Privacy policy

The controller responsible for data processing on this website is:

Hans/Umhauer GbR — Zum Schlössla, Vacher Str. 15, 90766 Fürth

Phone: 0911 / 7360100 · E-Mail: info@zumschloessla.com

This website is hosted by an external service provider (processor): ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Personal data collected on this website is stored on the provider’s servers in Germany. Hosting serves the purpose of providing the website securely and reliably (Art. 6 (1)(f) GDPR — legitimate interest). A data processing agreement (Art. 28 GDPR) is in place with the provider.

When you access the website, the provider automatically collects and stores information in server log files that your browser transmits: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. The legal basis is Art. 6 (1)(f) GDPR; we have a legitimate interest in the technically error-free presentation and optimisation of our website.

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in the address bar of your browser.

Without your consent this website only uses technically necessary cookies. To obtain and document consent for content requiring consent (see sections 7 to 9), we use a self-hosted consent tool (vanilla-cookieconsent). It stores your choice locally in your browser in a first-party cookie (“cc_cookie”, including time and consent ID); no data is transferred to third parties. Legal basis for storing/reading necessary information is § 25 (2) TDDDG or Art. 6 (1)(f) GDPR; for consent-based content Art. 6 (1)(a) GDPR / § 25 (1) TDDDG. You can change or withdraw your choice at any time with effect for the future via “Cookie settings” in the footer.

If you contact us or reserve a table via the website, we process the data you provide (e.g. name, contact details, date/time, number of guests, message) solely to process your enquiry and for possible follow-up questions. The legal basis is Art. 6 (1)(b) GDPR (pre-contractual/contractual measures) or Art. 6 (1)(f) GDPR (effective handling of enquiries). Reservation processing (incl. confirmation and status emails) runs entirely on our web hosting provider’s servers (see section 2); reservation data is stored there and automatically deleted 90 days after the reservation date. The status link contained in our emails is personal — please do not share it.

On the homepage we can display recent posts from our Instagram channel (“Fresh from the Schlössla”). This content is only loaded after your explicit consent (category “Instagram”). When enabled, your browser establishes a direct connection to the servers of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland; personal data (incl. your IP address) may be transferred, potentially also to servers in the USA. We have no influence on the scope of this data processing. Legal basis is your consent, Art. 6 (1)(a) GDPR / § 25 (1) TDDDG, which you can withdraw at any time. Without consent we display a curated preview and load nothing from Instagram. Further information: Meta’s privacy policy at https://privacycenter.instagram.com/policy.

The fonts used are hosted locally on our server; no connection to external font providers (e.g. Google Fonts) is established. The beer-garden weather forecast uses data from Open-Meteo and is retrieved without transferring your personal data. The 360° tour is loaded entirely from our own server (on the restaurant page only once you start it); no cookies are set and no data is transferred to third parties. If you switch on motion control (moving your phone), your device may ask for permission; the motion data is processed only locally in your browser and is not transmitted to us. Maps do not load automatically: on the contact page we first show a locally hosted map image; only when you click “Load map” is the interactive map embedded from Google Maps (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) — personal data (incl. your IP address) may then be transferred to Google, potentially also to servers in the USA. The legal basis is your consent (Art. 6 (1)(a) GDPR / § 25 (1) TDDDG), given by that click and valid for the current session. In addition we link to Google Maps / Apple Maps; data is transferred there only when you actively click a link.

Google reviews: the rating, the number of reviews and a selection of review texts shown on our pages are retrieved by our server from the Google Places API and cached there. Your browser does not connect to Google for this; no personal data of visitors is transmitted.

If you enable the “Statistics” category in the cookie notice, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies (e.g. “_ga”, lifetime up to 2 years) and similar technologies to evaluate your use of the website (pages visited, dwell time, source of the visit, approximate location, device). Google Analytics 4 processes IP addresses only in truncated form and does not store them. The information is transferred to Google servers, possibly in the USA; Google LLC is certified under the EU-US Data Privacy Framework. We have disabled Google Signals and personalised advertising features. The legal basis is your consent (Art. 6 (1)(a) GDPR / § 25 (1) TDDDG), which you can withdraw at any time via “Cookie settings” in the footer; the website then loads nothing from Google and deletes the cookies. We have concluded a data processing agreement with Google. Data is deleted after 14 months. Without consent nothing is loaded and nothing is counted. Further information: https://policies.google.com/privacy and https://support.google.com/analytics/answer/6004245.

When you purchase a gift voucher, we process the data you provide (name, address, email, phone, and optionally the recipient’s name and message) to issue and deliver the voucher and to handle payment. Payment is made on account by bank transfer — no external payment service provider is involved. The legal basis is Art. 6 (1)(b) GDPR (performance of a contract).

Unless a more specific storage period is stated above, your personal data remains with us until the purpose for its processing no longer applies. If you assert a justified request for erasure or withdraw your consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. tax or commercial retention periods); in the latter case, deletion takes place after these reasons cease to apply.

You have the right at any time to obtain information about your stored data (Art. 15 GDPR) and to request its rectification (Art. 16), erasure (Art. 17) or restriction of processing (Art. 18), as well as the right to data portability (Art. 20). Where processing is based on Art. 6 (1)(e) or (f), you have a right to object (Art. 21 GDPR). Consent granted can be withdrawn at any time with effect for the future. To exercise these rights, an informal message to the contact details above is sufficient.

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, workplace or the place of the alleged infringement. For our registered office, the competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach.

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. Last updated: 21 October 2026.