Legal

Privacy Policy

Draft. This policy describes the processing as the site is technically built. Before going live it should be reviewed by someone with a legal background — in particular the sections on enquiries and retention.

This is a translation for your convenience. The German version is the legally binding one.

1. Controller

LUMO Gastro und Event GmbH
Krefelder Straße 221, 41066 Mönchengladbach
info@lumo-mg.de

2. Principle

We only process personal data to the extent necessary to operate this website and to handle your enquiries. This website sets no cookies for analytics or advertising. There is no reach measurement, no tracking and no sharing with advertising networks.

3. Visiting the website (server log files)

When you visit our pages, our host automatically collects data transmitted by your browser: the page requested, date and time, amount of data transferred, referrer, browser type and version, operating system and the IP address. This data serves solely the secure and trouble-free operation of the site. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in technically correct presentation). Log files are deleted after seven days at the latest.

4. Fonts

This website uses the typefaces “EB Garamond” and “Jost”. They are loaded exclusively from our own server. At no point is a connection made to servers of Google or any other provider, and no data is transmitted there.

5. Reservation, contact and event enquiries

When you submit one of our forms, we process the details you provide: name, email address, optionally a phone number, as well as the date, time, number of guests, occasion and your message.

Purpose: handling and answering your enquiry and preparing a visit or an event.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(a) GDPR (consent), which you give when submitting. You may withdraw your consent at any time with effect for the future.
Recipients: the enquiry is delivered as an email to our mailbox and handled there by our team. It is not passed on to third parties.
Retention: reservation enquiries are deleted 90 days after the requested date. General contact and event enquiries are deleted no later than six months after they have been dealt with, unless statutory retention obligations apply.

You will also receive an automatic acknowledgement at the email address you provided.

6. Protection against automated requests

To protect against spam we use no third-party captcha. Instead we use an additional field invisible to humans, check the time between opening and submitting the form, and limit the number of requests per hour. For that rate limit we briefly store a non-reversible checksum of your IP address, but not the IP address itself. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in preventing misuse).

7. Map

The map on the home page and under “Find Us” is an image stored on our own server. Viewing the page establishes no connection to a mapping service and transmits no address to third parties. The map data comes from OpenStreetMap and is available under the Open Database License; the contributors are credited beneath the map.

Clicking the map opens Google Maps in a new window with directions to us. Only that click establishes a connection to Google and transmits your IP address. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is consent under Art. 6(1)(a) GDPR, given by clicking the link. Further details in Google’s privacy policy: policies.google.com/privacy.

8. Links to Instagram and TikTok

We link to our Instagram and TikTok profiles. In both cases these are simple links, not embedded content — as long as you do not click them, nothing is loaded from these providers and no data is transmitted to them. Only with the click do you leave this website; the privacy terms of Meta and TikTok respectively then apply.

9. Hosting

This website is hosted by a service provider in Germany. A data processing agreement under Art. 28 GDPR is in place with that provider.

10. Your rights

You have the right at any time to

  • information about the data stored about you (Art. 15 GDPR)
  • rectification of incorrect data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to processing (Art. 21 GDPR)
  • withdrawal of consent with effect for the future (Art. 7(3) GDPR)

Please contact us informally at the address above. You also have the right to lodge a complaint with a data protection supervisory authority; the competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

11. Changes

We adapt this policy when the website or the legal situation changes. The version published here applies.