Legal
Privacy policy
Updated: 5 November 2026
The German version of this page is the legally binding text. This translation is provided so you can read it more easily.
Controller
Giovanni Lo Ponte Tomate, Pizzeria und Ristorante Heinrichstraße 13 36037 Fulda Germany
Phone: 0661 21366 · Email: ristorantepizzeriatomate@gmail.com
What this covers
When you visit this website or send a reservation request, we process personal data only as far as we need it to run the site or to handle your request. We do not use analytics or advertising, and we do not set tracking cookies.
Hosting
The website is hosted on Firebase Hosting by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you open a page, the host processes connection data that the request produces, in particular your IP address, date and time, the address you opened, the amount of data transferred, and your browser identifier. This is required to deliver the site and to keep it secure. The legal basis is Art. 6(1)(f) GDPR. Google may also process data in the United States and refers to the EU-US Data Privacy Framework and standard contractual clauses. Google’s notices: firebase.google.com/support/privacy and policies.google.com/privacy.
Reservations
If you submit the reservation form, we process your name, email address, mobile number, date, number of guests, and the text of your message, for example the time you would like or a note.
We use these details to review the request and to confirm or decline the table. The legal basis is Art. 6(1)(b) GDPR, because we need them to take steps before a contract at your request. Without them we cannot handle the online request. You can still reserve by phone.
The details are forwarded to us by email through FormSubmit (formsubmit.co) and are then kept in our Gmail mailbox. Both providers may process the data outside the European Union in order to deliver or store the message. Their notices: formsubmit.co/privacy and Google’s privacy policy. We do not store the request in our own database. We delete the email once the reservation has passed, unless the law requires us to keep it longer or we need it to defend a claim.
Email and phone
If you call or write to us directly, we process the information you give us in order to answer you. The legal basis is Art. 6(1)(b) GDPR where it concerns a reservation or a visit, and otherwise Art. 6(1)(f) GDPR.
Cookies
A normal visit to this website does not set any cookies. The private admin area sets a technically necessary session cookie after the operator signs in. Guests do not receive it (section 25(2) TDDDG). That is why the site has no consent banner.
Fonts
Fonts are served from our own server. Opening the website does not connect to Google Fonts.
External links
Links to Instagram, WhatsApp, and Google Maps open that provider’s service only after you click them. The provider’s privacy policy then applies. We do not embed social plugins or a map, so a visit to our pages alone does not send data to those services.
Your rights
You have the right to access, rectification, erasure, restriction of processing, and data portability, and the right to object to processing based on Art. 6(1)(f) GDPR. You may lodge a complaint with a supervisory authority. Ours is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, P.O. Box 3163, 65021 Wiesbaden, Germany, phone +49 611 1408-0, poststelle@datenschutz.hessen.de, datenschutz.hessen.de.
We do not make automated decisions, including profiling, under Art. 22 GDPR.