Privacy Policy

1. Controller

Telephone: +49 (0) 5141 3029658
Email: info@koji-restaurant.de

2. Hosting and delivery of this website

This website is hosted by Vercel Inc. (“Vercel”). When you access the website, Vercel processes the technical access data required to deliver it and operate it securely. This may include your IP address, the date and time of access, the page or file requested, the amount of data transferred, browser and device information, operating system, referrer information, and request and status information.

This processing is necessary to provide a secure, reliable and technically functional website, detect attacks and misuse, and maintain system stability. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and uninterrupted operation of our website.

Vercel may process data outside the European Economic Area, particularly in the United States, and may use subprocessors. Where data is transferred to a third country, the safeguards required in each case are used, including adequacy decisions or the European Commission’s Standard Contractual Clauses. Further information is available in Vercel’s Data Processing Addendum. Technical log data is retained only for as long as necessary for the purposes described above or to meet legal obligations. We cannot state one fixed retention period because this depends on the type of log and the hosting service’s settings.

3. Contacting us

If you contact us by email or telephone, we process the information you provide—particularly your name, contact details, the content of your enquiry, and any reservation or event details—to respond to your request and any follow-up questions.

Where your enquiry concerns a contract or steps prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR. In other cases, processing is based on Article 6(1)(f) GDPR and our legitimate interest in responding appropriately to enquiries. Where you have given consent, the legal basis is Article 6(1)(a) GDPR.

We delete this information once your enquiry has been fully dealt with, unless statutory retention requirements or legitimate reasons require us to keep it longer. Records subject to statutory retention requirements are stored for the applicable retention period.

4. Local browser storage

The website uses your browser’s session storage (sessionStorage) exclusively for website and user-interface functionality. It stores whether the opening animation has already been shown, a temporary status used when changing language, the language selected in the KOJI Assistant, and whether its preview has been dismissed.

These values are stored only for the current browser session in the relevant tab and are discarded by the browser when that session ends. They are not used for analytics, advertising, profiling or cross-site tracking and are not transmitted to us or any external service. The legal basis is section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) and, to the extent personal data is processed, Article 6(1)(f) GDPR. Our legitimate interest is a consistent and user-friendly presentation of the website. The website does not use localStorage.

5. Cookies and analytics

We use Vercel Web Analytics, provided by our hosting provider Vercel Inc., to measure aggregated page views and selected interactions, such as clicks on our menu, table reservations and group enquiry pages. We do not transmit form contents, names, email addresses or phone numbers as analytics data. Web Analytics does not use analytics cookies. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in improving the website).

Technical data may include visited pages, referrers, device and browser types and approximate geographic location. Data may be processed outside the EEA, particularly in the United States. Please see Vercel Web Analytics privacy information. We do not use analytics cookies, Google Analytics or advertising trackers.

6. KOJI Assistant

The KOJI Assistant is a local selection tool containing preset questions and responses. It has no free-text field, does not use an external AI service, and sends no conversation data to an API or chatbot provider. Only the interface settings described in section 4 are stored in the browser’s session storage.

7. External links

The Resmio reservation service, Google Maps route and parking information, and the linked Instagram profile are not embedded in this website. A connection to the relevant third party is made only after you actively follow the external link. From that point, the provider processes data under its own responsibility and privacy terms. The menu PDF, by contrast, is stored directly on this website and does not use an external PDF service.

8. Your rights

Subject to the applicable statutory conditions, you have the right to:

• access your personal data (Article 15 GDPR),
• rectify inaccurate or complete incomplete data (Article 16 GDPR),
• erase your data (Article 17 GDPR),
• restrict processing (Article 18 GDPR),
• data portability where the relevant conditions are met (Article 20 GDPR), and
• object to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR).

You may withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal. To exercise your rights, please use the contact details above.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: