Privacy Policy

Introduction

Verixa GmbH ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website verixa.world or use our services.

We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws. Our registered address is Währinger Straße 171, 9010 Klagenfurt, Carinthia, Austria.

Data We Collect

We may collect and process the following categories of personal data when you interact with our website or services:

• Contact Information: Name, email address, phone number, and postal address when you make reservations or contact us
• Reservation Details: Dining preferences, special requirements, party size, and booking history
• Website Usage Data: IP address, browser type, device information, pages visited, and time spent on our site
• Communication Records: Records of correspondence when you contact us via email, phone, or our contact forms
• Marketing Preferences: Your preferences regarding promotional communications

The data collection occurs through various means including our website forms, telephone bookings, email communications, and automated technologies such as cookies.

How We Use Your Information

We process your personal data for the following purposes, based on legitimate legal grounds under GDPR:

• Service Provision: To process reservations, provide dining services, and manage your customer relationship (legal basis: contract performance)
• Communication: To respond to enquiries, provide customer support, and send service-related communications (legal basis: contract performance and legitimate interests)
• Marketing: To send promotional materials about our restaurant and special offers, with your consent (legal basis: consent)
• Website Improvement: To analyse website usage and improve our online services (legal basis: legitimate interests)
• Legal Compliance: To comply with applicable laws and regulations (legal basis: legal obligation)

We use of your data is limited to these specified purposes and we do not use your information for automated decision-making or profiling that would significantly affect you.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our website and providing services, under strict confidentiality agreements
• Legal Requirements: When required by law, regulation, or court order
• Business Protection: To protect our rights, property, or safety, or that of our customers or others
• Business Transfers: In connection with any merger, sale of company assets, or acquisition

All third-party service providers are carefully vetted and required to maintain appropriate security measures to protect your data.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Customer Records: Reservation and contact details are retained for 3 years after your last interaction with us
• Marketing Data: Until you withdraw consent or 2 years of inactivity, whichever comes first
• Website Analytics: Anonymised usage data may be retained for up to 26 months
• Legal Requirements: Some data may be retained longer to comply with legal obligations

After the retention period expires, we securely delete or anonymise your personal data in accordance with our data retention policy.

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right of Rectification: Request correction of inaccurate or incomplete data
• Right of Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise these rights, please contact us using the contact information provided below. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure data storage and backup procedures

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website usage. For detailed information about our use of cookies, including how to manage your preferences, please see our Cookie Policy.

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission or standard contractual clauses.

Children's Privacy

Our services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out using the following contact information:

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) if you believe your data protection rights have been violated.