Reservations
Menu sessions, private events, and restaurant tables all create a reservation request. We use the data to handle that request, to confirm, change, or cancel it, and to contact you about it.
| Data | Why | Legal basis | How long |
|---|
| Name, email, phone, date, guest count, reference, status | Handle the request and contact you about it | Steps toward a contract, then the contract once we accept the reservation | Name, email, phone, and notes are deleted one month after the visit date. The booking record stays, without those details, so we can keep counts and status. |
| Notes, including allergies or seating needs | Prepare and host the visit safely | The reservation. Allergy details are health data. We use them only because you chose to send them for that meal. | Deleted with the other personal details, one month after the visit date. |
A request is not a confirmed reservation until we mark it paid or confirmed. Payment, if any, is arranged outside this website. We do not take card details here.
Controller
Gudde Kascht S.à r.l., 20 Rue Henerecht, L-6370 Haller, Luxembourg, RCS B 208.223, VAT LU28719581, is the controller. There is no separate data protection officer. For privacy requests, email info@guddekascht.lu or call +352 621 742 913.
Emails
Reservation messages, cancellation notices, and the single review invitation are sent through Twilio SendGrid. SendGrid receives the recipient address and the content of the message in order to deliver it. Service messages are part of the reservation. The review email is sent the morning after the visit to paid or confirmed menu guests, and to restaurant or private-event bookings that were not cancelled. You can ignore it. The legal basis for that one email is our legitimate interest in hearing how the visit went.
Newsletter signup
The home page and the La Bottega contact section still include a field where you can leave an email address. If you submit it, we store that address. The legal basis is your consent. You can ask us to delete it at any time at info@guddekascht.lu. Ben's Table does not use this field.
Cookies and analytics
Analytics cookies run only after you accept them. Your choice is stored in the browser. Details are in the cookie policy.
Who receives the data
- Staff who manage reservations.
- Twilio SendGrid, to deliver email.
- The provider that hosts the website and the reservation database.
- Google, for Analytics, only if you accept analytics cookies, and as the destination of the review link if you choose to open it.
- Public authorities when the law requires it.
We do not sell personal data. SendGrid and Google may process data outside the European Economic Area. Where that happens, the transfer relies on the safeguards those providers offer under the GDPR, such as standard contractual clauses.
Your rights
You can ask for access, correction, deletion, restriction, or a copy of your data, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it. You can complain to the Commission nationale pour la protection des données (CNPD), 15 Boulevard du Jazz, L-4370 Belvaux, cnpd.public.lu.
Security
Pages are served over HTTPS. Access to reservation records is limited to the team that manages them. Personal details on a reservation are cleared automatically one month after the visit date.
