We are looking for service staff and bar helpers - apply here!

Ned Kelly's Australian Bar

Privacy

Data Policy

Last updated: 29 June 2026

1. Data protection at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in the privacy policy set out below this text.

Data collection on this website

Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator, whose contact details you can find in the “Note on the responsible party” section of this privacy policy.

How do we collect your data? On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter into a contact form or provide when making a reservation.

What do we use your data for? Some of the data is collected to ensure that the website is provided without errors. We also use your data to get in touch with you and to provide our services — for example, to process a reservation or a contact enquiry.

What rights do you have regarding your data? You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Definitions

This privacy policy is based on the terms used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easy to read and understand for the public as well as for our guests, customers and business partners. To ensure this, we would like to explain the terms used in advance.

We use, among others, the following terms in this privacy policy:

  • Personal data — Personal data is any information relating to an identified or identifiable natural person (the “data subject”). A natural person is regarded as identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
  • Data subject — A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
  • Processing — Processing is any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  • Restriction of processing — Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.
  • Profiling — Profiling is any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
  • Pseudonymisation — Pseudonymisation is the processing of personal data in such a way that it can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data is not attributed to an identified or identifiable natural person.
  • Controller — The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
  • Processor — A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
  • Recipient — A recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether or not a third party.
  • Third party — A third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or processor, are authorised to process the personal data.
  • Consent — Consent is any freely given, specific, informed and unambiguous indication of the data subject’s wishes, in the form of a statement or a clear affirmative action, by which the data subject signifies agreement to the processing of personal data relating to them.

2. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Note on the responsible party

The party responsible for data processing on this website is:

Daly Gastronomie OHG
Frauenplatz 11
80331 Munich
Germany

Represented by: the management
E-mail: datenschutz@dalygastro.de
Phone: 089 242 198 99
Internet: www.kiliansirishpub.com

Further information about the company (commercial register, VAT ID, etc.) can be found in our imprint.

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Storage period

Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for processing it no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.

Order processing

We work with various service providers who support us in providing our website and processing your data. We have concluded order processing agreements pursuant to Art. 28 GDPR with all of these service providers. These agreements ensure that your personal data is only processed in accordance with our instructions and in compliance with data protection regulations.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising

If data processing is based on Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection under Art. 21 (1) GDPR).

If your personal data is processed for direct advertising purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes (objection under Art. 21 (2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or the place of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock symbol in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

3. Data collection on this website

Contact form

Our contact form does not transmit your enquiry to a server of ours. When you fill it in and submit it, the form opens your own e-mail program with a pre-filled message (your name, your e-mail address and your message) addressed to us; the e-mail is only sent once you send it yourself. We then receive and store this e-mail in order to process your enquiry and in case of follow-up questions. We do not pass this data on without your consent.

Legal basis: This data is processed on the basis of Art. 6 (1) (b) GDPR where your enquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) where this has been requested.

Storage period: The data you send us in this way remains with us until you ask us to delete it, revoke your consent to its storage, or the purpose for storing it no longer applies (e.g. once your enquiry has been dealt with). Mandatory statutory provisions — in particular retention periods — remain unaffected.

Reservations and AI assistant

For the management of our table reservations, we use the system provided by ROSI GmbH (Ahornstr. 10, 82166 Gräfelfing). We have concluded a data processing agreement pursuant to Art. 28 GDPR with this service provider.

Type and scope of processing — When you make a reservation online or via our AI chat or telephone assistant, we process the following data:

  • Name and contact details (telephone number, e-mail address)
  • Reservation details (date, time, number of people)
  • Voluntary information (e.g. the occasion for the reservation or notes on allergies)
  • For telephone calls: automated transcription (conversion to text) of your conversation with our digital assistant

Use of artificial intelligence (AI) — To process your requests efficiently, we use AI-supported chat and voice assistants. These analyse your input in order to make reservations independently. Please note that you are interacting with an automated system. No automated decision in an individual case that produces legal effects concerning you takes place; the final allocation of tables is made by our staff.

Purpose and legal basis — Processing takes place in order to carry out pre-contractual measures and to perform the restaurant booking contract (Art. 6 (1) (b) GDPR). Where you voluntarily provide notes on allergies, this health data is processed on the basis of your explicit communication (Art. 9 (2) (a) GDPR).

Storage period — The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected, unless statutory retention obligations apply. Your data is not passed on to third parties for other purposes unless this is required by law or you have expressly consented.

Server log files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, and IP address. This data is not merged with other data sources. It is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website — for this, the server log files must be recorded.

4. Cookies and consent

When you first visit our website, a consent banner asks which optional cookies and similar technologies you wish to allow. You can accept all of them, reject all of them, or choose individual categories. Your choice is saved in a first-party cookie (“cookie_consent”) so that we do not have to ask you again on every page. Storing this choice is technically necessary and is therefore not itself subject to consent. We ask again after six months, or sooner if the categories change.

To document the consent you have given, as we are required to do (Art. 7 (1) GDPR), we additionally store a minimal record of each decision: a random identifier, the categories you chose, how the choice was made, the version of these categories and the time of the decision. This record contains neither your IP address nor your browser identification and is used solely as proof of consent. The legal basis is our obligation and legitimate interest in being able to demonstrate consent (Art. 7 (1) and Art. 6 (1) (c) / (f) GDPR).

We distinguish the following categories:

  • Strictly necessary — required to operate the website and to provide the services you request. This includes hosting and server log files (see section 3) and the reservation, menu, events and AI assistant functions provided by ROSI GmbH (see “Reservations and AI assistant”). These technologies are always active and cannot be switched off; the legal basis is Art. 6 (1) (b) and (f) GDPR.
  • Maps (Google Maps) — the interactive map shown on our contact and home pages. It is loaded only with your consent (Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG). Until you consent, no map is loaded and no connection to Google is established. Where this involves a transfer of data to the USA, it is made on the basis of your explicit consent (Art. 49 (1) (a) GDPR). See section 6, “Google Maps”.
  • Statistics (Google Analytics) — pseudonymised reach measurement. It is likewise loaded only with your consent (Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG); any associated transfer of data to the USA is based on your explicit consent (Art. 49 (1) (a) GDPR). Until you consent, no analytics is loaded. See section 5.

You can change or withdraw your decision at any time with effect for the future via the “Cookie Settings” button in the footer of every page. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

5. Firebase Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, to analyse the use of the website. Google Analytics is part of Google’s Firebase platform.

Legal basis: Firebase Analytics is only used with your express consent (Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG). Insofar as data is transferred to Google servers in the USA, this transfer likewise takes place on the basis of your explicit consent (Art. 49 (1) (a) GDPR). You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation; once revoked, analytics collection stops with effect for the future.

How it works: Firebase Analytics (Google Analytics 4) uses cookies and similar technologies to collect pseudonymised information about your use of the website — for example pages viewed, approximate region, device and browser type, and interactions. This data is linked to a randomly generated identifier, not to your name, and may be transmitted to and stored on Google servers, including in the USA.

IP addresses: Google Analytics 4 does not log or store IP addresses. Your IP address is used only transiently — for example to derive a coarse, region-level location and to protect the service — and is then discarded; it is not recorded as part of the analytics data. For traffic from the EU/EEA, collection takes place on Google servers within the EU before any onward processing.

Order processing: Google processes the data on our behalf. We have concluded an order processing agreement with Google, which ensures that Google only processes the data in accordance with our instructions and in compliance with data protection regulations.

Storage period: The data stored by Firebase Analytics is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

Revocation of consent: You can revoke your consent to the use of Firebase Analytics at any time by calling up the cookie settings or deleting the corresponding cookies in your browser.

Further information: Further information on data processing by Firebase Analytics can be found in Google’s privacy policy: https://policies.google.com/privacy

6. Hosting and embedded third-party content

Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may relate in particular to IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The host is used on behalf of the controller. We have concluded a data processing agreement pursuant to Art. 28 GDPR with our host, which ensures that your data is only processed in accordance with our instructions and in compliance with data protection law.

Legal basis: The host is used on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in our website being presented as reliably as possible. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TDDDG insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Google Maps

On our contact page and home page we embed maps from Google Maps. The provider is Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The map is loaded only after you have given your consent. Until then, no map is displayed and no connection to Google is established. Once you consent, Google Maps processes data, in particular your IP address, in order to display the map; this data may be transferred to servers in the USA. The map is therefore embedded exclusively on the basis of your consent (Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG); the associated transfer to the USA is made on the basis of your explicit consent (Art. 49 (1) (a) GDPR). You can give this consent directly at the map (“Load map”) or via the cookie banner, and you can withdraw it at any time with effect for the future via the “Cookie Settings” button in the footer (see section 4). Further information can be found in Google’s privacy policy: https://policies.google.com/privacy

Social media links

Our website contains links to our profiles on Instagram and Facebook. These are simple links — no social media plugins or pixels are integrated, and no data is transmitted to these networks merely by visiting our website. Only when you click a link and visit the respective network does that provider process your data in accordance with its own privacy policy.

7. Your rights

You have the right at any time to receive information about your personal data stored by us, its origin and recipients, and the purpose of the data processing. You also have a right to the correction, deletion or restriction of the processing of your personal data, a right to object to processing, and a right to data portability.

Right of access (Art. 15 GDPR)

You have the right to obtain confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to information about that personal data and to the details listed in Art. 15 GDPR.

Right to rectification (Art. 16 GDPR)

You have the right to request the rectification of inaccurate personal data concerning you. You also have the right, taking into account the purposes of the processing, to request the completion of incomplete personal data.

Right to erasure (Art. 17 GDPR)

You have the right to request that we erase personal data concerning you without undue delay, where one of the grounds listed in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request that we restrict processing where one of the conditions listed in Art. 18 GDPR is met.

Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent or on a contract and is carried out by automated means.

Right to revoke consent

You have the right to revoke consent you have given at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Automated decisions in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you. Automated decision-making on the basis of the collected personal data does not take place at our company.

Contact for data protection enquiries

If you have any questions about data protection, about exercising your rights, or any complaints, you can contact us at any time:

Daly Gastronomie OHG
Frauenplatz 11
80331 Munich
Germany

E-mail: datenschutz@dalygastro.de
Phone: 089 242 198 99
Internet: www.kiliansirishpub.com

You can also contact the competent supervisory authority at any time. The competent supervisory authority depends on the federal state of your residence, your work or the alleged infringement. For our company, this is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA).

8. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your next visit. We ask users to inform themselves regularly about the content of the privacy policy.