Privacy Policy

01Controller

Controller for the data processing on this website:

Email: wallenstein@moya-restaurant.de

02General information on data processing

We process personal data only to the extent necessary for operating this website, handling inquiries and communicating with prospective clients and business partners.

Processing takes place in accordance with the General Data Protection Regulation (GDPR) and all other applicable data protection provisions.

03Hosting with Vercel

This website is provided via Vercel.

When the website is accessed, technically necessary data may be processed, in particular the IP address, the time of the request, the page or file requested as well as technical information about the browser, device and system.

This processing serves the purpose of providing the website securely, stably and efficiently.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely and reliably.

Where personal data is processed outside the European Economic Area, the applicable data protection requirements and appropriate safeguards for international data transfers are taken into account.

04Vercel Web Analytics

We use Vercel Web Analytics in order to evaluate the use of our website in aggregated form and to improve our online presence.

Vercel Web Analytics does not use cookies. According to Vercel, no personal identifiers are used that would allow visitors to be tracked across different websites. Page views and usage information are processed for aggregated statistics.

In particular, information about the page accessed, the referrer, the approximate location, the device type, the operating system and the browser may be processed. To identify individual visitors, Vercel uses a hash generated from the incoming request, which is not stored permanently and is discarded or reset after 24 hours.

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to understand the use and technical performance of our online presence and to improve it.

05Contact form

If you contact us via the contact form, we process the data you provide in order to handle your inquiry.

This may include:

• name
• email address
• company / restaurant, if provided
• selected service
• content of your message
• language of the website

Processing serves to handle your inquiry and to take steps prior to entering into a contract pursuant to Art. 6(1)(b) GDPR, insofar as your inquiry relates to the initiation of a contract.

In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in handling and responding to business inquiries.

06Storage of inquiries via Supabase

We use Supabase for the structured storage and management of contact inquiries.

The Supabase project of this website is set up in the Central EU (Frankfurt) region. According to Supabase, the primary project data is stored in the selected project region.

Supabase stores the details submitted via the contact form as well as the information on the origin of an inquiry described below.

Processing serves to handle, organise and follow up on inquiries and is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

07Email delivery via Resend

We use the Resend service to deliver the email notifications triggered by an inquiry submitted through the contact form.

Once the contact form is submitted, a notification is sent to us as the operator of this website. It contains the details you submitted as well as the information on the origin of an inquiry described below. Your email address is set as the reply-to address so that we can respond to you directly.

For this purpose, the data named above is transmitted to Resend and processed there for the purpose of sending the email. This may involve a transfer of personal data to the USA.

Resend does not send any emails to you and does not use your data for its own advertising or newsletter purposes. Only notifications of incoming inquiries are delivered to us.

Processing serves to handle your inquiry and is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. Our legitimate interest lies in the reliable and timely delivery of inquiries.

08Origin of inquiries and UTM parameters

In order to understand which of our own marketing, social media, press or partner links led to a contact inquiry, we may record existing campaign information when our website is visited.

This may include:

• utm_source
• utm_medium
• utm_campaign
• utm_content
• utm_term
• original referrer
• first page accessed (landing page)

This information is stored together with a contact inquiry if the visitor subsequently submits the contact form.

We use this information to evaluate where our business inquiries come from and to improve our communication and marketing activities.

In doing so, we do not use IP addresses, browser fingerprints, advertising IDs or comparable identifiers to attribute a contact inquiry.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to be able to understand the origin of business inquiries and to assess our communication activities.

09Storage period

Contact inquiries and the associated data are generally stored for up to 12 months after the communication regarding the respective inquiry has been concluded and are deleted thereafter, unless further retention is required.

If a contractual relationship is established or statutory retention obligations apply, the data required for this purpose may be stored for longer in accordance with the applicable statutory periods.

10External links

This website contains links to external websites and platforms, for example to restaurants, press articles and social media profiles.

Merely visiting our website does not transmit any data to the respective provider via these external links. Only when you follow an external link do you leave our website, and the privacy policy of the respective provider then applies.

11Fonts

The fonts used on this website are provided locally by the website. No connection to Google Fonts is established when the website is accessed.

12Cookies

This website currently does not use any cookies for analytics, marketing or tracking purposes.

According to Vercel, Vercel Web Analytics operates without cookies.

Should technologies requiring consent be used in the future, they will only be used after the corresponding consent has been given.

13Your rights

Subject to the statutory requirements, data subjects have in particular the right to:

• access pursuant to Art. 15 GDPR
• rectification pursuant to Art. 16 GDPR
• erasure pursuant to Art. 17 GDPR
• restriction of processing pursuant to Art. 18 GDPR
• data portability pursuant to Art. 20 GDPR
• object to processing based on Art. 6(1)(f) GDPR pursuant to Art. 21 GDPR

Where processing is based on consent, a consent given may be withdrawn at any time with effect for the future.

There is also the right to lodge a complaint with a competent data protection supervisory authority.

14Right to object

Insofar as we process personal data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right, under the conditions of Art. 21 GDPR, to object to the processing on grounds relating to your particular situation.

To exercise your data protection rights, you can contact us at the following address:

wallenstein@moya-restaurant.de

15Updates to this privacy policy

We reserve the right to amend this privacy policy if the website, the services used or the legal requirements change.

Last updated: September 2026