Introduction and Overview

We have prepared this Privacy Policy to explain to you, in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 and the Austrian Data Protection Act (DSG), what personal data we process as the data controller, how we do so, and what options you have to control your data. Data protection is a matter we take very seriously, and we handle your data with the same care we would want for our own.

The terms used have been deliberately chosen to ensure they remain understandable. Where technical terms cannot be avoided, we strive to provide a brief explanation. If anything remains unclear, you can contact us at any time using the contact information listed below.

Data Controller

The data controller within the meaning of Article 4(7) of the GDPR is:

Irfan Ilhan
Otto-Bauer-Gasse 26/1
1060 Vienna
Austria

Phone: +43 1 5878726
Email: office@viennaschnitzel.at

If you have any questions regarding data protection, please contact us directly at the address listed above.

Legal Basis

We process your personal data exclusively on one of the following legal bases:

Consent pursuant to Article 6(1)(a) of the GDPR, if you have given us your consent to process your data, such as when submitting the contact form.

Contract or pre-contractual measures pursuant to Article 6(1)(b) of the GDPR, if we need data to process an inquiry or order.

Legal obligation pursuant to Article 6(1)(c) of the GDPR, if laws require us to process data, such as for accounting purposes.

Legitimate interest pursuant to Article 6(1)(f) of the GDPR, if we have a legitimate interest in the secure and proper operation of our website, provided that your fundamental rights do not override this interest.

In Austria, the Data Protection Act (DSG) and the Telecommunications Act (TKG 2021) supplement these legal bases. We also comply with their provisions.

Your Rights

Under the GDPR, you have comprehensive rights regarding your personal data. Specifically, these include:

The right to obtain information about whether and what data we process about you (Article 15 of the GDPR).

The right to have inaccurate data corrected (Art. 16 GDPR).

The right to have your data erased, provided that no legal retention obligations prevent this (Art. 17 GDPR).

The right to restrict processing (Art. 18 GDPR).

The right to data portability, i.e., to receive your data in a commonly used format (Art. 20 GDPR).

The right to object to processing based on a legitimate interest (Art. 21 GDPR).

You may revoke consent you have previously given at any time with future effect, without affecting the lawfulness of the processing carried out up to that point.

To exercise any of these rights, simply send an informal message using the contact information provided above. If you believe that the processing of your data violates data protection law, you also have the right to file a complaint with the Austrian Data Protection Authority. You can reach them at:

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at

Retention Period

We store personal data only for as long as is necessary for the respective purpose. As soon as the purpose no longer applies and there are no longer any legal retention obligations, the data is deleted or anonymized. For tax-related documents, the statutory retention periods apply, which in Austria are generally seven years. We discuss the specific retention periods for individual processing activities in more detail in the following sections.

Hosting

Our website is hosted by an external service provider. The data collected in this process is stored on that provider’s servers.

The provider is World4You Internet Services GmbH, Hafenstraße 47–51, 4020 Linz, Austria.

When you visit our website, the server automatically records so-called server log files that your browser transmits. This includes the IP address of the accessing device, the date and time of access, the name and URL of the file accessed, the website from which the access originated, the browser used, and, if applicable, your computer’s operating system, as well as the name of your internet service provider. This data is used for technical security, error analysis, and the stable operation of the website. The legal basis is our legitimate interest in a secure and functioning website pursuant to Art. 6(1)(f) of the GDPR.

We have entered into a data processing agreement (DPA) with the hosting provider in accordance with Article 28 of the GDPR. This ensures that the data of our website visitors is processed exclusively in accordance with our instructions and in compliance with the GDPR. Since World4You is headquartered in Austria, processing takes place within the European Union.

Contact Form and Contacting Us

On our contact page, we provide a form that allows you to easily reach us. If you use it, we will process the data you enter in order to respond to your inquiry. This typically includes your name, your email address, and the content of your message.

Before you submit the form, we ask for your explicit consent to this Privacy Policy. The legal basis for the processing is therefore your consent pursuant to Article 6(1)(a) of the GDPR and, if your inquiry is aimed at concluding or initiating a contract, Article 6(1)(b) of the GDPR.

We will retain the data from the contact form until your inquiry has been fully resolved and there are no longer any grounds for further retention. Statutory retention requirements remain unaffected. If you contact us directly via email or phone instead, we will also process your information solely for the purpose of handling your inquiry.

Google Maps

On our contact page, we embed a map from the Google Maps service so that you can easily find our location. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit the page with the embedded map, a connection is established with Google’s servers. In the process, Google may learn that our website was accessed from your IP address. Processing is based on our legitimate interest in providing easily accessible directions, pursuant to Article 6(1)(f) of the GDPR. If consent is requested, processing is based exclusively on this consent pursuant to Article 6(1)(a) of the GDPR, which may be revoked at any time.

Google may also transfer data to the United States in this process. For this transfer, Google relies on the EU-U.S. Data Privacy Framework as well as the European Commission’s Standard Contractual Clauses. For more information on how Google handles user data, please see Google’s Privacy Policy at policies.google.com/privacy.

Links to Third-Party Providers (Foodora and Wolt)

On our website, you will find buttons that redirect you to the Foodora and Wolt ordering platforms. These are simply links. Only when you click on one of these links and access the respective platform do you enter the area of responsibility of the relevant provider. Foodora and Wolt are solely responsible for the data processing that takes place on their platforms. We recommend that you read the privacy policies of the respective platforms before entering any data there.

Cookies and Technically Necessary Services

Our website uses, to the extent possible, only technically necessary means to ensure secure operation. To speed up loading times, we use a caching technique that does not create personal profiles. If cookies that are not strictly necessary are set as part of individual features, this is done only with your consent. You can manage, restrict, or completely prevent the storage of cookies in your browser settings. Please note that in this case, certain features of the website may no longer be fully usable.

Data Security

We take appropriate technical and organizational measures to protect your data against loss, manipulation, and unauthorized access. Our website is delivered via an encrypted HTTPS connection, indicated by the padlock icon in your browser’s address bar. Despite careful security measures, data transmission over the Internet may generally involve security vulnerabilities. It is not possible to provide complete protection against access by third parties.

Changes to This Privacy Policy

We will update this Privacy Policy as soon as changes to our data processing practices require it or if the legal framework changes. The version published on this page is always the current one. We recommend that you review the content from time to time.