Privacy Policy

The controller responsible for processing personal data under the General Data Protection Regulation (GDPR) is:

Stadtrandschenke Johanneshöhe OG
Freindal Wirtschaft - Stadtrandschenke Johanneshöhe
Am Corso 10
9220 Velden am Wörthersee
Austria
VAT ID: ATU 71362802
Tel. +43 676 4237751
Email: office@freindal-wirtschaft.at

This website is built with Astro and presents our restaurant, offers, contact options, reservation links and content from our Instagram presence. We do not use Google Analytics, embedded Facebook social plugins or hCaptcha.

The website is delivered through Cloudflare Pages and Cloudflare Workers. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit the website, Cloudflare processes technically necessary data such as IP address, access date and time, requested URL, referrer, user agent, and system and browser information.

Cloudflare Web Analytics may automatically load the script https://static.cloudflareinsights.com/beacon.min.js on the live website. According to Cloudflare, this beacon collects minimal performance and page-view data, in particular timing metrics through the Performance API, and sends this data to Cloudflare. Cloudflare states that it does not track individual end users across different customer websites.

This processing is used for secure and stable delivery, abuse prevention, error analysis, performance measurement and operational improvement. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Cloudflare information is available at cloudflare.com/privacypolicy, cloudflare.com/trust-hub/gdpr and developers.cloudflare.com/web-analytics.

If you contact us through the contact form or by email, we process the data you provide, especially your name, email address and message text, in order to respond to your enquiry. The form also processes technical information such as the submission time, IP address, browser information, origin of the request and the result of the spam check.

Form submissions are sent to a Cloudflare Worker route on this website. To prevent abuse, the form uses a hidden honeypot field, a minimum completion time, Cloudflare Turnstile and a local submission limit. Successful form enquiries are delivered to the responsible contact address through a Cloudflare email function. Technical logs generally do not contain the message in plain text, but may contain hash values, error codes, time, IP address, user agent and technical delivery information.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to pre-contractual or contractual communication, otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in handling general enquiries and operating the form securely with reduced abuse.

We use Cloudflare Turnstile to protect the contact form. The Turnstile scripts are loaded for the form and help identify automated or abusive requests. A verification token, your IP address, browser and device information, the user agent, site origin and other technical signals may be transmitted to Cloudflare.

This processing protects the form and website and is based on our legitimate interest under Art. 6(1)(f) GDPR. Further information is available in the Cloudflare Turnstile Privacy Addendum.

We do not use advertising tracking cookies or Google Analytics cookies on this website. For convenience, security and consent features, however, information may be stored locally in your browser: contact_submits supports the local contact form submission limit, and google_maps_consent stores your consent to load the Google Maps map. This data remains in your browser and can be deleted there.

According to Cloudflare, Cloudflare Web Analytics operates without tracking cookies. Cloudflare and Cloudflare Turnstile may use technically necessary cookies or comparable technologies where required for security, bot detection and delivery of the website.

The contact page can load a Google Maps map. The map is shown only after you actively agree to load it. Your choice is stored locally in your browser so the map can load on later visits without asking again. Once Google Maps is loaded or a map link is opened, personal data such as IP address, location data and browser data may be transmitted to Google Ireland Limited or Google LLC.

Use of Google Maps is subject to the Google Maps Terms and the Google Privacy Policy. The legal basis for loading the embedded map is your consent under Art. 6(1)(a) GDPR. You can delete the saved choice through your browser data.

On the home page we display locally provided preview images and basic data from our Instagram presence. Additional posts are loaded from a JSON file on this website when needed. Simply viewing this website does not establish a direct connection to Instagram or Facebook. If you click an Instagram or Facebook link, you leave our website and the privacy policy of the respective provider applies.

Online reservations and vouchers are provided through external services, especially Gastronovi. If you click a corresponding button, the Gastronovi widget may open in a dialog on this website or you may be forwarded to Gastronovi. Technical data is transferred to Gastronovi in that case; if you make a reservation or purchase a voucher there, Gastronovi processes the data you enter under its own responsibility or according to the terms applicable there.

We retain personal data only for as long as necessary to process your enquiry, meet legal obligations or protect legitimate interests. Technical logs are kept only for as long as needed for security, error analysis and operation.

Recipients of personal data may include technical service providers, especially Cloudflare for hosting, security, Web Analytics and form processing, Google when the map is used, and Gastronovi when reservation or voucher functions are used. Processing outside the European Union cannot be ruled out. We pay attention to appropriate safeguards under Art. 44 et seq. GDPR, in particular standard contractual clauses or recognised data protection frameworks where required.

Subject to the GDPR, you have the right to access, rectify, erase, restrict the processing of, port and object to certain processing of your personal data. If processing is based on consent, you may withdraw that consent at any time with future effect.

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR on this website.

You have the right to lodge a complaint with a data protection supervisory authority. In Austria this is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

For privacy-related questions, please contact office@freindal-wirtschaft.at or use the contact details above.