privacy policy
Privacy Policy
As of: October 18, 2026
1. Verantwortlicher
The party responsible for the processing of personal data on this website is:
Sadaf Restaurant
Navid Rezaei Anvari
Jahnstraße 20
50676 Cologne
Germany
Tel: +49 221 29999071
E-Mail: info@sadafrestaurant.com
Website: https://sadafrestaurant.com
2. Hosting and provision of the website
Our website is hosted by the following provider:
Hetzner Online GmbH
Industriestraße 25
91710 Gunzenhausen
Germany
Website: https://www.hetzner.com
Privacy Policy: https://www.hetzner.com/legal/
When you visit our website, technically necessary connection data is processed. This includes, in particular, your IP address, the date and time of access, the page or file accessed, the amount of data transferred, the access status, information regarding the browser and operating system used, and, if applicable, the website from which you arrived.
This processing is carried out to deliver the website, ensure stable and secure operation, and detect and prevent technical malfunctions or unauthorized/abusive access.
The legal basis for this is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing a reliable and secure website. The data required for this purpose is received by our hosting provider.
Server logs are stored for a period of 30 days and subsequently deleted. Longer-term storage occurs only if necessary for the investigation of a specific security incident or for the assertion or defense of legal claims.
3. Contacting Us and Reservation Inquiries
When you contact us via our contact form, by email, or by phone, we process the information you provide. This may include, in particular, your name, email address, telephone number, the content of your message, and details regarding a requested reservation.
We use this data to respond to your inquiry, clarify any questions, and, if applicable, prepare and process a reservation.
If your inquiry relates to the conclusion of a contract or concerns an existing contract, the legal basis is Article 6(1)(b) of the GDPR. For other types of inquiries, processing is based on Article 6(1)(f) of the GDPR; our legitimate interest lies in addressing the requests directed to us.
Providing the information necessary to process your inquiry is required for us to respond to your request or handle your reservation. Without sufficient contact or reservation details, it may not be possible for us to do so.
Access to this data is granted to the individuals tasked with handling your inquiry, as well as to the technical service providers we engage, specifically our hosting and email service providers.
We delete the data once your inquiry has been fully resolved and no further retention is required. This does not affect statutory retention obligations or the necessity of storing data for the establishment, exercise, or defense of legal claims.
4. Cookies and Consents
Our website uses cookies and similar technologies to provide essential functions and to ensure the secure use of our website.
Technically Necessary Cookies
Technically necessary cookies are used to provide the core functions of our website—for example, by storing security settings or managing privacy consents you have provided.
Where the storage of information or access to information is strictly necessary to provide a digital service that you have explicitly requested, no separate consent is required under Section 25, Paragraph 2, No. 2 of the TDDDG (Telecommunications-Telemedia Data Protection Act).
If personal data is processed in this context, it is done on the basis of the relevant provisions of the GDPR (General Data Protection Regulation), specifically Article 6, Paragraph 1, Letter f of the GDPR.
Non-Essential Cookies and External Services
Cookies or similar technologies that are not strictly necessary are only used if you have provided prior, explicit consent, unless a legal exception applies.
This may include, for example, technologies used for statistical analysis, the integration of external content, or marketing purposes.
The legal basis for storing information on your device or accessing such information is Section 25, Paragraph 1 of the TDDDG. Where personal data is processed based on your consent, this is done in accordance with Article 6, Paragraph 1, Letter a of the GDPR.
Managing and Withdrawing Your Consent
You may decide for yourself whether you wish to consent to the use of non-essential cookies and similar technologies.
Declining optional cookies will not prevent you from using the core functions of our website.
You may change or withdraw any consent you have previously provided at any time—with effect for the future—via the privacy settings on our website. Information regarding the technologies used that require consent—including their providers, the purposes for which they are used, and their storage durations—is provided in the privacy settings.
The lawfulness of any processing that took place prior to the withdrawal of consent remains unaffected.
5. Google Maps
On our contact page, we use Google Maps to display the location of our restaurant and to assist you in planning your journey.
For users within the European Economic Area, the provider is:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Irland
The map is only loaded once you have provided your consent. Activating it establishes a connection to Google. In this process, data—including your IP address, browser and device information, as well as details regarding your access to and use of the map—may be transmitted to Google.
If you are logged into your Google account, Google may associate this information with your account.
The legal basis for the processing of personal data is Article 6(1)(a) of the GDPR. Where information is stored on or retrieved from your end device, this is done on the basis of your consent pursuant to Section 25(1) of the TDDDG (Telecommunications-Telemedia Data Protection Act).
Data may also be processed by Google LLC in the United States.
Further information regarding the legal bases for such transfers can be found here:
https://policies.google.com/
Information on data processing and retention periods at Google can be found here:
https://policies.google.com/
You may revoke your consent at any time—with effect for the future—via the privacy settings mentioned in Section 4.
6. Google Fonts
For the consistent display of fonts, we use Google Fonts, provided by:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Irland
Fonts are only loaded from external Google servers once you have provided your consent.
In this process, personal data—specifically your IP address and technical information regarding the request—may be transmitted to Google.
The legal basis for the processing of personal data is Article 6(1)(a) of the GDPR.
Processing of personal data in the USA is possible. For international data transfers, the information provided in Section 5 applies.
You may revoke your consent at any time via the privacy settings on our website; such revocation will take effect for the future.
Further information:
7. Your Rights
Subject to the applicable legal requirements, you have the right to:
Request information regarding your personal data pursuant to Art. 15 GDPR;
Request the correction of inaccurate data or the completion of incomplete data pursuant to Art. 16 GDPR;
Request the deletion of your data pursuant to Art. 17 GDPR;
Request the restriction of processing pursuant to Art. 18 GDPR;
Request data portability pursuant to Art. 20 GDPR.
Insofar as we process data on the basis of Art. 6 para. 1 lit. f GDPR, you may object to such processing pursuant to Art. 21 GDPR for reasons relating to your particular situation.
You may revoke any consent you have provided at any time, with effect for the future. The lawfulness of any processing that took place prior to the revocation remains unaffected.
To exercise your rights, you may contact us at the following email address:
8. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data, particularly in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.
For North Rhine-Westphalia, this authority is:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
E-Mail: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de