​1. Data Controller

The controller responsible for processing personal data under the General Data Protection Regulation (GDPR) and other applicable data protection laws is:

​

CHICKENPICKIN' e.K.
Owner: Huije Jung
Im Markwinkel 1, 92655 Grafenwöhr, Germany

Phone: +49 151 1490 4753
Email: info@chickenpickin.de

If you have any questions regarding data protection or wish to exercise your data protection rights, you may contact us at any time using the contact details above.

​

2. General Information on Data Processing

We process personal data only where necessary to provide our website, respond to enquiries, process reservations and orders, fulfil contractual or legal obligations, or pursue legitimate interests.

Personal data means any information relating to an identified or identifiable natural person, such as a name, email address, telephone number, IP address or order details.

Processing is carried out in particular on the basis of Article 6(1) GDPR.

​

3. Hosting and Website Platform – Wix

Our website is operated using services provided by Wix.

The Wix group includes, among others:

​

Wix Online Platforms Limited
1 Grant's Row, Dublin 2, D02HX96, Ireland

as well as Wix.com Ltd. and other affiliated companies.

When you visit our website, Wix may process technical data required to operate the website, including:

• IP address,

• date and time of access,

• pages and files accessed,

• browser type and version,

• operating system,

• device information,

• referrer URL,

• technical usage and security data.

 

This processing is necessary to provide the website, ensure its stability and security and detect or prevent attacks and misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient operation of our website.

Where processing is necessary to complete an order or another function expressly requested by you, Article 6(1)(b) GDPR may additionally apply.

Wix may process data within the European Union, Israel and, subject to applicable legal requirements, other countries. Where personal data is transferred outside the European Economic Area, the safeguards required under the GDPR are used, including adequacy decisions of the European Commission or appropriate safeguards such as Standard Contractual Clauses.

Technical log data is stored only for as long as required for operation, security and compliance with legal obligations and is then deleted or anonymised.

​

4. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small files or pieces of information that can be stored on or accessed from your device.

​

Strictly Necessary Cookies

Strictly necessary cookies are used to enable essential website functions such as navigation, security, shopping carts, online ordering and cookie preferences.

Where storage of or access to information on your device is strictly necessary to provide a digital service expressly requested by you, no separate consent is required under Section 25(2) TDDDG.

Any subsequent processing of personal data is generally based on Article 6(1)(b) or Article 6(1)(f) GDPR.

​​

Optional Cookies

Where analytics, statistics, marketing or other non-essential cookies or similar technologies are used, they are generally activated only after you have given your consent.

The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR.

You may withdraw or modify your consent at any time with effect for the future through the website's cookie settings.

Rejecting optional cookies does not prevent you from using the essential functions of our website.

​

5. Online Orders

You can order food and beverages through our website.

For this purpose, we process the data required to handle your order, which may include:

• name,

• telephone number,

• email address,

• order details,

• requested pickup or delivery time,

• delivery address where applicable,

• payment information where applicable,

• any voluntary comments relating to your order.

 

The data is processed in order to receive, process and fulfil your order.

The legal basis is Article 6(1)(b) GDPR.

Our online ordering system is provided through the Wix platform. Wix processes the data required for this purpose on our behalf or in accordance with the respective functionality of the service.

If you choose an electronic payment method, the information required to process the payment may be transferred to the payment service provider identified during the checkout process. The relevant payment provider may also process payment information in accordance with its own privacy policy.

Order and contractual data is retained for as long as necessary to perform the contract and comply with statutory commercial and tax retention requirements.

Accounting records and invoice data may in particular need to be retained for up to eight years, while commercial and business correspondence may generally need to be retained for up to six years, unless a longer statutory retention period applies.

​

6. Table Reservations via resmio

We use the following reservation service for online table reservations:

​

resmio GmbH
Katzwanger Straße 150, 90461 Nürnberg, Germany

When you select “Reservieren” or “Book Now” on our website, you are redirected to the reservation service operated by resmio.

The following data may be processed in connection with a reservation:

• name,

• email address,

• telephone number,

• date and time of the reservation,

• number of guests,

• any special requests or other information provided voluntarily.

 

This data is processed to receive, manage and fulfil your reservation and, where necessary, to contact you regarding your reservation.

The legal basis is Article 6(1)(b) GDPR.

Where resmio transfers reservation data to us, we use this information solely to manage and fulfil the relevant reservation and to meet applicable legal obligations.

Any independent processing carried out through resmio's websites and systems is additionally governed by resmio's own privacy policy.

​

7. Contact by Email or Telephone

If you contact us by email or telephone, we process the personal data you provide, in particular your contact details and the content of your enquiry, in order to respond to your request.

Where your enquiry relates to an existing contract or steps taken before entering into a contract, processing is based on Article 6(1)(b) GDPR.

For other enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the proper handling and response to enquiries.

The data will be deleted once it is no longer required to deal with your enquiry unless statutory retention requirements or other legitimate reasons require further storage.

​

8. Links to Social Networks and External Websites

Our website may contain links to external websites and social networks such as Instagram or Facebook.

Where these are simple links, data is generally transferred to the respective provider only when you click the link and access its website.

The respective provider is generally responsible for any subsequent processing of personal data on its website.

​

9. SSL/TLS Encryption

Our website uses an encrypted connection.

An encrypted connection can generally be identified by the use of “https” in your browser's address bar.

Encryption is used to protect data transmitted between your device and the website against unauthorised access by third parties.

​

10. Recipients of Personal Data

Personal data is disclosed to third parties only where this is necessary and legally permitted.

Recipients or categories of recipients may in particular include:

• hosting and IT service providers,

• Wix and its affiliated companies,

• resmio in connection with reservations,

• payment service providers,

• tax advisers and accounting service providers,

• authorities and public bodies where disclosure is required by law.

 

Where service providers process personal data on our behalf, such processing is carried out in accordance with Article 28 GDPR.

We do not sell personal data.

​

11. Retention Period

Unless a specific retention period is stated in this Privacy Policy, personal data is retained only for as long as necessary for the relevant processing purpose.

The data will then be deleted unless statutory retention requirements, legitimate interests or another legal basis requires continued retention.

​

12. Your Rights

Subject to the applicable legal requirements, you have the following rights in particular:

​

Right of Access

Under Article 15 GDPR, you have the right to request information about whether and which personal data relating to you is being processed.​

​

Right to Rectification

Under Article 16 GDPR, you may request correction of inaccurate personal data or completion of incomplete personal data.​

​

Right to Erasure

Under the conditions set out in Article 17 GDPR, you may request the deletion of your personal data.

​

Right to Restriction of Processing

Under the conditions set out in Article 18 GDPR, you may request restriction of processing.

​

Right to Data Portability

Where the applicable requirements are met, Article 20 GDPR gives you the right to receive personal data that you have provided in a structured, commonly used and machine-readable format or request that it be transferred to another controller.

​

Right to Object

Where we process personal data on the basis of Article 6(1)(e) or (f) GDPR, you may have the right to object to that processing under Article 21 GDPR.

​

Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future in accordance with Article 7(3) GDPR.

The lawfulness of processing carried out before withdrawal of consent remains unaffected.

​

13. Right to Lodge a Complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for our company is:

Bavarian State Office for Data Protection Supervision
(Bayerisches Landesamt für Datenschutzaufsicht – BayLDA)
Promenade 18, 91522 Ansbach, Germany

​

14. No Automated Decision-Making

We do not use solely automated decision-making, including profiling within the meaning of Article 22 GDPR, in connection with the processing described on this website where such decisions would produce legal effects concerning you or similarly significantly affect you.

​

15. Changes to this Privacy Policy

We may update this Privacy Policy if our website, the services we use or applicable legal requirements change.

The version currently published on our website applies.