PRIVACY POLICY — INDIA CLUB RESTAURANT

PRIVACY POLICY:

The protection of information related to you, such as your name, phone number, email address, or IP address (so-called “personal data”), is of great importance to us. That is why we operate this website and the services we offer on it in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Below you will find an explanation of how we handle your personal data in this context.

Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security risks. It is not possible to completely protect data from access by third parties.

For security reasons and to protect the transmission of confidential information—such as orders or inquiries you send to us as the website operator—we use SSL or TLS encryption on this website. You can recognize an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the lock icon in your browser bar. When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

1. Who is the data controller?

The entity responsible for this website is:
China Club GmbH & Co.KG
Behrenstraße 72
10117 Berlin
Phone: +49 / 30 20 912 - 0
Email: member@china-club-berlin.com

The Data Protection Officer for China Club Berlin GmbH & Co. KG is:
Attorney Dr. Karsten Kinast, LL.M.
KINAST Rechtsanwaltsgesellschaft mbH
Nordstraße 17a
50733 Cologne

mail@kinast.eu
www.kinast.eu

2. What do we do with your personal data?

A. When you use our website

Providing this website (including its features) requires the processing of personal data, such as the IP address, in order to display the content on this website.

(1) Legal basis

The processing of your personal data for the purpose of providing this website is based on our legitimate interest. In order to provide this website, it is technically necessary for us to process certain personal data (e.g., your IP address).

(2) Balancing of Interests

As part of the necessary balancing of interests, we have weighed your interest in privacy against our interest in providing this website. Your interest in privacy takes a back seat in this context. Otherwise, we would not be able to provide this website to you.

(3) Recipient categories

We use service providers to host our website. To this end, we transfer personal data to these service providers. These service providers are legally or contractually obligated to exercise the same level of care in processing personal data as we do.

B. If you subscribe to our newsletter

You can sign up for our newsletter by giving your consent. To do so, we collect the personal data that you enter in the registration form.

(1) Legal basis

Your consent serves as the legal basis for our processing of your personal data. You may withdraw your consent at any time, effective for the future.

(2) Purpose of the processing

Your personal data is processed for the purpose of sending newsletters.

(3) Recipient categories

We use service providers to send out our newsletters. To this end, we transfer personal data to these service providers. These service providers are legally or contractually obligated to exercise the same level of care in processing personal data as we do. Our service providers also carry out corresponding commissioned data processing in the United States (see the section below titled “6. Data Transfer to the United States”).

C. Online Application

You can apply online through our website. For this purpose, we process the personal data you provide to us as part of your application.

(1) Legal basis

Your personal data is processed for the purpose of entering into the relevant employment contract.

(2) Purpose of the processing

Your personal data is processed for the purpose of selecting candidates for employment.

D. Our Event Management

We send out invitations for various events (e.g., birthdays). In doing so, we process the personal data that you provide to us or that third parties provide to us about you, to the extent that such third parties make this information available to us.

(1) Legal basis

When we send invitations on our own behalf, the processing is based on our legitimate interest or on the relevant consent.

As part of the necessary balancing of interests, we have weighed your interest in confidentiality against our interests in event management. Your interest in confidentiality takes a back seat in this context. Otherwise, we would not be able to send you invitations.

When we send invitations on behalf of a third party, we act as a data processor in each case.

(2) Recipient categories

We use event management service providers. To this end, we share personal data with these service providers. These service providers are legally or contractually obligated to exercise the same level of care in processing personal data as we do.

E. If you follow us on Facebook, Instagram, and other social media platforms operated by third-party providers

You have the option to follow us on Facebook, Instagram, and other social media platforms operated by third-party providers (e.g., LinkedIn). To do so, we process the personal data that you provide to us or that is provided to us by the respective platform operator regarding you, to the extent that such data is made available to us by these service providers. You can manage your privacy settings directly within the social media platform.

(1) Legal basis

The processing of your personal data in connection with our social media services is based on our legitimate interest. In order to provide our social media services, it is technically necessary for us to process certain personal data (e.g., your IP address; personal data that you have provided to the respective platform operator or to us).

(2) Balancing of Interests

As part of the necessary balancing of interests, we have weighed your interest in confidentiality against our interest in providing our social media services. Your interest in confidentiality takes a back seat in this context. Otherwise, we would not be able to offer you our social media services. Furthermore, you must reasonably expect that personal data will be processed when using Facebook, Instagram, and other social media platforms.

(3) Recipient categories

We use service providers to deliver our social media services (e.g., Facebook, Instagram). The data you provide to us through our social media services is automatically transmitted to the respective social media platform operators. In doing so, personal data may also be transferred to the United States (see the section below titled “6. Data Transfer to the United States”).

F. What information we process about you due to the integration of social media platforms

We use social media services (e.g., Facebook, Instagram) on our website. Every time you visit one of our webpages that includes a social media plugin, this component causes the browser you are using to download the corresponding display of the social media service. You have the option to access a social media plugin on our website. If you are logged in to the relevant social media service at that time, that service collects information about which specific page you are visiting and associates this information with your personal account. If you post comments, this information is transmitted to your personal member account and stored there. In addition, the information that you have visited our websites is shared with social media services. This occurs regardless of whether you, for example, click the button and post comments or not.

(1) Legal basis

The processing of your personal data in connection with our integration of social media services on our website is based on our legitimate interest.

(2) Balancing of Interests

As part of the necessary balancing of interests, we have weighed your interest in confidentiality against our interest in integrating our social media offerings. Your interest in confidentiality takes a back seat in this context. Otherwise, we would not be able to offer you our social media services. Furthermore, you must reasonably expect that personal data will be processed when using Facebook, Instagram, and other social media platforms. You can prevent this by logging out of your Instagram account before visiting our website.

(3) Recipient categories

G. When you make a reservation through our website

You can make a reservation through our website. To do so, we work with third-party service providers (such as Bookatable, OpenTable, and Quandoo). These service providers are integrated into our website via so-called iFrames. An iFrame is a technical solution for displaying third-party content from the internet on your own website.

This means that, under data protection law, the respective service provider is responsible for any processing that takes place within an iframe.

When you make a reservation in an iFrame, the relevant service provider sends us the data necessary to process the reservation. We process this data to initiate the relevant contract. In doing so, personal data may also be transferred to the United States (see the section “6. Data Transfer to the United States” below).

Below you will find the privacy policies for Bookatable, OpenTable, and Quandoo.

Bookatable:
https://www.bookatable.com/de/datenschutz

OpenTable:
https://www.opentable.de/legal/privacy-policy

Quandoo:
https://www.quandoo.de/data_privacy

H. If you allow the use of cookies and analytics tools in your browser

We use cookies and analytics tools to provide our website.

Our websites use cookies. Cookies are small data files that are stored on the user’s device (e.g., computer, smartphone, tablet) by a web server. Cookies can be read by us and, in certain cases, by third parties.

Based on the stored information (e.g., the web browser and operating system used; the domain name of the website you came from; average time spent on the site; pages viewed), the respective website or platform operator can determine, for example, that you have already accessed and visited this website or platform using the browser on your device.

When you access our websites, information is automatically collected in anonymous form. This allows us to provide users with a more effective and generally better experience on our websites over time by improving the content and making the sites easier to use. The statistical data we collect helps us improve the performance and appeal of our websites. We use this information to provide you with services and deliver information that is more specifically tailored to your needs.

Cookies remain on your device until they are no longer needed, unless you delete them manually. Disabling cookies in your browser does not generally restrict your use of our websites or the services we offer.

(1) Legal basis for the use of session cookies

The legal basis for the use of session cookies is our legitimate interest. As part of the necessary balancing of interests, we have weighed your interest in privacy against our interest in providing this website (including its features). In each case, your interest in privacy takes a back seat. Otherwise, we would not be able to provide this website to you.

Use of Google Tag Manager

We use Google Tag Manager on our websites, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

We can use Google Tag Manager to manage cookies and control their placement. This allows us, for example, to implement your consent, a withdrawal of consent, or an opt-out. Google Tag Manager does not set its own cookies and does not process any data stored in cookies.

(2) Use of tracking cookies for analytical and advertising purposes

This website works with external performance advertising networks to display and optimize its own advertisements. As part of these tracking services, cookies are stored on the devices of users who visit or use websites or other online services in order to document transactions. These cookies are used solely for the purpose of correctly attributing the success of an advertisement and for the corresponding billing within the advertising network. No personal data is processed in this context. A cookie merely stores information about when a specific advertisement was clicked on from a device. The external partners used are listed below, each with a link to their privacy policy.

(a) Legal basis for the use of tracking cookies for analytical and advertising purposes

The legal basis for the use of tracking cookies for analytical and advertising purposes, and for the transfer of personal data to an unsecured third country—in particular the United States—which is necessary for processing, is the consent you provided to us via our cookie banner (see section “6. Data Transfer to the United States” below). If you have not given us such consent, we will not use tracking cookies on your device. Please note that, for technical reasons, any consent given in this regard applies only to the respective device.

(b) Use of Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), on our websites.

Google Analytics uses so-called “cookies,” which are text files stored on your device that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there. However, by enabling IP anonymization, your IP address will be truncated by Google beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area.

Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. On our behalf, Google will use this information to evaluate your use of the websites, to compile reports on the activities on our websites, and to provide us with other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent cookies from being stored by adjusting your browser settings accordingly; however, please note that in this case you may not be able to use all features of our website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

For more information, please see Google's Privacy Policy: https://policies.google.com/privacy

We use DoubleClick by Google on our website, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

DoubleClick uses cookies to display ads that are relevant to you. In this process, a pseudonymous identification number (ID) is assigned to your browser to track which ads have been displayed in your browser and which ads have been clicked. The cookies do not contain any personal information. The use of “DoubleClick” cookies merely enables Google and its partner websites to display ads based on previous visits to our website or other websites on the Internet. The information generated by the cookies is transmitted by Google to a server in the United States for analysis and stored there. Google will only transfer this data to third parties if required by law or within the scope of data processing on its behalf. Under no circumstances will Google combine your data with other data collected by Google.

You can also disable DoubleClick using the following options: https://support.google.com/ads/answer/2662922?hl=de.

For more information about DoubleClick: https://policies.google.com/technologies/ads?hl=de

(d) Typekit by Adobe

We use Typekit by Adobe on our websites, a web analytics service provided by Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland (“Adobe”).

To provide the Typekit service, Adobe may collect information about the fonts provided on our website. This information is used for billing and regulatory compliance purposes and may include personal data (e.g., the IP address).

Adobe uses this information to provide the Typekit service and to diagnose delivery or download issues.

For more information, please see Adobe's Privacy Policy: https://www.adobe.com/de/privacy/policies/typekit.html

(e) Squarespace Analytics

We use Squarespace Analytics on our websites, a web analytics service provided by Squarespace Ireland Ltd, Le Pole House, Ship Street Great, Dublin 8, Ireland (“Squarespace”).

Squarespace Analytics uses "cookies," which are text files stored on your device that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is typically transmitted to a Squarespace server and stored there.

You can prevent cookies from being stored by adjusting your browser settings accordingly; however, please note that in this case you may not be able to use all the features of our website to their full extent.

For more information, please see the Squarespace Analytics Privacy Policy:
https://de.squarespace.com/privacy/

(f) Facebook Custom Audience

We use Facebook Custom Audience on our website, a web analytics service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).

Facebook Custom Audience uses so-called “cookies,” which are text files stored on your device that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is typically transmitted to a Google server in the United States and stored there.

You can find more information about Facebook Custom Audience at:
https://www.facebook.com/business/help/341425252616329

3. How long do we retain your personal data?

We will delete your personal data once the purpose for which it was collected no longer applies and there is no legal requirement to retain it. If deletion is not possible in a particular case, processing will be restricted.

4. What rights do you have as a data subject?

To exercise your rights or withdraw your consent, please contact us using the contact information provided above.

a) You have the right to request information at any time about all personal data we process about you.

b) If your personal data is inaccurate or incomplete, you have the right to have it corrected and supplemented.

c) You may request the deletion of your personal data at any time, provided that we are not legally required or authorized to continue processing your data.

d) If the legal requirements are met, you may request that the processing of your personal data be restricted.

e) You have the right to object to the processing of your data if it is carried out for the purposes of direct marketing or profiling. If the processing is based on a balancing of interests, you may object to the processing by providing reasons based on your particular situation.

f) If data processing is based on your consent or is carried out in connection with a contract, you have the right to receive the personal data you have provided in a structured, commonly used, and machine-readable format, provided that this does not adversely affect the rights and freedoms of others.

g) If we process your personal data based on your consent, you have the right to withdraw that consent at any time, effective for the future. Any processing carried out prior to the withdrawal remains unaffected by the withdrawal.

If you wish to stop the use of tracking cookies for analytics and advertising purposes, you can delete the relevant cookies from your device. Please note that, for technical reasons, you must perform this deletion on each device you used to visit our website and on which you provided your consent.

h) You also have the right at any time to file a complaint with a data protection supervisory authority if you believe that data processing has been carried out in violation of applicable law.

5. In what context do we create automated profiles?

We do not create automated profiles.

6. Data Transfer to the United States

In some cases, personal data is transferred to service providers in the United States (please refer to the relevant note in our Privacy Policy).

The United States does not have the same level of data protection as Europe. In particular, government agencies may access personal data without our or your knowledge. Legal action may not be successful.

The legal basis for such a data transfer to the United States is generally your consent (Art. 49(1)(a) of the GDPR), which you have provided to us via the relevant cookie banner, or the performance of a contract (Art. 49(1)(b) of the GDPR).