Privacy policy

zwölf87 GmbH, Bachstraße 57, 88214 Ravensburg
Phone +49 751 95877636, email info@zwoelf87.de
Represented by the managing directors Kevin Schupp and Ruben Laarmann.

The website is hosted by united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, on servers in Germany. When you visit, the server automatically stores access data: the page requested, date and time, amount of data transferred, browser, operating system and IP address. We need this data to operate the website securely (Art. 6(1)(f) GDPR). It is not combined with other data and is deleted after 14 days at the latest. We have a data processing agreement with united-domains.

On its own, this website sets no cookies and loads neither Google Fonts nor Google Maps. The exceptions for third-party content are the Gastronovi reservation and gift voucher window and the Calendly booking calendar, which only loads after you click (both see below). The location map is an image made from OpenStreetMap data and stored on our server; no connection to OpenStreetMap is established.

We only load services that set cookies or send data to third parties if you agree in the notice on your first visit (Art. 6(1)(a) GDPR, § 25(1) TDDDG). We store your decision in your browser. You can withdraw or change your consent at any time via the cookie settings.

If you consent, we use Google Tag Manager and Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This lets us see which pages are visited and what works well, for example how often an enquiry is sent, a table is reserved or “Book a room” is clicked. For this, Google Analytics sets cookies and processes information about your device, your browser, the pages you visit and your approximate location; IP addresses are not stored in the EU. We only receive aggregated reports, no names.

Data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework. Without your consent, Google Analytics is not loaded; you can withdraw your consent at any time via the cookie settings. More in Google’s privacy policy: policies.google.com/privacy.

If you consent under “Marketing”, we use Google Tag Manager to load Google Ads conversion tracking (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and the Meta Pixel (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland). This lets us see whether someone came via one of our ads on Google, Instagram or Facebook and then, for example, sent an enquiry or searched for a room. For this, cookies are set and information about your device, your browser and your actions on our website is transmitted to Google and Meta; if you are logged in there, the providers can link this to your account.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time via the cookie settings in the footer of the page. Data may be transferred to the USA; Google and Meta are certified under the EU-US Data Privacy Framework. For the Meta Pixel, we are joint controllers with Meta (Art. 26 GDPR); Meta provides the corresponding agreement. More in the privacy notices of Google and Meta.

If you write to us using a form (contact, event or package enquiry) or by email, we process the details you enter, for example name, email address, phone number, occasion, preferred date, number of guests and your message. We use them to reply to you and, where applicable, to prepare a quote (Art. 6(1)(b) GDPR; for general questions, our legitimate interest in replying to you, Art. 6(1)(f) GDPR).

The forms send your details to our automation platform n8n and from there to our Microsoft 365 mailbox (more on this below). n8n runs on a server that RepoCloud, LLC (USA, repocloud.io) operates for us. RepoCloud does not state a binding server location. RepoCloud processes the data only on our behalf (data processing under Art. 28 GDPR). As RepoCloud is a company in the USA, data may be transferred to the USA in the process (Art. 44 et seq. GDPR).

We delete the data once the enquiry has been dealt with, unless statutory retention periods require otherwise. If a contract is concluded, the retention periods under commercial and tax law of up to ten years apply.

The address our forms send to (ns1w821u.rpcd.app) runs through the Cloudflare network (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA; contact in Germany: Cloudflare Germany GmbH, Rosenheimer Straße 143C, 81671 Munich). RepoCloud uses Cloudflare so that your details reach our n8n server securely and reliably and the server is protected against attacks and overload. In the process, Cloudflare processes your IP address, technical information about the connection and your browser, and the form data, which it forwards in encrypted form.

The legal basis is our legitimate interest in secure transmission (Art. 6(1)(f) GDPR) and, for the content of your enquiry, steps prior to entering into a contract (Art. 6(1)(b) GDPR). Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework. More in Cloudflare’s privacy policy.

Our mailboxes (for example info@zwoelf87.de and hotel@zwoelf87.de) are hosted on Microsoft 365 by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Your emails to us and the enquiries from our forms arrive there, and we reply to you from there. Microsoft processes the data on our behalf (Art. 28 GDPR). Data may be transferred to Microsoft Corporation in the USA; Microsoft is certified under the EU-US Data Privacy Framework. More in Microsoft’s privacy statement.

You can book an initial phone call or a visit via Calendly (Calendly LLC, Atlanta, USA). Links to Calendly take you to their website, where Calendly’s privacy notices apply.

In the price calculator and the enquiry form the calendar is also embedded, using a two-click solution: until you click “Pick a time”, no connection to Calendly is made. Only when you click does the calendar load from Calendly’s servers (assets.calendly.com, calendly.com). Calendly then receives your IP address and information about your browser, sets its own cookies and may show its own cookie notice. If you have already entered your name and email address in the form, we pass them to the calendar to pre-fill it. The legal basis for loading it is your consent given by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

Calendly transmits your name, email address, your answers in the booking form and the chosen time to us. The transfer to the USA is based on the EU-US Data Privacy Framework, under which Calendly is certified. The legal basis for arranging the appointment is Art. 6(1)(b) GDPR.

You book rooms through the RoomRaccoon booking engine (RoomRaccoon B.V., Breda, Netherlands) at booking.roomraccoon.de. When you click “Book a room”, you switch to their website; your search details such as arrival and departure dates are passed on in the address. RoomRaccoon processes your booking data on our behalf to fulfil the accommodation contract (Art. 6(1)(b) GDPR). More in RoomRaccoon’s privacy notices.

You reserve tables and buy gift vouchers through the system of gastronovi GmbH, Bremen. It is embedded as a window on the “Restaurant” and “Book a table” pages and is loaded from Gastronovi’s servers (services.gastronovi.com). In the process, Gastronovi receives technically necessary data such as your IP address and information about your browser; the window also loads a Gastronovi statistics script (thirdeye.gastronovi.com). The gift voucher window only loads when you click a gift voucher button.

We load the reservation window together with the page, because on these pages you want to make a reservation and the window is technically needed for that. The legal basis is Art. 6(1)(b) GDPR (steps towards the reservation you asked for) and Art. 6(1)(f) GDPR: our legitimate interest is to let you book directly on our website. The statistics script (thirdeye.gastronovi.com) is loaded by Gastronovi itself inside the window; we have no influence over it. If you’d rather avoid it, book by phone or email.

What you enter in the window, i.e. your name, contact details and reservation request, is collected by Gastronovi and passed on to us to fulfil the reservation (Art. 6(1)(b) GDPR). When you buy a gift voucher, billing and payment details are added; payment is handled by the payment service provider Adyen N.V., Amsterdam. More in Gastronovi’s privacy notices.

For our own events and cooking classes, you book directly on our website. You provide your name, email address, phone number, the number of places and, if you wish, allergies or a company for the invoice. The details go to our automation platform n8n (operated by RepoCloud, see above), which stores the booking, sends you the confirmation and, for payment in advance, the bank details, reminds you of the payment and the date, and sends us the guest list. The emails are sent via our Microsoft 365 mailbox. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR); we only process information about allergies because you tell us about it for your meal (Art. 9(2)(a) GDPR). After the date, we delete the booking as soon as no statutory retention periods require otherwise.

For the newsletter we use Brevo (Sendinblue SAS, Paris, France). When you sign up, your email address, the date and time of sign-up and your IP address are transmitted to Brevo. You receive a confirmation email (double opt-in); you are only subscribed once you click the link in it. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link in every issue.

Brevo analyses whether emails are opened and links are clicked. When you unsubscribe, we remove your address from the mailing list. We have a data processing agreement with Brevo. More in Brevo’s privacy policy.

Applications reach our mailbox by email. We process the documents to decide on an employment relationship (§ 26 BDSG, German Federal Data Protection Act; Art. 6(1)(b) GDPR) and delete them no later than six months after the end of the application process, unless you agree to longer storage.

The website contains simple links to our Instagram profile (Meta Platforms Ireland Ltd.) and to our page on Booking.com (Booking.com B.V., Amsterdam). No data is transmitted to these providers when our website loads. Only when you click do you leave our website, and the privacy notices of the respective provider then apply. The same applies to the route planning links and the addresses shown with our dates, which open your maps app or Google Maps, and to the links to our reviews on Google and Bridebook.

Menus and sales brochures are stored as PDFs on our server. Opening them only generates the access data described in section 2.

You have the right to access the data we hold about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future. To do so, write to info@zwoelf87.de.

You can also lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart.

This website transmits all content in encrypted form (HTTPS). You can tell by the padlock icon in your browser’s address bar.

We update this policy when the website or the legal situation changes. The version published here at any given time applies.