Casino Restaurant Wittlich
Legal

Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Fatih Karacan, Casino Restaurant Wittlich, Friedrichstraße 4, 54516 Wittlich, Germany
Phone: 06571 6262, Email: info@casino-restaurant-wittlich.de

This business is not legally required to appoint a data protection officer (§ 38 BDSG, the German Federal Data Protection Act, only applies from generally at least 20 people permanently employed in the automated processing of personal data).

2. General information on data processing

We generally only process personal data of our users to the extent necessary to provide a functioning website along with our content and services. The processing of our users' personal data regularly only takes place with the user's consent or where processing is permitted by statutory provisions. The respective legal bases are stated for each individual processing operation.

3. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. An unencrypted connection is not possible; requests made via HTTP are automatically redirected to HTTPS. You can recognise an encrypted connection by the address bar of your browser.

4. Hosting and technical support

This website is technically operated and maintained for us by our service provider D2 Digital (Deniz Basokur & Daniel Gerger GbR, Wittlich). D2 Digital uses its own servers at Hetzner Online GmbH (Germany) to operate the website.

Every time this website is accessed, the server automatically records information in so-called server log files, which your browser automatically transmits. These are:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing device
  • Time of the server request
  • IP address

This data is not combined with data from other sources. The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the smooth and secure operation of our website. For security reasons (e.g. to investigate cases of abuse), the log files are stored for a maximum of 14 days and then automatically deleted.

A data processing agreement under Art. 28 GDPR is in place with D2 Digital.

5. Booking inquiries for function rooms (Festsaal, bowling alley, etc.)

For renting our function rooms (e.g. the Festsaal, our historic bowling alley) for celebrations and events, our website offers the option of submitting a non-binding booking inquiry.

How does this work technically? On our “Book a room” page you choose between the bowling alley and the Casino-Saal. Each of the two buttons opens, in a new tab, a separate request form in a separate booking system at cal.d2-digital.de, operated for us by our service provider D2 Digital (Deniz Basokur & Daniel Gerger GbR, Wittlich) (technically: a Nextcloud instance). Simply opening the “Book a room” page does not yet establish a connection to this booking system; this only happens when you click one of the buttons. Your details are stored there in a database rather than being sent by simple email. As you switch to a technical platform operated by our service provider, you are additionally shown a notice identifying us as the controller and a link to this privacy policy there.

What data is processed? As part of the booking inquiry we collect: name, email address, phone number, the desired date and room, and the number of people. You can also share further requests in an optional comments field. To confirm your email address and as a spam protection measure, you must verify your inquiry via a link in an automatically sent confirmation email; unconfirmed inquiries are not forwarded to us.

Important note: inquiry, not a binding booking. Your booking inquiry is initially only an inquiry. A rental agreement for the function rooms only comes into existence through our separate written or verbal confirmation.

Please do not enter sensitive information in the comments field. Please do not enter any information about your health, religion or other special categories of personal data (Art. 9 GDPR) in the comments field, e.g. regarding allergies, accessibility needs or the occasion of your celebration. We are happy to clarify such details with you by phone. Should you nevertheless voluntarily provide such information, we process it exclusively to prepare for your event on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you may withdraw at any time without formality.

Legal basis. Processing takes place to carry out pre-contractual measures at your request (Art. 6(1)(b) GDPR) as well as, additionally, on the basis of our legitimate interest in the orderly planning of our function rooms (Art. 6(1)(f) GDPR). Name, email address, phone number, date, room and number of people are required so that we can process your inquiry; the comments field is optional.

Technically necessary cookies. The booking system sets a technically necessary cookie to associate your entries during the booking process with a session. This is exempt from consent under § 25(2) TDDDG (the German Telecommunications-Digital-Services-Data-Protection Act).

Recipients. Your data is used by Casino Restaurant Wittlich to process your inquiry. D2 Digital, as operator of the booking system, also has access (as a processor under Art. 28 GDPR). D2 Digital uses the following sub-processors to operate the booking system, with each of whom a data processing agreement is in place: Hetzner Online GmbH (server operation, Germany), netcup GmbH (sending confirmation and notification emails, Germany), and Cloudflare (DNS/name resolution for the booking page only, no other data traffic via this provider). Data is only shared with other third parties, in particular external caterers, decorators or security services, where this is necessary for your specific event; in that case we will inform you separately when you make your inquiry.

Storage period. We store the data of confirmed bookings for 6 months after the booked date, cancellations for 3 months, and rejected or expired inquiries for 30 days.

6. Google Maps

Our website embeds map material from the Google Maps service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is not loaded automatically. When you open our page you initially only see a preview with our name and a grid pattern generated by our own server – no connection to Google. Only once you actively open the map preview by clicking on it is a connection established to Google's servers. In doing so, your IP address is transmitted to Google, and information may be stored on or read from your device. A transfer to the USA cannot be ruled out.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You give this consent by clicking on the map preview. Consent is voluntary; without it, the map remains deactivated and all other content on the page remains available unchanged. You can withdraw your consent at any time by reloading the page.

For data transfers to the USA, Google relies on the European Commission's adequacy decision on the EU-US Data Privacy Framework. Further information on how your data is handled can be found in Google's privacy policy.

7. Fonts, videos and other technical resources

For a consistent display of typefaces, this website embeds the web fonts "Playfair Display" and "Source Sans Pro". These are hosted exclusively on our own server; no connection is made to Google Fonts or other external font providers. All photos on this website are likewise delivered exclusively from our own server. For information on embedded map material, see section 6 (Google Maps).

Videos embedded on the website are likewise delivered exclusively from our own server. No external video platforms (e.g. YouTube, Vimeo) are embedded, so no connection to third-party servers is established when playing them.

Our website also contains simple links (icons) to our profiles on social networks. These are plain links: visiting our website does not transmit any data to those platforms; this only happens once you actively click on such a link and visit the respective platform. The privacy policy of the respective provider then applies.

8. Contact by phone, email or contact form

You can contact us by phone or email. In doing so, the data you provide (e.g. name, contact details, content of your inquiry) is stored and processed by us in order to handle your inquiry. Depending on the content of your inquiry, the legal basis is Art. 6(1)(b) GDPR (initiating a contract, e.g. a reservation) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). We delete the data arising from such contact as soon as it is no longer required to handle your inquiry, unless statutory retention obligations apply.

Contact form. If you write to us using the contact form on our website, we process the information you enter there (name, email address, optionally the occasion and your message) as well as the date and time of submission. The information is forwarded as an email to our mailbox by the server of our service provider D2 Digital (see section 4). For sending, D2 Digital uses an email server operated by netcup GmbH (Germany). Your information is not stored permanently on the web server itself. Only if sending the email fails for technical reasons is the inquiry temporarily stored in a protected log file on the server so that it is not lost. This file is deleted as soon as the inquiry has reached us, and after 30 days at the latest.

To protect against misuse (e.g. automated mass submissions), we limit the number of inquiries per internet connection. For this purpose, only a hash value of your IP address created with a secret key is stored for one hour, not the IP address itself. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting the form against spam and misuse.

Legal basis and withdrawal. The legal basis for processing the information you submit via the contact form is your consent under Art. 6(1)(a) GDPR in conjunction with Art. 7 GDPR. You give this consent by ticking the corresponding box before submitting. Consent is voluntary. We need your name, email address and message in order to respond to your inquiry; without consent you cannot use the form, but you can always reach us by phone or email.

You can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR), for example informally by email to info@casino-restaurant-wittlich.de or by phone on +49 6571 6262. The lawfulness of the processing carried out until the withdrawal remains unaffected. After a withdrawal, we delete the information from your inquiry unless statutory retention obligations prevent this.

Reservations for events. For individual events (currently the “Kadınlar Matinesi” on 13 November 2026) you can reserve a spot using a separate form. In doing so, we process your name, your phone number, the number of people, optionally your note, as well as the date and time of submission. As with the contact form, the information is forwarded as an email to our mailbox by the server of our service provider D2 Digital (see section 4); for sending, D2 Digital uses an email server operated by netcup GmbH (Germany). So that no reservation is lost, each reservation is additionally stored in a protected log file on the server that cannot be accessed from outside. The legal basis is Art. 6(1)(b) GDPR (carrying out your reservation). We need your name and phone number to assign your reservation and to reach you in case of questions or changes; without this information a reservation via the form is not possible, but you can always reserve by phone. The log file is deleted no later than 14 days after the event, and the email in our mailbox as soon as it is no longer required for running the event. The limit on submissions per internet connection described above also applies to this form.

9. Cookies otherwise

Aside from the technically necessary cookie of the booking system mentioned in section 5, this website does not use any cookies for analytics, marketing or tracking purposes, nor any third-party services that evaluate your behaviour on the website. A cookie consent banner is therefore not required.

10. Your rights as a data subject

With respect to your personal data, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent given, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, an informal message to the contact details given in the imprint is sufficient.

11. Right to lodge a complaint with a supervisory authority

Independently of the above, you have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent authority is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate), Prof. Dr. Dieter Kugelmann, Postfach 30 40, 55020 Mainz, Germany, Phone: +49 6131 8920-0, Email: poststelle@datenschutz.rlp.de, Web: www.datenschutz.rlp.de

12. Currency and amendment of this privacy policy

This privacy policy is currently valid and dated October 2026. Further development of our website or changes to statutory requirements may make it necessary to amend this privacy policy. The current version of this privacy policy is always available on this page.