Yemeni Restaurant
Back to the start page

Privacy policy

Privacy policy

Last updated: October 2026

1. Controller The controller for the processing of personal data on this website is: Mirans Technologie GmbH & Co. KG (Jemenitisches Restaurant), Mittelweg 76, 12524 Berlin, Germany, represented by its general partner Mirans Verwaltungs GmbH (HRB 274678 B, Amtsgericht Berlin), which is represented by its managing director Aisha Al-Wesabi. Phone: +49 30 98393579, e-mail:

2. Visiting the website (server log files) When you open this website, our server processes technically necessary data: IP address, date and time, the page requested, browser type. This processing serves the secure and stable operation of the website and protection against abuse (Art. 6 (1) (f) GDPR). We keep the log data only as long as is necessary for these purposes. The website runs on servers of Hetzner Online GmbH (Gunzenhausen, Germany) in Finland, i.e. inside the EU. The provider processes data on our behalf (processing on behalf under Art. 28 GDPR). The fonts used on the website are delivered from our own server; no data is sent to Google.

3. Cookies and local storage We do not use cookies for advertising or analytics and we do not use any tracking or analytics services. For your convenience, your browser stores locally (local storage) your shopping cart, the number of your last order, your language setting, the chosen appearance (light/dark) and, after an order, your name and phone number for the next order. If you sign in with a customer account, we also set two technically necessary cookies: a session cookie so that you stay signed in, and a security cookie that protects against forged requests. This data does not leave your device (except the cookies mentioned, which are sent to our server) and can be deleted at any time in your browser settings. The legal basis is Section 25 (2) no. 2 TDDDG (technically necessary for the service you requested).

4. Orders When you order from us, we process the data you enter: your name, optionally your phone number, table number or pickup, a note on the order, the dishes ordered, the payment method, and the date, time and IP address of the order (to protect against abuse). The processing is necessary to perform the contract (Art. 6 (1) (b) GDPR); storing the IP address is based on our legitimate interest in preventing abuse (Art. 6 (1) (f) GDPR). Your order is sent to our till system ready2order (ready2order GmbH, Austria), where the receipt is created, and shown on the screen in our kitchen (name or table number, dishes). For the kitchen display we use the database Firebase/Firestore from Google (Google Ireland Limited, Ireland; a transfer to the USA is possible on the basis of standard contractual clauses or the EU-US Data Privacy Framework). For tax and commercial law reasons we must keep receipts and accounting data for up to ten years (Art. 6 (1) (c) GDPR, Section 147 AO, Section 257 HGB). Order data without a receipt (for example unpaid or expired orders) is kept only as long as is necessary for processing and for evidence.

5. Customer account and reward points You can create a customer account with us. This is voluntary; you can also order without an account. Data we process: your name, your e-mail address and your password. We store the password only in encrypted form (as a hash); we cannot read it. If you sign in with Google or Apple, we receive your name and e-mail address from them, but no password. If you order with your account, we link the order to your account. We also store your points balance with the point entries (points earned and used, order number, date). Purpose: we provide the account and your order overview, credit points for paid orders and deduct points used as a discount. You receive one point for every full euro of a paid order; 100 points can be used as a 5 euro discount on an order. Points have no cash value and cannot be transferred. Points expire if you have not placed a paid order with your account for 12 months. Legal basis: performance of a contract, i.e. running the customer programme you asked for (Art. 6 (1) (b) GDPR). Signing in with Google or Apple: signing in this way is only an option. Only when you open the sign-in window does your browser load a script from Google (Google Ireland Limited, Ireland) or Apple (Apple Distribution International Ltd., Ireland); your IP address is then sent to that provider. When you sign in with the provider, it confirms your identity to us and sends us your name and e-mail address. We have no influence on any further processing by these providers; their privacy notices apply (Google: https://policies.google.com/privacy, Apple: https://www.apple.com/legal/privacy/). A transfer to the USA is possible on the basis of standard contractual clauses or the EU-US Data Privacy Framework. Recipients: your account data is stored on our servers at Hetzner Online GmbH (see section 2). We do not pass it on for advertising and do not send a newsletter. Storage and deletion: we keep your account for as long as you use it. If you have neither signed in nor ordered for 36 months, we delete the account. You can ask for deletion at any time: write us an e-mail and we will delete your account and your points. Your orders and receipts remain for tax and commercial law reasons (see section 4), but are no longer linked to you as a customer.

6. Payment If you choose an online payment, you are redirected to the payment service provider. It processes your payment data under its own responsibility; we only receive the information whether and in what amount the payment was made. We ourselves neither see nor store card data. - Card payment, Apple Pay, Google Pay: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland (privacy: https://stripe.com/privacy) - PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (privacy: https://www.paypal.com/uk/legalhub/privacy-full) - Card payment at the card terminal in the restaurant: SumUp Payments Limited, Dublin, Ireland (privacy: https://www.sumup.com/en-gb/privacy/) - Cash payment at the till: no data is passed on to third parties. The legal basis is performance of the contract (Art. 6 (1) (b) GDPR).

7. Contact If you contact us by e-mail or phone, we process your details to handle the request (Art. 6 (1) (b) or (f) GDPR) and delete them as soon as they are no longer needed and no statutory retention duties prevent this.

8. External links This website contains links to Google Maps (route planning) and Instagram. Data is transferred to the respective provider only once you click a link; we have no influence on that provider's data processing.

9. Your rights You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21). To exercise them, please contact the address given above. You also have the right to lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, Germany, https://www.datenschutz-berlin.de.

10. Changes We adapt this privacy policy when the website or the legal requirements change. The version published here applies.