Privacy Policy
This is an English courtesy translation. The legally binding version is the German Datenschutzerklärung.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
NEO – Gastronomie GmbH
Zollhofgarten 2 · 69115 Heidelberg
Email: info@neo-heidelberg.de · Phone: 06221 7239099
2. General information on data processing
As a rule, we only process personal data of our visitors insofar as this is necessary to provide a functional website and to handle enquiries. Without your consent, this website uses no cookies for marketing or tracking purposes and loads no advertising services; the Google advertising tag is only used with your consent (see section 8). Transmission is always TLS-encrypted (https).
3. Hosting (Vercel)
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (“Vercel”). When the website is accessed, Vercel processes technically necessary connection data (including IP address, date and time of access, page accessed, browser type) in order to deliver the website and ensure the security and stability of operation. The legal basis is our legitimate interest in the secure and efficient provision of the website (Art. 6(1)(f) GDPR). A data processing agreement is in place with Vercel; insofar as data is transferred to the USA, this is done on the basis of the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Server logs are automatically deleted by Vercel after a short time.
4. Reach measurement (Vercel Analytics & Speed Insights)
To improve our offering, we use Vercel Analytics and Vercel Speed Insights. These services work without cookies and without cross-device tracking: aggregated, anonymised usage data is collected (e.g. page views, loading times, approximate region of origin, device type); the IP address is not stored permanently and visitors are not identified personally. The legal basis is our legitimate interest in the statistical evaluation and technical optimisation of the website (Art. 6(1)(f) GDPR).
5. Contact and event enquiries
If you write to us by email or use our enquiry form (e.g. for reservations, wedding, corporate, event or group enquiries), we process the data you provide (name, email address, and where applicable phone number, occasion, preferred date, number of guests and your message) exclusively to handle and respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (performance of pre-contractual measures) or Art. 6(1)(f) GDPR. Your data is deleted as soon as it is no longer required for processing and no statutory retention obligations conflict with this. We handle table reservations via our service provider Gastronaut; their privacy notice applies additionally.
Enquiry form: the details from the form are passed via our server to the email delivery service Resend (Resend, Inc., USA) and delivered to us by email to info@neo-heidelberg.de and to the events team of the BLISS Group (sales@bliss-group.de), of which NEO is a part. The sole purpose is to handle and respond to your enquiry; the legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. Resend processes the data solely for delivery on our behalf under a data processing agreement; transfers to the USA are based on the EU Standard Contractual Clauses. The form data is not stored on the website itself. We delete enquiry emails once the enquiry has been fully handled and no statutory retention obligations apply; if a contract is concluded, the commercial and tax retention periods apply (up to six or ten years). A hidden extra field only serves to block automated spam submissions and contains no personal data.
6. Newsletter
To receive our newsletter, we process your email address on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future — via the unsubscribe link in the newsletter or informally to info@neo-heidelberg.de. After withdrawal, your email address is removed from the distribution list.
Sign-up uses a double opt-in: your address is only added to the list after you click the link in the confirmation email. Sending and managing sign-ups is handled on our behalf by the email service Resend (Resend, Inc., USA) under a data processing agreement; transfers to the USA are based on the EU Standard Contractual Clauses.
7. External links and services
Our website links to external offerings (e.g. the Gastronaut reservation system, our Sushi 2 Go pick-up ordering page, Instagram, Facebook and Tripadvisor). When you click these links, you leave our website; the privacy policy of the respective provider then applies. Content from these providers is not embedded on our website.
8. Google advertising tag (only with consent)
Only after you click “Accept” in the cookie notice do we load the Google advertising tag (Google Ads, account AW-11550875624) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It lets us measure whether our ads lead to reservations, enquiries, calls or emails (conversion tracking): we count that an enquiry form was sent or that the reservation link, a phone number or an email address was clicked, not their content. Personalised advertising and remarketing are switched off. The ad account belongs to the BLISS Group. The cookies (_gcl_au and related) are stored for up to 90 days. If you arrive via an ad, Google may also set cookies on its own domains (such as google.com or doubleclick.net); these can only be deleted in your browser settings.
Usage data such as IP address, device information and clicks are transmitted to Google, including to the USA. Google is certified under the EU-US Data Privacy Framework. We use Google’s consent mode so that the tag is not loaded at all before you consent. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Without consent nothing is loaded from Google and the website still works in full.
We store your choice for twelve months in your browser’s local storage so the notice does not appear on every visit; this is technically necessary (Section 25(2) TDDDG). You can withdraw or change it at any time with effect for the future via “Cookie settings” in the footer of every page or here:
9. Your rights
You have the following rights with regard to the personal data concerning you: the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). You can withdraw any consent given at any time. You also have the right to lodge a complaint with a data protection supervisory authority; the competent authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.
10. Currency of this policy
As of October 2026. We will adjust this privacy policy as soon as the data processing on this website changes.