The following information is provided in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
We collect and process personal data only to the extent necessary for providing our services and fulfilling our legitimate business purposes.
When you make a reservation through our website or order3000 platform, we collect:
For online orders, we collect delivery address, order details, and payment information necessary to process and deliver your order.
If you subscribe to our newsletter via Ghost Platform, we collect your email address and name (optional) with your explicit consent.
We use OpenPanel (self-hosted) to analyse website usage patterns. This data is anonymised and does not identify individual users.
We process your personal data in accordance with GDPR principles of lawfulness, fairness, and transparency.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law.
You may request deletion of your data at any time, subject to legal retention requirements.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
We share your data only with trusted service providers necessary for our operations, all of whom are GDPR compliant:
Some of our service providers operate from Switzerland, which the EU Commission has recognised as providing adequate data protection. For any transfers outside the EEA, we ensure appropriate safeguards are in place.
We never sell your personal data to third parties.
Under GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, please contact us at: kontakt@thamarai.de
You have the right to lodge a complaint with the relevant data protection supervisory authority in Germany if you believe your rights have been violated.