objection to the processing pursuant to Article 21 GDPR;

• pursuant to Article 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller;

• pursuant to Article 7(3) GDPR, to revoke the consent you had once given us at any time. As a consequence, we may no longer continue the data processing that was based on this consent for the future and

• to lodge a complaint to a supervisory authority pursuant to Article 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our law office for this purpose.

Right of objection

If your personal data are processed on the basis of legitimate interests pursuant to Article 6(1) sentence 1 point f GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR if there are reasons for doing so arising from your particular situation or if the objection is directed against direct marketing. In the case of the latter, you have a general right of objection, which will be implemented by us without specifying a special situation.
If you wish to make use of your right of revocation or objection, simply send an email to kontakt@lotusgrill.de.

Data security

When you visit our website, we use the common SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser. Usually this is a 256-bit encryption. Should your browser not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously being improved in line with technological developments.

Updating and modification of this privacy policy

This privacy policy is currently valid and was last updated on May 2018.
In order to ensure that our privacy policy always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the privacy policy has to be adapted due to new or revised services. The new privacy policy will then take effect on your next visit to our website.