Privacy policy

1. Data controller

Restaurant Pantheon
Ilias Christoforidis
Heisinger Straße 393
45259 Essen
Germany

Phone: 0201 89457171
Email: pantheon-essen@outlook.de

2. Visiting our website and Shopify

Our website provides information about our restaurant. We do not offer online ordering, payments or reservations through this website.

We use Shopify to operate our website. For visitors in the European Economic Area, processing is initially carried out by Shopify International Limited, Ireland. When you access our website, technical data is processed, including your IP address, browser and device information, pages visited, and the date and time of access.

This processing enables us to deliver the website, maintain its technical functionality, ensure security and resolve technical issues. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.

Where Shopify processes data on our behalf, Shopify’s data processing agreements apply.

Even where hosting takes place within the EU, Shopify and its service providers may process data outside the European Economic Area. Shopify describes adequacy decisions and standard contractual clauses, among other mechanisms, as legal bases for these transfers. Details and information about the relevant safeguards are available at:
https://www.shopify.com/legal/dpa

Further information about Shopify:
https://www.shopify.com/de/legal/privacy/consumers

Shopify Privacy Portal:
https://privacy.shopify.com/de

Shopify Network Intelligence is disabled for our website.

3. Cookies and consent

Shopify uses cookies and similar technologies. Strictly necessary technologies are used, in particular, to provide and secure the website and to store your privacy preferences. Where the applicable conditions are met, access to your device is based on Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Subsequent processing of personal data is based on Article 6(1)(f) GDPR.

Non-essential technologies, particularly those used for analytics, require consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR. We use Shopify’s cookie banner for this purpose. Rejecting optional cookies does not prevent basic access to our website.

You may withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Information about Shopify cookies, their purposes and lifetimes:
https://www.shopify.com/de/legal/cookies

4. Contact by email or telephone

When you contact us, we process the contact details you provide and the content of your enquiry in order to respond to your request.

For enquiries relating to a contract, the legal basis is Article 6(1)(b) GDPR. We process other enquiries on the basis of Article 6(1)(f) GDPR; our legitimate interest is responding to your message.

We use Microsoft Outlook for our email account. Microsoft processes the data necessary to transmit emails and provide the mailbox service. Further information is available at:
https://privacy.microsoft.com/de-de/privacystatement

5. Google Maps link

Our website contains an external link to Google Maps. No Google map is embedded on our website. The presence of this link alone does not establish a connection to Google Maps when you visit our website. The external service is opened only when you click the link.

Google’s privacy policy applies to data processing on that service:
https://policies.google.com/privacy?hl=de

6. Retention periods

We retain personal data only for as long as necessary for the relevant purpose. For technical data, retention periods depend in particular on operational, troubleshooting and security requirements. Contact enquiries are deleted once they have been fully dealt with, provided there are no statutory retention obligations or legitimate grounds for keeping them longer.

Cookie lifetimes depend on the individual cookie. Details are provided in Shopify’s cookie policy linked above.

7. Your rights

Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability.

Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You may withdraw consent at any time with effect for the future.

To exercise your rights, please contact us using the details above.

You may lodge a complaint with a data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia:
https://www.ldi.nrw.de

Providing data for a contact enquiry is voluntary. However, without the information necessary to deal with your enquiry, we may be unable to respond.