Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation and other data protection legislation is:
Classic Driver Food Concept GmbH
Wiebestraße 36–37
10553 Berlin
Germany
Represented by the Managing Director:
Marc Debourdon de Grammont
Telephone: (030) 20 61 30 32
Email: trofeo@classic-driver.eu
2. General Information on Data Processing
We process personal data only to the extent necessary to provide our website, handle enquiries, carry out reservations, provide gastronomic offers and experiences, send our newsletter, or comply with legal obligations.
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, names, contact details, IP addresses, reservation data, and information about the use of our website. Personal data is processed in particular on the basis of the following legal grounds:
- Art. 6(1)(a) GDPR, where you have given us your consent,
- Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract,
- Art. 6(1)(c) GDPR, where we are legally obliged to process the data,
- Art. 6(1)(f) GDPR, where processing is necessary for the purposes of our legitimate interests or those of a third party and your interests or fundamental rights do not override those interests.
3. Hosting and Provision of the Website by Wix
Our website was created using the Wix website builder and is hosted by Wix. The domain is also managed through Wix. The provider is:
Wix.com Ltd.
Yunitsman 5 St
Tel Aviv
Israel
EU representative pursuant to Art. 27 GDPR:
Wix Online Platforms Limited
1 Grant’s Row
Dublin 2, D02HX96
Ireland
When you access our website, Wix processes, in particular, the following information:
- IP address,
- date and time of access,
- pages and files accessed,
- referrer URL,
- browser type and browser version,
- operating system used,
- device information,
- language settings,
- approximate location information,
- technical log and diagnostic data,
- information about the use of and interaction with the website.
The processing is carried out in order to provide the website securely, reliably and without technical errors, to protect against attacks, analyse errors and ensure the functionality of our online offering. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and economically efficient provision of our website.
Where Wix processes personal data on our behalf, the processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR. Wix.com Ltd. is based in Israel. The European Commission has adopted an adequacy decision for Israel. Wix may also use affiliated companies and subprocessors in other countries. According to Wix, where data is transferred to countries outside the European Union or the European Economic Area, appropriate safeguards are used, in particular adequacy decisions, the European Commission’s Standard Contractual Clauses and additional technical, organisational or contractual safeguards.
4. Encrypted Data Transmission
Our website uses SSL or TLS encryption. This protects data that you transmit via our website against unauthorised access by third parties during transmission. An encrypted connection can be identified, in particular, by the fact that the internet address begins with “https://”.
5. Server Log Files
When you visit our website, technical information is automatically processed in server log files. This may include, in particular:
- IP address,
- browser type and browser version,
- operating system used,
- date and time of access,
- page or file accessed,
- referrer URL,
- amount of data transferred,
- technical status and error messages.
The processing serves to provide the website, ensure IT security, detect abusive access and analyse technical errors. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and uninterrupted provision of our online offering.
The log data is deleted or anonymised as soon as it is no longer required for the purposes stated above, unless security-related incidents or statutory retention obligations require a longer storage period.
6. Cookies and Comparable Technologies
Our website uses cookies and comparable technologies. Cookies are small pieces of information that can be stored in the user's browser or end device or read from the end device.
Technically Necessary Cookies
Technically necessary cookies and comparable technologies are used so that basic functions of our website, page navigation, security functions, language settings, reservation functions and the management of your privacy settings can operate.
The storage of information on your end device or access to information already stored on your end device is carried out on the basis of Section 25(2) TDDDG, insofar as this is strictly necessary to provide a digital service expressly requested by you. The subsequent processing of personal data is carried out, depending on the respective function, on the basis of Art. 6(1)(b) or (f) GDPR.
Cookies Requiring Consent
Cookies and comparable technologies for statistical, analytical or marketing purposes are generally only used if you have previously given your consent via our cookie banner.
The storage of information on your end device or access to information on your end device is carried out on the basis of Section 25(1) TDDDG. The subsequent processing of personal data is carried out on the basis of Art. 6(1)(a) GDPR.
You may change or withdraw your consent at any time with effect for the future via the cookie settings available on our website. The lawfulness of processing carried out on the basis of consent prior to its withdrawal remains unaffected.
Details of the specific cookies and comparable technologies used, their providers, purposes and storage periods can be found in the cookie settings on our website.
7. Consent Management with Usercentrics for Wix
We use the cookie and consent management solution “Usercentrics for Wix”, which is integrated into Wix.
The provider is:
Usercentrics GmbH
Sendlinger Straße 7
80331 Munich
Germany
The consent management solution is used to obtain, manage and document your consent to the use of non-essential cookies and comparable technologies. In this context, the following information in particular may be processed:
- your consent decision,
- approved and rejected categories or services,
- date and time of the decision,
- a consent or user identifier,
- browser and device information,
- language settings,
- technical information,
- where applicable, the IP address.
The storage of the consent decision is necessary so that our website can take your selection into account. The legal basis for storing or accessing information on your end device is Section 25(2) TDDDG.
Processing for the purpose of complying with our statutory documentation and accountability obligations is carried out on the basis of Art. 6(1)(c) GDPR in conjunction with Art. 5(2) and Art. 7(1) GDPR. In addition, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the legally compliant documentation and management of consent granted or refused.
You can change or withdraw your selection at any time via the cookie settings that are permanently accessible on our website.
8. Wix Analytics and Wix Visitor Statistics
We use the analytics and statistics functions integrated into Wix in order to evaluate the use of our website and optimise our online offering. In particular, the following information may be processed:
- pages accessed,
- time and duration of the visit,
- entry and exit pages,
- source or referrer,
- search terms,
- browser and device information,
- approximate geographical origin,
- interactions with the website,
- pseudonymous session and visitor identifiers,
- reservation and newsletter interactions.
Where Wix Analytics uses cookies or comparable technologies to generate traffic and behavioural statistics, the processing only takes place after you have given your consent.
The legal basis for storing or accessing information on your end device is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.
Individual operational evaluations may also be based on server data generated in connection with reservations, newsletter registrations or other functions requested by you.
The processing of such data is carried out, depending on the respective process, on the basis of Art. 6(1)(b) or (f) GDPR. Our legitimate interest lies in the commercial planning and optimisation of our gastronomic offering.
You may withdraw consent that you have given at any time via the cookie settings.
9. Google Analytics 4
We use Google Analytics 4, a web analytics service provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics helps us understand how our website is used, measure the reach of individual content and improve our online offering from a technical and content perspective.
In particular, the following data may be processed:
- pages accessed,
- clicks, scrolling movements and other interactions,
- date and time of the visit,
- session duration,
- entry and exit pages,
- referrer URL,
- browser and device information,
- screen resolution,
- operating system,
- language settings,
- approximate geographical information,
- pseudonymous online, user and session identifiers,
- information relating to reservation, newsletter or other usage processes.
Google Analytics may use cookies or comparable technologies to recognise users and sessions.
Google technically processes the IP address for transmission purposes and to derive approximate location information. According to Google, IP addresses of users from the European Union are discarded before being logged and are not permanently stored in Google Analytics.
Google Analytics is only activated on our website after you have expressly consented to analytics processing via the cookie banner. The legal basis for storing or accessing information on your end device is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.
Data collected via Google Analytics may be transferred by Google Ireland Limited to Google LLC and other affiliated companies or service providers in countries outside the European Union or the European Economic Area.
For transfers to the USA, Google may in particular rely on certification under the EU-US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses.
The retention period for user-related and event-related data in Google Analytics has been set to two months. You may withdraw your consent at any time with effect for the future via the cookie settings on our website.
10. Wix Restaurants and Digital Menu
Our menu is provided on our website using the functions of Wix Restaurants. When you access the menu, the technical access and usage data already described in connection with the provision of our website is processed.
The legal basis for the technical provision is Art. 6(1)(f) GDPR. Our legitimate interest lies in informing you about our gastronomic offering, our dishes and our prices.
Where the use of the menu is evaluated by Wix Analytics or Google Analytics, such evaluation is generally carried out only after you have given your consent.
11. Online Table Reservations via Gastronaut
For online table reservations, we use the reservation system provided by:
Gastronaut GmbH
Bahnhofstraße 55
69115 Heidelberg
Germany
When you select the “Reserve” button on our website, you will be redirected to an external reservation page operated by Gastronaut. The reservation function is not directly embedded in our Wix website.
On the Gastronaut reservation page, personal data may be processed that is required to carry out and manage your table reservation. This may include, in particular:
- first and last name,
- email address,
- telephone number,
- requested date and time,
- number of persons,
- occasion or selected gastronomic offering,
- special requests and messages,
- reservation status as well as changes or cancellations,
- technical access and usage data.
Reservation data is processed for the purpose of handling, confirming, managing and carrying out your table reservation and for communicating with you in connection with the reservation. The legal basis is Art. 6(1)(b) GDPR.
In connection with a reservation, reservation confirmations, reminders, changes or cancellation confirmations may in particular be sent by email or, where applicable, via other communication channels provided. These messages serve to carry out the reservation and do not constitute advertising communications.
When accessing the external reservation page, Gastronaut’s privacy policy also applies. As part of the technical provision of the service, Gastronaut may process, in particular, IP addresses, browser and device information as well as cookies or comparable storage technologies.
Where Gastronaut processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Alternatively, reservations can be made by telephone. In this case, we also process the data you provide to us for the purpose of handling and carrying out the reservation on the basis of Art. 6(1)(b) GDPR.
Information on Allergies and Intolerances
If, in connection with your reservation, you voluntarily provide us with information about allergies, food intolerances or dietary requirements for health-related reasons, this may include health data within the meaning of Art. 9 GDPR.
Where necessary, such processing is carried out on the basis of your explicit consent pursuant to Art. 9(2)(a) in conjunction with Art. 6(1)(a) GDPR. Please only provide information that is necessary for the safe provision of your restaurant visit.
12. Wix Contact Management and CRM
If you make a reservation, book a gastronomic experience, subscribe to our newsletter or contact us by email or telephone, your details may be stored in the Wix contact management system or Wix CRM. In particular, the following data may be combined and processed:
- name and contact details,
- reservation and booking histories,
- selected gastronomic offers and experiences,
- communication history,
- newsletter registrations and records of consent,
- internal processing and organisational notes.
The processing is carried out for the purpose of handling and managing your reservation, customer communication, organising our gastronomic services and documenting communications.
Depending on the respective reason, the legal basis is Art. 6(1)(a), (b), (c) or (f) GDPR. Our legitimate interest pursuant to Art. 6(1)(f) GDPR lies in the efficient, transparent and customer-oriented organisation of our reservations and gastronomic services.
Your contact details will only be used for advertising purposes where consent has been given or another statutory legal basis permits such use.
13. Contact by Email or Telephone
If you contact us by email or telephone, we process the data you provide to us in order to handle your enquiry.
This may include, in particular:
- first and last name,
- email address,
- telephone number,
- content of your enquiry,
- date and time of contact,
- other information voluntarily provided by you.
If your enquiry relates to a reservation, a gastronomic offering or the initiation or performance of a contract, the legal basis is Art. 6(1)(b) GDPR.
For general enquiries, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of and response to your enquiry.
The data will be deleted as soon as your enquiry has been conclusively dealt with and no statutory retention obligations or other legitimate grounds require continued storage.
14. Newsletter and Wix Email Marketing
You can subscribe to our newsletter on our website. We use Wix Email Marketing or Wix newsletter functions to manage newsletter registrations and send the newsletter. In particular, the following data may be processed:
- email address,
- where applicable, first and last name,
- date and time of registration,
- date and time of confirmation,
- consent status,
- technical verification data,
- where applicable, IP address,
- unsubscribe or withdrawal information,
- delivery information,
- information about opens and clicked links.
The newsletter is sent on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR.
Double Opt-In Procedure
To safeguard the newsletter registration process, we use a double opt-in procedure. After registering, you will receive an email asking you to confirm your newsletter subscription. Your email address will only be added to the newsletter distribution list once you have completed this confirmation.
The registration and confirmation are logged so that we can demonstrate that valid consent has been given. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR and, in addition, Art. 6(1)(f) GDPR. Our legitimate interest lies in being able to demonstrate that legally effective consent has been obtained.
Newsletter Performance Measurement
Our newsletters may contain technologies that make it possible to determine whether a message has been delivered or opened and which links contained in it have been clicked. Tracking pixels and personalised links may in particular be used for this purpose.
The evaluation serves to measure and optimise our newsletter content. Where the evaluation is carried out on a personal basis, it is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future by using the unsubscribe link at the end of a newsletter or by sending us a corresponding message.
After unsubscribing, your email address will be removed from the active newsletter distribution list. The email address may subsequently be stored on a suppression list insofar as this is necessary to permanently respect your withdrawal and prevent further unwanted newsletter distribution.
Storage on the suppression list is carried out on the basis of Art. 6(1)(c) and (f) GDPR. Our legitimate interest lies in complying with your withdrawal and preventing unlawful further distribution.
15. Wix Multilingual
Our website uses Wix Multilingual to provide content in multiple languages. In particular, the language you select may be stored in a cookie or comparable storage technology so that the website can be displayed in your preferred language the next time you visit.
Where storage is necessary for the language selection requested by you, it is carried out on the basis of Section 25(2) TDDDG. The subsequent processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website in a user-friendly manner and in a language appropriate to the user.
16. Fonts and Google Fonts
Various fonts are used on our website that are made available through the Wix Editor. These may also include fonts whose original provider is Google.
According to Wix, Google Fonts selected via the regular Wix Editor are provided locally through Wix’s technical infrastructure. Therefore, simply displaying these fonts when our website is accessed generally does not establish a direct connection to Google servers and does not transmit an IP address to Google.
The processing of technical access data by Wix is carried out in connection with the provision of our website on the basis of Art. 6(1)(f) GDPR.
Our legitimate interest lies in a consistent, visually appealing and technically reliable presentation of our online offering.
This provision applies to fonts that have been integrated using the regular Wix Editor. If fonts are loaded in the future via individual program code, external embeds, iframes, custom elements or third-party applications, a direct connection to the servers of the respective font provider may be established.
Such external integrations will only be used where an appropriate legal basis under data protection law exists.
17. Links to Facebook and Instagram
Our website contains buttons or simple links to our profiles on Facebook and Instagram. The provider of these services is:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland
As long as you do not click on the links, the mere display of a simple external link generally does not establish a direct connection to Meta.
If you click on a link, you leave our website and are redirected to Facebook or Instagram. In this context, Meta may process, in particular, the following information:
- IP address,
- browser and device information,
- date and time of access,
- the previously visited page,
- information about your use of the respective social network.
If you are logged into Facebook or Instagram at the same time, Meta may be able to associate the access with your user account.
Meta is generally responsible for the subsequent processing. The privacy policies of the respective social network apply.
This privacy policy applies exclusively to simple links. If embedded social media posts, feeds, plug-ins, Meta Pixel or comparable Meta technologies are used in the future, this privacy policy will be updated accordingly and the respective technology will only be activated, where required, after you have given your consent.
18. Recipients of Personal Data
We only disclose personal data where this is permissible for the performance of a contract, the carrying out of a reservation, compliance with legal obligations, on the basis of your consent or on the basis of a legitimate interest.
Recipients of personal data may include, in particular:
- Wix and its affiliated companies and subprocessors,
- Usercentrics in connection with consent management,
- Google in connection with Google Analytics,
- IT, hosting and communication service providers,
- internally responsible employees,
- tax advisers, legal advisers and other advisers subject to professional confidentiality,
- authorities and public bodies where there is a legal obligation.
Service providers are used, where required, on the basis of a data processing agreement pursuant to Art. 28 GDPR.
19. Transfers of Data to Third Countries
When using Wix, Google and other technical service providers, processing of personal data outside the European Union or the European Economic Area cannot be completely ruled out.
Such transfers are only carried out where the statutory requirements of Art. 44 et seq. GDPR are met.
The following may in particular serve as a legal basis:
- an adequacy decision by the European Commission,
- certification of the recipient under the EU-US Data Privacy Framework,
- the European Commission’s Standard Contractual Clauses,
- additional technical, organisational or contractual safeguards,
- your explicit consent in cases provided for by law.
## 20. Storage Period
We generally store personal data only for as long as is necessary for the respective processing purpose. The data is subsequently deleted or anonymised unless statutory retention obligations or other legitimate grounds require continued storage.
Commercial and tax law retention periods may in particular apply to business records.
Where statutory retention obligations exist, once the original purpose of processing no longer applies, the data will only continue to be processed for the purposes provided for by law.
21. Your Rights
Within the scope of the statutory requirements, you have, in particular, the following rights:
- right of access pursuant to Art. 15 GDPR,
- right to rectification pursuant to Art. 16 GDPR,
- right to erasure pursuant to Art. 17 GDPR,
- right to restriction of processing pursuant to Art. 18 GDPR,
- right to data portability pursuant to Art. 20 GDPR,
- right to object pursuant to Art. 21 GDPR,
- right to withdraw consent given pursuant to Art. 7(3) GDPR,
- right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR.
To exercise your rights, you may contact us using the contact details stated in the section “Controller”.
22. Withdrawal of Consent
You may withdraw consent you have given at any time with effect for the future.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
Cookie consent can be changed or withdrawn via the cookie settings. Newsletter consent can in particular be withdrawn via the unsubscribe link in the newsletter.
23. Right to Object
Where we process personal data on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to such processing at any time without providing reasons. This also applies to profiling insofar as it is related to such direct marketing.
24. Right to Lodge a Complaint with a Data Protection Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
The supervisory authority responsible for us is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany
Telephone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
25. Obligation to Provide Data
The provision of personal data is generally voluntary.
However, certain information is required in order for us to process a reservation, a newsletter registration or an enquiry. Without the information marked as mandatory, the respective service may not be able to be provided.
26. Automated Decision-Making
No solely automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.
27. Data Security
We take appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other security risks.
Our security measures are continuously reviewed and adapted in line with technical developments and the respective risk.
28. Currency and Amendments to this Privacy Policy
We reserve the right to amend this privacy policy if the legal situation, our website, the services used or the nature of the data processing changes.
Last updated: August 2026