Privacy policy

Protecting your personal data is important to us. Below we explain which data we process on this website, for what purpose and on what legal basis — as well as what rights you have.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Ghandi Said Al Hassan
Das Alt-Berlin
Kaufhof 2
38440 Wolfsburg
Phone: 05361 – 13558
Email: alt-berlin@wolfsburg.de

Further details can be found in our legal notice.

2. General information

Personal data is any information relating to an identified or identifiable natural person. We process personal data only to the extent necessary for operating this website, handling your enquiries or due to legal obligations.

Where we obtain your consent for processing operations, the legal basis is Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time with effect for the future.

3. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you access our pages, technically necessary connection data (server log files) is processed server-side, in particular:

  • IP address of the requesting device
  • date and time of access
  • page or file accessed
  • browser type and version as well as operating system
  • referrer URL (previously visited page)

Processing takes place to provide and securely operate the website. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in a stable and secure web presence).

We have entered into a data processing agreement (DPA) with Hetzner Online GmbH pursuant to Art. 28 GDPR. This ensures that the provider processes our website visitors’ personal data only according to our instructions and in strict compliance with the GDPR. No transfer of data to third countries (such as the USA) takes place through hosting.

4. SSL/TLS encryption

For security reasons, this website uses SSL or TLS encryption. You can tell whether a connection is encrypted by the “https://” display in your browser’s address bar.

5. Cookies, consent management and local storage

We use cookies and similar technologies (e.g. local storage) to make our website usable and — only with your consent — to enable statistics and external content.

On your first visit, a notice about cookie settings appears. There you can choose whether to allow statistics (Umami) and external media (Google Maps) in addition to technically necessary functions. We store your choice locally in the browser under the key alt-berlin-cookie-consent, so that the notice does not appear on every visit and your settings can be applied.

Necessary storage: The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in a functional website and documentation of your consent).

Optional categories: Statistics and external media are only activated after your explicit consent (Art. 6 (1) lit. a GDPR). You can adjust or withdraw your choice at any time via the “Cookie settings” link in the footer.

6. Web analytics with self-hosted Umami

If you allow “Statistics” in the cookie settings, we use a self-hosted instance of Umami to anonymously analyse visitor traffic. Umami is open-source analytics software that we operate on our own infrastructure — not the Umami cloud service.

Umami does not create personal user profiles and does not use cookies for recognition. Among other things, visited pages, referrer source, browser type, operating system and approximate location (at country level) are recorded. The IP address is not stored in full.

The legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR. Without consent, the analytics script is not loaded.

7. Google Maps

On the contact page we may embed an interactive map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA).

The map is only loaded when you allow “External media” in the cookie settings or activate the map individually. Data — in particular your IP address and possibly location data — may be transmitted to Google and processed on servers in the EU or USA.

The legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR. Further information can be found in Google’s privacy policy: https://policies.google.com/privacy.

Alternatively, you can access our location (Kaufhof 2, 38440 Wolfsburg) via the link to Google Maps outside the embedded map. Google’s privacy terms apply in that case.

8. Reservation form and email delivery (Resend)

When you use our reservation form, we process the data you enter to handle your request. This may include:

  • name
  • email address
  • phone number (optional)
  • desired date and time
  • number of guests
  • meal preference and message (optional)

Transmission takes place encrypted via our website. To deliver the reservation request by email, we use the service Resend (Resend, Inc., USA). Your form data is transmitted to Resend to send an email to us and an automatic acknowledgement to the email address you provided. After we review your request, you will receive a further email with the final confirmation or decline of your reservation. We have a data processing agreement with Resend pursuant to Art. 28 GDPR.

The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual measures at your request) as well as your consent via the privacy checkbox in the form (Art. 6 (1) lit. a GDPR).

Data is deleted once the reservation request has been fully processed and no statutory retention obligations apply.

9. Contact by phone or email

If you contact us by phone or email, we process the data you provide (e.g. name, contact details, content of the enquiry) to handle your request. The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual or contractual communication) or Art. 6 (1) lit. f GDPR (legitimate interest in responding to enquiries).

10. External links

Our website contains links to external websites (e.g. Google Maps). The respective providers are solely responsible for content and privacy on those pages. When leaving our website via an external link, personal data may be processed by the destination provider.

11. Storage duration

We store personal data only as long as necessary for the respective purpose or statutory retention periods apply. Technical server log data at hosting is generally retained by our hosting provider for a limited period (often 7 to 14 days) and then automatically deleted or anonymised.

12. Your rights

You have the following rights regarding your personal data:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on Art. 6 (1) lit. f GDPR (Art. 21 GDPR)
  • Withdrawal of consent granted (Art. 7 (3) GDPR) with effect for the future

To exercise your rights, simply send a message to alt-berlin@wolfsburg.de or call 05361 – 13558.

13. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement.

The supervisory authority responsible for Lower Saxony is the State Commissioner for Data Protection (LfD Niedersachsen), Prinzenstraße 5, 30159 Hannover, www.lfd.niedersachsen.de.

14. No automated decision-making

We do not use your data for automated decision-making or profiling within the meaning of Art. 22 GDPR.

15. Changes to this privacy policy

We reserve the right to adapt this privacy policy when our website, services used or the legal situation change. The current version is always available on this page.

Last updated: June 2026