Privacy Policy

Information on the processing of personal data pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR). This is a translation for your convenience; the German version is the legally binding one.

1. Controller

The controller responsible for data processing on this website is:

Chaikhana
Owner: Anvarbek Jamgyrchiev
Karl-Marx-Straße 125, 12043 Berlin
Phone: +49 157 32231599
Email: chaikhana.berlin@gmail.com

2. Table reservations

When you reserve a table using the form on this website, we process your name, email address, phone number, the date and time of your visit, the number of guests, the location and table type you selected, and any optional note you add.

Purpose: handling and administering your reservation, including confirmation, modification and cancellation messages.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures and performance of a contract).
Retention: reservations are deleted automatically and in full 180 days after they are created. You may delete your reservation yourself at any time before that using the personal link in your confirmation email.

Providing this data is necessary for a reservation. Without it we cannot accept or confirm your booking.

3. Job applications

If you apply through our careers form, we process your name, email address, phone number, your message and the application file you upload.

Purpose: conducting the application procedure.
Legal basis: § 26(1) BDSG in conjunction with Art. 6(1)(b) GDPR (establishing an employment relationship).
Retention: application documents are deleted automatically 180 days after receipt. This period accounts for potential claims under the German General Equal Treatment Act (AGG). Longer storage in a talent pool only takes place with your explicit consent.

4. Sending emails

We use the service provider Resend (Resend, Inc.) as a processor to send confirmation, modification and cancellation emails. Sending is pinned to the Ireland (EU) region. Your email address, name and reservation details are transmitted for this purpose.

Legal basis: Art. 6(1)(b) GDPR.
Place of processing: delivery runs through servers in Ireland and therefore inside the EU. A data processing agreement under Art. 28 GDPR is in place. No click or open tracking takes place.

5. Internal notifications

So that our service team learns about new reservations, we send an internal notification via Telegram. It contains your name, phone number and your note along with the date, time, number of guests, table type, location and the internal reservation number. Your email address is not transmitted.

Purpose: staff need to greet you at your table, reach you by phone for queries or short-notice changes, and prepare for the occasion you told us about — a birthday, an intolerance or a funeral gathering.
Legal basis: Art. 6(1)(b) GDPR (performance of the reservation).

Recipient and third country: Telegram FZ-LLC, Dubai, United Arab Emirates. There is no adequacy decision by the European Commission for the UAE, and Telegram offers no data processing agreement under Art. 28 GDPR for its bot interface. We disclose this so you can take it into account when booking. If you would rather not have this happen, please reserve by phone on +49 176 32109663 — nothing is then sent to Telegram.

6. Cookies and third-party services

We use no cookies, no analytics or advertising services, and no third-party services that would require your consent. That is why we do not ask you for cookie consent when you visit our website.

Fonts and calendar functions are served from our own server. No connection to external content delivery networks takes place.

7. Server log files

When you visit our website, our hosting providers automatically collect information transmitted by your browser (including IP address, date and time of access, the page requested and the browser used). This is technically necessary in order to deliver the website and to ensure its stability and security.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and trouble-free operation).

Website (frontend): Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Delivery takes place via Vercel's global content delivery network.

Application server (backend): Render Services, Inc., 525 Brannan St, San Francisco, CA 94107, USA. The service runs in the Frankfurt am Main (EU) data centre, where your data is processed.

Database: Neon, Inc., USA. The database sits in the AWS eu-central-1, Frankfurt am Main (EU) region. Your reservation and, where applicable, application data are stored here.

Place of storage and third country: your reservation and application data are processed and stored exclusively in Frankfurt am Main, inside the EU. Render and Neon are US companies, so access from the USA in the course of technical operation cannot be ruled out entirely. The basis is the European Commission's Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR together with a data processing agreement under Art. 28 GDPR in each case. Vercel only delivers the website itself and receives no reservation data.

Log retention: logs are kept by the providers only briefly for error analysis and are deleted automatically.

8. Your rights

You have the following rights regarding your personal data:

• Access to the data we process (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal message to chaikhana.berlin@gmail.com is sufficient to exercise these rights. You can also delete an existing reservation yourself at any time using the link in your confirmation email.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR). The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin
www.datenschutz-berlin.de

10. Data security

We take technical and organisational measures to protect your data against unauthorised access. Reservation and application data can only be accessed by authenticated staff; passwords are stored exclusively as hashes. Transmission is encrypted via HTTPS.

11. Changes to this privacy policy

We update this privacy policy whenever our processing changes. Last updated: 1 September 2026.

See also our Legal Notice.