Data Privacy Information per Art 13 and Art 14 GDPR
The following information describes how we process your personally identifiable data on the website WEITBLICK (https://weitblick-bruendl.at/en).
I. Name and Address of the Data Controller
The entity responsible for the processing of your personal data in compliance with data privacy regulations is
Sport Bründl Gesellschaft m.b.H.
FN 63658s
Nikolaus-Gassner-Straße 4,
5710 Kaprun
E-mail: office@bruendl.at
Tel.: 06547 83 88
Fax: 06547 83 88-31
II. General Information about Data Processing
We fundamentally only collect and process the data of our customers if this is necessary for use of the website and/or for reservations through the website.
Your personal data will be deleted or blocked as soon as the purpose for storage and processing has lapsed, insofar as a longer period of storage is not required by law or until such point as any legal claims which are being or may be pursued against us, which require storage of the aforementioned data, have been resolved.
Specifically, your personal data may be subject to data processing as follows:
III. Processing Procedures
1. Data Processing “Website Usage”
1.1. Scope of Processing of Personal Data
Every time our website https://www.weitblick is accessed, our system collects automized data and information about the computer system being used by the accessing device. In this regard, the following data are collected by means of logfiles: IP address; user’s operating system; user’s Internet service provider; browser type and version; data and time of access.
For further details about the cookies collected by means of our website, we refer to our Cookies Policy.
1.2. Legal Foundation for the Processing of Your Personal Data
The temporary storage of this data is required for the security of our IT system and also serves to offer you a user-friendly surfing experience. Hence, the legal foundation for the processing of your data is our legitimate interest consistent with Art 6 (1) (f) GDPR.
1.3. Purpose of Data Processing
Storage of your IP address by the system is necessary in order to deliver our website to your electronic device. In doing so, your IP address must remain stored for the duration of the session. Beyond that, data is stored in logfiles in order to guarantee functionality of the website and to optimize the website. Processing of other personal data also serves to recognize, prevent and investigate attacks on the website https://www.weitblick.
Collection of data in order to provide the website as well as storage of data in logfiles is absolutely essential for the operation of this website. The data is not person-specific, nor is the data used to personally identify a specific visitor to the website. Furthermore, data is not collated with any other data sources.
1.4. Recipients of Data
Your data will not be shared with other third parties for their own purposes without your consent.
1.5. Duration of Storage
The data pertaining to your visit to the website will be deleted 4 weeks after your visit to the website.
2. Data Processing “General Contact Enquiries”
2.1. Scope of Processing of Personal Data
You can get in contact us in writing by letter, via e-mail, telephone or social media, or otherwise get in touch with us if you are interested in our website, our Bistro Weitblick or our activities, or if you wish to reserve a table at Bistro Weitblick. When you get in contact with us, the data which you voluntarily provide (first and last names; title/salutation; telephone, fax number or e-mail address; online identity for the social media platform in question, including the user name, photo, avatar, logo; corporate affiliation; subject of your enquiry; content of your enquiry; miscellaneous information provided voluntarily) will be processed in order to respond to your questions and process your requests.
You are free to determine what information you provide in connection within the scope of your enquiry. If, however, you do not provide us with certain data, we may potentially be unable to process your reservation request or other questions / concerns in the appropriate manner.
We also collect data by means of automated procedures in order to document recordkeeping data pertaining to the enquiry (date, subject, history) and the substance as well as the date of the response.
2.2. Legal Foundation for the Processing of Personal Data
Our processing is consistent with Art 6 (1) (b) GDPR with respect to enquiries which serve to initiate a contract, with the processing thereof necessary for the completion of precontractual measures. With regards to other enquiries, our responses are consistent with Art 6 (1) (a) GDPR, and therefore your implied expressed consent, insofar as you have voluntarily provided us with the data and the enquiry does not represent a precontractual measure. Furthermore, our processing is consistent with Art 6 (1) (f) GDPR in order to be able to administer and organize enquiries appropriately.
2.3. Purpose of Data Processing
The purpose of the storage and processing of your data is to ensure that enquiries and responses are processed consistently and quickly, and that the data we require to contact and communicate with you are available. Furthermore, we process the data in order to administer news and to keep a record of our response to your request.
Insofar as your request pertains to a table reservation, we will continue to process your data internally within the scope of the Bistro’s own administrative activities.
2.4. Recipients of Data
Your data will not be shared with other third parties for their own purposes without your consent.
2.5. Revocation Declaration
You may revoke your consent to the processing of these data at any time, without provision of reasons, with future effect, either directly via the website www.weitblick.at, by email to datenschutz@bruendl.at or by phoning +43 (0)6547 8388-0.
2.6. Duration of Storage
The data will be stored for as long as contact exists with the person in question, though for no longer than one year after the final contact with us. The data pertaining to your enquiries, if not representing any precontractual measures, may potentially be deleted earlier, i.e. pursuant to revocation of consent.
3. Data Processing of “Online-Reservations”
3.1. Scope of processing of personal data
On our website, you have the opportunity to reserve a table at Restaurant Weitblick. The reservation form asks you to provide an e-mail address, your name, date and time of your desired visit, number of people as well as additional comments (e.g. special menu wishes, desire to bring a dog, etc.).
We automatically process your confirmation that you have read our data privacy information, as well as the point in time when you submitted the reservation request, the fact that you clicked on the button “cancel table”, the IP address of the accessing computer, and recordkeeping data (date when you accessed the reservation mask).
3.2. Legal Foundation for the Processing of Personal Data
The personal data of visitors to the website are used in order to make table reservations or cancel the aforementioned if necessary (Art 6 (1) (b) GDPR).
3.3. Purpose of Data Processing
We process your data only in order to make your table reservation, to confirm said reservation and to respond to enquiries pertaining thereto. Furthermore, you also have the right, without any requirement to provide reasons, to cancel the table you have reserved either by clicking on the button “Cancel” contained in the confirmation e-mail or doing so directly via the website.
3.4. Data Recipients
In order to manage online reservation requests, we utilize resmio GmbH, Katzwanger Straße 150, D-90461 Nuremberg, as our IT service provider.
resmio provides cloud-based software by means of which reservations are processed and has access to the personal data of guests, insofar as the provided software requires this. This is covered by a data processing contract which they have entered into with us.
3.5. Duration of Storage
The data may only be stored until the restaurant is visited or until such time as any concrete legal claims pertaining to the table reservation which may threaten us have been resolved.
4. Information about the use of automated decision-making
Automated decision-making procedures including profiling as laid out in Art 22 (1) and (4) GDPR are not implemented by us and do not therefore pertain.
IV. Rights of Affected Persons
1.1. Right to Information
With respect to SPORT BRÜNDL, you have the right to receive details about all data pertaining to your person which are being processed by SPORT BRÜNDL. In particular, you may demand that SPORT BRÜNDL provide you with the following information:
(1) the purposes for which the personal data are being processed;
(2) the categories of personal data that are being processed;
(3) the recipients or categories of recipients to whom the personal data in question have been or will be disclosed;
(4) the planned storage duration for the personal data in question or, if concrete details are not possible, the criteria which will determine the duration of storage.
(5) the existence of your right to have personal data pertaining to you either corrected or deleted, your right to restrict the processing of your data by the data controller as well as your right to object to the processing of your data;
(6) the existence of your right to submit a complaint to an oversight authority;
(7) all available information about the origin of data, if said data were not obtained directly from the person in question;
(8) the usage of automated decision-making procedures including profiling as laid out in Art 22 (1) and (4) GDPR, with clear, pertinent information about the logic involved as well as the breadth and intended effects of this form of processing affecting the person in question.
You have the right to demand information as to whether your personal data have been transmitted to a third-party country or an international organization. In this context, you may also demand stipulation of appropriate guarantees consistent with Art 46 GDPR within the context of the aforementioned transmission of data.
1.2. Right to Correction and the Right to Restriction of Processing
You may demand the correction or completion of inaccurate or incomplete data. Under certain circumstances, for example, if the correctness of data is in dispute, until such time as the correctness has been ascertained, you may demand that the processing of the data be restricted to the extent that it may only be processed with your consent or only in order to assert, exercise or defend legal claims or in order to protect the rights of another natural or legal person.
1.3. Right to Data Portability
You may demand that SPORT BRÜNDL send to you – or, insofar as it is technically feasible, to a third party specified by you – a copy of the data obtained from you in a clearly structured, current and machine-readable format. Furthermore, you have the right to share this data with another responsible party without interference from the entity to whom your personal data had originally been provided, insofar as
(1) Processing is based upon consent consistent with Art 6 (1) (a) GDPR or Art 9 (2) (a) GDPR or upon a contract consistent with Art 6 (1) (b) GDPR, and
(2) the processing occurred by means of automated processes.
Furthermore, in exercising this right you also have the right to require the personal data pertaining to you be transmitted by SPORT BRÜNDL directly to a different responsible party, insofar as this is technically feasible. This may not impinge upon the freedoms and rights of other persons.
1.4. Right to Deletion
Under certain circumstances, you have the right to have data deleted, for example if said data is not being processed in accordance with data privacy statutes.
The so-called “right to be forgotten” has no applicability to you, because SPORT BRÜNDL will under no circumstances make your personal data public.
If you have asserted your right to the correction, deletion or restriction of processing with respect to SPORT BRÜNDL, we are required to notify all recipients with whom your personal data had been shared about the need for correction or deletion or restriction of processing, other than if this proves impossible or is associated with excessive time, expenditure or effort.
1.5. Right to Object
You have the right, for reasons which derive from your specific situation, to object at any time to the processing of your personal data pursuant to Art 6 (1) (e) or (f) GDPR; this also applies to any profiling conducted on the basis thereof. In such a circumstance, SPORT BRÜNDL will no longer process your personal data, other than if we are able to demonstrate compelling reasons to do so worthy of protection and which outweigh your interests, rights and freedoms, or if the processing thereof is required in the assertion, exercise or defense of legal claims.
1.6. Right to Revoke Data Privacy Consent Declaration
You have the right to revoke your data privacy consent declaration at any time. Your revocation of consent shall in no way affect the legality of any data processing which had been conducted prior to the time of revocation.
2. Oversight Authority
Irrespective of the option to bring suit before the Landesgericht according to § 29 (2) of the Data Privacy Act as well as other potential legal remedies, you also have the right to submit a complaint with the national oversight authority of your place of residence if you are under the assumption that your personal data have been processed illegally. The competent oversight authority in Austria is the “Österreichische Datenschutzbehörde” in Vienna.
The entity responsible for the processing of your personal data in compliance with data privacy regulations is
Sport Bründl Gesellschaft m.b.H.
FN 63658s
Nikolaus-Gassner-Straße 4,
5710 Kaprun
E-mail: office@bruendl.at
Tel.: 06547 83 88
Fax: 06547 83 88-31
II. General Information about Data Processing
We fundamentally only collect and process the data of our customers if this is necessary for use of the website and/or for reservations through the website.
Your personal data will be deleted or blocked as soon as the purpose for storage and processing has lapsed, insofar as a longer period of storage is not required by law or until such point as any legal claims which are being or may be pursued against us, which require storage of the aforementioned data, have been resolved.
Specifically, your personal data may be subject to data processing as follows:
III. Processing Procedures
1. Data Processing “Website Usage”
1.1. Scope of Processing of Personal Data
Every time our website https://www.weitblick is accessed, our system collects automized data and information about the computer system being used by the accessing device. In this regard, the following data are collected by means of logfiles: IP address; user’s operating system; user’s Internet service provider; browser type and version; data and time of access.
For further details about the cookies collected by means of our website, we refer to our Cookies Policy.
1.2. Legal Foundation for the Processing of Your Personal Data
The temporary storage of this data is required for the security of our IT system and also serves to offer you a user-friendly surfing experience. Hence, the legal foundation for the processing of your data is our legitimate interest consistent with Art 6 (1) (f) GDPR.
1.3. Purpose of Data Processing
Storage of your IP address by the system is necessary in order to deliver our website to your electronic device. In doing so, your IP address must remain stored for the duration of the session. Beyond that, data is stored in logfiles in order to guarantee functionality of the website and to optimize the website. Processing of other personal data also serves to recognize, prevent and investigate attacks on the website https://www.weitblick.
Collection of data in order to provide the website as well as storage of data in logfiles is absolutely essential for the operation of this website. The data is not person-specific, nor is the data used to personally identify a specific visitor to the website. Furthermore, data is not collated with any other data sources.
1.4. Recipients of Data
Your data will not be shared with other third parties for their own purposes without your consent.
1.5. Duration of Storage
The data pertaining to your visit to the website will be deleted 4 weeks after your visit to the website.
2. Data Processing “General Contact Enquiries”
2.1. Scope of Processing of Personal Data
You can get in contact us in writing by letter, via e-mail, telephone or social media, or otherwise get in touch with us if you are interested in our website, our Bistro Weitblick or our activities, or if you wish to reserve a table at Bistro Weitblick. When you get in contact with us, the data which you voluntarily provide (first and last names; title/salutation; telephone, fax number or e-mail address; online identity for the social media platform in question, including the user name, photo, avatar, logo; corporate affiliation; subject of your enquiry; content of your enquiry; miscellaneous information provided voluntarily) will be processed in order to respond to your questions and process your requests.
You are free to determine what information you provide in connection within the scope of your enquiry. If, however, you do not provide us with certain data, we may potentially be unable to process your reservation request or other questions / concerns in the appropriate manner.
We also collect data by means of automated procedures in order to document recordkeeping data pertaining to the enquiry (date, subject, history) and the substance as well as the date of the response.
2.2. Legal Foundation for the Processing of Personal Data
Our processing is consistent with Art 6 (1) (b) GDPR with respect to enquiries which serve to initiate a contract, with the processing thereof necessary for the completion of precontractual measures. With regards to other enquiries, our responses are consistent with Art 6 (1) (a) GDPR, and therefore your implied expressed consent, insofar as you have voluntarily provided us with the data and the enquiry does not represent a precontractual measure. Furthermore, our processing is consistent with Art 6 (1) (f) GDPR in order to be able to administer and organize enquiries appropriately.
2.3. Purpose of Data Processing
The purpose of the storage and processing of your data is to ensure that enquiries and responses are processed consistently and quickly, and that the data we require to contact and communicate with you are available. Furthermore, we process the data in order to administer news and to keep a record of our response to your request.
Insofar as your request pertains to a table reservation, we will continue to process your data internally within the scope of the Bistro’s own administrative activities.
2.4. Recipients of Data
Your data will not be shared with other third parties for their own purposes without your consent.
2.5. Revocation Declaration
You may revoke your consent to the processing of these data at any time, without provision of reasons, with future effect, either directly via the website www.weitblick.at, by email to datenschutz@bruendl.at or by phoning +43 (0)6547 8388-0.
2.6. Duration of Storage
The data will be stored for as long as contact exists with the person in question, though for no longer than one year after the final contact with us. The data pertaining to your enquiries, if not representing any precontractual measures, may potentially be deleted earlier, i.e. pursuant to revocation of consent.
3. Data Processing of “Online-Reservations”
3.1. Scope of processing of personal data
On our website, you have the opportunity to reserve a table at Restaurant Weitblick. The reservation form asks you to provide an e-mail address, your name, date and time of your desired visit, number of people as well as additional comments (e.g. special menu wishes, desire to bring a dog, etc.).
We automatically process your confirmation that you have read our data privacy information, as well as the point in time when you submitted the reservation request, the fact that you clicked on the button “cancel table”, the IP address of the accessing computer, and recordkeeping data (date when you accessed the reservation mask).
3.2. Legal Foundation for the Processing of Personal Data
The personal data of visitors to the website are used in order to make table reservations or cancel the aforementioned if necessary (Art 6 (1) (b) GDPR).
3.3. Purpose of Data Processing
We process your data only in order to make your table reservation, to confirm said reservation and to respond to enquiries pertaining thereto. Furthermore, you also have the right, without any requirement to provide reasons, to cancel the table you have reserved either by clicking on the button “Cancel” contained in the confirmation e-mail or doing so directly via the website.
3.4. Data Recipients
In order to manage online reservation requests, we utilize resmio GmbH, Katzwanger Straße 150, D-90461 Nuremberg, as our IT service provider.
resmio provides cloud-based software by means of which reservations are processed and has access to the personal data of guests, insofar as the provided software requires this. This is covered by a data processing contract which they have entered into with us.
3.5. Duration of Storage
The data may only be stored until the restaurant is visited or until such time as any concrete legal claims pertaining to the table reservation which may threaten us have been resolved.
4. Information about the use of automated decision-making
Automated decision-making procedures including profiling as laid out in Art 22 (1) and (4) GDPR are not implemented by us and do not therefore pertain.
IV. Rights of Affected Persons
1.1. Right to Information
With respect to SPORT BRÜNDL, you have the right to receive details about all data pertaining to your person which are being processed by SPORT BRÜNDL. In particular, you may demand that SPORT BRÜNDL provide you with the following information:
(1) the purposes for which the personal data are being processed;
(2) the categories of personal data that are being processed;
(3) the recipients or categories of recipients to whom the personal data in question have been or will be disclosed;
(4) the planned storage duration for the personal data in question or, if concrete details are not possible, the criteria which will determine the duration of storage.
(5) the existence of your right to have personal data pertaining to you either corrected or deleted, your right to restrict the processing of your data by the data controller as well as your right to object to the processing of your data;
(6) the existence of your right to submit a complaint to an oversight authority;
(7) all available information about the origin of data, if said data were not obtained directly from the person in question;
(8) the usage of automated decision-making procedures including profiling as laid out in Art 22 (1) and (4) GDPR, with clear, pertinent information about the logic involved as well as the breadth and intended effects of this form of processing affecting the person in question.
You have the right to demand information as to whether your personal data have been transmitted to a third-party country or an international organization. In this context, you may also demand stipulation of appropriate guarantees consistent with Art 46 GDPR within the context of the aforementioned transmission of data.
1.2. Right to Correction and the Right to Restriction of Processing
You may demand the correction or completion of inaccurate or incomplete data. Under certain circumstances, for example, if the correctness of data is in dispute, until such time as the correctness has been ascertained, you may demand that the processing of the data be restricted to the extent that it may only be processed with your consent or only in order to assert, exercise or defend legal claims or in order to protect the rights of another natural or legal person.
1.3. Right to Data Portability
You may demand that SPORT BRÜNDL send to you – or, insofar as it is technically feasible, to a third party specified by you – a copy of the data obtained from you in a clearly structured, current and machine-readable format. Furthermore, you have the right to share this data with another responsible party without interference from the entity to whom your personal data had originally been provided, insofar as
(1) Processing is based upon consent consistent with Art 6 (1) (a) GDPR or Art 9 (2) (a) GDPR or upon a contract consistent with Art 6 (1) (b) GDPR, and
(2) the processing occurred by means of automated processes.
Furthermore, in exercising this right you also have the right to require the personal data pertaining to you be transmitted by SPORT BRÜNDL directly to a different responsible party, insofar as this is technically feasible. This may not impinge upon the freedoms and rights of other persons.
1.4. Right to Deletion
Under certain circumstances, you have the right to have data deleted, for example if said data is not being processed in accordance with data privacy statutes.
The so-called “right to be forgotten” has no applicability to you, because SPORT BRÜNDL will under no circumstances make your personal data public.
If you have asserted your right to the correction, deletion or restriction of processing with respect to SPORT BRÜNDL, we are required to notify all recipients with whom your personal data had been shared about the need for correction or deletion or restriction of processing, other than if this proves impossible or is associated with excessive time, expenditure or effort.
1.5. Right to Object
You have the right, for reasons which derive from your specific situation, to object at any time to the processing of your personal data pursuant to Art 6 (1) (e) or (f) GDPR; this also applies to any profiling conducted on the basis thereof. In such a circumstance, SPORT BRÜNDL will no longer process your personal data, other than if we are able to demonstrate compelling reasons to do so worthy of protection and which outweigh your interests, rights and freedoms, or if the processing thereof is required in the assertion, exercise or defense of legal claims.
1.6. Right to Revoke Data Privacy Consent Declaration
You have the right to revoke your data privacy consent declaration at any time. Your revocation of consent shall in no way affect the legality of any data processing which had been conducted prior to the time of revocation.
2. Oversight Authority
Irrespective of the option to bring suit before the Landesgericht according to § 29 (2) of the Data Privacy Act as well as other potential legal remedies, you also have the right to submit a complaint with the national oversight authority of your place of residence if you are under the assumption that your personal data have been processed illegally. The competent oversight authority in Austria is the “Österreichische Datenschutzbehörde” in Vienna.