This English version is provided for your convenience. In case of any discrepancy, the German version shall prevail.

 

 

 

LEGAL NOTICE

 

Information pursuant to Section 5 DDG (German Digital Services Act)

Rossetti UG (haftungsbeschränkt)
Rossetti – Cucina Mediterranea
Theresienstraße 22
94032 Passau
Germany

 

Represented by

Managing Director: Mattia Rossetti

 

Contact

Phone: +49 851 21338378
Email: info@rossetti-passau.de

 

Commercial register

Entered in the commercial register
Register court: Amtsgericht Passau (Local Court of Passau)
Registration number: HRB 12833

 

VAT identification number

VAT identification number pursuant to Section 27a of the German VAT Act (UStG): DE452728683

 

Supervisory authority

Authority responsible for the restaurant licence: City of Passau, Public Order Office (Ordnungsamt), Rathausplatz 2, 94032 Passau

 

Responsible for content pursuant to Section 18 (2) MStV (German Interstate Media Treaty)

Mattia Rossetti, Theresienstraße 22, 94032 Passau

 

Consumer dispute resolution

We are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board (Section 36 VSBG).

 

Liability for content

As a service provider, we are responsible for our own content on these pages in accordance with general laws pursuant to Section 7 (1) DDG. According to Sections 8 to 10 DDG, however, we are not obliged as a service provider to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information under general laws remain unaffected. However, liability in this respect is only possible from the time we become aware of a specific infringement. As soon as we become aware of such infringements, we will remove this content immediately.

 

Liability for links

Our website contains links to external third-party websites over whose content we have no control. We therefore cannot accept any liability for such third-party content. The respective provider or operator of the linked pages is always responsible for their content. The linked pages were checked for possible legal violations at the time of linking; no illegal content was recognisable at that time. Permanent monitoring of the content of linked pages is not reasonable without concrete evidence of an infringement. As soon as we become aware of infringements, we will remove such links immediately.

 

Copyright

The content and works created by the site operator on these pages are subject to German copyright law. Reproduction, editing, distribution and any kind of use beyond the limits of copyright law require the written consent of the respective author or creator. Downloads and copies of this site are permitted for private, non-commercial use only. Insofar as the content on this site was not created by the operator, the copyrights of third parties are respected. Should you nevertheless become aware of a copyright infringement, please let us know. As soon as we become aware of infringements, we will remove such content immediately.

 

 

 

PRIVACY POLICY

 

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

 

Rossetti UG (haftungsbeschränkt)
represented by its Managing Director Mattia Rossetti
Theresienstraße 22, 94032 Passau, Germany
Phone: +49 851 21338378
Email: info@rossetti-passau.de

 

No data protection officer has been appointed, as the legal requirements for a mandatory appointment are not met.

 

2. General information

The protection of your personal data is important to us. We process personal data exclusively within the framework of the statutory provisions, in particular the GDPR, the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG). This privacy policy informs you about which data we collect when you visit our website and contact us, for what purpose we use it and what rights you have.

 

Personal data is any information relating to an identified or identifiable natural person, for example name, address, email address, phone number or IP address.

 

3. Hosting and provision of the website (Wix)

Our website is built and hosted on the Wix platform. The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel, or, for users in the European Economic Area, Wix Online Platforms Limited, 1 Grant's Row, Dublin 2 D02HX96, Ireland (together "Wix").

 

When you visit our website, Wix automatically collects information transmitted by your browser in so-called server log files. This includes in particular:

 

• IP address of the requesting device (shortened or pseudonymised where technically possible)

• date and time of access

• page or file accessed and amount of data transferred

• browser type and version, operating system, language

• referrer URL (the previously visited page)

 

Processing this data is technically necessary to provide the website, to ensure system security and stability and to defend against attacks. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure and functional website). The log files are deleted by Wix in accordance with its applicable retention periods.

 

Wix processes data on our behalf; we have concluded a data processing agreement with Wix pursuant to Art. 28 GDPR. Wix operates data centres in the EU, the USA and Israel. An adequacy decision of the European Commission exists for Israel. Transfers to the USA are based on the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses. Further information can be found in the Wix privacy policy at https://www.wix.com/about/privacy.

 

4. Cookies and similar technologies

Our website uses cookies. Cookies are small text files that are stored on your device. We distinguish between:

 

• Strictly necessary cookies: these are required to operate the website (e.g. security, session and load-balancing cookies from Wix and the storage of your cookie settings). Their use is permitted without consent under Section 25 (2) No. 2 TDDDG; the processing of personal data is based on Art. 6 (1) (f) GDPR.

• Functional and analytics cookies: these are only set if you have given your consent via our cookie banner. The legal basis is Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future via the cookie settings of the website.

 

You can configure your browser to reject cookies or to delete them after your visit. If cookies are completely disabled, the functionality of the website may be limited.

 

5. Visitor statistics (Wix Analytics)

If you have given your consent, we use the visitor statistics integrated in Wix to analyse the use of our website (e.g. page views, time spent, approximate origin by country or region, device used). The data is processed in pseudonymised form and is not combined with other data about you. The legal basis is Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the cookie settings.

 

6. Web fonts (Google Fonts)

To display fonts consistently, fonts from Google Fonts are loaded on some pages. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you open such a page, your browser connects to Google's servers to load the font files; in the process, your IP address is transmitted to Google. A transfer to the USA cannot be ruled out; Google is certified under the EU-U.S. Data Privacy Framework. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a consistent and appealing presentation). Further information: https://policies.google.com/privacy.

 

7. Contact, contact form and reservations

If you contact us by email, via our contact form, by phone or in person, in particular to reserve a table, we process the data you provide (name, phone number, email address, date, time, number of guests and, where applicable, special requests such as allergies or intolerances) solely to handle your request and to carry out the reservation.

 

For enquiries and reservation requests, a contact form is available on our website. The data you enter there (e.g. name, email address, phone number, your message and, where applicable, date, time and number of guests) is transmitted in encrypted form, stored in our Wix account using the "Wix Forms" feature and also forwarded to us by email. Wix processes this data as our processor (see section 3). A reservation request sent via the form only becomes binding once we have confirmed it.

 

The legal basis is Art. 6 (1) (b) GDPR (contract or pre-contractual measures); for general enquiries Art. 6 (1) (f) GDPR (legitimate interest in responding). We process voluntary information about allergies or intolerances on the basis of your consent pursuant to Art. 9 (2) (a) GDPR, solely for the preparation of your meals.

 

The data is deleted as soon as it is no longer required for the purpose – reservation data usually no later than 30 days after the reservation date, unless statutory retention obligations apply. The data is not passed on to third parties.

 

8. Social media presence

We operate profiles on Instagram and Facebook (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). Our website contains links to these profiles. For the display of Instagram posts on our website, see section 9. When you access or interact with our profiles, the privacy policy of the respective provider applies: https://privacycenter.instagram.com/policy. We are jointly responsible with Meta for the processing of usage data that takes place there (Art. 26 GDPR); the legal basis for our presence is Art. 6 (1) (f) GDPR (information and communication with guests).

 

9. Instagram feed

On our website, we display posts from our Instagram profile using the Wix app "Instagram Feed". When you open a page containing this feed, images and content may be loaded directly from servers of Meta Platforms Ireland Limited (Merrion Road, Dublin 4, Ireland); in the process, your IP address in particular is transmitted to Meta. A transfer to the USA cannot be ruled out; Meta is certified under the EU-U.S. Data Privacy Framework.

 

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in an appealing presentation of our restaurant). Insofar as information is stored on or read from your device (e.g. cookies), this only takes place with your consent via our cookie banner (Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR).

 

If you click on a post in the feed, you will be redirected to Instagram. The privacy policy of Instagram applies to the processing that takes place there: https://privacycenter.instagram.com/policy.

 

10. Recipients and transfers to third countries

We only pass on personal data where this is necessary to fulfil the purposes stated, in particular to Wix as our hosting provider (processor). Transfers to third countries outside the European Economic Area only take place if an adequacy decision of the European Commission exists (Israel; USA for companies certified under the EU-U.S. Data Privacy Framework) or if appropriate safeguards such as the EU Standard Contractual Clauses have been agreed.

 

11. Storage period

We store personal data only for as long as is necessary for the purposes stated or as required by statutory retention periods (in particular under commercial and tax law, usually six to ten years). The data is then deleted or anonymised.

 

12. Your rights

You have the following rights with regard to the personal data concerning you:

 

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR)

• Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests.

 

To exercise your rights, an informal message to the contact details above is sufficient.

 

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

 

13. Data security

Our website is delivered using SSL/TLS encryption (recognisable by "https://" and the padlock symbol in the address bar). This means that data you transmit to us cannot be read by third parties. In addition, we take appropriate technical and organisational measures to protect your data against loss, manipulation and unauthorised access.

 

14. No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

 

15. Changes to this privacy policy

We reserve the right to amend this privacy policy if the legal situation, our website or the services used change. The version published on this page applies.

 

Last updated: September 2026

​​​