Privacy Policy

Your privacy is important to us. We are committed to protecting your personal information and being transparent about how we use it.

01

Introduction

This Privacy Policy explains which personal data we process when you visit our website, contact us, reserve a table or place an order, and what rights you have under the EU General Data Protection Regulation (GDPR).

02

Controller

The controller responsible for data processing on this website is:

[Owner's full name]Tandoori WonfurtHauptstraße 3197539 Wonfurt, Germany

03

Information We Collect

We only collect personal data that you give us yourself, for example when you call or email us, reserve a table, place an order or ask to receive our newsletter. This can include your name, email address, phone number, delivery address, the date and time of your reservation and any details you tell us (such as allergies).

When you visit the website, technical access data is also recorded automatically by our hosting provider (see “Hosting and Server Log Files”).

04

How We Use Your Information

We use the information we collect to:

  • Process your reservations and orders (Art. 6 (1) (b) GDPR)
  • Answer your questions and provide customer support (Art. 6 (1) (b) and (f) GDPR)
  • Send you our newsletter, only if you have asked for it (Art. 6 (1) (a) GDPR)
  • Keep our website secure and running smoothly (Art. 6 (1) (f) GDPR)
  • Meet legal obligations, for example tax retention periods (Art. 6 (1) (c) GDPR)
05

Hosting and Server Log Files

This website is hosted by [Hosting provider name and address]. When you open the website, the server automatically records information that your browser transmits: IP address, date and time of the request, the page requested, the referring website, and your browser and operating system.

This data is needed to deliver the website and to ensure its security and stability. The legal basis is our legitimate interest under Art. 6 (1) (f) GDPR. The log files are deleted as soon as they are no longer needed for this purpose, unless they must be kept longer as evidence of a security incident.

06

Cookies and Tracking

Our website does not use cookies and does not use any analytics or tracking tools. The fonts used on this website are stored on our own server, so no connection to Google or other font providers is made when you visit the site.

07

Online Ordering

Our “Order Now” buttons lead to our online ordering system at order.tandooriwonfurt.de. The data you enter there is processed to handle your order (Art. 6 (1) (b) GDPR); the privacy information shown in the ordering system applies.

08

Newsletter

If you sign up for our newsletter, your email program opens with a subscription request to us. We only use your email address to send you the newsletter, based on your consent (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time by sending us an email; we will then delete your address from our mailing list.

10

Data Sharing

We do not sell or rent your personal data. We only pass it on where this is necessary to provide our services, for example to payment providers or delivery partners, or where we are legally obliged to do so.

11

Data Security

This website uses SSL/TLS encryption, which you can recognise by “https://” in the address bar. We take appropriate technical and organisational measures to protect your data from loss, misuse and unauthorised access.

12

How Long We Keep Your Data

We keep personal data only as long as it is needed for the purpose it was collected for, or as long as statutory retention periods require (for example up to 10 years for accounting records under German tax law). After that it is deleted.

13

Your Rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you (Art. 15)
  • Have incorrect data corrected (Art. 16)
  • Have your data deleted (Art. 17)
  • Restrict the processing of your data (Art. 18)
  • Receive your data in a portable format (Art. 20)
  • Object to processing based on our legitimate interests (Art. 21)
  • Withdraw any consent you have given, with effect for the future (Art. 7 (3))

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)Promenade 1891522 Ansbach, Germany

14

Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children.

15

Changes to This Policy

We may update this Privacy Policy when our services or the law change. The current version is always available on this page. Last updated: September 2026.

16

Contact Us

If you have any questions about this Privacy Policy or want to exercise your rights, please contact us:

See also: Imprint · Terms & Conditions