{"id":412,"date":"2026-08-03T14:46:42","date_gmt":"2026-08-03T12:46:42","guid":{"rendered":"https:\/\/simchas.at\/?page_id=412"},"modified":"2026-08-03T15:06:22","modified_gmt":"2026-08-03T13:06:22","slug":"data-protection","status":"publish","type":"page","link":"https:\/\/simchas.at\/en\/datenschutz\/","title":{"rendered":"Data Protection"},"content":{"rendered":"
<\/div><\/div><\/div>
\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t\n
\n\t

Privacy Policy<\/h1>\n

Who Is Responsible for Your Data<\/h2>\n

This website belongs to Restaurant Simchas. Responsible for the processing of your personal data in connection with this website is:<\/p>\n

Simchas Restaurant
\nAriel Natanov
\nTaborstra\u00dfe 47
\n1020 Vienna
\nAustria<\/p>\n

Phone: 0650 33 33 384
\nEmail: office@zinshaus.cc<\/p>\n

If you have any questions about data protection or exercising your rights, you can reach us at any time using this contact information.<\/p>\n

What this explanation is about<\/h2>\n

Personal data refers to any information that can be linked to a specific individual, such as your name, phone number, or email address. Below, we explain what types of personal data are collected when you use our website, how we use it, and the legal basis for each use.<\/p>\n

We receive some of your data because you actively provide it to us, for example through the contact form. Other data is generated automatically as soon as you visit our website. This data consists primarily of technical information such as the browser you are using, your operating system, or the time of your visit.<\/p>\n

Please note that the transmission of data over the internet can never be fully protected against third-party access. We implement appropriate technical and organizational security measures, but we cannot guarantee complete security.<\/p>\n

Your Rights<\/h2>\n

With regard to your personal data, you have the following rights with respect to us:<\/p>\n

    \n
  • Information:<\/strong> You can find out whether we store any data about you, what data we store, where it comes from, how we use it, and to whom we may disclose it.<\/li>\n
  • Correction and Deletion:<\/strong> You can request that we correct inaccurate data or delete your data, provided that no statutory retention obligation prevents this.<\/li>\n
  • Restriction of processing<\/strong> In certain cases, you can request that we restrict the processing of your data instead of deleting it. This may be, for example, while the accuracy of the data is being clarified, or if we only require it for the defense of legal claims.<\/li>\n
  • Data portability:<\/strong> We will provide you or a designated recipient with data that we automatically process based on your consent or a contract, in a common, machine-readable format, to the extent technically feasible.<\/li>\n
  • Withdrawal of consent:<\/strong> You can revoke a granted consent at any time with future effect. The lawfulness of the processing carried out until then remains unaffected.<\/li>\n
  • Objection:<\/strong> To the extent we process data based on a legitimate interest, you may object for reasons arising from your particular situation. In this case, we will no longer process the affected data unless we can demonstrate compelling legitimate grounds that outweigh your interests. You may object to processing for the purpose of direct marketing at any time and without giving a reason.<\/li>\n
  • Complaint<\/strong> If you believe that we are violating applicable law in processing your data, you may lodge a complaint with a supervisory authority. In Austria, the Data Protection Authority is responsible for this (www.dsb.gv.at).<\/li>\n<\/ul>\n

    For the exercise of these rights, an informal message to the above contact details is sufficient.<\/p>\n

    On what legal grounds we process<\/h2>\n

    Depending on the situation, we base the processing of your data on different grounds of the GDPR:<\/p>\n

      \n
    • yours Consent<\/strong> (Art. 6(1)(a) GDPR; if cookies are set or information is accessed on your device, additionally Section 25(1) TDDDG),<\/li>\n
    • onto the Performance or Initiation of a Contract<\/strong> (Art. 6(1)(b) of the GDPR),<\/li>\n
    • onto a legal obligation<\/strong>, to which we are subject (Art. 6 para. 1 lit. c GDPR),<\/li>\n
    • or on our legitimate interest<\/strong> on a secure and functional offering (Art. 6(1)(f) GDPR).<\/li>\n<\/ul>\n

      The legal basis applicable in individual cases is named below for the respective processing operations.<\/p>\n

      How long we will store your data<\/h2>\n

      We only store personal data for as long as it is necessary for the respective purpose. We then delete it, unless there is a statutory retention obligation. Such obligations arise primarily from tax and corporate law and can provide for a retention period of up to seven years. In these cases, we delete the data after the period has expired. If a different storage period applies to specific processing, we will indicate this separately below.<\/p>\n

      Third-party disclosure<\/h2>\n

      We only share your data if it is necessary for contract fulfillment, if we are legally obligated to do so (e.g., to tax authorities), if a legitimate interest justifies the disclosure, or if you have consented. If we use service providers who process data on our behalf (e.g., our host), this is done solely on the basis of a contract for order processing, which binds these providers to our instructions and to the GDPR.<\/p>\n

      Dispatch to countries outside the EU<\/h2>\n

      Individual services used by us originate from Google and may result in data being transferred to the United States. For such transfers, we rely on the Standard Contractual Clauses of the EU Commission. Additionally, the provider is certified under the EU-U.S. Data Privacy Framework, an agreement between the EU and the U.S. designed to ensure an adequate level of data protection. The certification can be viewed at www.dataprivacyframework.gov.<\/p>\n

      When visiting our website<\/h2>\n

      Hosting with Variomedia<\/h3>\n

      Our website does not run on our own servers, but is hosted by an external provider:<\/p>\n

      Variomedia AG
      \nAugust-Bebel-Street 68
      \n14482 Potsdam
      \nGermany<\/p>\n

      The data generated during the operation of the website is stored on the provider's servers. This includes, in particular, IP addresses, the content of contact requests, and access and communication data. We use the provider to offer you our services reliably, securely, and quickly; this is our legitimate interest (Art. 6(1)(f) GDPR). If the use of the website serves to initiate or fulfill a contract, the processing is additionally based on Art. 6(1)(b) GDPR. The provider processes the data exclusively on our behalf; we have concluded a data processing agreement for this purpose.<\/p>\n

      Server log files<\/h3>\n

      When you access our website, access data is automatically collected and temporarily stored in log files. The data collected includes the browser used and its version, the operating system, the previously visited page, the hostname of the accessing device, the time of the request, and the IP address. This information is used solely for the secure and uninterrupted operation of the website and is not combined with other data sources. This is based on our legitimate interest in technically flawless operation (Art. 6(1)(f) GDPR).<\/p>\n

      Secure Transmission (SSL\/TLS)<\/h3>\n

      To protect your data, we encrypt the connection to our website using the standard SSL or TLS. You can recognize an encrypted connection by the abbreviation \u201ehttps:\/\/\u201c in the address bar and the lock symbol in your browser. When encryption is active, the content you transmit cannot be easily read by third parties.<\/p>\n

      Cookies and Your Consent<\/h2>\n

      Cookies<\/h3>\n

      Like most websites, we use cookies. These are small text files that your browser stores and that do not harm your device. Some are automatically deleted after your visit ends (session cookies), while others remain stored until you remove them or your browser deletes them (persistent cookies). Cookies can come from us or from integrated third-party services.<\/p>\n

      We use technically necessary cookies, without.<\/p>\n

      You can configure your browser to notify you about cookies, restrict their storage, or automatically delete them when you close your browser. If you restrict cookies, some features of the website may no longer function properly.<\/p>\n

      Managing Your Consent with Cookie Notice & Compliance<\/h3>\n

      We use the \u201eCookie Notice & Compliance for GDPR\u201c tool to obtain and document your decision regarding the use of non-essential cookies. The tool is installed directly on our server, so no connection to third parties is established. To track your consent or its revocation, it stores a cookie in your browser that remains valid for about one month. You can change your selection at any time via the cookie settings. We use this tool to comply with our legal obligation to maintain records of consent granted (Art. 6(1)(c) GDPR).<\/p>\n

      If you contact us<\/h2>\n

      Contact Form<\/h3>\n

      When you send us a message via the contact form, we store the information you provide, including your contact details, to process your request and keep it on file for potential follow-up questions. We will not share this data without your consent.<\/p>\n

      If your inquiry relates to a contract or the preparation of a contract, we process the data on the basis of Article 6(1)(b) of the GDPR. In all other cases, we rely on our legitimate interest in responding to inquiries (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that such consent has been obtained. We retain the information until your matter has been resolved and there are no longer any statutory retention periods, or until you request that we delete it.<\/p>\n

      Contact by email or phone<\/h3>\n

      If you contact us by email or phone, we will process your information to handle your request. The legal basis is the same as for the contact form: Article 6(1)(b) of the GDPR for contract-related inquiries; otherwise, our legitimate interest (Article 6(1)(f) of the GDPR) or your consent (Article 6(1)(a) of the GDPR). We also delete this data as soon as it is no longer needed and there are no retention requirements that prevent us from doing so.<\/p>\n

      Integrated Google Services<\/h2>\n

      Reach measurement with Google Analytics<\/h3>\n

      To understand how our website is used, we use Google Analytics, an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Among other things, the service analyzes which pages are visited, how long visitors stay, which device and operating system are used, and how visitors find their way to our site. To recognize users, Google Analytics uses technologies such as cookies or a device-specific identifier; the data collected in this process is generally transferred to Google\u2019s servers in the United States.<\/p>\n

      Google Analytics is used exclusively if you have previously consented via our cookie banner. The legal basis is therefore your consent according to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG. You can revoke this consent at any time via the cookie settings.<\/p>\n

      The European Commission\u2019s Standard Contractual Clauses apply to data transfers to the U.S.; in addition, Google is certified under the EU-U.S. Data Privacy Framework. You can also prevent data collection by Google Analytics by installing Google\u2019s opt-out add-on: https:\/\/tools.google.com\/dlpage\/gaoptout?hl=de. We have a data processing agreement in place with Google. For more information, please see Google\u2019s Privacy Policy: https:\/\/policies.google.com\/privacy?hl=de.<\/p>\n

      Google Search Console<\/h3>\n

      We use Google Search Console (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to monitor and improve our website's visibility in Google Search. For example, the tool shows us which search terms users use to find our site and at what position we appear in the results. This primarily involves the analysis of aggregated data that cannot be traced back to individual persons and which Google collects during searches anyway. No separate tracking code is embedded on our website via Search Console.<\/p>\n

      The basis for this is our legitimate interest in a website that is easy to find and technically flawless (Art. 6(1)(f) GDPR). Google is also certified under the EU-US Data Privacy Framework for this purpose. Google's privacy policy provides further details: https:\/\/policies.google.com\/privacy?hl=de.<\/p>\n

      Map display with Google Maps<\/h3>\n

      To help you find our location easily, we embed maps from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). As soon as a map is loaded, your browser transmits your IP address, among other information, to Google. This data is typically transmitted to servers in the United States and is beyond our control.<\/p>\n

      This integration is intended to present our offerings in an appealing way and to help you navigate our site more easily. If our cookie banner requests your consent, we will load Google Maps only after you have given your consent; The legal basis in this case is Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDDG. Otherwise, we base the integration on our legitimate interest (Article 6(1)(f) of the GDPR). The EU Commission\u2019s Standard Contractual Clauses apply to data transfers to the U.S.; Google is also certified under the EU-U.S. Data Privacy Framework. Details on how your data is handled can be found at https:\/\/policies.google.com\/privacy?hl=de.<\/p>\n

      Fonts (Google Fonts, locally included)<\/h3>\n

      We use Google Fonts to ensure consistent typography. The font files are stored on our server and are served from there. Therefore, when you visit our pages, no connection to Google is established, and no data is transmitted to Google.<\/p>\n

      \n

      As of August 2026<\/em><\/p>\n<\/div>\n\n\n\n\n\t\t\t<\/div> \n\t\t<\/div>\n\t<\/div> \n\n\t

      \n\t\t
      \n\t\t\t
      \n\t\t\t\t\n\t\t\t<\/div> \n\t\t<\/div>\n\t<\/div> \n<\/div><\/div>","protected":false},"excerpt":{"rendered":"Privacy Policy Who is responsible for your data This website belongs to Restaurant Simchas. Responsible for the processing of your personal data in connection with this website is: Restaurant Simchas Ariel Natanov...","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-412","page","type-page","status-publish"],"_links":{"self":[{"href":"https:\/\/simchas.at\/en\/wp-json\/wp\/v2\/pages\/412","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/simchas.at\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/simchas.at\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/simchas.at\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/simchas.at\/en\/wp-json\/wp\/v2\/comments?post=412"}],"version-history":[{"count":2,"href":"https:\/\/simchas.at\/en\/wp-json\/wp\/v2\/pages\/412\/revisions"}],"predecessor-version":[{"id":414,"href":"https:\/\/simchas.at\/en\/wp-json\/wp\/v2\/pages\/412\/revisions\/414"}],"wp:attachment":[{"href":"https:\/\/simchas.at\/en\/wp-json\/wp\/v2\/media?parent=412"}],"curies":[{"name":"Page","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}