The protection of your personal data is important to us. This Privacy Policy explains how we process personal data when you visit our website at https://www.leosjuiceandburger-luebeck.de or use our online reservation system.
The controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:
Organic Juice Bar GmbH
Leo's Juice & Burger Lübeck
Mühlenstraße 49
23552 Lübeck
Germany
Email: eva@juiceandburger.de
Telephone: 0451 39774590
When you make a table reservation through our website, we may process the following information:
We process this information in order to receive, manage, confirm and, where necessary, communicate with you regarding your reservation.
The legal basis for this processing is Art. 6(1)(b) GDPR, as the processing is necessary to take steps at your request and to process your reservation.
Please avoid entering sensitive personal information in the optional notes field unless this is necessary for your reservation.
Where information voluntarily provided by you includes special categories of personal data within the meaning of Art. 9 GDPR, such information will only be processed where an appropriate legal basis under Art. 9 GDPR applies.
Our website is hosted using services provided by:
Vercel Inc.
United States
When you access our website, technical information necessary to deliver and secure the website may be processed. This may include your IP address, date and time of access, requested pages or files, browser information, device information and technical request information.
Processing is carried out for the purposes of securely and reliably providing the website, preventing abuse and diagnosing technical problems.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
Depending on the processing involved, personal data may also be processed outside the European Economic Area. Where required, appropriate safeguards for international transfers are used, including applicable adequacy mechanisms and/or Standard Contractual Clauses.
We use Supabase to provide database infrastructure for our online reservation system.
Reservation information submitted through the website is stored and processed using Supabase.
The processing is necessary to operate the reservation system and is based on Art. 6(1)(b) GDPR.
Our Supabase project is hosted in the European Union (AWS eu-central-1 / Frankfurt).
Where personal data is transferred outside the European Economic Area, such transfers are carried out subject to the requirements of Chapter V GDPR and appropriate transfer safeguards.
We use Resend, a service provided by Plus Five Five, Inc., United States, to send transactional emails in connection with reservations.
For this purpose, information such as your email address, name, reservation information and technical delivery information may be processed.
The processing is necessary to confirm and administer your reservation and is based on Art. 6(1)(b) GDPR.
Resend processes certain customer data in the United States. International transfers are protected through applicable safeguards, including the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.
Reservation confirmation emails are transactional communications relating to your reservation. We do not use your reservation email address for advertising or newsletters unless there is a separate legal basis for doing so.
Some of the service providers we use are established outside the European Economic Area or may process information outside the European Economic Area.
Where personal data is transferred to a third country, we ensure that the requirements of Chapter V of the GDPR are met.
Depending on the service provider, transfers may be based on an adequacy decision of the European Commission, participation in the EU-U.S. Data Privacy Framework, Standard Contractual Clauses approved by the European Commission, or another legally recognized transfer mechanism.
Further information regarding the safeguards applicable to a particular transfer may be requested using the contact details provided in this Privacy Policy.
Reservation data is generally deleted no later than 12 months after the reservation date unless the data is required for a longer period due to legal obligations or for the establishment, exercise or defence of legal claims.
Where statutory retention requirements apply, the relevant information will be retained only for the legally required period and only for the purposes for which continued retention is permitted.
Technical data and server logs are retained only for as long as necessary for the respective technical and security purposes, subject to the retention periods of the service providers used by us.
Our website uses technically necessary storage mechanisms and, where applicable, optional technologies.
When you first visit the website, you can manage optional technologies through our consent interface.
You can:
Optional technologies are disabled by default and are activated only after you have provided consent.
Where consent is required, the legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You may withdraw or modify your consent at any time using the “Cookie Settings” link in the footer. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
We use local storage in your browser under the key:
leos-cookie-consent
This is used to remember your privacy and consent selection so that your choice can be respected on future visits.
The storage is considered technically necessary for providing the consent-management function.
Preference technologies may be used, with your consent, to remember optional settings such as your selected language.
We currently do not use analytics or statistics services requiring consent.
We currently do not use marketing or advertising technologies requiring consent.
Subject to the applicable legal requirements, you have the following rights:
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.
To exercise your rights, please contact us using the contact details provided above.
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
The supervisory authority responsible for businesses headquartered in Schleswig-Holstein is:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel
Germany
Certain information requested during the reservation process is necessary for us to process your reservation.
If required information is not provided, we may be unable to accept or administer the reservation.
Optional fields are marked accordingly.
We do not use automated decision-making, including profiling within the meaning of Art. 22 GDPR, in connection with restaurant reservations.
If you have questions regarding the processing of your personal data or wish to exercise your data protection rights, please contact:
We may update this Privacy Policy where our website, reservation system, service providers or legal requirements change.
Last updated: October 2026