Privacy Policy

Back to Home
This website is operated by ALTSTADT RESTAURANT KUEN KG, Herzog Friedrichstraße Corner Hofgasse 2, 6020 Innsbruck ("we" or "us").

We describe here how we, as website operators and therefore as data protection controllers, process your personal data in connection with this website, which is accessible under the domain https://www.altstadtrestaurant.at (hereinafter referred to as "our website").

1. Introduction and Overview

We will process your personal data for the following purposes, relying in particular on the legal bases mentioned:

  • to provide you with this website and to further improve and develop it (based on our predominant legitimate interest [pursuant to Art. 6 para. 1 lit f GDPR]);
  • to create usage statistics and thereby continuously improve our online offering and the user experience of our website (based on your consent [pursuant to Art. 6 para. 1 lit a GDPR]);
  • to detect, prevent, and investigate attacks on our website (based on our predominant legitimate interest [pursuant to Art. 6 para. 1 lit f GDPR]);
  • to respond to your inquiries (based on your consent [pursuant to Art. 6 para. 1 lit a GDPR]).

2. Purposes and Legal Bases of Data Processing

We have drafted this privacy policy (Version 20.11.2022-112338103) in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws to explain to you as data subjects what personal data (hereinafter referred to as "data") we, as controllers, and our commissioned data processors (e.g., providers) process, will process in the future, and what lawful options you have. The terms used are to be understood in a gender-neutral manner. In short: We provide you with comprehensive information about the data we process about you.

This privacy policy applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (data processors). By personal data, we mean information within the meaning of Art. 4 No. 1 GDPR, such as a person's name, email address, and postal address. The processing of personal data ensures that we can offer and bill for our services and products, whether online or offline. The scope of this privacy policy includes:

1. All online presences (websites, online shops) that we operate.

2. Social media presences and email communication.

3. Mobile apps for smartphones and other devices.

In a Nutshell: The privacy policy applies to all areas where personal data within the company is processed through the mentioned channels. If we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.

In the following privacy policy, we provide you with transparent information regarding the legal principles and regulations, i.e., the legal bases of the General Data Protection Regulation, which enable us to process personal data. Concerning EU law, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can of course read this EU General Data Protection Regulation online on EUR-Lex, the access point to EU law, at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679.

We only process your data if at least one of the following conditions applies:

1. Consent (Article 6(1)(a) GDPR): You have given us your consent to process data for a specific purpose. An example would be storing the data you entered in a contact form.

2. Contract (Article 6(1)(b) GDPR): To fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a purchase contract with you, we need personal information beforehand.

3. Legal obligation (Article 6(1)(c) GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally obliged to keep invoices for accounting purposes. These usually contain personal data.

4. Legitimate interests (Article 6(1)(f) GDPR): In the case of legitimate interests that do not infringe upon your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.

Other conditions such as the exercise of tasks carried out in the public interest or the exercise of official authority, as well as the protection of vital interests, generally do not apply to us. If such a legal basis should nevertheless be relevant, it will be indicated at the relevant point.

In addition to the EU regulation, national laws also apply:

In Austria, this is the Federal Act on the Protection of Natural Persons with regard to the Processing of Personal Data (Data Protection Act), abbreviated as DSG. In Germany, the Federal Data Protection Act, abbreviated as BDSG, applies. If additional regional or national laws are applicable, we will inform you in the following sections.

The general criterion for us is that we only store personal data for as long as it is absolutely necessary for the provision of our services and products. This means that we delete personal data as soon as the reason for data processing no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased, for example, for accounting purposes.

If you wish to have your data deleted or revoke your consent to data processing, the data will be deleted as soon as possible and to the extent that there is no obligation to store it.

We will inform you below about the specific duration of each data processing, if we have further information about it.

In accordance with Articles 13 and 14 of the GDPR, we inform you about the following rights that you are entitled to, to ensure fair and transparent data processing:

According to Article 15 of the GDPR, you have the right to information about whether we process data about you. If this is the case, you have the right to receive a copy of the data and to learn the following information:

the purpose for which we are processing the data;

he categories, i.e., the types of data being processed;

who receives this data, and if the data is transferred to third countries, how security can be guaranteed;

how long the data will be stored;

the existence of the right to rectification, erasure, or restriction of processing and the right to object to processing;

that you have the right to lodge a complaint with a supervisory authority (links to these authorities can be found below);

the origin of the data, if we did not collect it from you;

whether profiling is carried out, i.e., whether data is automatically evaluated in order to create a personal profile of you.

According to Article 16 of the GDPR, you have the right to rectification of data, which means that we must correct data if you find errors.

According to Article 17 of the GDPR, you have the right to erasure ("right to be forgotten"), which means that you may request the deletion of your data.

According to Article 18 of the GDPR, you have the right to restriction of processing, which means that we may only store the data but not further use it.

According to Article 20 of the GDPR, you have the right to data portability, which means that upon request, we will provide you with your data in a commonly used format.

According to Article 21 of the GDPR, you have the right to object, which, upon enforcement, brings about a change in processing.

If the processing of your data is based on Article 6(1)(e) (public interest, exercise of official authority) or Article 6(1)(f) (legitimate interest), you have the right to object to the processing. We will then promptly review whether we can comply with this objection legally.

If data is used for direct marketing purposes, you can object to this type of data processing at any time. We may not use your data for direct marketing after that.

If data is used for profiling, you can object to this type of data processing at any time. We may not use your data for profiling after that.

According to Article 22 of the GDPR, you may have the right not to be subject to a decision based solely on automated processing (for example, profiling).

According to Article 77 of the GDPR, you have the right to lodge a complaint. This means that you can complain to the data protection authority at any time if you believe that the processing of personal data violates the GDPR.

In a Nutshell: You have rights - do not hesitate to contact the responsible entity listed above!

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. For Austria, this is the data protection authority, whose website you can find at https://www.data-protection-authority.gv.at/. In Germany, there is a data protection officer for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). The following local data protection authority is responsible for our company:

Austrian Data Protection Authority

Head: Mag. Dr. Andrea Jelinek

Address: Barichgasse 40-42, 1030 Vienna

Telephone: +43 1 52 152-0

Email: dsb@dsb.gv.at

Website: https://www.bfdi.bund.de/EN/Home/home_node.html

To protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data. This makes it as difficult as possible, within our capabilities, for third parties to infer personal information from our data.

Article 25 of the GDPR speaks of "data protection by design and by default", which means that both software (e.g., forms) and hardware (e.g., access to the server room) should always prioritize security and implement appropriate measures. Below, if necessary, we will further discuss specific measures.

TLS encryption with HTTPS

TLS, encryption, and HTTPS sound very technical, and they are. We use HTTPS (Hypertext Transfer Protocol Secure) to securely transmit data over the internet. This means that the entire transmission of data from your browser to our web server is secured - no one can "listen in"

In doing so, we have introduced an additional layer of security and comply with data protection by design (Article 25(1) GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission over the internet, we can ensure the protection of confidential data.

You can recognize the use of this data transmission security by the small padlock symbol at the top left of the browser, to the left of the web address (e.g., examplepage.com), and the use of the HTTPS scheme (instead of HTTP) as part of our internet address.

If you want to learn more about encryption, we recommend searching Google for "Hypertext Transfer Protocol Secure wiki" to find good links to further information.

3. Transmission of your personal data

If we disclose, transmit, or otherwise grant access to data to other individuals and companies (processors such as technical service providers for the provision of our website, affiliated companies, or other third parties) as part of the processing mentioned above, we do so only if it is legally permitted (such as transfers to a payment service provider to fulfill contracts under Article 6(1)(a) GDPR), if you have consented, or if we are legally obligated to do so or based on our legitimate interests (e.g., when using agents, etc.).

If we engage third parties to process data based on a so-called "data processing agreement," this is done in accordance with Article 28 of the GDPR.

Some of the recipients mentioned above are located outside your country or process your personal data there. The level of data protection in other countries may not be the same as in your country. However, we only transfer your personal data to countries for which the EU Commission has decided that they have an adequate level of data protection, or we implement measures to ensure that recipients have an adequate level of data protection. For example, we conclude standard contractual clauses for the transfer of personal data to third countries in accordance with Regulation (EU) 2016/679 or ensure their conclusion by our service providers.

4. Cookies, similar technologies, and tracking

This website uses so-called cookies. A cookie is a small file that can be stored on your device when you visit a website. To provide you with an overview of the cookies used on our website, a so-called "cookie banner" appears when you first visit our website. This allows you to manage your cookie settings according to your preferences. If you select "Reject All," all cookies and similar technologies - except for technically necessary cookies - will be blocked, and, due to your lack of consent, will not be loaded, preventing any associated data processing.

Technically necessary cookies are used to provide users with essential functions on a website. For example, they can be used to facilitate navigation on a website, enable you to continue using a website from where you left off, store your preferences and settings (e.g., language, etc.), or save your shopping cart when you revisit the website. Setting these technically necessary cookies does not require your consent, as it is in our legitimate interest as website operators to provide you with a functioning website (legal basis of overriding legitimate interest of the data controller according to Article 6(1)(f) GDPR).

Please note that blocking or deleting cookies may affect your experience of using the website and may prevent you from enjoying the full functionality of the website.

Non-essential cookies serve the purposes of "analysis" or "marketing" and require your consent. Information obtained from the use of these technologies allows us to learn more about the interests of our users through aggregated statistics, continuously improve our web offering, measure the success of our marketing measures, align with the interests of our users and customers, and only show you advertisements that are most likely to interest you.

Most of the cookies on this website are so-called session cookies. They are automatically deleted when you leave our website. Persistent cookies, on the other hand, remain on your computer until you manually delete them in your browser. We use such persistent cookies to recognize you when you visit our website again. You can see the storage duration of a specific cookie under the provider list.

5. Webhosting

Webhosting Summary
👥 Affected Individuals: Website Visitors

🤝 Purpose: Professional hosting of the website and ensuring its operation

📓 Processed Data: IP address, time of website visit, browser used, and other data. More details can be found below or with the respective web hosting provider.

📅 Storage Duration: Dependent on the respective provider, but typically 2 weeks

⚖️ Legal Basis: Article 6(1)(f) GDPR (Legitimate Interests)

When you visit websites nowadays, certain information – including personal data – is automatically generated and stored, including on this website. This data should be processed sparingly and only with justification. By website, we mean the entirety of all web pages on a domain, i.e., everything from the homepage to the very last subpage (like this one). By domain, we mean, for example, example.com or sampleexample.com.When you want to view a website on a computer, tablet, or smartphone, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari. We simply call them browsers or web browsers.To display the website, the browser must connect to another computer where the code of the website is stored: the web server. Operating a web server is a complicated and resource-intensive task, which is typically handled by professional providers, known as hosting providers. They offer web hosting services and ensure reliable and error-free storage of website data. Quite a lot of technical terms, but please bear with me, it gets even better!When the browser on your computer (desktop, laptop, tablet, or smartphone) establishes a connection and during the data transfer to and from the web server, personal data processing may occur. On one hand, your computer stores data, and on the other hand, the web server also needs to store data for a certain period to ensure proper operation.

6. How long is data stored?

Generally, the above-mentioned data is stored for two weeks and then automatically deleted. We do not share this data, but we cannot rule out the possibility that authorities may access this data in cases of unlawful behavior.

In a Nutshell: Your visit is logged by our provider (the company that runs our website on special computers, called servers), but we do not share your data without consent!

7. Legal Basis

The legality of processing personal data within the scope of web hosting is based on Article 6(1)(f) of the GDPR (legitimate interests), as the use of professional hosting with a provider is necessary to securely and user-friendly present the company on the Internet and to potentially track attacks and claims arising from it. Typically, there is a contract between us and the hosting provider for data processing pursuant to Article 28 of the GDPR, ensuring compliance with data protection and guaranteeing data security.

8. 1&1 IONOS Webhosting Privacy Policy

We use IONOS by 1&1 to host our website. In Germany, 1&1 IONOS SE is located at Elgendorfer Str. 57, 56410 Montabaur, and in Austria, you can find 1&1 IONOS SE at Gumpendorfer Straße 142/PF 266, 1060 Vienna. IONOS offers the following services related to web hosting: Domain, Website & Shop, Hosting & WordPress, Marketing, E-Mail & Office, IONOS Cloud, and Server. As explained in the "Automatic Data Storage" section, web servers, such as those provided by IONOS, store data from each website visit. If you would like to learn more about the privacy policy for IONOS websites, please visit the privacy policy on ionos-group.com

9. Data Processing Agreement (DPA) with IONOS

We have entered into a Data Processing Agreement (DPA) with IONOS in accordance with Article 28 of the General Data Protection Regulation (GDPR). The DPA outlines the terms and conditions under which IONOS processes personal data on our behalf. It ensures that IONOS may only process data received from us according to our instructions and in compliance with the GDPR. You can find the link to the Data Processing Agreement (DPA) at https://www.ionos.de/hilfe/datenschutz/allgemeine-informationen-zur-datenschutz-grundverordnung-dsgvo/auftragsverarbeitung/.

10. Website builder systems

Summary of Website Builder Systems Privacy Policy
👥 Individuals affected: Website visitors

🤝 Purpose: Optimization of our service

📓 Processed data: Data such as technical usage information like browser activity, clickstream activities, session heatmaps, as well as contact details, IP address, or geographical location. More details can be found below in this privacy policy and in the provider's privacy policy.

📅 Storage duration: Depends on the provider

⚖️ Legal basis: Art. 6 para. 1 lit. f GDPR (Legitimate interests), Art. 6 para. 1 lit. a GDPR (Consent)

We use a website builder system for our website. Website builder systems are special forms of Content Management Systems (CMS). With a website builder system, website operators can easily create a website without programming knowledge. In many cases, web hosts also offer website builder systems. By using a website builder system, personal data may also be collected, stored, and processed. In this privacy text, we provide general information about data processing by website builder systems. For more detailed information, refer to the provider's privacy policy.

The biggest advantage of a website builder system is its ease of use. We aim to provide you with a clear, simple, and user-friendly website that we can manage and maintain ourselves without external support. A website builder system now offers many helpful functions that we can use without programming knowledge. This allows us to design our web presence according to our preferences and provide you with an informative and enjoyable experience on our website.

The exact data stored depends on the website builder system used. Each provider processes and collects different visitor data. However, technical usage information such as operating system, browser, screen resolution, language and keyboard settings, hosting provider, and the date of your website visit are usually collected. Tracking data (e.g., browser activity, clickstream activities, session heatmaps, etc.) may also be processed. Additionally, personal data such as contact details like email address, telephone number (if provided), IP address, and geographical location data may be collected and stored. For detailed information on the data collected, refer to the provider's privacy policy.

We will inform you about the duration of data processing in connection with the website builder system used, if we have further information on this. Detailed information can be found in the provider's privacy policy. Generally, we only process personal data for as long as necessary to provide our services and products. The provider may store data from you according to their own guidelines, over which we have no control.

You always have the right to access, correct, and delete your personal data. If you have any questions, you can also contact the responsible person for the website builder system used. Contact details can be found either in our privacy policy or on the website of the respective provider.

You can delete, disable, or manage cookies used by the provider for its functions in your browser. Depending on the browser you use, this works in different ways. Please note that some functions may not work as expected if you do so.

We have a legitimate interest in using a website builder system to optimize our online service and present it efficiently and user-friendly for you. The corresponding legal basis is Art. 6 para. 1 lit. f GDPR (Legitimate interests). However, we only use the builder system if you have given your consent.

If data processing for website operation is not strictly necessary, data will only be processed based on your consent. This applies in particular to tracking activities. The legal basis in this respect is Art. 6 para. 1 lit. a GDPR.

With this privacy policy, we have provided you with the most important general information about data processing. If you would like more detailed information, you can find further information, if available, in the following section or in the provider's privacy policy.

11. Web Analytics

Summary of Web Analytics Privacy Policy
👥 Individuals affected: Website visitors

🤝 Purpose: Evaluation of visitor information to optimize the web offering.

📓 Processed data: Access statistics containing data such as access locations, device data, access duration and time, navigation behavior, click behavior, and IP addresses. More details can be found in the respective web analytics tool.

📅 Storage duration: Depends on the web analytics tool used

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

We use software for evaluating the behavior of website visitors, known as web analytics. Data collected by the respective analytics tool provider (also called tracking tool) is stored, managed, and processed. Using this data, analyses of user behavior on our website are created and provided to us as website operators. Additionally, most tools offer various testing options. For example, we can test which offers or content are most popular with our visitors. For such test procedures, as well as for other analytics processes, user profiles can be created, and data can be stored in cookies.

Our website has a clear goal: we aim to deliver the best web offering on the market for our industry. To achieve this goal, we want to provide the best and most interesting offer while ensuring that you feel comfortable on our website. With the help of web analytics tools, we can examine the behavior of our website visitors more closely and then improve our web offering for you and us accordingly. For example, we can identify the average age of our visitors, where they come from, when our website is most visited, or which content or products are particularly popular. All this information helps us optimize the website to best suit your needs, interests, and wishes.

The exact data stored depends on the analytics tools used. However, typically stored data includes which content you view on our website, which buttons or links you click on, when you access a page, which browser you use, which device (PC, tablet, smartphone, etc.) you use to visit the website, or which computer system you use. If you consented to it, location data may also be collected by the web analytics tool provider.

Furthermore, your IP address is also stored. According to the General Data Protection Regulation (GDPR), IP addresses are considered personal data. However, your IP address is usually stored in pseudonymized form (i.e., in unrecognizable and truncated form). Direct data, such as your name, age, address, or email address, are not generally stored for the purpose of testing, web analytics, and web optimization. All such data, if collected, is stored in pseudonymized form, so you cannot be identified as an individual.

We will inform you about the duration of data processing below if we have further information. Generally, we only process personal data for as long as necessary to provide our services and products. If legally required, such as in the case of accounting, this storage period may be exceeded.

You also have the right and the option to revoke your consent to the use of cookies or third parties at any time. This can be done either through our cookie management tool or through other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser. However, please note that some functions may not work as expected if you do so.

The use of web analytics requires your consent, which we obtained through our cookie popup. This consent constitutes the legal basis for the processing of personal data, as may occur in the collection by web analytics tools, according to Art. 6 para. 1 lit. a GDPR (Consent).

In addition to consent, we also have a legitimate interest in analyzing the behavior of website visitors to improve our offering technically and economically. With the help of web analytics, we identify website errors, can identify attacks, and improve profitability. The legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate interests). However, we only use the tools if consent has been given.

Since cookies are used in web analytics tools, we also recommend reading our general cookie privacy policy. To find out exactly what data is stored and processed about you, you should read the privacy policies of the respective tools.

Information about specific web analytics tools will be provided in the following sections, if available.

12. Google Analytics Privacy Policy

Summary of Google Analytics Privacy Policy
👥 Individuals affected: Website visitors

🤝 Purpose: Evaluation of visitor information to optimize the web offering.

📓 Processed data: Access statistics containing data such as access locations, device data, access duration and time, navigation behavior, click behavior, and IP addresses. More details can be found in this privacy policy.

📅 Storage duration: Depends on the properties used

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

We use Google Analytics (GA), a web analytics tracking tool provided by Google Inc., on our website. For the European region, Google Ireland Limited is responsible for all Google services. Google Analytics collects data about your actions on our website, such as clicking on a link, and stores this action in a cookie, which is then sent to Google Analytics. The reports we receive from Google Analytics help us better adapt our website and service to your needs. Below, we provide more information about the tracking tool, including what data is stored and how you can prevent this.

Google Analytics is a tracking tool used for traffic analysis on our website. A tracking code is embedded in our website's code to enable Google Analytics. When you visit our website, this code records various actions you perform. Once you leave our website, this data is sent to Google Analytics servers and stored there. Google processes the data, and we receive reports about your user behavior, including audience reports, ad reports, acquisition reports, behavior reports, conversion reports, and real-time reports. These reports help us understand our users better and optimize our website and marketing efforts.

The statistical data obtained from Google Analytics helps us identify the strengths and weaknesses of our website, optimize it for better visibility on Google, and understand visitor behavior to improve our services. The data also enables us to conduct more individualized and cost-effective advertising and marketing campaigns.

Google Analytics assigns a random, unique ID to your browser cookie, allowing it to recognize you as a new user. When you revisit our site, you are recognized as a "returning" user, and all collected data is stored along with this user ID, enabling the evaluation of pseudonymous user profiles.

To analyze our website with Google Analytics, a property ID must be inserted into the tracking code, and the data is then stored in the corresponding property. The storage duration of data depends on the properties used. With Google Analytics 4 properties, user data is stored for a fixed period of 14 months, while Universal Analytics properties have a default storage duration of 26 months, with options for customization.

Your interactions on our website are measured through identifiers such as cookies and app instance IDs. If you use other Google systems (e.g., a Google account), data generated by Google Analytics may be linked to third-party cookies. Google does not disclose Google Analytics data unless authorized by us or required by law.

Google stores data on servers distributed worldwide, with most servers located in the United States. Data is distributed across various physical media in each Google data center, enhancing accessibility and protection against manipulation. Data retention periods vary based on the properties used, and data is deleted monthly after the specified retention period.

Under EU data protection law, you have the right to access, update, delete, or restrict your data. You can prevent Google Analytics from using your data by installing the Google Analytics opt-out browser add-on. You can also manage or disable cookies in your browser settings. Consent for the use of Google Analytics is obtained through a cookie consent tool, and we only use Google Analytics with your consent.

In addition to consent, we have a legitimate interest in analyzing visitor behavior to improve our offerings, which serves as the legal basis for data processing under Art. 6 para. 1 lit. f GDPR. Google processes data in the US, and while there may be risks due to differing data protection standards, Google complies with EU data protection standards through standard contractual clauses.

We have entered into a data processing agreement with Google, as required by Art. 28 GDPR, to ensure that Google processes data in accordance with our instructions and GDPR requirements. We have enabled advertising reporting features in Google Analytics to better understand user demographics and interests without identifying individual users. You can opt out of Google Analytics data processing through your Google Account settings.

Depending on your consent, Google Analytics may process your personal data in consent mode. You can choose to consent to Google Analytics cookies and data processing, allowing measurement of user behavior on the website, targeted advertising, and delivery of web analytics reports. IP address anonymization is implemented in Google Analytics, ensuring compliance with privacy regulations.

For more information about Google Analytics data processing and to access the necessary links, please refer to the full privacy policy.

13. Webdesign Privacy Policy

Summary of Web Design Privacy Policy:
👥 Individuals affected: Website visitors

🤝 Purpose: Enhancing user experience

📓 Processed data: Data processed varies depending on the tools used but typically includes IP addresses, technical data, language settings, browser version, screen resolution, and browser name. More details can be found in the privacy policies of the respective web design tools.

📅 Storage duration: Depends on the tools used

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

We use various tools on our website that serve our web design. Web design is not just about making our website look pretty; it's also about functionality and performance. Of course, the appropriate aesthetics of a website are also one of the major goals of professional web design. Web design is a subset of media design and deals with both the visual and structural and functional design of a website. The goal is to improve your experience on our website through web design. In web design jargon, this is referred to as User Experience (UX) and Usability. User Experience encompasses all impressions and experiences that the website visitor encounters on a website. Usability, a subcategory of User Experience, focuses on the user-friendliness of a website, emphasizing clear content, subpages, or products structuring for easy and quick navigation.

To offer you the best possible experience on our website, we also use third-party web design tools. Web design tools in this privacy policy encompass all services that improve the design of our website, including fonts, various plugins, or other embedded web design features. How information is absorbed on a website depends heavily on the structure, functionality, and visual perception of the website. Therefore, good and professional web design has become increasingly important for us. We are constantly working to improve our website, which we also see as an extended service for you as a website visitor. Furthermore, a beautiful and functioning website also has economic benefits for us, as you will only visit us and use our offers if you feel comfortable.

When you visit our website, web design elements may be integrated into our pages that can also process data. The exact data processed depends on the tools used. We recommend reading the privacy policy of the tools used for more information on data processing, including which data is processed, whether cookies are used, and how long the data is retained. For example, font files such as Google Fonts automatically transmit information such as language settings, IP address, browser version, screen resolution, and browser name to Google servers.

The duration of data processing varies depending on the web design elements used. For example, if cookies are used, the retention period can range from one minute to several years. Generally, data is retained only as long as necessary to provide the service, but legal requirements may extend data retention. You have the right and the possibility to revoke your consent to the use of cookies or third parties at any time. This can be done through our cookie management tool or other opt-out functions. You can also prevent data collection through cookies by managing, disabling, or deleting cookies in your browser settings. However, some data, especially those collected automatically and transmitted to a third party (such as Google) during a page visit, may not be easily deleted. In such cases, please contact the support of the respective provider. In Terms of Google you will reach the support under https://support.google.com/?hl=en.

If you have consented to the use of web design tools, the legal basis for the corresponding data processing is this consent, according to Art. 6 para. 1 lit. a GDPR. Additionally, we have a legitimate interest in improving web design on our website to provide you with a beautiful and professional web offering, which serves as the legal basis under Art. 6 para. 1 lit. f GDPR. However, we only use web design tools with your consent.

Information about specific web design tools, if available, can be found in the following sections.

14. Adobe Fonts Privacy Policy

As a basis for data processing involving recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or for data transfers to such countries, Adobe utilizes what are known as standard contractual clauses (Art. 46(2) and (3) GDPR). Standard contractual clauses (SCC) are template agreements provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when transferred to third countries such as the USA. Through these clauses, Adobe commits to maintaining the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision by the EU Commission. You can find the decision and the corresponding standard contractual clauses, among other documents, at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en.

On our website, we use Adobe Fonts, a web font hosting service. The service provider is the American company Adobe Inc. For the European region, responsibility lies with the Irish company Adobe Systems Software Ireland Companies, located at 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland. Adobe processes data from you, including in the USA. We would like to inform you that, according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This may entail various risks for the legality and security of data processing.

For more information on the processed data and the standard contractual clauses with Adobe, please visit https://www.adobe.com/privacy/eudatatransfers.html.

15. Google Fonts Privacy Policy

Google Fonts Privacy Policy Summary
👥 Data Subjects: Visitors to the Website

🤝 Purpose: Optimization of our service

📓 Processed Data: Data such as IP address and CSS and font requests. For more details, see below in this privacy policy.

📅 Storage Duration: Font files are stored at Google for one year

⚖️ Legal Basis: Art. 6 Para. 1 lit. a GDPR (Consent), Art. 6 Para. 1 lit. f GDPR (Legitimate Interests)

We use Google Fonts on our website. These are the "Google fonts" provided by Google Inc. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.Using Google Fonts does not require you to sign up or enter a password. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, CSS and font requests are completely separate from all other Google services. If you have a Google account, you don't need to worry about your Google account data being transmitted to Google while using Google Fonts. Google records the usage of CSS (Cascading Style Sheets) and the fonts used, and securely stores this data. We will take a detailed look at how data storage works.

Google Fonts (formerly Google Web Fonts) is a directory of over 800 fonts that Google provides to its users for free. Many of these fonts are published under the SIL Open Font License, while others have been published under the Apache License. Both are free software licenses.With Google Fonts, we can use fonts on our own website without having to upload them to our own server. Google Fonts is an important component in maintaining the quality of our website. All Google fonts are automatically optimized for the web, saving data volume, which is a great advantage, especially for use on mobile devices. When you visit our site, the low file size ensures fast loading times. Furthermore, Google Fonts are secure web fonts. Different rendering systems in various browsers, operating systems, and mobile devices can lead to errors. Such errors can distort texts or entire web pages visually. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform issues with Google Fonts. Google Fonts supports all major browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod).

We use Google Fonts to present our entire online service as beautifully and consistently as possible.When you visit our website, the fonts are loaded from a Google server. Through this external call, data is transmitted to Google servers. This way, Google also recognizes that you or your IP address have visited our website. The Google Fonts API has been designed to reduce end-user data usage, storage, and collection to what is necessary for proper font provisioning. By the way, API stands for "Application Programming Interface" and serves, among other things, as a data transmitter in the software sector.Google Fonts securely stores CSS and font requests with Google and is therefore protected. Google uses the collected usage numbers to determine how well individual fonts are received. Google publishes the results on internal analysis pages, such as Google Analytics. Google also uses data from its own web crawler to determine which websites use Google fonts. This data is published in the Google Fonts BigQuery database. Entrepreneurs and developers use the Google BigQuery web service to analyze and manipulate large amounts of data.It should be noted, however, that with each Google Font request, information such as language settings, IP address, browser version, browser screen resolution, and browser name is automatically transmitted to Google servers. Whether this data is also stored is not clearly determinable or is not clearly communicated by Google.Google stores CSS asset requests on its servers for one day, primarily located outside the EU. This allows us to use font stylesheets using a Google stylesheet. A stylesheet is a template that allows you to easily and quickly change the design or font of a website.Font files are stored at Google for one year. Google aims to improve the loading time of websites in general. When millions of websites refer to the same fonts, they are cached after the first visit and appear immediately on all other subsequently visited websites. Sometimes Google updates font files to reduce file size, increase language coverage, and improve design.Those data that Google stores for a day or a year cannot be easily deleted. The data is automatically transmitted to Google when the page is accessed. In order to delete this data prematurely, you must contact Google support at https://support.google.com/?hl=de&tid=112338103. Visiting our site prevents data storage in this case.Unlike other web fonts, Google gives us unlimited access to all fonts. So we can access an ocean of fonts without restriction and get the most out of our website. For more information on Google Fonts and other questions, visit https://developers.google.com/fonts/faq?tid=112338103. While Google addresses privacy-related matters on this page, detailed information about data storage is not included. It is relatively difficult to obtain precise information from Google about stored data.If you have consented to the use of Google Fonts, the legal basis for the corresponding data processing is this consent. According to Art. 6 Para. 1 lit. a GDPR (Consent), this consent is the legal basis for the processing of personal data, as may occur when collecting data through Google Fonts.From our side, there is also a legitimate interest in using Google Font to optimize our online service. The corresponding legal basis for this is Art. 6 Para. 1 lit. f GDPR (Legitimate Interests). However, we only use Google Font if you have given your consent.Google processes data from you, among other things, also in the USA. We would like to point out that, according to the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can entail various risks for the legality and security of data processing.As a basis for data processing involving recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or for data transfers to such countries, Google uses so-called standard contractual clauses (= Art. 46 Para. 2 and 3 GDPR). Standard contractual clauses (Standard Contractual Clauses – SCC) are template agreements provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when transferred to third countries such as the USA. Through these clauses, Google commits to maintaining the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision by the EU Commission. You can find the decision and the corresponding standard contractual clauses, among other documents, at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.The Google Ads Data Processing Terms, which also correspond to the standard contractual clauses for Google Fonts, can be found at https://business.safety.google/adsprocessorterms/.You can also read about what data Google generally collects and what it is used for at https://www.google.com/intl/de/policies/privacy/.We use Google Fonts from Google Inc. on our website. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible. We have locally embedded Google fonts, i.e., on our web server – not on Google's servers. This means there is no connection to Google servers and therefore no data transfer or storage.Google Fonts used to be called Google Web Fonts. It is an interactive directory of over 800 fonts that Google provides for free. With Google Fonts, you could use fonts without uploading them to your own server. However, to prevent any information transfer to Google servers, we have downloaded the fonts to our server. In this way, we act in compliance with data protection regulations and do not send any data to Google Fonts.

16. Technology partner Finsweet

To optimize user experience, we integrate implementations from Finsweet for specific displays. Finsweet specializes in straightforward and modern web implementations that support websites in a simple and user-friendly manner without compromising load times. We strategically employ these implementations, considering them essential for our website.

Finsweet, like us, prioritizes data privacy and ensures that their implementations fully comply with GDPR requirements. No user data is transmitted between parties or between Finsweet and third parties. Therefore, we have chosen Finsweet to fully comply with EU privacy regulations. For any inquiries regarding data privacy related to Finsweet, please feel free to visit their Privacy Policy on their website, available at the following link: https://finsweet.com/privacy.

17. Reservation calendar "Quandoo"

On our website, we use the reservation calendar "Quandoo" provided by Quandoo GmbH, Germany, to allow our customers to make table reservations. By using the "Quandoo" reservation calendar, users can directly access their platform to make reservations for our restaurant.

Please note that the use of the "Quandoo" reservation calendar is subject to the privacy policies of Quandoo GmbH. Information provided when using the reservation calendar may be processed by Quandoo GmbH in accordance with their privacy policies. We recommend reading Quandoo GmbH's privacy policy to understand how your data is processed by them.

By using the "Quandoo" reservation calendar, you agree that your data will be processed in accordance with Quandoo GmbH's privacy policies.

18. Conclusion

Congratulations! If you're reading these lines, you've truly "fought" your way through our entire privacy policy, or at least scrolled down this far. As you can see from the extent of our privacy policy, we take the protection of your personal data very seriously.

It's important for us to inform you to the best of our knowledge and conscience about the processing of personal data. However, we don't just want to tell you which data is being processed; we also aim to explain the reasons for using various software programs. Typically, privacy policies sound very technical and legal. However, since most of you are not web developers or lawyers, we wanted to take a different approach linguistically and explain the matter in simple and clear language. Of course, this isn't always possible due to the nature of the topic. Therefore, the most important terms are explained in more detail at the end of the privacy policy.

If you have any questions about data protection on our website, please don't hesitate to contact us or the responsible party. We wish you a pleasant time and hope to welcome you back to our website soon.

© All texts are protected by copyright.

Source: Created with the privacy policy generator from AdSimple | Datenschutzerklärung MANNA INNSBRUCK

Back to Home
Back to Top