Privacy Policy

Data controller

The controller responsible for the processing by Restaurant Führich described below is:

Führich Restaurant GmbH
Führichgasse 6, 1010 Vienna, Austria
Email: restaurant@fuehrich.at
Telephone: +43 1 513 08 80

This policy applies to our restaurant website and the related enquiries, reservations and voucher transactions. Independent websites linked from our site also have their own privacy information.

Visiting our website

When you visit the website, technically necessary connection data is processed. This includes, in particular, your IP address, the time of access, the pages and files requested, browser and operating system information, HTTP status and, where applicable, the previously visited page. We need this data to provide the website, resolve errors and prevent attacks. The legal basis is our legitimate interest in a secure and reliable website under Article 6(1)(f) GDPR.

The website is hosted by Hostinger. The hosting provider and appointed technical support providers receive the data required for operation and maintenance. Service providers processing data on our instructions act as processors. The connection to the website is encrypted using HTTPS.

Server logs are deleted once they are no longer required for secure operation and error analysis. In the event of a specific security incident, the data needed for the investigation may be retained until the incident has been resolved and, where necessary, for the establishment or defence of legal claims.

The restaurant website's own fonts, images, videos and menus are provided from our webspace. The separately embedded reservation and voucher functions are covered by the information below. Google Maps and social networks are accessible via ordinary links. Opening these links takes you to the respective external provider.

Contact by email

If you contact us by email, we process your sender and contact details, the content of your message and any attachments in order to handle and respond to your enquiry. We do not provide our own contact form.

For contract-related enquiries, the legal basis is Article 6(1)(b) GDPR. We handle general enquiries on the basis of our legitimate interest in communicating with our guests under Article 6(1)(f) GDPR. Statutory retention obligations continue to apply.

Providing your information is voluntary. However, we cannot respond to your enquiry without a way to contact you and the information needed to deal with it. Please provide only the information necessary for handling your request.

Reservations and vouchers through Reservier.at

We use Reservier.at for online reservations and, where offered, digital voucher purchases. According to the provider's legal information, the provider is Avery Digital FlexCo, Lindengasse 16, 1070 Vienna, Austria.

The external widget is loaded after you enable it through our cookie settings. In particular, your IP address and browser and connection data are then transmitted to the systems involved in providing the service. The legal basis for this voluntary consent is Article 6(1)(a) GDPR. Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) also applies to storage or access requiring consent. Alternatively, you can send us a reservation enquiry by email.

When you make a reservation, we process your name, telephone number, email address, date, time, party size, reservation status and any comments you choose to provide. This data is used to organise your visit, send confirmations, process changes and deal with necessary enquiries. The legal basis is Article 6(1)(b) GDPR. The fields marked as mandatory in the dialogue are required to make an online reservation.

If you buy a voucher through the embedded function, the contact, order and payment information required during checkout is processed. Where we issue or redeem the voucher, we also process its value, identifier, redemption status and any remaining balance. This processing is necessary to perform the contract under Article 6(1)(b) GDPR and to fulfil statutory record-keeping obligations under Article 6(1)(c) GDPR. Payments are handled by the payment service providers identified in the relevant checkout process.

We remain responsible for the processing of reservation and guest data by our restaurant. Where service providers process data on our instructions, they act as processors. Where providers process data for their own purposes, their own privacy information also applies.

Further information from the provider: Reservier.at Privacy Policy (German). We remain your point of contact for processing by our restaurant; the provider's information does not replace this Privacy Policy.

Cookies, consent and withdrawal

Cookies and similar technologies can store information on your device or access information stored there. We use such functions without consent only where they are strictly necessary to transmit a communication or to provide a service you have expressly requested (Section 165(3) TKG 2021). Other functions are activated only after you have given your consent.

We use Borlabs Cookie to manage your preferences. This plugin runs on our website and stores, in particular, your choices and a randomly generated identifier in the borlabs-cookie cookie. This allows us to respect your choices and demonstrate that the necessary consent has been obtained. The legal bases are Article 6(1)(c) GDPR in conjunction with Articles 5(2) and 7(1) GDPR, and our legitimate interest in reliably managing your settings under Article 6(1)(f) GDPR. The storage required for this purpose is exempt from the consent requirement.

You can view the services used, their purposes and their storage periods in the cookie settings. You can change your choices and withdraw your consent at any time with effect for the future: open the settings, disable the relevant optional service and save your selection.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Withdrawing cookie consent does not cancel a reservation or order and does not automatically delete transaction data already lawfully stored. You can also delete existing browser cookies through your browser settings.

Recipients and processing outside the EEA

Access is granted to the people responsible for handling the relevant matter at the restaurant, and to the necessary hosting, email, IT and reservation service providers. Where relevant to a transaction, recipients may also include payment service providers, our tax advisers and competent public authorities. Data is shared only to the extent required for the relevant purpose.

Depending on the service used and its subprocessors, processing may also take place outside the European Economic Area. Such transfers must meet the requirements of Articles 44 et seq. GDPR, in particular an applicable adequacy decision or appropriate safeguards. You can request information about the recipients and safeguards relevant to the processing concerned by contacting restaurant@fuehrich.at.

Retention periods

Enquiries and reservation data are deleted or anonymised once the matter and any necessary follow-up have been completed, unless a statutory obligation or a specific need for evidence relating to legal claims prevents deletion. The retention period depends on the purpose, applicable statutory obligations and, where relevant, the need to establish or defend specific legal claims. Cookie storage periods are shown in the cookie settings.

Accounting records and documents relevant for tax purposes are generally retained for seven years from the end of the relevant calendar year. Ongoing proceedings may require longer retention. Data needed to fulfil an existing voucher entitlement is retained for as long as it is required for that purpose.

These principles also apply to necessary records relating to earlier orders or vouchers. Closing the former online shop does not extinguish existing claims or statutory retention obligations. Storage for any additional purpose requires a separate legal basis.

Your rights

Subject to the applicable legal requirements, you have the rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on your consent, you can withdraw that consent at any time with effect for the future.

Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. You may object to processing for direct marketing at any time without giving a reason.

To exercise your rights, please email restaurant@fuehrich.at. You may also lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the alleged infringement. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, email: dsb@dsb.gv.at.