Privacy notice

Who is responsible

The controller within the meaning of the General Data Protection Regulation (GDPR) is the company named in the legal notice. For any questions about data protection, please use the contact details given there.

Visiting this website

This website is hosted and delivered by Vercel Inc. When you open a page, technically necessary data is processed: IP address, date and time, the address requested, the amount of data transferred, browser type and operating system.

This processing is required to deliver the page at all and to defend against attacks. The legal basis is our legitimate interest in secure and functioning operation (Art. 6(1)(f) GDPR).

We have a data processing agreement in place with Vercel. Transfers to the United States are based on the European Commission's standard contractual clauses.

Contact form

If you write to us using the form, we process what you enter: the type of enquiry, your name, email address, optionally your phone number, your preferred date, time, number of people, preferred seating area and your message.

This data is sent by email to our mailbox and used to handle your enquiry. The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR), or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

For sending and for the mailbox itself we use Google Workspace, provided by Google Ireland Limited. We have a data processing agreement in place with Google; transfers to the United States are based on the European Commission's standard contractual clauses.

To guard against automated submissions we check a form field that is invisible to you and limit how many submissions may come from one connection. Your IP address is processed briefly in memory for this and is not stored permanently.

We keep enquiries for as long as we need them to respond, then delete them unless a statutory retention period applies. Job applications are deleted no later than six months after the selection process ends, unless you agree to a longer retention period.

Audience measurement

With your consent we use Vercel Web Analytics to see which pages are being visited. The service works without cookies and without identifiers that could recognise you again; no profiles of individuals are created.

The measurement script is only loaded after you have agreed. If you decline, it is never requested. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time through the cookie settings in the footer.

Storage in your browser

We store your decision about audience measurement locally in your browser so we don't have to ask again on every visit. This storage is necessary to operate the website and never leaves your device.

Apart from that, this website sets no cookies.

Fonts and embedded content

The fonts used are delivered from our own server. Opening the page establishes no connection to Google Fonts or any other font provider.

We embed no interactive map, no video platform and no social media content. Where we point to an external service, it is an ordinary link: no data is sent until you click it.

Your rights

You have the right to obtain information about the data we hold about you, and to have it corrected or erased, to have processing restricted, to data portability, and to object to processing.

Where you have given consent, you may withdraw it at any time with effect for the future.

If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.