We use cookies to optimize your experience, analyze traffic, and personalize content. Please choose whether you accept our use of non-essential cookies. Read more
Privacy Policy
The entity responsible for data processing on this website is:
urbankitchen ii by dicke butz
Stiftstrasse 41
60313 Frankfurt am Main
Email: info@urbankitchen-frankfurt.de
Phone: 069-90021990
We process personal data only to the extent necessary for the operation of the website, the handling of inquiries, reservations, job applications, and voucher processes, or to fulfill legal obligations.
The legal bases may include, in particular, Article 6(1)(a) of the GDPR in cases of consent, Article 6(1)(b) of the GDPR for pre-contractual or contractual measures, Article 6(1)(c) of the GDPR for legal obligations, and Article 6(1)(f) of the GDPR for legitimate interests.
This website is hosted by Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. As part of its hosting services, Strato processes personal data generated when you visit this website, in particular IP addresses and technical access data in server log files.
A data processing agreement has been entered into with Strato in accordance with Article 28 of the GDPR. Data processing takes place in data centers located within Germany.
Strato stores visitors’ IP addresses in server log files for a maximum of seven days to detect and defend against attacks. They are subsequently deleted. Data may be stored for a longer period in individual cases, to the extent necessary to investigate a specific security incident.
This website uses SSL or TLS encryption. This protects the data that users send to us from being intercepted by third parties.
The website may use technically necessary cookies or similar technologies if they are required for secure and proper operation. Optional services may only be loaded with consent, provided that consent is legally required.
[Placeholder: Add the consent tool used, cookie names, purposes, storage duration, and providers]
When users contact us via email, phone, or the contact form, we process the data provided to handle the inquiry. This may include name, contact information, message, technical transmission data, and voluntarily provided information.
Depending on the content of the inquiry, the legal basis is Article 6(1)(b) of the GDPR or Article 6(1)(f) of the GDPR.
Form data must be transmitted exclusively in encrypted form via HTTPS. The privacy policy must be accessible directly from the form. Form data should not be stored permanently in WordPress unless necessary.
[Placeholder: Add form fields, recipients, retention period, and technical implementation]
When applications are submitted via the website, we process the data provided solely for the purpose of conducting the application process. This may include contact information, a message, a resume, a cover letter, certificates, and other documents.
Upload limits:
CV: PDF only, max. 5 MB
Cover letter: PDF only, max. 5 MB
Certificates/documents: PDF only, max. 10 MB
The legal basis is [placeholder: finalize and supplement the relevant legal basis for application data].
Application data may only be stored for as long as is necessary for the application process or as required by statutory retention obligations.
[Placeholder: Add retention period, recipients, deletion process, and consent for the talent pool if desired]
To protect our forms from spam, automated submissions, and misuse, we use Google reCAPTCHA v2. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to determine whether an entry is made by a human or by an automated system. To this end, Google may process various types of information, including, in particular, the IP address, browser and device information, referrer URL, mouse movements, duration of visit, and other usage data necessary for the security check. With reCAPTCHA v2, an active confirmation by selecting the “I’m not a robot” checkbox or an additional security check may also be required.
When using reCAPTCHA, personal data may be transmitted to Google. In this context, processing by Google LLC in the United States and other third countries cannot be ruled out.
Google reCAPTCHA is integrated to protect our website and our forms from abusive automated use. To the extent that consent is required for this purpose, processing is based on Article 6(1)(a) of the GDPR. Consent may be revoked at any time with future effect via the website’s privacy or consent settings.
Further information regarding Google’s processing of personal data can be found in Google’s Privacy Policy and Terms of Service.
On our contact page, we use Google Maps to display our location. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Maps is activated only after you give your express consent by clicking the “Load Map” button . Before you give your consent, no connection to Google Maps is established, and no personal data is transmitted to Google via the map integration.
Once you give your consent, the map is loaded. In particular, your IP address and technical information about your browser and device may be transmitted to Google. Data processing by Google LLC in the U.S. and other third countries cannot be ruled out.
The legal basis for the processing is your consent pursuant to Article 6(1)(a) of the GDPR. Consent that has been given may be revoked at any time with future effect via the website’s privacy or consent settings.
If reservations are made through an external or internal reservation system, the data required for the reservation will be processed. This may include name, contact information, date, time, number of people, and special notes.
[Placeholder: Add reservation provider, data categories, legal basis, recipients, retention period, and transfers to third countries]
If voucher or payment functions are used, PayPal is the only payment method provided. When paying via PayPal, payment data is transmitted to PayPal or processed by PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
Depending on the process, the data processed may include your name, email address, billing information, payment amount, transaction data, IP address, and technical payment information.
The legal basis is Article 6(1)(b) of the GDPR for contract fulfillment and, where applicable, Article 6(1)(c) of the GDPR for statutory retention obligations.
[Placeholder: Finalize details regarding PayPal checkout, specific data flows, recipients, retention period, refunds, billing process, and potential transfers to third countries]
Links to external platforms such as Instagram, Facebook, or YouTube are, as of now, simply links. Simply visiting this website does not result in any data being transmitted to these platforms, as long as no external content is embedded.
External links open the pages of the respective providers. The respective providers are responsible for their data processing.
Google Analytics is not used.
Personal data may be transferred to technical service providers to the extent necessary for hosting, maintenance, form processing, reservations, job applications, voucher processing, or payment transactions.
[placeholder: add specific recipients and data processors]
Personal data is stored only for as long as is necessary for the respective purpose or as required by statutory retention obligations. Specific retention periods must be specified for each function.
Data subjects have the right, within the framework of the statutory requirements, to access, rectify, erase, restrict processing, data portability, and object.
If processing is based on consent, consent may be withdrawn at any time with future effect.
In accordance with Article 77 of the GDPR, data subjects have the right to lodge a complaint with a data protection supervisory authority if they believe that the processing of their personal data violates the GDPR.
The supervisory authority responsible for us is:
The Hessian Commissioner for Data Protection and Freedom of Information (HBDI)
P.O. Box 3163
65021 Wiesbaden
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Phone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de
Hessian Commissioner for Data Protection and Freedom of Information
As of: September 2026