Reservierung:
04131 2206992

The Privacy Policy

General note and mandatory information

Designation of the responsible body

The data processing controller on this website is:

BOA Restaurant
Hai Anh Nguyen
Schröderstraße 11
21335 Lüneburg

The controller decides alone or jointly with others on the purposes and means of processing personal data (e.g. names, contact details, etc.).

Revocation of your consent to the processing of data

Only with your express consent are some data processing operations possible. A revocation of your already given consent is possible at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing carried out up to the revocation remains unaffected by the revocation.

Right of appeal to the competent supervisory authority

As a data subject, you have the right to complain to the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority with regard to data protection issues is the State Data Protection Commissioner of the federal state in which our company is located. The following link provides a list of the data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data, which we process automatically on the basis of your consent or in fulfilment of a contract, handed over to you or to third parties. The data will be provided in a machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent that it is technically feasible.

Right of access, rectification, blocking, erasure

Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, the origin of the data, its recipients and the purpose of the data processing and, if applicable, a right to correct, block or delete this data. In this regard and also for further questions on the subject of personal data, you can contact us at any time using the contact options listed in the imprint.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the “https://” address line of your browser and the lock symbol in the browser line.

Server log files

In server log files, the provider of the website automatically collects and stores information that your browser automatically sends to us. These are:

• Visited page on our domain
• Date and time of the server request
• Browser type and version
• Used operating system
• Referrer URL
• Host name of the accessing computer
• IP address

This data is not merged with other data sources. The basis for data processing is Art. 6 para. 1 letter b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Cookies

Our website uses cookies. These are small text files that your web browser stores on your end device. Cookies help us to make our offer more user-friendly, effective and safer.

Some cookies are “session cookies.” Such cookies are deleted automatically after your browser session ends. On the other hand, other cookies remain on your terminal device until you delete them yourself. Such cookies help us to recognize you when you return to our website.

With a modern web browser you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured so that cookies are deleted automatically when the program is closed. Disabling cookies may result in limited functionality of our website.

The setting of cookies, which are necessary for the exercise of electronic communication processes or the provision of certain functions desired by you (e.g. shopping basket), is based on Art. 6 Para. 1 lit. f DSGVO. As operators of this website, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), these will be treated separately in this data protection declaration.

Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses “cookies.” These are small text files that your web browser stores on your end device and enable an analysis of website use. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. Server location is usually the USA.

The setting of Google Analytics cookies is based on Art. 6 para. 1 lit. f DSGVO. As the operator of this website, we have a legitimate interest in analysing user behaviour in order to optimise our website and, where applicable, advertising.

IP anonymization

We use Google Analytics in conjunction with the IP anonymisation function. It ensures that Google truncates your IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area before sending it to the USA. There may be exceptional cases in which Google transfers the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activities and to provide us with further services associated with the use of the website and the Internet. The IP address transmitted by Google Analytics is not merged with other Google data.

Browser Plugin

The setting of cookies by your web browser can be prevented. However, some functions of our website could be restricted as a result. You can also prevent the collection of data regarding your website usage, including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plugin accessible via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Opposition to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent the collection of your information on future visits to our site: Disable Google Analytics.

Details on the handling of user data at Google Analytics can be found in the privacy policy of Google: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

To fully comply with the legal data protection requirements, we have concluded a contract with Google for order processing.

Demographic characteristics in Google Analytics

Our website uses the “demographic features” function of Google Analytics. It can be used to generate reports that contain information about the age, gender and interests of visitors to the site. This data is derived from interest-based advertising by Google and from visitor data from third parties. It is not possible to assign the data to a specific person. You can disable this feature at any time. You can do this through the ad settings in your Google Account or by generally prohibiting the collection of your data by Google Analytics, as explained in the “Opting out of data collection” section.

Google AdSense

Our website uses Google AdSense. Provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense serves the integration of advertisements and sets cookies. Cookies are small text files that your web browser stores on your end device to analyze the use of the website. Google AdSense also uses web beacons. Web beacons are invisible graphics that enable an analysis of the visitor traffic on our website.

Information generated by cookies and web beacons is transferred to Google’s servers and stored there. Server location is the USA. Google may pass on this information to contractual partners. However, Google will not merge your IP address with other data stored by you.

The storage of AdSense cookies is based on Art. 6 para. 1 letter f DSGVO. As website operators, we have a legitimate interest in analysing user behaviour in order to optimise our website and our advertising.

With a modern web browser you can monitor, restrict and prevent the setting of cookies. Disabling cookies may result in limited functionality of our website. By using our website, you agree to the processing of the data collected about you by Google in the manner described above as well as the aforementioned purpose.

Google AdWords and Google Conversion Tracking

Our website uses Google AdWords. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.

AdWords is an online advertising program. Within the online advertising program we work with conversion tracking. After a click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that your web browser stores on your device. Google AdWords cookies expire after 30 days and are not used to personally identify users. The cookie enables Google and us to recognize that you have clicked on an ad and been directed to our site.

Every Google AdWords customer receives a different cookie. The cookies cannot be tracked through websites of AdWords customers. Conversion cookies are used to generate conversion statistics for AdWords customers who use conversion tracking. AdWords customers learn how many users clicked on their ad and were redirected to pages with conversion tracking tags. However, AdWords customers do not receive any information that allows for personal identification of users. If you do not want to participate in tracking, you can opt out of using the service. In this case, the conversion cookie must be deactivated in the user settings of the browser. In this way, no inclusion in the conversion tracking statistics takes place.

The storage of “conversion cookies” is based on Art. 6 para. 1 lit. f DSGVO. As website operators, we have a legitimate interest in analysing user behaviour in order to optimise our website and our advertising.

Details about Google AdWords and Google conversion tracking can be found in the Google Privacy Policy: https://www.google.de/policies/privacy/.

With a modern web browser you can monitor, restrict or prevent the setting of cookies. Disabling cookies may result in limited functionality of our website.

Google Web Fonts

Our website uses Web Fonts from Google. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

By using these web fonts it is possible to present you with the presentation of our website that we desire, regardless of which fonts are available to you locally. This is done by retrieving the Google Web Fonts from a Google server in the USA and the associated transfer of your data to Google. This is your IP address and which page you have visited on our website. The use of Google Web Fonts is based on Art. 6 para. 1 lit. f DSGVO. As the operator of this website, we have a legitimate interest in the optimal presentation and transmission of our web presence.

The company Google is certified for the us-European data protection agreement “Privacy Shield”. This data protection agreement is designed to ensure compliance with the level of data protection applicable in the EU.

Details about Google Web Fonts can be found at: https://www.google.com/fonts#AboutPlace:about and further information in the privacy policy of Google: https://policies.google.com/privacy/partners?hl=de

Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an attractive presentation of our online offers and easy findability of the locations we have indicated on the website. This represents a legitimate interest in the sense of Art. 6 Para. 1 lit. f DSGVO.

More information on the handling of user data can be found in the Google privacy policy: https://www.google.de/intl/de/policies/privacy/.

Source: Privacy Configurator from mein-datenschutzbeauftragter.de

Contact form

Data transmitted via the contact form will be stored including your contact data in order to be able to process your enquiry or to be available for follow-up questions. These data will not be passed on without your consent.

The data entered in the contact form will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). A revocation of your already given consent is possible at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing operations carried out up to revocation remains unaffected by revocation.

Data transmitted via the contact form will remain with us until you request us to delete it, revoke your consent to its storage or until there is no longer any need to store the data. Mandatory legal provisions – in particular retention periods – remain unaffected.

Facebook Pixel

This website uses the visitor action pixel of Facebook to measure conversion. This service is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

This allows the behaviour of site visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook Ads to be evaluated for statistical and market research purposes and future advertising campaigns to be optimised.

The collected data is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, according to the Facebook-Datenverwendungsrichtlinie can use. This allows Facebook to allow advertisements to be placed on pages within Facebook and outside of Facebook. This use of the data cannot be influenced by us as a site operator.

The use of Facebook pixels is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in effective advertising measures, including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

In the privacy policy of Facebook you will find further information on the protection of your privacy: https://de-de.facebook.com/about/privacy/.

You can also use the remarketing feature “Custom Audiences” in the Advertising Settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen disable. You must be logged in to Facebook to do this.

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

Instagram Privacy Policy

We have incorporated Instagram features on our website. Instagram is a social media platform of the company Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Instagram has been a subsidiary of Facebook Inc. since 2012 and is one of the Facebook products. Embedding Instagram content on our website is called embedding. This allows us to show you content such as buttons, photos or videos from Instagram directly on our website. When you call up web pages on our website that have an Instagram function integrated, data is transmitted to Instagram, stored and processed. Instagram uses the same systems and technologies as Facebook. Your data is thus processed across all Facebook companies.

In the following, we want to give you a more detailed insight into why Instagram collects data, what kind of data it is and how you can largely control the data processing. Since Instagram is part of Facebook Inc., we draw our information on the one hand from the Instagram policies, but on the other hand also from the Facebook data policies themselves.

What is Instagram?

Instagram is one of the most popular social media networks in the world. Instagram combines the advantages of a blog with the advantages of audiovisual platforms like YouTube or Vimeo. You can upload photos and short videos on “Insta” (as many of the users casually call the platform), edit them with various filters and also distribute them on other social networks. And if you don’t want to be active yourself, you can just follow other interesting users.

Why do we use Instagram on our website?

Instagram is that social media platform that really went through the roof in the last few years. And of course, we have also responded to this boom. We want you to feel as comfortable as possible on our website. That’s why a varied preparation of our content is a matter of course for us. Through the embedded Instagram features, we can enrich our content with helpful, funny or exciting content from the Instagram world. Since Instagram is a subsidiary of Facebook, the data collected can also serve us for personalized advertising on Facebook. This way, only people who are really interested in our products or services receive our ads.

Instagram also uses the collected data for measurement and analysis purposes. We get aggregate statistics and thus more insight about your preferences and interests. It is important to note that these reports do not identify you personally.

What data is stored by Instagram?

When you come across one of our pages that have Instagram features (such as Instagram images or plug-ins) built in, your browser automatically connects to Instagram’s servers. In the process, data is sent to Instagram, stored and processed. And this is regardless of whether you have an Instagram account or not. This includes information about our website, about your computer, about purchases made, about advertisements you see and how you use our offer. Furthermore, the date and time of your interaction with Instagram is also stored. If you have an Instagram account or are logged in, Instagram stores significantly more data about you.

Facebook distinguishes between customer data and event data. We assume that this is exactly the case with Instagram. Customer data is, for example, name, address, phone number and IP address. It is important to mention that this customer data is only transmitted to Instagram if you have been “hashed” beforehand. Hashing means that a data record is transformed into a string. This allows you to encrypt the contact data. In addition, the “event data” mentioned above is also transmitted. By “event data” Facebook – and consequently Instagram – understands data about your user behavior. It may also happen that contact data is combined with event data. The collected contact data is matched with the data that Instagram already has from you.

Via small text files (cookies), which are usually set in your browser, the collected data is transmitted to Facebook. Depending on the Instagram functions used and whether you yourself have an Instagram account, different amounts of data are stored.

We assume that Instagram’s data processing works the same way as Facebook’s. This means that if you have an Instagram account or have visited www.instagram.com, Instagram has at least set a cookie. If this is the case, your browser sends info to Instagram via the cookie as soon as you come into contact with an Instagram function. After 90 days at the latest (after matching), this data is deleted again or anonymized. Although we have intensively studied Instagram’s data processing, we cannot say exactly what data Instagram collects and stores.

Below we show you cookies that are set in your browser at least when you click on an Instagram feature (such as button or Insta image). In our test, we assume that you do not have an Instagram account. Of course, if you are logged into Instagram, significantly more cookies are set in your browser.

These cookies were used in our test:

Name: csrftoken
Value: “”
Purpose: This cookie is most likely set for security reasons, to prevent falsification of requests. However, we could not find out more precisely.
Expiration date: after one year

Name: mid
Value: “”
Purpose: Instagram sets this cookie to optimize its own services and offers on and off Instagram. The cookie sets a unique user ID.
Expiration date: after the end of the session

Name: fbsr_311250235124024
Value: not specified
Purpose: This cookie stores the log-in request for users of the Instagram app.
Expiration date: after the end of the session

Name: rur
Value: ATN
Purpose: This is an Instagram cookie that ensures functionality on Instagram.
Expiration date: after the end of the session

Name: urlgen
Value: “{\”194.96.75.33\”: 1901}:1iEtYv:Y833k2_UjKvXgYe311250235”
Purpose: This cookie is used for Instagram’s marketing purposes.
Expiration date: after the end of the session.

Note: We cannot make any claim to completeness here. Which cookies are set in individual cases depends on the embedded features and your use of Instagram.

How long and where is the data stored?

Instagram shares the information received between Facebook companies with external partners and with people you connect with around the world. The data processing is done in compliance with its own data policy. Your data is distributed on Facebook servers around the world, partly for security reasons. Most of these servers are located in the USA.

How can I delete my data or prevent data storage?

Thanks to the Basic Data Protection Regulation, you have the right to information, portability, correction and deletion of your data. You can manage your data in the Instagram settings. If you want to completely delete your data on Instagram, you must permanently delete your Instagram account.

And this is how deleting Instagram account works:

First, open the Instagram app. On your profile page, go down and click on “Help section”. Now you will get to the company’s website. On the webpage, click “Manage account” and then click “Delete your account”.

If you delete your account entirely, Instagram will delete posts such as your photos and status updates. Information that other people have shared about you does not belong to your account and consequently will not be deleted.

As mentioned above, Instagram stores your data primarily via cookies. You can manage, disable or delete these cookies in your browser. Depending on your browser, the management always works a bit differently. Here we show you the instructions for the most important browsers.

Chrome: Delete, enable and manage cookies in Chrome.

Safari: Manage cookies and website data with Safari.

Firefox: delete cookies to remove data that websites have placed on your computer

Internet Explorer: delete and manage cookies

Microsoft Edge: delete and manage cookies

You can also basically set up your browser so that you are always informed when a cookie is to be set. Then you can always decide individually whether you want to allow the cookie or not.

Instagram is a subsidiary of Facebook Inc. and Facebook is an active participant in the EU-U.S. Privacy Shield Framework. This framework ensures proper data transfer between the U.S. and the European Union. You can learn more about it at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC. We have tried to bring you closer to the most important information about data processing by Instagram. You can learn even more about Instagram’s data policies at https://help.instagram.com/519522125107875.

Source: Created with the privacy generator of AdSimple in cooperation with warkly.de

Imprint

BOA Restaurant
Schröderstraße 11
21335 Lüneburg

Management: Hai Anh Nguyen
Website: www.boa-asiavegan.de
Tax number: 33/131/16509

Web design: Green Dragon | Thao Duong-Cordsen | graphic and web design.
Photo credits: © Green Dragon | Thao Duong-Cordsen | Design – Webdesign, © Restaurant BOA, © unsplash.com, © freepik.com, © pixabay.com.

Disclaimer / Legal notice

Liability for contents

As a service provider, we are responsible for our own content on these pages according to § 7 para.1 TMG (German Telemedia Act) and general laws. According to § 8 to 10 TMG we are not obliged to monitor transmitted or stored information or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information according to general laws remain unaffected by this. However, liability in this respect is only possible from the time of knowledge of a concrete infringement. If we become aware of any such legal infringements, we will remove the content in question immediately.

Liability for links

Our offer contains links to external websites of third parties, on whose contents we have no influence. Therefore we cannot assume any liability for these external contents. The respective provider or operator of the sites is always responsible for the contents of the linked sites. The linked pages were checked for possible legal violations at the time of linking. Illegal contents were not identified at the time of linking. However, a permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any infringements, we will remove such links immediately.

Copyright

The contents and works on these pages created by the site operators are subject to German copyright law. The reproduction, editing, distribution and any kind of use outside the limits of copyright law require the written consent of the respective author or creator. Downloads and copies of these pages are only permitted for private, non-commercial use. Insofar as the content on this site was not created by the operator, the copyrights of third parties are observed. In particular, third-party content is identified as such. Should you nevertheless become aware of a copyright infringement, please inform us accordingly. If we become aware of any infringements, we will remove such contents immediately.

Data protection

The use of our website is usually possible without providing personal data. As far as personal data (e.g. name, address or e-mail addresses) is collected on our website, this is always done on a voluntary basis, as far as possible. This data will not be passed on to third parties without your express consent.
We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.
The use by third parties of contact data published within the framework of the imprint obligation for the purpose of sending advertising and information material not expressly requested is hereby expressly prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example through spam mails.

Sources: Privacy policy eRecht24, Disclaimer eRecht24