The protection of your personal data is a top priority at Amaya Restaurant (hereinafter referred to as "Amaya Restaurant").

This data protection declaration explains where data is collected from you.

You give your consent in individual cases by actively pressing the corresponding buttons on our website with subsequent opt-in or via the џ Consent-Bar. You can change your settings at any time for the future.

If personal data is collected and stored on the www.amaya.restaurant website, this is done legally by Amaya Restaurant, Borus Rumenov Str. 9, 1407 Sofia ().

Amaya Restaurant collects, stores or processes data only for the exercise of its own business purposes and for the execution of a contract in accordance with Art. 6 Para. 1b GDPR.

In principle, our websites are available to all users without personal data being collected. Personal data is only queried, processed and used to the extent that it is necessary to provide the services you have requested or to provide content.

You can reach our data protection officer at .

If personal data is collected and processed by Amaya Restaurant, the storage and processing takes place on systems of use-media.com or on systems of service providers integrated in accordance with data protection within the framework of the law and within non-European countries.

At any given time you can request ѯInformation about the personal data we save about you. In addition, under the legally defined conditions (Articles 17-21 GDPR) you have the right to ѭdelete and ѽcorrect your data, to Ѷimpose a restriction of ѿfile transmission of established data.

In case the data processing is based on your consent, you can ѥrevoke this consent at any time with future effect.

If data processing is based on a legitimate interest of Amaya Restaurant, you can object to this processing for reasons that arise from your particular situation. Amaya Restaurant will only process your personal data if there are demonstrable compelling legitimate reasons that outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend legal claims.

Please contact our data protection officer directly to exercise your rights. You can reach him at or by post at Amaya Restaurant, data protection officer, Borus Rumenov Str. 9, 1407 Sofia.

Submit your request in writing (in writing, by email) using the contact details provided. You can also complain to the data protection officer at any time using the contact details provided. You also have the right to lodge a complaint with every data protection supervisory authority. A list of the supervisory authorities (for the non-public area) with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

The supervisory authority responsible for Amaya Restaurant is:

When you visit our website, we collect data on every access to the server, based on our legitimate interests within the meaning of Art. 6 Para. 1f GDPR. The access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited website, IP address and the requesting provider).

Amaya Restaurant also has a legitimate interest in accordance with Art. 6 Para. 1f GDPR to analyze your usage behavior in a pseudonymized form in order to determine the right need for content and to improve our presented information. Amaya Restaurant does not use any external service for this, but only evaluates the corresponding server data. The IP address is automatically masked because of this. We cannot personally identify you through this usage analysis. For security reasons (e.g. to clarify misuse or fraudulent activities), log file information is stored for a max. of seven days and then deleted. Data, the further storage of which is necessary for evidence purposes, remains stored until the respective incident has been finally clarified.

Global iFrame

On some of our websites, we include videos that are provided by the operator of the video platform Youtube (YouTube, LLC, Cherry Ave., USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4).

When you access this website, there is no automatic connection to the YouTube servers. Only by clicking the play button on the video do you give your consent for our server to contact the YouTube servers and the content of the requested video to be displayed on our website. You also give your consent for YouTube to set cookies on the device you are using. These cookies can also be used to analyze your user behavior for market research and marketing purposes. You can find more information on the use of cookies by YouTube in Google's cookie policy at https://policies.google.com/technologies/types?hl=de or https://policies.google.com/technologies/cookies?hl=de.

If you are not logged in with a Google account when viewing the video, YouTube saves

• IP address of the requesting device
• Date and time of access
  
• Type of device you are using
  
• Name and URL of the retrieved file
  
• Website from which access is made
  
• Browser used, operating system,
  
• Name of your access provider.
  

If you are logged in with a Google account when viewing the video, YouTube also collects data that is stored in your Google account and that you can identify personally. We expressly point out that Google stores the data of users of its services (e.g. personal information, IP address etc.) and uses it for its own business purposes. You can find more information on data processing by YouTube and Google in YouTube's privacy policy at https://policies.google.com/privacy.

By activating YouTube videos integrated on our website, we do not collect any personal data. The transmission of your data (see above) to YouTube by us takes place on the basis of your consent in accordance with Art. 6 Para. 1 a GDPR. You can revoke your consent at any time for the future via our џ Consent-Bar .

If you explicitly agree, we use Google Universal Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymization is activated on this website, which means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transferred to a Google server in the USA and abbreviated there in exceptional cases. On behalf of Amaya Restaurant, Google uses this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and internet use to Amaya Restaurant. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Processing takes place on the basis of your consent in accordance with Art. 6 Para. 1 a GDPR. You can revoke your consent at any time for the future via our џ Consent-Bar.

We use so-called web fonts on our pages, which are provided by Google. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts in a uniform manner. If your browser does not support web fonts, a standard font will be used by your computer.

To provide this ad-on, the browser you are using connects to the Google servers. This gives Google knowledge that one of our websites has been accessed via your IP address. Google Web Fonts are used on the basis of Art. 6 Para. 1f GDPR in the legitimate interest of a uniform and appealing presentation of our online offers.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/

If you contact us using the contact form, we will save the title, first name, last name, your contact details (E-Mail address and, if applicable, telephone number) and the content of the message. We only use this data to process your request and to communicate with you regarding your request. Processing is necessary for this and is based on Art. 6 Para. 1 b GDPR. It will not be passed on to third parties. The data will be deleted 1 year after your request has been processed. If a contractual relationship is established between you and our company because of your inquiry, we will delete the data after the statutory retention period (six or 10 years).

Our website uses so-called "cookies". These are small text files that are saved on your computer and in which information on recognition is documented. This means that we cannot identify you as a person. We only use cookies to improve our website in accordance with Art. 6 Para. 1 f GDPR. We currently only use session cookies. These are automatically deleted at the end of your visit.

If you have expressly agreed to the setting of further cookies (e.g. for range analysis or for advertising purposes), the processing takes place on the basis of your consent in accordance with Art. 6 Para. 1 a GDPR. You can revoke any given consent with future effect via our  џ Consent-Bar.

If you use a service to enter data (e.g. contact form, registration in the CMS), you will be asked to enter certain displayed characters in order to detect and prevent improper use of the services by machines. The captchas are generated and verified on the Amaya Restaurant servers. There is no transmission of data to third parties.

Our websites contain the possibility of using the map service "google maps Api" from Google Inc., with which Addresses can be searched and displayed. When you visit our website, your browser does not automatically connect to the provider.

The connection will only take place if you give us your consent to the establishment of the connection and the associated data transmission to the service provider Google Inc. (Google LLC, 1600 Amphitheater Parkway Mountain View in CA 94043, USA). If you have activated the geolocation function (location tracking) on ​​your device while using the corresponding website, Google can compare the data entered with your location data.

In addition to the log data required to display the requested content, the provider may also set cookies that provide the provider with further information about your visit to the respective website.

The data transmission takes place only with your consent on the basis of Art. 6 Para. 1 a) GDPR. The further processing of the data is then based on the provisions of Google's privacy policy (https://www.google.com/policies/privacy?hl=de).

Additional terms of use for Google Maps / Google Earth can be found at https://maps.google.com/help/terms_maps.html.
You give your consent in individual cases by activating the corresponding buttons on our website with subsequent opt-in or via the џ Consent-Bar. You can change your settings at any time for the future.

Our website offers the possibility of using the social plugin ("Like") from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304 USA. To protect your data, the plugin is only displayed as a graphic on our website. By clicking on the graphic you will be forwarded to the Facebook homepage. Only then will your data be sent to Facebook. If you don't click on the graphic, there will be no exchange between your browser and Facebook.

Our websites only allow connection to the respective internet networks. For the purpose and scope of data collection and use by the provider, as well as your rights and settings options for data protection, please refer to the data protection information of the respective provider.

Personal data is passed on to third parties by %% BRAND_COMPANY_ALIAS under the following conditions:

• To fulfill the purpose of the contract according to Art. 6 Para. 1 lit. b GDPR to affiliated companies. %% BRAND_COMPANY_ALIAS only shares personal and non-personal data with its affiliates and only as long as is necessary to fulfill the purposes for which they were collected. The term "affiliates" refers to companies that may be named "%% BRAND_COMPANY_ALIAS", or that are jointly owned or controlled;
  
  
• To service providers integrated on the basis of Art. 28 of GDPR, which %% BRAND_COMPANY_ALIAS can commission for the provision of services.

In special circumstances, we transfer personal data to other parties,

• if this is necessary due to court orders or other orders from government or law enforcement agencies to meet legal requirements (Art. 6 Para. 1 lit. c GDPR);
  
  
• in connection with a group event, such as a merger, transfer, restructuring or the sale of all or part of the business of %% BRAND_COMPANY_ALIAS, on the occasion of which %% BRAND_COMPANY_ALIAS is forced to disclose information to a potential buyer and its professional advisors (Art. 6 para. 1 f GDPR),
  
  
• to enforce our contractual rights, to take precautionary measures against liability, to investigate suspected or actual illegal activities or to defend ourselves against claims or claims by third parties (Art. 6 Para. 1 f GDPR)
  
  
• to protect the rights, personal security or property of our customers or the public (Art. 6 Para. 1 b, c, f GDPR).

Some service providers that we use are located outside of your country or process your personal data there. The level of data protection in other countries may not match that of your country.

Amaya Restaurant only transfers data to those countries for which the EU Commission has decided that they have an adequate level of data protection. Alternatively, Amaya Restaurant takes data protection measures to ensure that all recipients achieve an adequate level of data protection. Amaya Restaurant concludes data protection agreements using standard EU clauses.

Your personal data is transmitted to the Amaya Restaurant servers over the Internet via website forms. The transmission is protected.

Amaya Restaurant uses the SSL/TLS transport protocol for this. E-Мail notifications from our servers are sent with STARTTLS encryption. Your data is therefore adequately protected against unauthorized access during transport.