This notice explains how personal data is processed when you visit our website, contact us and plan an event. Personal data is information relating to an identified or identifiable person.
Statistics and your choices
Basic statistics without recognising visitors
On the server, we count how often our public pages are requested. We store only the page, calendar day and total number of requests. For these statistics, no cookies are set, no additional information is read from your device and no IP addresses, browser details, referring addresses or visitor identifiers are stored. The technically necessary processing when a page is requested is described in section 2.
Basic counting helps us plan and improve our content. Where personal connection data is processed to generate these counts, we rely on Article 6(1)(f) GDPR and our interest in providing a website that meets users' needs. Aggregated daily counts are deleted after no more than 401 days during ongoing operation. Counting takes place regardless of your choice concerning detailed statistics.
Optional detailed statistics with Umami
Only with your prior consent do we load Umami via umami.eventlocation-am-wasser.de. We want to understand whether our design works on small and large screens, which browsers and operating systems we need to support, which languages may be useful in future and whether interested visitors can find and use our content.
For this purpose, we process page views, date and time, the referring website (only its origin, without a path or query parameters on entry), up to three preferred browser languages, the browser including its major version and operating system, device class, screen size and pixel density in size bands. We also measure window width in bands and estimate viewing time while the page is visible. This does not establish whether content was actually read or understood. Umami may also derive approximate location information from the IP address.
Umami processes the IP address and browser identifier to associate page views with a session. Derived identifiers are used for this purpose; we treat this information as pseudonymous usage data. According to its functional description, Umami does not store the IP address in the analytics database. This is distinct from technical server logs. We do not collect names, email addresses, form entries or calculator inputs in this process. We do not use our own cross-person customer identifier, session recordings or tracking across other websites. Query parameters and URL fragments are not transmitted.
The legal basis is your consent under Article 6(1)(a) GDPR and, for access to information on your device, section 25(1) TDDDG. Without consent, the Umami script is not loaded. Declining has no disadvantages for using the website. An enabled “Do Not Track” setting in your browser is also respected.
Clearing Media operates the analytics for us as a processor on a server in Germany; a data processing agreement is in place. Authorised employees of the operator and our IT service provider receive access where necessary for their duties. Detailed events are removed after 90 days in a daily deletion routine; associated session data is deleted once no newer events refer to it. Operational deletion and recovery procedures also apply to backups.
You can withdraw your consent at any time via “Statistics settings” in the footer. Further detailed collection then stops. The lawfulness of processing carried out before withdrawal is unaffected. Anonymous aggregated basic counts are not linked to Umami sessions.
1. Controller and contact
The controller is Koliba Restaurant GmbH, represented by managing directors Felix Klatt and Marco Ilmisever.
Sportpromenade 15
12527 Berlin
Telephone: +49 157 82218961
Email: kontakt@richtershorn.de
For questions about data protection and to exercise your rights, you can use these contact details.
2. Website visits and technical delivery
When you access our website, your browser sends technical connection data to the servers providing it. This includes in particular your IP address, the time and target of the request, and information sent by your browser about the browser, operating system and, where applicable, the previously visited page (referrer). Technical processing may also generate response status, data transfer volumes and error messages.
Processing serves to deliver the website, maintain its security and identify and resolve technical errors. The basis is Article 6(1)(f) GDPR. Our legitimate interest is a secure, functional website. Recipients are the hosting and IT service providers used to operate the website, where necessary for their duties.
Connection data is processed for the duration of the technical communication. Any stored error and security logs are retained for as long as needed to resolve errors or investigate and prevent a specific security incident. Longer retention is considered only where legal obligations or the necessary protection of legal claims require it.
3. Cookies and local functions
We do not use advertising trackers. Calculator and checklist entries are not stored in Local Storage or Session Storage. We store your choice concerning optional detailed statistics for up to 180 days in the “richtershorn-statistics” cookie. It contains only your decision, the consent version and its expiry time, without a visitor identifier. Storage serves to respect your choice (section 25(2), no. 2 TDDDG); the associated processing is based on our interest in reliably implementing your privacy decision (Article 6(1)(f) GDPR).
We store your explicitly chosen language for up to 180 days in the “richtershorn_language” cookie. It contains only “de” or “en” and no visitor identifier. Your choice is restored when you return through the homepage; explicit subpage URLs take precedence.
Your settings and entries in local functions are processed in your browser while you use them. Where storing or reading information on your device is strictly necessary for a function you have explicitly requested, section 25(2), no. 2 TDDDG applies. Unnecessary storage or access would generally require your prior consent under section 25(1) TDDDG. Merely visiting the website does not constitute such consent.
4. Cost calculator, checklists and PDF downloads
The cost calculator processes your selections, such as event type, guest numbers, duration and modules, locally in your browser. Editing checklists and generating PDF files also take place locally. The export function does not send these entries to us or to an external PDF service. Loading the software and logo does involve technical requests as described in section 2.
The entries remain available in your browser during use and are not permanently stored on the server by these functions. A downloaded PDF stays on your device until you delete it there. If you send us a PDF yourself, the information about contacting us applies.
Where entries contain personal data, processing serves the event preparation you requested under Article 6(1)(b) GDPR. For contact persons who are not themselves prospective contracting parties, processing is based on Article 6(1)(f) GDPR and the interest in handling event planning. The calculation provides a non-binding estimate; it does not make a binding booking decision or a decision with a comparably significant effect within the meaning of Article 22 GDPR.
5. Contact by form, email or telephone
Your contact form entries stay in your browser until you submit them. Previewing does not send a message. When direct sending is enabled, we transmit your contact and event details, including your wishlist, to our server and then to our contact mailbox over an encrypted SMTP connection. Alternatively, you can open or copy a draft for your email app. To prevent abuse and duplicate messages, we temporarily process your IP address and store keyed verification hashes derived from it, your email address and the enquiry content: rate limits for up to one hour, and delivery status and duplicate checks for up to 24 hours. The protection store contains no plaintext messages or contact addresses. This protection serves our legitimate interest in a secure and reliable contact service (Article 6(1)(f) GDPR). The following information applies to handling your email. After accepting the enquiry, we send an automatic acknowledgement with a copy of your details to the email address you entered.
When you contact us, we process the contact and communication details you provide and information about your enquiry, such as your name, email address, telephone number and event wishes. This serves to answer your enquiry, advise you and, where applicable, prepare and perform a contract.
For your own pre-contractual enquiries or existing contracts, Article 6(1)(b) GDPR is the legal basis. Other enquiries and communication with company contacts are handled under Article 6(1)(f) GDPR; our legitimate interest is in responding appropriately and organising the business relationship. Our email, telecommunications and IT providers may receive the data necessary for technical processing.
Providing information is voluntary. Without the information needed for your enquiry and a means of contacting you, we may be unable to respond. Once processing is complete, we delete the data unless needed for a contract, statutory retention obligations or the establishment, exercise or defence of legal claims.
6. Event planning through Eventcloud
Our “Plan your event” page contains three links to the external planning tool at plan.the-eventcloud.com. Opening the tool takes you away from this website; your browser connects to its servers. Your selections in the local cost calculator or checklists are not automatically transmitted.
If you begin planning for Richtershorn there, we process the contact details and event information you submit to prepare your quote and organise the event. Depending on your entries, this may include your name, email address, telephone number, preferred date, guest count and selected services. Recipients include in particular the provider responsible for technically delivering the Eventcloud planning tool. We remain your data protection contact for event planning initiated by us; moving to the platform does not remove our responsibility.
Article 6(1)(b) GDPR applies to preparing or performing your contract. For communication with contacts of a corporate customer, Article 6(1)(f) GDPR applies, based on the interest in preparing and carrying out the event. Required details are necessary to process the planning; without them, we cannot prepare a corresponding quote. Data is needed for planning and, where applicable, contract performance. The deletion criteria in section 9 apply afterwards.
Please also note the information provided directly in the planning tool about technical data processing there. For questions about your event data or its deletion, please contact us.
7. Images, video and site plan
Images, the venue film and the site plan are delivered through this website's servers. No YouTube or Vimeo players are embedded. Loading the video may already request metadata; playing and seeking request further video segments. This generates technical connection data as described in section 2. The website does not transmit separate playback profiles to an external video analytics service.
8. Google Maps and other external links
The address in the footer links to Google Maps. No Google map is embedded in the website. Opening the link connects you to the external mapping service. It receives in particular data needed to establish the connection, such as your IP address. Any further data processing also depends on your settings there and whether you are signed in. The respective provider's privacy information applies to that use.
The same applies when opening other external websites through links. Simply displaying these links does not embed their content as external services on our page.
9. Retention and deletion
The purposes and deletion criteria stated for each processing activity apply. After event planning is complete, further necessity depends in particular on whether an event still needs to take place, an invoice needs handling or a specific legal claim needs resolving. Business and accounting records subject to statutory retention are stored for the applicable commercial or tax-law period under Article 6(1)(c) GDPR. Article 6(1)(f) GDPR applies to the necessary protection of legal claims. Data is deleted once these grounds no longer apply.
10. Your rights
Subject to the applicable legal conditions, you have the following rights:
- Access to your personal data and a copy under Article 15 GDPR;
- Rectification of inaccurate or completion of incomplete data under Article 16 GDPR;
- Erasure under Article 17 GDPR and restriction of processing under Article 18 GDPR;
- Information about the recipients of a notification of rectification, erasure or restriction under Article 19 GDPR;
- Data portability under Article 20 GDPR, where automated processing is based on your consent or a contract.
Where processing is based on your consent, you can withdraw it at any time with future effect. The lawfulness of processing before withdrawal is unaffected. To exercise your rights, simply contact us using the details above.
11. Complaints to a supervisory authority
Under Article 77 GDPR, you can lodge a complaint with a data protection supervisory authority, particularly in the member state of your habitual residence, place of work or the alleged infringement. The following authority is particularly relevant to our company:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
www.datenschutz-berlin.de
mailbox@datenschutz-berlin.de