This is a translation. In case of discrepancies, the German version applies.
Privacy Policy
As of: September 2026
1. Controller
The controller responsible for data processing on this website is:
S&P Hospitality GmbH
Brandstwiete 46
20457 Hamburg
Germany
Represented by the managing director: Hirenkumar Patel
Phone: +49 40 9478 8946
Email: info@essence-india.de
No data protection officer has been appointed, as there is no legal obligation to do so.
2. General
We process personal data only to the extent necessary to provide this website, handle your enquiries or carry out reservations and events. The legal bases are in particular Art. 6(1)(b) GDPR (contract and pre-contractual measures), Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interests). We do not use any analytics or tracking services and no advertising cookies.
3. Hosting
This website is hosted by Lovable. The provider is Lovable Labs Incorporated, 1 Lincoln St, Boston, MA 02111, USA. Its EU establishment is Lovable Labs Sweden AB, Regeringsgatan 25, 111 53 Stockholm, Sweden.
When you visit the website, technically necessary data is processed in server log files: IP address, date and time of access, page requested, amount of data transferred, referrer URL, browser type and version, and operating system. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable provision of the website.
A data processing agreement pursuant to Art. 28 GDPR has been concluded with Lovable. A transfer to the USA is possible; it takes place on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
4. Email
Our email mailbox is operated by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. A data processing agreement pursuant to Art. 28 GDPR has been concluded with IONOS.
5. Contact by email or phone
If you contact us by email or phone, we process your details to handle your request. The legal basis is Art. 6(1)(b) GDPR where your request relates to a reservation or a contract, and otherwise Art. 6(1)(f) GDPR.
6. Event enquiry
You can use the enquiry forms on our website (Events, Christmas party, Reservation) to enquire about an event. We process: occasion, date, time, number of guests, name and email address, and optionally phone number, company and message. The legal basis is Art. 6(1)(b) GDPR.
Your details are forwarded to us by email via the service Web3Forms (web3forms.com). According to Web3Forms, the content is not stored but only forwarded; server log files are deleted regularly. Web3Forms uses servers of Amazon Web Services. A transfer to third countries such as the USA is possible and takes place on the basis of the EU Standard Contractual Clauses.
In addition, we store each enquiry as a backup copy in the database of our hosting provider (see section 3). Enquiries that do not result in a booking are deleted after 12 months at the latest.
7. Table reservations and gift cards
Table reservations and gift card purchases are handled via allO. The provider is allO Technology GmbH, Rosenheimer Straße 143B, 81671 Munich, Germany. When you click “Reserve a table” or “Gift Cards”, you are taken to a page operated by allO. There, allO processes the data you enter on our behalf, e.g. name, contact details, date, time, number of guests and requests. The legal basis is Art. 6(1)(b) GDPR. A data processing agreement pursuant to Art. 28 GDPR has been concluded with allO. For payments when purchasing gift cards, the privacy notices of the respective payment provider also apply.
Further information: https://allo.restaurant/de/privacy-policy
8. Links to Instagram and Google Maps
Our website contains links to our Instagram profile and to Google Maps. Content from these services is not embedded; data is only transferred when you click a link. The privacy notices of Meta (https://privacycenter.instagram.com/policy/) or Google (https://policies.google.com/privacy) then apply.
9. Cookies and local storage
We do not use cookies for analytics or advertising purposes. Only your language selection is stored in your browser. This is technically necessary for the display you requested (Section 25(2) no. 2 TDDDG); consent is not required for this.
10. Fonts
All fonts are loaded from our own server. There is no connection to Google Fonts or other external font providers.
11. SSL/TLS encryption
For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.
12. Storage period
We store personal data only for as long as necessary for the respective purpose. Statutory retention obligations, in particular under commercial and tax law, remain unaffected.
13. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR), as well as the right to withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). To do so, please contact info@essence-india.de.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22
20459 Hamburg
mailbox@datenschutz.hamburg.de
14. Right to object (Art. 21 GDPR)
Where we process your data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.