Privacy Policy
Last updated: 27.08.2026
Responsible Party
The responsible party within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Responsible contact details are currently unavailable.
General Notice
Based on Article 13 of the Swiss Federal Constitution and the federal data protection regulations (Data Protection Act, DPA), every person has the right to protection of their privacy and protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
In cooperation with our hosting providers, we strive to protect the databases as well as possible against unauthorized access, loss, misuse or falsification.
By using this website, you consent to the collection, processing and use of data as described below. This website can generally be visited without registration. Data such as pages accessed or names of files retrieved, date and time are stored on the server for statistical purposes, without this data being directly related to your person. Personal data, in particular name, address or e-mail address, are collected on a voluntary basis where possible. Without your consent, data will not be passed on to third parties.
Privacy Policy for Cookies
This website uses cookies. These are small text files that make it possible to store specific, user-related information on the user's device while they are using the website. Cookies make it possible, in particular, to determine the frequency of use and number of users of the pages, to analyze behavior patterns in the use of the page, but also to make our offer more user-friendly. Cookies remain stored beyond the end of a browser session and can be recalled when the page is visited again. If you do not want this, you should set your Internet browser so that it refuses to accept cookies.
A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US site aboutads.info or the EU site youronlinechoices.com Furthermore, the storage of cookies can be achieved by disabling them in the browser settings. Please note that in this case you may not be able to use all the functions of this online offer.
Contact Form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
Objection to Advertising Mails
The use of contact data published in the context of the imprint obligation for sending unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.
Use of Third-Party Services
Use of Google Maps
This website uses the offering of Google Maps. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. When you visit the website, Google receives the information that you have accessed the relevant sub-page of our website. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists.
If you are logged into Google, your data will be directly assigned to your account. If you do not want the association with your profile at Google, you must log out before activating the button. Google stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website.
You have the right to object to the formation of these user profiles, and you must contact Google to exercise this right. For more information on the purpose and scope of data collection and its processing by Google, please visit: www.google.de/intl/de/policies/privacy.
Privacy Policy for Facebook
This website uses features of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. When our pages with Facebook plug-ins are accessed, a connection is established between your browser and Facebook's servers. Data is already transmitted to Facebook in the process. If you have a Facebook account, this data may be linked to it. If you do not want this data to be associated with your Facebook account, please log out of Facebook before visiting our page. Interactions, in particular using a comment function or clicking a "Like" or "Share" button, are also passed on to Facebook. You can find out more at facebook.com/about/privacy.
Privacy Policy for Instagram
Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate visits to our pages with your user account. We point out that we as the provider of the pages are not aware of the content of the transmitted data and its use by Instagram. Further information can be found in Instagram's privacy policy: instagram.com/about/legal/privacy/
Use of Adobe Fonts
We use Adobe Fonts for the visual design of our website. Adobe Fonts is a service of Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe), which grants us access to a font library. To embed the fonts we use, your browser must connect to an Adobe server in the USA and download the font required for our website. Adobe thus receives the information that our website was accessed from your IP address. For more information about Adobe Fonts, please see Adobe's privacy notices, which you can access here: Adobe Fonts.
Privacy Policy for YouTube
Functions of the "YouTube" service are integrated on this website. "YouTube" belongs to Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland.
Your legal agreement with "YouTube" consists of the terms and conditions available at the following link: youtube.com/terms. These terms constitute a legally binding agreement between you and "YouTube" regarding the use of the services. Google's privacy policy explains how "YouTube" handles and protects your personal data when you use the service.
Order Processing in the Online Shop with Customer Account
We process the data of our customers in accordance with the federal data protection regulations (Data Protection Act, DPA) and the EU GDPR, in the context of order processes in our online shop, to enable them to select and order the chosen products and services, as well as their payment and delivery or execution.
The data processed includes master data (stock data), communication data, contract data, payment data, and the persons affected by the processing include our customers, interested parties and other business partners. The processing is carried out for the purpose of providing contractual services in the context of operating an online shop, billing, delivery and customer services. We use session cookies, e.g. for storing the shopping cart contents, and permanent cookies, e.g. for storing the login status.
Processing is carried out on the basis of Art. 6 para. 1 lit. b (execution of order processes) and c (legally required archiving) GDPR. The information marked as required is necessary for the establishment and fulfillment of the contract. We only disclose data to third parties in the context of delivery, payment or within the scope of statutory permits and obligations. Data will only be processed in third countries if this is necessary for the fulfillment of the contract (e.g. at the customer's request for delivery or payment).
Users can optionally create a user account in which they can view their orders in particular. During registration, the required mandatory information is communicated to users. User accounts are not public and cannot be indexed by search engines such as Google. If users have terminated their user account, their data regarding the user account will be deleted, subject to its retention for commercial or tax law reasons in accordance with Art. 6 para. 1 lit. c GDPR. Information in the customer account remains until it is deleted, with subsequent archiving in case of a legal obligation. It is the responsibility of users to back up their data upon termination before the end of the contract.
During registration and renewed logins and use of our online services, we store the IP address and the time of the respective user action. Storage is based on our legitimate interests, as well as those of users, in protection against misuse and other unauthorized use. This data is generally not passed on to third parties, unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 para. 1 lit. c GDPR.
Deletion takes place after the expiry of statutory warranty and comparable obligations. The necessity of retaining the data is reviewed at irregular intervals. In the case of statutory archiving obligations, deletion takes place after their expiry.
Data protection in our mobile app
The Pinocchio app for iOS and Android processes the data described below. These provisions supplement the terms above, which apply to our website.
What data we process
- Account: first and last name, e-mail address and password. Providing a phone number during registration is optional. It is only required when you place an order or book a table, so that we can reach you with questions about the delivery or reservation.
- Orders and reservations: order contents, time, chosen payment method, as well as the date, time and party size of your reservation. We store this data to fulfil the contract and so that you can view your history in the app.
- Delivery addresses: only if you request delivery. You can delete saved addresses at any time in the app.
- Messages and reviews: the text you write and, optionally, a photo you attach.
Push notifications
If you allow notifications, your device generates an identifier (push token) which we store in order to inform you about the status of your order. Delivery takes place via the Expo Push Notifications service and through Apple's and Google's systems. You can disable notifications at any time in your device settings.
Error diagnostics and stability
We use the Sentry service to detect crashes and technical errors. Technical information such as device type, operating system and app version, and the technical error trace is transmitted. Processing takes place on servers in the European Union (Germany). Credentials, passwords and security tokens are removed before transmission.
Calendar
If you wish to add a reservation to your calendar, the app requests permission to create calendar entries. The entry is created exclusively on your device. We do not read your calendar and do not transmit any calendar data to our servers.
Photos
You may optionally attach a photo to a message you send us. Access to your photo library occurs only after your explicit selection and is limited to the image you choose.
What the app does not collect
- No location data. The app does not request location permission; the corresponding system permissions are explicitly blocked.
- No advertising, no tracking. The app contains no third-party advertising or analytics services and does not track you across other apps or websites.
- No payment data. No payment takes place in the app. You only choose the payment method (cash, card or TWINT); payment is made on delivery or at the restaurant.
Deleting your account and data
You can delete your account completely at any time directly in the app: Profile → Settings → "Delete account". This removes your account and the associated personal data from our servers. Statutory retention obligations for orders already completed (in particular tax and commercial law periods) remain unaffected.
Your rights
You have the right to information, rectification, erasure and restriction of processing, as well as to data portability. To exercise these rights, please contact the controller named above.
Changes
We may amend this privacy policy at any time without notice. The current version published on our website shall apply. Insofar as the privacy policy is part of an agreement with you, we will inform you of the change by e-mail or other appropriate means in the event of an update.
Questions to the Data Protection Officer
If you have any questions about data protection, please send us an e-mail or contact the responsible person for data protection listed at the beginning of this privacy policy in our organization.