privacy policy
Last updated: 5 November 2026
1. Controller and contact
K2 Gastro & Concepts GmbH
Kaffeegäßchen 2
86150 Augsburg
Phone: +49 821 50474947
Email: mail@max61popup.de
2. Accessing and delivering this website
When you visit this website, data processed includes your IP address, request time, requested page, browser and device information, and technically necessary connection data. This is required to deliver content and provide a secure, stable service. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure provision of our website.
This website is hosted in a united-domains webspace package, supplied through IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. According to the provider, webspace data is held on servers in Germany. IONOS processes technical access data, including referrer, requested page or file, browser, operating system, device type, access time and anonymised IP address, for eight weeks for security and stability. The provider also lists technically necessary cookies. See the webspace privacy information.
Images and logos are hosted on this website; fonts use your device's system fonts. Google Analytics loads only with your consent; see “Google Analytics and Tag Manager” below.
3. Contact by email, phone and enquiry form
When you contact us, we process your contact details and enquiry to reply. For enquiries relating to a reservation or another contract, the legal basis is Article 6(1)(b) GDPR; for other enquiries, it is Article 6(1)(f) GDPR. Our legitimate interest is responding to your message.
The contact and group enquiry forms do not send your entries to a form server. They prepare an email in your own email app. Event enquiries also include the occasion, guest count, preferred dates and, where provided, company, phone number and message. Your preview stays in your browser until you send it. We receive it only after you send the email. We cannot process your enquiry without the contact details needed to reply. Please do not submit confidential health information through the form.
We use Microsoft 365 Business (Office 365) for email. Microsoft processes messages including sender, recipient, content and attachments. Its EU contact is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Information about privacy terms, subprocessors and safeguards for possible transfers outside the EEA is available in the Microsoft Products and Services Data Protection Addendum and the Microsoft privacy statement. We delete enquiries once they have been fully handled and no legal retention obligations or legitimate grounds for continued storage apply. Where a message contains business records subject to retention requirements, the applicable statutory periods apply.
4. Table reservations through Zenchef
We use Zenchef SAS, 63 avenue de Villiers, 75017 Paris, France, for online reservations. The booking window loads automatically when you open our reservation page. This connects to Zenchef and transmits, in particular, your IP address and browser and device information. Zenchef may use cookies and similar storage technologies for the booking function.
The booking function you request serves to initiate and manage a reservation (Article 6(1)(b) GDPR). Strictly necessary storage access for a service expressly requested by you falls under Section 25(2)(2) TDDDG. Any additional purposes, in particular analytics or advertising, require separate consent; simply opening the reservation page does not constitute that consent. You can instead contact us by phone without opening the reservation page.
When you book, we process your contact and reservation details to fulfil the reservation under Article 6(1)(b) GDPR. An online reservation cannot be made without the required information. You can contact us by phone instead. K2 Gastro & Concepts GmbH is responsible for handling your reservation. Zenchef provides the booking system and receives the data necessary to process it. Where Zenchef processes data for its own purposes, this is explained in its privacy information. Reservation data may only be kept as long as needed to handle the booking, resolve related matters or meet statutory retention obligations. A fixed automatic deletion period has not yet been configured in our Zenchef account. Contact us to request deletion; statutory retention obligations remain unaffected.
For information about Zenchef's processing and possible transfers outside the EU, see the Zenchef privacy policy. Clicking “Open booking on Zenchef” leaves our website and opens Zenchef directly.
5. External links and directions
Directions are provided through a simple link to Google Maps. No Google map is embedded. The external page is accessed only when you open the link. The relevant provider's privacy information applies there. The same applies to links to our suppliers.
6. Google Analytics and Tag Manager
With your consent, we use Google Analytics 4 (measurement ID G-Q93NW4PH8N), integrated through Google Tag Manager (container GTM-5TFLTVLC). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This helps us understand which pages and content are used. Data processed includes page views, interactions, referring pages, timestamps, and browser and device information. Your IP address is also processed for technical transmission.
Without consent, our website code loads neither the Google Tag Manager container nor Google Analytics. The legal bases for optional analytics are Article 6(1)(a) GDPR and Section 25(1) TDDDG. Advertising storage, advertising user data and personalised advertising remain disabled in the consent signals we send. The container does not load on the Contact and Celebrations form pages, even with consent.
Google Analytics uses cookies including _ga and _ga_…, which may by default be stored for up to two years and renewed on subsequent use. The separate event-data retention period depends on the Analytics property settings; this setting is not yet fully documented. Details: Information about Analytics cookies.
Recipients may include Google Ireland Limited, Google LLC in the USA and their service providers. Google describes the EU-US Data Privacy Framework and standard contractual clauses among its mechanisms for international transfers. More information: Google privacy policy and Frameworks for data transfers.
We store your decision in local browser storage under “max61-statistics-v1” for 180 days so that we can respect it. The entry contains your choice, a timestamp and the text version; it is not sent to our own server. This storage manages your privacy choice. You may withdraw consent at any time through “Privacy settings” in the footer. The container will then no longer load, and accessible Analytics cookies are deleted. Processing lawfully carried out before withdrawal remains unaffected.
We save an expressly selected language (German or English) in your browser under “max61-language”, until you delete your website data. This setting is used only to remember the language you requested and is not sent to an analytics service. The legal basis is Article 6(1)(f) GDPR (user-friendly delivery); storage of this requested setting is based on Section 25(2)(2) TDDDG.
7. Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time with effect for the future. Contact us using the details above to exercise these rights.
Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. You may object to processing for direct marketing at any time.
You may also complain to a data protection supervisory authority, particularly in your place of habitual residence, workplace or the place of a suspected infringement. For private businesses in Bavaria, the competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA) .