Data protection is very important to us. Personal data will only be collected, used and forwarded by us when this is legally permissible or you consent to the data collection.

Personal data are information that can be used to identify a person. These include, for example:

• Master data (first name, surname, title, gender, date of birth, address, telephone number, e-mail address),

• Data relating to business contacts (date, means of communication, content),

• Offer and contract data (offer date, delivery or service, delivery address, technical data, authorisations, consideration),

• Event data (place and date, registration details),

• Opinions (feedback, surveys),

• Invoice data (object, prices, invoice amounts, voucher data),

• Data relating to payment processing (bank account details, SEPA mandate, account data from our business partner accounting, reminders),

• Possible recordings by one of our surveillance cameras (opposite the counter (1x) and in the ceiling above the counter (2x), in the storage rooms in the basement (5x) and the first floor (1x at the deep-freeze and cooling rooms), in the office and reception (2x, inside the office only)) for the legally permitted 72 hours.

We only collect and process the data that is necessary. In individual cases, fewer data than those described above may suffice.

Video surveillance

For the protection of persons, goods and our property, as well as for the prevention and clarification of theft, vandalism and security-related incidents, we use video surveillance at selected locations in and around our premises. The recordings also serve to ensure the traceability of incidents that have already occurred (e.g. alcohol abuse in the counter area and a theft in the counter and office area, both of which could be clarified by video recordings).

The areas concerned are:

• the entrance area to the main restaurant (camera opposite the counter, short coverage area when entering),

• the immediate counter area (two cameras on the ceiling, directed exclusively at this area),

• the storage rooms in the basement (five cameras),

• the room with deep-freeze and cooling facilities (one camera),

• as well as the office (two cameras) and the reception window (inside the office only).

The legal basis for this processing is the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in conjunction with § 12 DSG (protection of persons, goods and property, prevention and clarification of incidents).

The retention period of the recordings is a maximum of 72 hours. If a security-relevant incident is identified within this period, storage may be extended until final clarification and legal enforcement. The recordings are stored exclusively on the company’s own video server, which is located on our business premises.

Access to the recordings is granted exclusively to internal, authorised members of the management team via secure login. In specific cases, data may be transmitted to the competent authorities (e.g. police), insurance companies or legal representatives.

Data subjects have the rights of access, rectification, erasure, restriction of processing and objection in accordance with Art. 15 et seq. GDPR. Complaints can be submitted directly to us at info@kristberg.at.

We collect personal data from you in two ways: directly from the information you provide and automatically using the technology of the website.

Information provided by you

The information we expressly ask you to provide for the respective service and which the service collects directly from you can include the following information:

Contact information, such as your name, company name, mailing address, your email address and telephone number, any title you provide voluntarily as well as additional information you voluntarily provide e.g. in conjunction with participating in contests (e.g. images, text, et cetera).

Information collected automatically

Our website collects the following information automatically collects certain data regarding your use of the service for data protection and user-friendliness:

Access data/server log files: We collect data regarding every access of the service (so-called server log files). The access data includes: name of the website accessed, file, data and time of the access, data quantity transferred, notification of successful access, browser type and version, the user’s operating system, uniform resource locator referrer (“URL”) (the page previously visited), IP address and the querying provider.

We use log data only for statistical evaluations for the purpose of the operation, security and optimisation of the service. We do reserve the right to subsequently inspect the log data if there are specific reasons to justifiably suspect illegal usage.