Skip to main content

Restaurante Leonardo | Sophienstr. 6 | 30159 Hannover

Privacy Policy

1. Responsible for this website

The responsible body for data processing on this website is the operator:

Weinstube Leonardo
Lotfi Ben Amor
Sophienstr. 6, 30159 Hannover, Germany

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

2. General information on data collection

The collection of data is based on

  • Art. 6 para 1 lit. a GDPR (consent),
  • Art. 6 para. 1 lit. b GDPR (performance of contract),
  • Art. 6 para. 1 lit. c GDPR (legal obligation) or
  • Art. 6 para. 1 lit. f GDPR (legitimate interest).

Data collection (purpose)

Your data is on the one hand collected by the fact that you communicate it to us (Request by form, e-mail, telephone or letter). Other data is collected automatically by our IT systems or after your consent when you visit the website (Server LogFiles). This is mainly technical data. The collection of this data takes place automatically as soon as you enter this website.

Data processing

Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyze user behavior.

Storage period

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you assert or revoke a legitimate request for deletion, your data will be deleted unless we have other legally permissible reasons for storing your personal data; in the latter case, the deletion will take place after these reasons have ceased to exist.

3. Rights of data subjects

You have the right to receive information about your stored personal data free of charge at any time. If you have given your consent to data processing, you can revoke this consent at any time for the future. As a data subject, you have the following rights under the EU General Data Protection Regulation (EU GDPR) in connection with the processing of your personal data:

  • Right of revocation at any time according to Art. 7 para. 3 EU GDPR
  • Information rights according to Art. 13 and Art. 14 EU GDPR
  • Right to information according to Art. 15 EU GDPR
  • Right of rectification according to Art. 16 EU GDPR
  • Right to deletion according to Art. 17 EU GDPR
  • Right to restriction of processing according to Art. 18 EU GDPR
  • Data portability according to Art. 20 EU GDPR
  • Right to object at any time according to Art. 21 EU GDPR
  • Right to complain to a supervisory authority according to Art. 77 EU GDPR

4. Revocation and applications

Please send your revocation or requests regarding the rights in writing to:

Weinstube Leonardo, Lotfi Ben Amor
Sophienstr. 6, 30159 Hannover, Germany

Or by email to: info@weinstube-leonardo.de

5. Hosting: service providers

This website is hosted by an external service provider: com&on GmbH, Leisewitzstr. 47, 30175 Hanover, Germany

The personal data collected on this website may be stored on the servers of the service provider. Our service provider will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions in relation to such data. The service provider is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

6. Protection of data on this website

The service provider uses technical and organizational security measures in order to protect the personal data you have made available to us from manipulation, loss, destruction or access by unauthorized persons. The security measures are continuously improved and adapted according to state-of-the-art technology.

SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

7. Data collection on this website

Server LogFiles

To maintain secure server operation, information is automatically collected and stored in so-called LogFiles. Your browser transmits this information automatically. These are:

  • Date and time at the time of access
  • IP address used
  • Browser used
  • Operating system used
  • Amount of data sent in bytes

This data is not merged with other data sources. The collected data will not be used for the purpose of drawing conclusions about your person. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.

Request by form, e-mail, telephone or letter

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up enquiries. If you contact us by e-mail, telephone or fax, your enquiry including all personal data resulting from it (name, enquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if this has been requested.

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after processing your request has been completed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

8. Online services and cookies

This website does not use external online services for the purpose of measurement and performance. 

Cookies

When you visit our website, information may be stored on your computer in the form of a so-called cookie (small text files). Technically necessary cookies are only used to ensure the operation of the websites. Further cookies (use of the website) are only set on the basis of your consent (see Cookie Overview).

Furthermore, you can also set the acceptance of cookies via your browser settings. However, please note that deactivating cookies may limit the functionality of this website. 

Consent-Management-Tool: consentmanager

This website uses the consent management tool “consentmanager” by consentmanager AB, Håltgelvågen 1b, 72348 Västerås, Sweden.

This website uses “consentmanager” to obtain consent for data processing and use of cookies or comparable functions. With the help of “consentmanager” you have the possibility to give your consent for certain functionalities of the website. With the help of “consentmanager” you can grant or reject your consent for all functions or give your consent for individual purposes or individual functions. The settings you have made can also be changed afterwards. The purpose of integrating “consentmanager” is to let the users of the website decide about the above-mentioned things and, as part of the further use of our website, to offer the option of changing settings that have already been made: Consent to Cookies & Data

By using “consentmanager”, personal data and information from the end devices used, such as the IP address, are processed by consentmanager. In addition, the processed information may also be stored on your device.
The legal basis for processing is Art. 6 Para. 1 S. 1 lit. c) in conjunction with Art. 6 para. 3 sentence 1 lit. a) in conjunction with Art. 7 para. 1 GDPR and, in the alternative, lit. f). By processing the data, consentmanager helps us (according to GDPR this is the responsible party) to fulfill our legal obligations (e.g. obligation to provide evidence).

Our legitimate interests in processing lie in the storage of user settings and preferences with regard to the use of cookies and other functionalities. “Consentmanager” stores your data as long as your user settings are active. After two years after making the user settings, the consent will be asked again. The user settings made are then saved again for this period.

You can object to the processing. You have the right to object to reasons arising from your particular situation. To object, please send an email to info@consentmanager.net. 

Provision of information – Newsletter

On this website a free newsletter subscription is offered. For the purpose of processing the newsletter, personal data (entry data: name, email address and date and time of registration) are used. A processing and use of the data takes place exclusively for the registration and the sending of the newsletter.

After entering the e-mail address, users receive an e-mail with a confirmation link to confirm the authenticity of the address and the subscription (“double opt-in“). If you do not confirm the registration by the link in this e-mail, the data will not be actively included in the distribution list.

The legal basis for the processing of data in connection with the dispatch of newsletters is your consent in accordance with Art. 6 (1) lit. a GDPR. The newsletter subscription can be cancelled at any time, for example via the “unsubscribe” link in each newsletter. If the subscription is cancelled, all personal data is deleted from our database.

Inlineframe (iFrame)

On this website, external content is integrated and displayed via iFrame in defined areas on the website. External content from third-party providers will not be loaded without your prior consent. The settings you have made can also be changed by you afterwards: Consent to cookies & data

External content from the following third-party providers is embedded on this website:

  • E-Mail Marketing Online Service: Brevo

E-Mail Marketing Online Service: Brevo

This website uses the Brevo online service of Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany for e-mail marketing.

Brevo is a service with which we organize and analyze the registration process and newsletter distribution. The data you enter for the purpose of registration is stored on Brevo’s servers. Brevo is prohibited from selling your data and using it for purposes other than sending newsletters. Brevo products are GDPR-compliant and certified. Your data is hosted on ISO-certified servers in Germany. For more information for newsletter recipients, click here: https://www.brevo.com/information-for-email-recipients

With the help of Brevo, it is possible for us to analyze the newsletter campaigns. This includes analysis of how many recipients have opened the newsletter and how often which link in the newsletter was clicked. All links in the e-mail are so-called tracking links, with which your clicks can be counted.

The data you provide to us for the purpose of the registration process and newsletter dispatch will be stored until you revoke it and then deleted. The other personal data collected during the registration process is usually deleted after a period of seven days. For more information, see Brevo’s privacy policy at: https://www.brevo.com/legal/privacypolicy

Google General, Google Fonts und Google ReCAPTCHA

Brevo also offers certain optional features through its platform, such as Google General, Google Fonts, and Google reCAPTCHA. These features are provided by third-party providers (Google LLC), over which Brevo has no control and for which Brevo makes no warranties. Brevo therefore assumes no liability for the processing operations carried out in connection with the provision of and in the context of such features, and the third-party providers act in accordance with the provisions set forth in their own policies/terms and conditions (joint controllers, sole controllers, or data processors). If you wish to use such features, we strongly recommend that you read the relevant privacy policy of the respective third-party provider to learn how they process your personal data.

To protect against spam and misuse of the forms, we use the “Google reCAPTCHA” service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

By analyzing your user behavior, the service determines whether your input comes from a human or an automated program. To do this, various data (e.g., IP address, time spent on the page, or mouse movements) are transmitted to Google. For more information on Google’s data protection practices, please see the Google Privacy Policy: https://policies.google.com/privacy?hl=en

9. Sharing in social networks

Sharing takes place exclusively from links to social networks on our website: If you share content on our website with your personal profile, we have no control over the content and scope of the data collected by the networks. In this respect, the terms of use and privacy policy of the respective social network apply.

On this website, our company profiles of the following social networks are linked:

Facebook For information on the Facebook profile platform, of Meta Platforms, Inc., 1601 Willow Road Menlo Park, CA 94025, USA, (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), please visit: https://www.facebook.com/privacy/policy

Instagram For information on the Instagram video and photo platform, of Meta Platforms, Inc., 1601 Willow Road Menlo Park, CA 94025, USA, (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), please visit: https://www.instagram.com/legal/privacy

10. Status privacy policy

This privacy policy has the processing status of September 1st, 2026.