Privacy policy

01Controller

The controller for data processing on this website and on our online menu (karte.eispavillon.at) within the meaning of the GDPR is:

Eispavillon am See GesbR, represented by Stefan Fussenegger, Seepromenade 1, 6900 Bregenz, Austria.
Phone +43 (0) 5574 / 46 333, email info@eispavillon.at.

02Principles

We process personal data only insofar as this is necessary for a functioning website and our content and services, or where you have given consent. You can generally use this website without providing any personal information. The legal bases are in particular Art. 6(1)(a) (consent), (b) (contract and pre-contractual measures) and (f) GDPR (legitimate interests).

This website contains no analytics tool, no advertising networks and no social media plug-ins. No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

03Hosting and delivery

This website and our online menu are provided via the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare delivers the pages from data centres around the world, usually from one near you, and protects the website against overload and attacks. Transmission is always encrypted (TLS).

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in secure, fast and reliable provision. Cloudflare acts as our processor; the data processing agreement under Art. 28 GDPR (Cloudflare Data Processing Addendum) forms part of our contract with Cloudflare.

A transfer to the USA cannot be ruled out. Cloudflare is certified under the EU-US Data Privacy Framework; transfers are therefore based on the European Commission’s adequacy decision (Art. 45 GDPR) and additionally on the EU standard contractual clauses (Art. 46(2)(c) GDPR).

04Access data

When a page is accessed, your browser transmits technically necessary data: IP address, date and time, requested address, amount of data transferred, status message, referring page, and browser and operating system. Cloudflare processes these data to deliver the page and fend off attacks. They are not combined with other data sources.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in secure and stable operation. We do not keep access logs ourselves; the logging function in our Cloudflare account is switched off.

From this data, Cloudflare compiles aggregated statistics, such as the number of page views and visitors, countries of origin and status messages. We view them in our Cloudflare account to see how the website is used and whether it works without errors. The statistics only show totals; individual visitors cannot be identified in them, and no script, cookie or other storage on your device is needed for them. Only when Cloudflare blocks a request as an attack does it show us that request individually, including the IP address, for a limited time so that we can check the protection. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in designing the website to meet visitors’ needs and fixing errors.

05Contact by email or phone

If you contact us by email or phone, we process your details (such as name, contact details and the content of your enquiry) solely to deal with your request. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or its preparation, otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in answering your enquiry.

We delete the data as soon as they are no longer needed for this purpose and no statutory retention obligations apply. Please note that communication by email may have security gaps.

06Job applications

We accept applications by email. We process the data submitted solely to carry out the application procedure; the legal basis is Art. 6(1)(b) GDPR.

If no employment relationship results, we delete the documents at the latest six months after the procedure ends, because claims under the Austrian Equal Treatment Act can be asserted within this period (§ 15(1) GlBG). Longer retention, for example for future vacancies, only takes place with your consent (Art. 6(1)(a) GDPR) and for no more than 24 months.

07Fonts

The fonts Bricolage Grotesque and Space Mono are delivered by this website itself. There is no connection to Google Fonts or any other third-party provider.

08Images and links

All photos and graphics are delivered by this website itself; no videos or third-party content are embedded (for the map on the contact page see point 09).

We link to map services (Google Maps: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Apple Maps: Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland), to Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) and to websites of places to visit. Data are only transmitted to these providers when you click a link or use the “Take me there” button; from then on, their privacy policies apply.

09Map on the contact page

The map on the contact page only loads if you expressly agree. Without consent, a placeholder is shown and no data are transmitted to third parties.

The Leaflet map library is hosted on this website itself. After you consent, your browser loads map tiles from FOSSGIS e.V., Bundesallee 23, 10717 Berlin, Germany, based on OpenStreetMap data. In doing so, your IP address, information about your browser, the referring page and the map section displayed are transmitted to FOSSGIS e.V.

The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future via “Cookie settings” at the bottom of every page.

10Cookies and local storage

This website does not set cookies. In your browser’s local storage we only keep what is strictly necessary for the functions you request: ep-cookie-consent (your decision on the map and the date, on this website) and ep-karte-sprache (the language chosen on our online menu). These entries do not leave your device and remain until you change or withdraw them or delete your browser data.

The legal basis for this strictly necessary storage is § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) in conjunction with Art. 6(1)(f) GDPR. We do not use analytics or statistics tools on your device; for Cloudflare’s aggregated access figures, see section 04. You can change or withdraw your choice at any time via “Cookie settings” at the bottom of every page.

11Storage period

We store personal data only for as long as necessary for the respective purpose or required by statutory retention periods. The specific periods are given under the individual points.

12Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. You may object to processing for direct marketing purposes at any time without giving reasons.

Simply contact us at info@eispavillon.at.

13Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR, § 24 Austrian Data Protection Act). In Austria this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, phone +43 1 52 152-0, email dsb@dsb.gv.at, www.dsb.gv.at.

14Changes

We update this notice as soon as data processing changes. The version published here applies.