Privacy policy

This is a translation for convenience. The German Datenschutzerklärung is legally binding.

1. At a glance

This website presents Gala Restaurant. It has no customer accounts and no form that sends data to a server. The reservation form only creates an email in your own email program (section 7). We use no tracking or advertising cookies and embed no social media plugins, maps, videos or fonts from other servers. Personal data is only processed to the extent technically necessary to deliver the pages to you.

2. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):
Igor Danshov, Gala Restaurant
Obertorstraße 6, 97737 Gemünden am Main, Germany
Phone: Please enable JavaScript
Email: Please enable JavaScript

No data protection officer has been appointed, as there is no legal obligation to do so.

3. Hosting and server log data

This website is delivered via Cloudflare. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the site, Cloudflare processes technically necessary data: the IP address of the requesting device, date and time of access, the requested address and amount of data transferred, the referrer if your browser sends it, and browser type, operating system and language settings.

The purpose is to deliver the site and keep it secure and stable, for example by fending off attacks. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing the website securely and quickly. We have a data processing agreement with Cloudflare under Art. 28 GDPR. Cloudflare is certified under the EU-U.S. Data Privacy Framework, so transfers to the USA are covered by the European Commission’s adequacy decision (Art. 45 GDPR). Cloudflare keeps the log data only as long as necessary for these purposes. More information: Cloudflare privacy policy.

4. Cookies and browser storage

This website sets no cookies of its own and uses no analytics, tracking or advertising services. On your first visit a short notice says so. If you click “Got it”, your browser stores the entry “gala_hinweis” with the date in local storage so the notice does not reappear on every page view. The entry is not sent to us and is disregarded after 12 months. You can delete it at any time in your browser settings. The legal basis is Section 25 (2) no. 2 TDDDG, as the storage is strictly necessary for the function you requested, and Art. 6 (1) (f) GDPR.

Cloudflare may set the cookie “__cf_bm” to tell humans from automated access; it expires after 30 minutes. The legal basis is Section 25 (2) no. 2 TDDDG, as it is strictly necessary for secure operation, and Art. 6 (1) (f) GDPR.

As we use no cookies or services that require consent, we do not ask for consent.

5. Fonts

The fonts Barlow and Barlow Condensed are stored on our own web space. Loading the site does not connect to Google or any other font provider.

6. Links to other websites

The “Get directions” link is a plain link. It only opens Google Maps when you click it; no connection to Google is made before that. The same applies to the links to the Amtsschreiber Pförtchen holiday apartments and to DISERVAR. After the click, the privacy policy of the respective provider applies.

7. Contact and table reservations

If you call or write to us, for example to book a table, we process your details (name, phone number or email address, date, time, number of guests and your request) to handle the reservation or enquiry. The legal basis is Art. 6 (1) (b) GDPR, and Art. 6 (1) (f) GDPR for other enquiries. Providing the data is voluntary, but without a name and contact details we cannot process a reservation. We delete the data once the matter is settled, unless statutory retention periods apply.

The reservation form on the home page sends no data to us or to third parties and stores nothing. It only assembles your entries into an email in your browser and opens your email program. We receive your request only when you send that email yourself; the paragraph above applies to it. The email is sent through your own email provider.

8. Encryption

The site is delivered exclusively over an encrypted connection (HTTPS).

9. Your rights

You have the right at any time to information about your stored data (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). An informal call or email to the contact details above is enough.

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

10. No automated decisions

We do not make decisions based solely on automated processing and do not create profiles.

Last updated: October 2026