Last updated: 09.12.2025
1.Data Controller
The data controller responsible for processing personal data on this website is:
inSpirits Bar
- Email: aW5mb0BpbnNwaXJpdHNiYXIuZGU=
- Address: Johann-Karg-Str.30, 85560 Haar
2.Processing of Personal Data
2.1.Server Log Files
When you visit our website, the following technical information is automatically collected:
IP address
Browser type and version
Operating system
Referrer URL
Date and time of access
HTTP status codes
Purpose: website operation, security and stability
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
3.Hosting & Infrastructure
3.1.Cloudflare Pages (Hosting, DNS, CDN, Security)
Our website is hosted and delivered via Cloudflare Pages.
- Data processed includes: IP address, browser information, URL requests, security logs.
- Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, USA
- Legal basis: Art. 6(1)(f) GDPR
- International transfer: Data may be transferred to the USA (EU–US Data Privacy Framework).
3.2.GitHub Repository
The website source code is stored on GitHub. GitHub does not process any personal data of website visitors.
4.Email Communication
The email inbox aW5mb0BpbnNwaXJpdHNiYXIuZGU= is hosted by One.com.
We process data when you contact us (e.g., email address, message content).
- Legal basis: Art. 6(1)(b) GDPR.
5.Cookies & Consent
We use a custom cookie consent implementation.
Non-essential cookies (e.g., analytics) are only set after consent.
Legal bases:
- Necessary cookies: Art. 6(1)(f) GDPR
- Analytics cookies: Art. 6(1)(a) GDPR (consent)
6.Analytics Tools
6.1.Google Analytics 4
We use Google Analytics 4.
- Data processed: anonymised IP address, device/browser data, interactions, page views.
- Provider: Google Ireland Ltd. / Google LLC
- Legal basis: Art. 6(1)(a) GDPR (consent)
- International transfer: possible transfer to the USA.
6.2.Microsoft Clarity
We use Microsoft Clarity (session recordings, heatmaps).
- Data processed: device information, interaction data, anonymised session identifiers.
- Legal basis: Art. 6(1)(a) GDPR.
7.Embedded Media
7.1.YouTube Videos
Our website embeds YouTube videos using iframe and lazy loading.
Data is processed only when the content is loaded.
- Legal basis: Art. 6(1)(a) GDPR (consent).
7.2.OpenStreetMap
Maps are embedded via OpenStreetMap (Foundation) to visually display geographic information. By using the map function, data is transmitted to OpenStreetMap.
- Data processed: IP address, browser details, technically necessary information for map retrieval.
- Legal basis: Art. 6(1)(f) GDPR (Legitimate interest in an appealing presentation of our online offers and easy findability of the places we have indicated).
8.Social Media Links
We link to Instagram, Facebook and YouTube.
These are simple links, meaning no data is transmitted until you click them.
9.Contact
If you contact us, we process the data you provide (e.g., email address, message).
- Legal basis: Art. 6(1)(b) GDPR.
10.Data Subject Rights
You have the following rights:
- Access (Art. 15 GDPR)
- Rectification (Art. 16)
- Erasure (Art. 17)
- Restriction (Art. 18)
- Data portability (Art. 20)
- Objection (Art. 21)
- Withdraw consent (Art. 7)
- Lodge a complaint
Supervisory authority:
BayLDA, Promenade 27, 91522 Ansbach, Germany
11.Data Retention
We retain personal data only as long as necessary for the stated purposes or as required by law.
12.Data Security
We use modern technical and organisational measures such as:
- SSL/TLS encryption
- Cloudflare firewall & CDN
- Access restrictions
13.International Data Transfers
When using services such as Google, Microsoft or Cloudflare, data may be transferred to the USA.
Such transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.
14.Changes to This Policy
We may update this Privacy Policy from time to time.
15.Contact
For privacy-related inquiries: aW5mb0BpbnNwaXJpdHNiYXIuZGU=