Information on data protection in accordance with the EU General Data Protection Regulation

As the responsible provider of our website, we look forward to your visit and your interest in REBgut in the lovely region of Tauberfranken. Our data protection declaration clarifies the type, scope and purpose of the collection and use of your personal data when you visit our website. It affects our online publications and the functions and content associated with them, as well as external online presences, such as our social media profile (hereinafter referred to as "online publication")

The most important information about data protection at a glance

Who is responsible for data collection on this website?

The data processing on our website is carried out by

Gastronomie im Rebgut Lauda GmbH
Rebgutstraße 80, 97922 Lauda-Königshofen
Phone +49 9343 614700
Fax: +49 9343 6147010
E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Managing director: Andreas Nutt
Commercial register: Mannheim HRB 716515

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This can be, for e.g. data that you enter in one of our forms or communicate to us in correspondence.

Other data are recorded automatically or with your consent when you visit the website by the IT systems we use. This is mainly technical data (e.g. internet browser, operating system or time of the page you viewed). This data is collected automatically as soon as you access this website.

What do we use your data for?

Some of the data is collected in order to ensure that the website is displayed error free. Other data can be used to analyze your user behavior.

What rights do you have regarding your data?

you have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request that the processing of your personal data be restricted under certain circumstances.

You also have the right to send a complaint to the responsible supervisory authority. You can contact us at any time at the above address if you have any further questions about data protection.

Hosting und Content Delivery Networks (CDN)

Our website is hosted by an external service provider (hoster). The personal data recorded on our website is stored on the host's servers. This can be IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.

The host is used for the purpose of fulfilling the contract with our potential and existing guests (Art. 6 Para. 1 lit.b GDPR) and in the interest of a secure, fast and efficient provision of our online publication by a professional provider (Art. 6 Para. 1 lit.f GDPR).

Our hoster will only process your data insofar as this is necessary to fulfill its performance obligations to REBgut and to follow our instructions with regard to this data. In order to ensure processing in accordance with data protection regulations, we have concluded an order processing contract with our hoster.

Data protection officer:

Stefanie Nutt
Phone: +49 9343 614700
E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

Handling of personal data:

The protection of your personal data is important to us. Personal data is information relating to a natural person. This includes information such as name, address, telephone number, e-mail address and date of birth - but also information about which online publication someone has visited.

Since these data deserve special protection, they are only collected by us to the extent necessary. In the following, we explain to you which information we record during your visit to our online publication and how it is used.

Our data protection practice is in accordance with the regulations of the Federal Data Protection Act (BDSG), the Telemedia Act (TMG) and the EU General Data Protection Regulation (GDPR).

We will only process your personal data to process inquiries and to carry out bookings / orders. Your data will only be processed for further purposes precisely defined in the consent, e.g. if you have given your express consent beforehand. B. for information about offers via newsletter.

Special functions of the online publication

Our online publication offers you various functions through which we collect, process and store personal data when they are used. In the following we explain what happens to this data:

Contact, Communication via e-mail

Your personal data will be saved by using all technical and organizational possibilities in order not to make them accessible to third parties. We will save your details for the purpose of processing the request and in case of follow-up questions arising. For information with a high need for confidentiality, we recommend that you send it by post. We send unencrypted emails.

Contact form

When using online forms, the required personal data will be collected with your consent and only used for the specified purpose. The data will not be passed on to third parties for commercial or non-commercial purposes. Other techniques that serve to understand the access behavior of users are not used for online forms.

Newsletter consent

In our online publication you have the option of registering to receive our newsletter. The data recorded in the registration form for our newsletter will only be used by us for sending our newsletter, in which we provide information about our services. After registration, we will send you a confirmation email with a link. By clicking on this link you confirm that the registration for our newsletter should be completed (double opt-in). This is to ensure that you are the owner of the email address provided and that you agree to receive the newsletter. When you register for the newsletter, we save your IP address and the date of your registration. This storage is only used as evidence in the event that a third party has registered you to receive the newsletter without your knowledge. You can revoke your consent to the storage of the data, the e-mail address and their use for sending at any time. You can do this by clicking on the unsubscribe link for each of our newsletters or by sending a message to our e-mail address Your data will not be shared with third parties.

We will store your data collected in connection with the subscription to our newsletter for a further 5 years for any queries after you have unsubscribed. After these 5 years, your data will only be stored anonymously so that no connection can be made to you personally. We use your data exclusively for the stated purpose. Your data will not be passed on to third parties. The data is transmitted using secure SSL encryption.


The website operator or site provider (host) collects data about access to the site each time this online publication or individual files are accessed and saves them as "server log files". The following data is logged: date and time of access, URL of the referring website, retrieved file, amount of data sent, browser type and version, operating system used and the IP address.

We use this access data exclusively in a non-personalized form for the continuous improvement of our online publication, security and for statistical purposes. However, the hoster reserves the right to retrospectively check the log data if there is a legitimate suspicion of illegal use based on concrete evidence. In order to ward off attacks, we store the data for 7 days. Then they are deleted from the server.


We use so-called "cookies" on various pages to make visiting our online publication more convenient for you and to enable the use of certain functions. These are small text files that your browser can store on your computer, tablet, smartphone or similar. The process of storing a cookie file is also called “setting a cookie”. You can set your browser according to your wishes so that you

  • be informed about the setting of cookies,
  • decide on the acceptance case by case,
  • Generally accept the acceptance of cookies
  • or exclude in principle.

In order to use our convenience functions, we recommend that you allow cookies for our online publication. If you expressly do not want this, you can use the above-mentioned function of your browser - this will restrict or completely prevent the storage of cookies. You can manage many online advertising cookies from companies via the EU page

Cookies can be used for different purposes, e.g. to recognize that your PC has already been connected to an online publication (permanent cookies) or to save recently viewed offers (session cookies). We use cookies to offer you increased user convenience. However, our partner companies are not permitted or it is technically impossible for the partners to obtain, process or use personal data using cookies via our online publication. Most of the cookies we use are deleted from your device at the end of the browser session (session cookies). Other cookies remain on your device and enable us to recognize your device on your next visit (permanent cookies). These are stored on your device for a maximum of one year. The way in which we use cookies does not incur any disadvantages or risks.

External content

Since we may be made responsible for the content of the linked page, we distance ourselves from the content of all directly or indirectly linked third-party pages. Since these pages are outside our area of responsibility, we would only be liable if we, as the operator of our online publication, had influence or access to the linked content. It is neither technically possible nor reasonable for us to prevent illegal content on other websites that may be linked here. We hereby expressly declare that at the time the link was published, no illegal content was recognizable on the relevant pages.

Integration of services and content from third parties

Third party content is included in our online publication. This always presupposes that the providers of this content perceive your IP address. Because without the IP address, you would not be able to send the content to your browser. The IP address is therefore required to display this content. We strive to only use content whose respective providers only use the IP address to deliver the content. However, we have no control over whether the third party provider uses the IP address e.g. save for statistical purposes. As far as we know, we will inform you as a user of our online publication about it.

Use of script libraries (Google Web Fonts)

In order to present our content correctly and graphically appealing across browsers, we use script libraries and font libraries such as Google Webfonts ( Google web fonts are transferred to the cache of your browser to avoid multiple loading. If the browser does not support Google Web Fonts or prevents access, the content is displayed in a standard font. Calling up script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible - but currently also unclear whether and, if so, for what purposes - that operators of such libraries collect data. You can find the privacy policy of the library operator Google here:

Right to information, correction, deletion restriction and objection

According to the Federal Data Protection Act § 34 and the GDPR Art. 15-21 you have a right to free information about your stored data as well as a right to correct, block or delete your personal data. Your data will then be deleted if this does not conflict with legal regulations. You have the right to object to the collection of data and to request that the processing of your data be restricted. You can send us requests for information, deletion and correction of your data, as well as suggestions, at any time.

Revocation of consent

You can withdraw permission given to us to use your personal data at any time. An informal email message to us is sufficient for this. The data processing until the time of the revocation remains lawful.

Obligation to provide personal data

The provision of your personal data is not required by law or by contract. It is neither necessary for the conclusion of a contract nor is there any other obligation to provide your personal data. In the event that you do not provide your data, this will not have any negative consequences for you.

Complaint to a supervisory authority

In case of data protection violations, you have the right to complain to the responsible supervisory authority in accordance with Art. 77 GDPR. For our REBgut, this is the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg, who also helps with clarifying data protection issues. His contact details:

Right to data portability - Art. 20 GDPR

You have the right to transfer the data you have provided, for example a user profile, from one automated application to another. If you request the direct transfer of the data to another person responsible, this will only be done if it is technically possible.

Objection of advertising emails

We hereby object to the use of our contact data published on this online publication for the purpose of sending unsolicited advertising and information materials. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, e.g. through spam e-mails.

SSL encryption

For security reasons and to protect the transmission of confidential content, such as inquiries via a contact form, we use SSL encryption. This is an encrypted connection that you can recognize by the fact that "https: //" is displayed instead of "http: //" in the address line of the browser and a lock symbol is displayed in your browser line. If SSL encryption is activated, your inquiries that you send to us will be transmitted in encrypted form.


There is a link to the external social network Facebook on our website. This Facebook website is operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook"). This link is identified by the Facebook logo. If you do not click on this Facebook logo, no data will be transmitted to Facebook. But if you click on this link, your browser will establish a direct connection to the Facebook servers. We have no influence on the amount of data that Facebook collects and inform you as a user according to our level of knowledge: If you are logged in to your personal Facebook account, the information that you have visited our website is forwarded to Facebook. Facebook can thus assign your visit to the website to your user profile. If you do not have a Facebook account, it is still possible that Facebook will find out your IP address and save it. According to Facebook, only an anonymised IP address is saved in Germany. Further purposes and scope of the data collection as well as the further processing and use of the data by Facebook as well as your rights and setting options to protect the privacy of users can be found in Facebook's data protection information: php. Further settings and contradictions to the use of data for advertising purposes are possible within the Facebook profile settings:

If you do not want Facebook to be able to assign your visit to our website to your Facebook user account, please log out of your Facebook user account before visiting our online publication.


Functions of the Instagram service are integrated on this website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you can link the contents of the REBgut website to your Instagram profile by clicking the Instagram button. This enables Instagram to assign your visit to our website to your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by Instagram.

The data are stored and analyzed on the basis of Art. 6 Paragraph 1 lit. f GDPR. As the operator of our website, we have a legitimate interest in the broadest possible visibility in social media. If a corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6 Paragraph 1 lit. a GDPR; the consent can be revoked at any time.

You can find more information on this in Instagram's privacy policy:

eCommerce and payment provider

We collect, process and use personal data (guest and contract data) only insofar as they are necessary for the establishment, content design or change of the legal relationship (inventory data), e.g. B. when you book a room or order a voucher. This is done on the basis of Article 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures. We collect, process and use personal data about the use of our online publication (usage data) only insofar as this is necessary to to enable the user to use the service or to settle them. The customer data collected will be deleted after the order has been completed or the business relationship has ended. Statutory retention periods remain unaffected.

Handling of applicant data

We offer the opportunity to apply for a job with us, e.g. by email, online form or by post. In the following, we will inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that the collection, processing and use of your data is carried out in accordance with the applicable data protection law and all other statutory provisions and that your data will be treated with strict confidentiality.

Scope and purpose of the data collection

In case you send us an application, we process your related personal data (e.g. contact and communication data, application documents, notes in the context of job interviews, etc.), insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-new according to German law (initiation of an employment relationship), Art. 6 Paragraph 1 lit. b GDPR (general contract initiation) and - if you have given your consent - Art. 6 Paragraph 1 lit. a GDPR. The consent can be withdrawn at any time. Your personal data will only be passed on to people within the restaurant at Gastronomie im Rebgut Lauda GmbH who are involved in processing your application.

In case the application is successful, the data you submit will be stored in our data processing systems on the basis of Section 26 of the BDSG-new and Article 6 (1) (b) GDPR for the purpose of carrying out the employment relationship.

Retention period of the data

In case we cannot make you a job offer, you reject a job offer or withdraw your application, we reserve the right to store the data you have transmitted on the basis of our legitimate interests (Art. 6 Para. 1 lit.f GDPR) for up to 6 months to be kept with us from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. The storage serves in particular for evidence purposes in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), it will only be deleted when the purpose for further storage no longer applies. Longer storage can also take place if you have given your consent (Art. 6 Para. 1 lit. a GDPR) or if statutory storage obligations prevent deletion.

Admission to the list of applicants

In case we do not offer a job immediately, you may be entering our list of applicants. Therefore all documents and information from the application will be transferred to the list of applicants in order to contact you in case of suitable vacancies.

The inclusion in the list of applicants takes place exclusively on the basis of your express consent (Art. 6 Para. 1 lit. a GDPR). Giving your consent is voluntary and has no relation to the current application process. You can withdraw your consent at any time. In this case, the data will be irrevocably deleted from the list of applicants, provided there are no legal reasons for retention. The data from the list of applicants will be irrevocably deleted no later than two years after consent has been given.

Information on data protection in accordance with the EU General Data Protection Regulation Super User