Privacy Policy
1. Controller
The controller responsible for the processing of personal data on this website is:
Luciano Benzi e.K.
trading as Trattoria Libau
Libauer Straße 10
10245 Berlin
Germany
Proprietor: Luciano Benzi
2. General Information on Data Processing
We process the personal data of visitors to this website only to the extent necessary to provide a functional website, process enquiries and reservations, and make the functions offered on the website available.
Personal data means any information relating to an identified or identifiable natural person. This includes, in particular, names, contact details, IP addresses, and any information submitted in connection with an enquiry or reservation.
Personal data is processed in accordance with the General Data Protection Regulation, the German Federal Data Protection Act, and the German Telecommunications Digital Services Data Protection Act.
3. Hosting and Provision of the Website
This website is hosted by:
STRATO AG
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When you access this website, the hosting provider may process the following data in particular:
- IP address of the accessing device,date and time of access,
- page or file accessed,
- amount of data transferred,
- website from which the access originated,
- browser used,
- operating system used,
- access status or HTTP status code.
The processing of this data is necessary to provide the website technically and to ensure its stability and security.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable, and uninterrupted operation of this website.
STRATO processes personal data on our behalf. A data processing agreement pursuant to Article 28 GDPR has been concluded for this purpose.
Server log files are stored only for as long as necessary to ensure the secure operation of the website, analyse errors, and detect and prevent attacks. Longer storage takes place only where there is a legal basis for doing so or where the data is required for the establishment, exercise, or defence of legal claims.
4. SSL or TLS Encryption
For security reasons, this website uses SSL or TLS encryption.
You can recognise an encrypted connection by the fact that the address bar in your browser begins with “https://”.
The purpose of the encryption is to protect the data you transmit from unauthorised access by third parties.
5. Cookies and Consent Management
Our website uses cookies and comparable technologies.
Technically necessary cookies and storage technologies are used insofar as they are required to provide basic website functions, ensure secure operation, or save your selection in the privacy or cookie settings.
The storage of technically necessary information on your device, or access to information already stored on your device, is based on Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act.
Where personal data is processed in this context, the processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free, secure, and user-friendly provision of the website and in the storage and documentation of your privacy choices.
Non-essential services and external content, in particular the integrated Bing Maps service, are loaded only after you have given your express consent.
In this case, the legal basis for storing or accessing information on your device is Section 25(1) of the German Telecommunications Digital Services Data Protection Act. The legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future or change your selection via the cookie or privacy settings on this website.
The lawfulness of processing carried out before the withdrawal of consent remains unaffected.
If no consent is given, services and external content requiring consent will not be loaded.
6. Contact by Email or Contact Form
If you contact us by email or via a contact form, we process the data you provide.
This may include, in particular:
- first name and surname,
- email address,
- telephone number,
- content of your message,
- date and time of the enquiry.
The data is processed solely for the purpose of responding to your enquiry and dealing with any necessary follow-up questions.
Where your enquiry relates to the initiation or performance of a contract, the processing is based on Article 6(1)(b) GDPR.
For other general enquiries, the processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of enquiries addressed to us.
Processing based on consent pursuant to Article 6(1)(a) GDPR takes place only where we expressly request your voluntary consent for additional processing.
The transmitted data will be deleted once your enquiry has been fully dealt with and there are no statutory retention obligations, legitimate interests, or other legal grounds requiring continued storage.
7. Reservation Enquiries
If you submit a reservation enquiry via our website, we process the following information in particular:
- first name and surname,
- email address,
- telephone number,
- requested date
- requested time,
- number of persons,
- any additional information included in your message.
The data is processed for the purpose of reviewing, handling, and fulfilling your reservation and for contacting you in the event of questions or changes.
The legal basis is Article 6(1)(b) GDPR, as the processing is necessary for taking steps prior to entering into a contract or for carrying out the reservation.
The data will be deleted once it is no longer required for handling and fulfilling the reservation and provided that there are no statutory retention obligations, legitimate interests, or other legal grounds preventing deletion.
Where information forms part of documents relevant for tax or commercial law purposes, the corresponding statutory retention periods apply.
8. Acknowledgement of the Privacy Policy
Acknowledging the privacy policy does not constitute consent under data protection law.
Where a corresponding confirmation box is used in a contact or reservation form, it serves solely to confirm that the privacy policy has been read and acknowledged.
The processing of data required to handle an enquiry or reservation is based on Article 6(1)(b) or Article 6(1)(f) GDPR.
9. Bing Maps
This website may integrate the Bing Maps mapping service.
For users in the European Economic Area, the provider is:
Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland
Bing Maps is used to display the location of our restaurant and to help you plan your journey.
The mapping service is loaded only after you have given your express consent via the cookie or privacy settings.
When the map is loaded, the following data may be transmitted to Microsoft in particular:
- IP address,
- date and time of access,
- browser and device information,
- operating system used,
- information about the page accessed,
- location data, where you have permitted its use on your device.
Microsoft may store cookies or comparable technologies on your device or access information already stored on your device.
The legal basis for storing or accessing information on your device is Section 25(1) of the German Telecommunications Digital Services Data Protection Act. The legal basis for the subsequent processing of personal data is your consent pursuant to Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future via the cookie or privacy settings on this website.
The mapping service will not be loaded without your consent.
In connection with the use of Microsoft services, personal data may also be processed outside the European Union or the European Economic Area, in particular in the United States.
According to Microsoft, appropriate safeguards pursuant to Articles 44 et seq. GDPR are used for such data transfers. These may include, in particular, the EU-US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.
Further information on the processing of personal data by Microsoft can be found in Microsoft’s privacy statement.
10. External Links
Our website contains links to external websites and platforms, for example social networks, mapping services, and ordering or delivery services.
These are generally simple external links.
As long as you do not click such a link, the mere display of the link does not normally result in personal data being transmitted to the respective provider.
When you click an external link, you leave our website. The respective provider is responsible for any subsequent processing of personal data. The provider’s privacy policy applies.
We have no influence over the nature, scope, purpose, or duration of the processing of personal data by external providers.
11. Recipients of Personal Data
Personal data is disclosed to third parties only where there is a legal basis for doing so or where this is necessary to process your enquiry or fulfil a reservation.
Recipients or processors may include, in particular:
- the hosting provider STRATO AG,
- technical service providers responsible for operating and maintaining the website,
- email service providers,
- other service providers where their involvement is necessary to process an enquiry or reservation.
Personal data is not disclosed for advertising purposes unless you have expressly consented to such disclosure.
12. Storage Period
Unless a more specific storage period is stated in this privacy policy, we store personal data only for as long as is necessary to fulfil the respective processing purpose.
The data is then deleted unless statutory retention obligations, legitimate interests, the establishment or defence of legal claims, or other legally recognised grounds require continued storage.
Where statutory retention obligations apply, the data will be processed for the duration of those periods only for the purposes prescribed by law.
13. Your Rights
Subject to the applicable statutory requirements, you have the following rights in particular:
- right of access pursuant to Article 15 GDPR,
- right to rectification pursuant to Article 16 GDPR,
- right to erasure pursuant to Article 17 GDPR,
- right to restriction of processing pursuant to Article 18 GDPR,
- right to data portability pursuant to Article 20 GDPR,
- right to object pursuant to Article 21 GDPR,
- right to withdraw consent pursuant to Article 7(3) GDPR,
- right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR.
To exercise your rights, you may contact us using the contact details provided in Section 1.
14. Right to Object
Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation.
We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms.
Further processing is also permitted where it is necessary for the establishment, exercise, or defence of legal claims.
15. Withdrawal of Consent
You may withdraw any consent you have given at any time with effect for the future.
Consent may be withdrawn, in particular, by sending an email to the address stated in Section 1 or via the cookie or privacy settings on this website.
The lawfulness of processing carried out up to the time of withdrawal remains unaffected.
16. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority.
The supervisory authority generally responsible for the controller is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany
Telephone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
You may also contact any other data protection supervisory authority responsible for you.
17. Automated Decision-Making and Profiling
No solely automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place.
18. Amendments to this Privacy Policy
We reserve the right to amend this privacy policy where the legal framework, the technical services used, or the processing of personal data on this website changes.
Last updated: August 2026