We are pleased about your visit to our website. We take the protection of your personal data seriously and comply with the provisions of applicable data protection laws. The terminology used in this statement is to be understood as gender-neutral and includes both the feminine and masculine forms.

1 Information about the collection of personal data

This privacy policy informs you about the collection of personal data when you use our website. Personal data is any data that can be related to you personally, such as your name, address, or email address.

We are the data controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR).

Hirsch GmbH & Co. KG
Dorfstraße 4
89233 Neu-Ulm / Finningen

You can find all information about us in our Imprint.

The contact details of the responsible supervisory authority are:
Bavarian State Office for Data Protection Supervision
Promenade 27 (Castle)
91522 Ansbach
Phone: +0981 - 5313 00
Email: poststelle@lda.bayern.de

The contact details of the data protection officer are:
Christian Leopold, Business Administration Graduate
Oberrimbach 42
96152 Burghaslach
Phone: 0174 - 310 54 60
Email: Leopold-oberrimbach@gmx.de

You can contact us by email. A valid email address is required so that we can respond to your inquiry. If you wish, you can use an email address that does not reveal your identity. When you send us an email, we store the data you provide (e.g., your email address, and optionally your name and phone number) in order to answer your questions. We delete the collected personal data when storage is no longer necessary. If there is a legal obligation to retain the data, we restrict its processing. The legal basis for data processing for the purpose of contacting you is Article 6(1)(f) of the GDPR.

Please be aware that data transmission via email can have security vulnerabilities. Complete protection of data from access by third parties is not possible. We therefore recommend that you do not send sensitive or health-related data via email. If you are interested in encrypted email communication, please let us know.

For certain functions of our website, we require the services of external providers. We will inform you about the specific processes involved later in this statement.

2. Collection and storage of personal data when visiting our website

When you use our website for informational purposes only – that is, simply to view it – we collect the personal data that your browser automatically transmits to our website's server. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until its automatic deletion (log file data):

  • IP address of the requesting computer,
  • Date and time of the request or access,
  • Time zone difference to Greenwich Mean Time (GMT),
  • Content of the request (specific page),
  • Name and URL of the retrieved file,
  • Access status/HTTP status code,
  • each data volume transferred,
  • Website from which the request or access originates (referrer URL),
  • browser used,
  • Your computer's operating system and its interface, as well as the name of your access provider,
  • Language and version of the browser software.

We process the aforementioned data to display our website to you and to ensure its stability and security. Specifically, this is to guarantee a smooth connection and a user-friendly experience, as well as for evaluating system security and stability, and for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest arises from the purposes for data collection listed above.

3. Data Sharing / Data Transfer

We only transfer your personal data to third parties in the following cases:

  • after obtaining explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
  • The transfer is necessary for the establishment, exercise or defense of legal claims pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in not having your data transferred.
  • if there is a legal obligation to disclose the data pursuant to Article 6(1)(c) GDPR,
  • provided this is legally permissible and necessary for the performance of a contract with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

4 your rights

You have rights with regard to your personal data. These include:

  • Right to information: In accordance with Article 15 GDPR, you can request information about your personal data processed by us.
  • Right to rectification: In accordance with Article 16 GDPR, you can request the immediate rectification of inaccurate or incomplete personal data concerning you that we hold.
  • Right to erasure: In accordance with Article 17 GDPR, you can request the erasure of your personal data stored by us.
  • Right to restriction of processing: pursuant to Art. 18 GDPR you can request the restriction of the processing of your personal data stored by us.
  • Right to object to processing: in accordance with Art. 7 para. 3 GDPR you can withdraw your consent at any time.
  • Right to data portability: according to Art. 20 GDPR you can request to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or request its transmission to another controller.
  • In accordance with Article 77 of the GDPR, you also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

5. Further functions and offers of our website / Integration of third-party services and content (plug-in providers)

In addition to simply browsing our website, we offer various services that you can actively use if you are interested. This triggers further data processing. You will generally need to provide additional personal data; this data is used to provide the respective service. The use of the following services requires that the third-party providers learn your IP address; without the IP address, the content cannot be transmitted to your browser.

The following third-party services are integrated into our website. The data processing described below is necessary to protect our legitimate interests and those of third parties pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. These interests lie in particular in the optimization and user-friendliness of our website and the design of our online presence. Integration is necessary in each case to enable the use of the third-party services on our website.

a table reservation OpenTable

This website uses the booking service "OpenTable" for table reservations at our restaurant. The provider is OpenTable GmbH, Zeil 109, Frankfurt 60313, Germany.
The use of OpenTable is in our legitimate interest in providing an attractive presentation and booking option for the online offers we provide on our website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.
For more information on how user data is handled, please see OpenTable's privacy policy: https://www.opentable.de/legal/privacy-policyCookie and personalized advertising policy https://www.opentable.de/legal/cookie-policy.

b Booking system DIRS21

This website uses the DIRS21 booking service via an API for hotel room reservations. The provider is TourOnline AG, Borsigstraße 26, 73249 Wernau, Germany.
To use the functions of DIRS21, it is necessary to store your IP address. This information is generally transmitted to and stored on a server of TourOnline AG in Germany. The provider of this website has no influence on this data transfer.
The use of DIRS21 is in our legitimate interest in presenting and enabling the booking of the online offers we provide on our website in an appealing manner. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.
More information on how user data is handled can be found in DIRS21's privacy policy: http://www.dirs21.de/disclaimer/.

c. Integration of YouTube videos (a service of Google Inc.)

We have embedded YouTube videos in our online content. The videos stored on YouTube.com can be played directly from our website. This service uses cookies to collect information about website visitors. The cookies are stored in the user's browser as soon as the page is accessed. A connection is established with the Google DoubleClick network. You can prevent the storage of cookies by adjusting your browser settings. To do this, you must select "do not accept cookies" or a similar option in your browser settings. In this case, you may not be able to play the respective video.

All videos are embedded using our "enhanced privacy mode." With this mode activated, information is only stored if you actively click to play the embedded video. Playing the videos triggers further data processing, including the transmission of log file data. We have no control over this data transmission.

By visiting our website, YouTube receives information that you have accessed the corresponding subpage. Log file data is also transmitted. This occurs even if you do not have a YouTube/Google user account or are not logged in. If you are logged into your Google or YouTube account, your data will be associated with your Google account. If you do not want this association with your YouTube profile, you must log out of your account before playing the video.

YouTube stores your data as user profiles and uses it for advertising, market research, statistical analysis, and/or to tailor its website to user needs. This analysis is carried out in particular (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network about your activities on our website.

You have the right to object to the creation of these user profiles. To exercise this right, please contact YouTube.

Further information on the purpose and scope of data collection and processing by YouTube can be found in their privacy policy. There you will also find further information on your rights and settings options to protect your privacy. https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Email: support-de@google.com.

Video streaming and data traffic via Video-Stream-Hosting.de (Steinmann GbR)

Our website integrates content and services from Video-Stream-Hosting, Sören and Linda Steinmann GbR, Am Sennehügel 20, 32052 Herford, Germany. This includes, in particular, a video player, but also potentially related services (media library, chat, feedback module, etc.). Hereinafter referred to as VSH. See also https://www.video-stream-hosting.com/

With this video player and other data provided, we are able to display content transmitted via VSH on this website.

When displaying transmitted data and content (streaming videos, video player, chat, etc.) on our website, a direct connection is established between your browser and the servers that provide these VSH services. Your browser sends a request including your IP address and receives the requested data back. Examples include retrieving the video player when the website loads, or displaying video content or chat text as soon as you access it.

The IP address required for this is only stored temporarily by VSH and used for data transmission and the technical and security-related provision of the service. For longer storage of the IP address, it is anonymized – this makes it impossible for VSH to trace it back to your connection (i.e., it is not personally identifiable).

If you enter text, your name, or personal data via chat, feedback modules, etc., this information will be used and stored for the purpose of providing the service. VSH deletes this data after a maximum of 7 days, but may offer the option for us to store this data.

In addition, VSH stores so-called cookies in your browser. These cookies allow VSH to recognize your browser between individual requests and on your next visit to the website. This allows, for example, the number of page views to be counted. This serves the purpose of providing technical and security-related services (detection of attacks and illegitimate requests) and the pseudonymized collection of statistical data.

You can configure your browser to notify you when cookies are set and to allow cookies only in individual cases, to accept cookies in certain cases or to generally reject them, and to automatically delete cookies when you close your browser. Disabling cookies may limit the functionality of this website. The cookies remain on your device until you delete them.

The use of video stream hosting services is in the interest of ensuring the uninterrupted provision and optimization of our services. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

Further information can be found in VSH's privacy policy at https://www.video-stream-hosting.com/datenschutz/.

6 Cookies

In addition to log file data, so-called cookies are stored on your device (laptop, tablet, smartphone, etc.) when you use our website. These are small text files that are stored on your hard drive and assigned to the browser you are using; cookies provide the entity that sets the cookie with certain information. Cookies serve to make our website more user-friendly and effective. We do not directly obtain any information about your identity through cookies. Cookies cannot execute programs or transmit viruses to your computer.

Our website uses only session cookies. These store a session ID, which allows different requests from your browser to be associated with the same session. Session cookies enable us to recognize that you have already visited certain pages of our website. Session cookies are automatically deleted when you leave our site or close your browser. You can also delete cookies at any time in your browser's security settings.

You can also visit our website without cookies. To do this, you must configure your browser settings to block cookies. In this case, you may not be able to use all the functions of our website.

The data processed by cookies are for the purposes mentioned for the protection of our legitimate interests as well as the third party according to Art. 6 para. 1 S. 1 lit. f DSGVO required.

We will inform you about cookies set by integrated services (e.g. YouTube) in the description of the respective service.

7. Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by using the browser plug-in available under the following link. download and install in: http://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the extension "_anonymizeIp ()". As a result, IP addresses are further processed in abbreviated form, so that personal references can be excluded. If the data collected about you can be linked to a person, this will be excluded immediately and the personal data will be deleted immediately.

We use Google Analytics to analyze the use of our website and to improve it regularly. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR.

Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of service: http://www.google.com/analytics/terms/de.html, Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy.

8. Objection or revocation of the processing of your data

If we process your personal data based on legitimate interests pursuant to Article 6(1)(f) GDPR, you may object to the processing of your personal data pursuant to Article 21 GDPR. In this case, please inform us of the reasons – arising from your particular situation – why we should not process your personal data. After reviewing your objection, we will either cease processing your data, adjust it, or continue processing it. In the latter case, we will explain our compelling legitimate grounds for doing so.

You can object to the processing of your personal data for advertising and/or data analysis purposes at any time without giving reasons. We will implement your right to object; providing reasons is not required.

If you have given your consent to the processing of your data, you can revoke it at any time with effect for the future.

To exercise your right of withdrawal or objection, please send an email to the following address: info@hirsch-nu.de

You can also inform us of your objection or revocation using the following contact details:

Hirsch GmbH & Co. KG
Dorfstraße 4
89233 Neu-Ulm / Finningen


Imprint

9 More Questions

Did our privacy policy fail to answer one of your questions? Would you like more information on any point? Then please let us know. We are always happy to provide further information. For all data protection inquiries, please contact us at the following email address: info@hirsch-nu.de

10 vouchers

1. You can generally visit our online shop without us collecting any personal data from you. Personal data is only collected if you voluntarily provide it to us for the purpose of processing a purchase. This data is used solely for contract processing and handling your inquiries, without your explicit consent. After complete contract fulfillment, your data will be stored in accordance with tax and commercial law retention periods, but will not be used for any other purposes.
Furthermore, personal data is collected when you subscribe to our email newsletter. We use this data for our own advertising purposes in the form of our email newsletter, provided you have expressly consented to this.

2. Transfer of personal data for order processing
11.2.1 The personal data collected will be processed by the software provider as part of the contract processing. E-GUMA (Idea Creation GmbH, Walchestrasse 15, CH-8006 Zürich) our online shop and passed on to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of the goods.

2.2 We will forward your payment details to the following service provider as part of the payment processing: Datatrans AG, Kreuzbühlstrasse 26, CH-8008 Zurich.

2.3 When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" via PayPal, we forward your payment data to PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") for payment processing. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" via PayPal. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to offer the respective payment method. The credit check may include probability values ​​(so-called score values). If score values ​​are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data is among the information used to calculate the score values. For further information on data protection, including details of the credit reference agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/myaccount/privacy/privacyhub.

11 DialogShift chat application on our website

Our website uses the chat application from DialogShift GmbH, Torstr. 201, 10115 Berlin. This application processes and stores data for web analytics, to operate the chat application, and to answer inquiries. For the chat function to work, chat texts are stored and a cookie with a unique ID is set – this serves to recognize you as a returning customer.
A cookie is a small text file that is stored locally in the cache on your device. This cookie allows our application to recognize the device and view past chat logs. This cookie is stored for 90 days since last use. You can deactivate the storage of cookies in your browser settings. However, the chat function cannot be executed without the use of cookies.
The possible disclosure of information such as name, email address, or telephone number is voluntary and implies consent to the temporary use and storage of this data for the purpose of contacting you until the end of the contact. This personal data will be deleted after 90 days. The legal basis for data processing is Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TTDSG based on your consent. DialogShift offers under https://www.dialogshift.com/datenschutz further information on the collection and use of the data as well as on your rights and options for protecting your privacy.