Privacy Policy
Last updated: October 2026
1. Controller
The controller responsible for data processing on this website is:
Deja bu? Muenchner Freiheit GmbH (Sticks & Stones – A Terroir Bar)
Clemensstraße 7, 80803 Munich, Germany
Represented by the Managing Director Justin Gregory Leone
Phone: +49 175 2224521
Email: jt4wine@gmail.com
2. General information on data processing
We process personal data only to the extent necessary to provide this website, answer your enquiries, handle reservations, orders and job applications, or on the basis of your consent. The legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interest).
3. Hosting by Wix
This website is hosted by Wix.com Ltd., Nemal Tel Aviv St. 40, Tel Aviv 6350671, Israel. Wix processes, on our behalf, the data generated when you visit the website and use forms, the shop and the newsletter. The EU Commission has issued an adequacy decision for Israel; where data is transferred to the USA, this is based on EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and reliable website). More information: wix.com/about/privacy
4. Server log files
When you visit our website, information transmitted by your browser is collected automatically, e.g. IP address, date and time of access, browser type and version, operating system and referrer URL. This data is technically necessary to deliver the website and ensure its security (Art. 6(1)(f) GDPR). It is not combined with other data sources.
5. Cookies and consent
Our website uses cookies. We use technically necessary cookies on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies are only set with your consent via our cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future by reopening the cookie settings or deleting the cookies in your browser. Details can be found in our Cookie Policy.
6. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.
7. Contacting us
If you contact us by email, phone or via a contact form, we process the information you provide (e.g. name, email address, phone number, message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or reservation, otherwise Art. 6(1)(f) GDPR. The data is deleted once your enquiry has been fully dealt with and no statutory retention obligations apply.
8. Table reservations via OpenTable
We use the OpenTable service (OpenTable International Limited) for table reservations. When you make a reservation via our website, you are redirected to OpenTable or the OpenTable booking form is loaded. Your reservation data (e.g. name, contact details, date, time, number of guests, notes) is transmitted to OpenTable and made available to us. The legal basis is Art. 6(1)(b) GDPR. For more information, please see OpenTable’s privacy policy: opentable.de/legal/privacy-policy
9. Newsletter
If you subscribe to our newsletter, we use your email address and, where provided, your name to send you information about events, wines and offers. The legal basis is your consent (Art. 6(1)(a) GDPR). The newsletter is sent via Wix. You can unsubscribe at any time using the unsubscribe link in every email or by sending us a message. Your data will be removed from the mailing list after you unsubscribe.
10. Job applications
If you apply for a job with us via our website or by email, we process your application data (e.g. contact details, CV, references) solely for the purpose of the application process (Art. 6(1)(b) GDPR, Section 26 BDSG). If no employment relationship results, we delete your documents no later than six months after the end of the process, unless you have consented to longer storage.
11. Online shop and payment processing
When you order from our online shop (e.g. Somm Box, vouchers), we process the data required to fulfil the contract, such as name, address, email address and order details (Art. 6(1)(b) GDPR). We retain invoice and order data for up to ten years in accordance with commercial and tax law obligations (Art. 6(1)(c) GDPR).
For payments we use external payment service providers to whom your payment data is transmitted directly: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland, and PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg. The privacy notices of the respective provider also apply.
12. Google Maps
We embed maps from Google Maps on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the map is loaded, your IP address is transmitted to Google; this may include a transfer to the USA, which is based on the EU-U.S. Data Privacy Framework. The map is only loaded if you have given your consent via the cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). More information: policies.google.com/privacy
13. Links to social networks
Our website links to our Instagram profile (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). These are simple links; data is only transmitted to Instagram once you click the link and visit the platform, where Meta’s privacy policy applies.
14. Storage period
We only store personal data for as long as necessary for the respective purpose or as required by statutory retention periods (in particular under the German Commercial Code (HGB) and Fiscal Code (AO)). The data is then deleted.
15. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). Simply contact us using the details above.
Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).
16. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
17. Changes to this privacy policy
We update this privacy policy whenever our website, our services or the legal situation change. The version published here applies.
Disclaimer
Liability for content: The content of this website has been created with the greatest care. However, we cannot guarantee that it is accurate, complete or up to date. As a service provider, we are responsible for our own content in accordance with Section 7(1) DDG and general law. Under Sections 8 to 10 DDG, however, we are not obliged to monitor third-party information that is transmitted or stored. As soon as we become aware of a specific legal violation, we will remove the content concerned immediately.
Liability for links: Our website contains links to external third-party websites over whose content we have no influence. The respective provider is always responsible for such content. If we become aware of any legal violations, we will remove such links immediately.
Copyright: The texts, images and graphics on this website are subject to German copyright law. Any reproduction or use beyond the limits of copyright law requires our prior written consent.
In the event of any discrepancy, the German version of this privacy policy shall prevail.