These paragraphs describe what actually happens on YOUR ordering page. Generated from your current settings. Paste them into your privacy policy or hand them to whoever maintains it.

Ordering system
We use the Flavoso software for online orders. The ordering page is available at https://stadtgrill.flavoso.com. We process the data you enter during checkout: name, phone number, e-mail address and delivery address where applicable, and the order itself. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Data is stored on servers in Germany (Hetzner Online GmbH); a data processing agreement is in place.

Google Maps (delivery area)
On the ordering page you can view our delivery area. At first you only see a sketch we draw ourselves. No data is sent to any third party. Only when you explicitly click "View on Google Maps" is a map loaded from Google. Your IP address is then transmitted to Google Ireland Limited, Dublin, Ireland, and possibly to Google LLC in the USA. The legal basis is your consent given by that click, Art. 6(1)(a) GDPR. You can complete an order without ever loading the map.
To check your delivery address we use Google's address lookup and, where Google does not know the address, Photon by Komoot GmbH, Berlin, Germany and Nominatim by the OpenStreetMap Foundation, Cambridge, United Kingdom. Only the address you entered is transmitted. The request goes through our own server; your browser does not contact these services directly. Legal basis: Art. 6(1)(b) GDPR.

Google reviews
We show reviews from our Google Business Profile on the ordering page. The content is stored and served by us, including the reviewers' profile pictures, which are proxied through our server. Your browser does not contact Google while viewing them. Only if you click a review link do you leave our site for Google Maps.

Reach measurement
We count how often the ordering page is opened and at which step an order is abandoned. Nothing is stored on or read from your device for this: repeat visits are grouped by an irreversible short value derived from your IP address and browser identification, computed on the server only and rotated every day. No profile is built, and none of it is passed to third parties or used for advertising; in particular no Google Analytics is involved. Processing only begins after you have agreed in the notice at the bottom of the screen. The legal basis is Art. 6(1)(a) GDPR; you can withdraw your consent at any time via “Cookie settings” in the footer, and ordering works exactly the same without it. The data is deleted after 400 days at the latest.

Cookies
We set no cookies for advertising. What is stored is what the ordering process itself needs (e.g. your basket and language preference) plus your answer to the reach-measurement notice, which we have to keep in order to honour it.