Privacy Policy Q27 Linz Restaurant

We are delighted that you are visiting our website and would like to thank you for your interest in our restaurant. The way we handle the data of our guests, customers, and interested parties is a matter of trust for us. The trust placed in us is of great importance and therefore comes with the obligation to handle your data carefully and to protect it against misuse and unauthorized access.

So that you can feel safe and comfortable when visiting our website, we take the protection of your personal data and its confidential treatment very seriously. For this reason, we act in accordance with the applicable legal provisions on the protection of personal data and data security. With the following privacy notice, we would like to inform you about when we store which data and how we use it – naturally in compliance with the applicable legal framework.

ARCOTEL Tabakfabrik is guided in particular by the EU General Data Protection Regulation as well as the current national data protection laws. When using the internet, we also follow the Austrian Telecommunications Act (TKG) in order to protect your personal data. In the following, we explain which information we collect during your visit to our website and how it is used.

Name and Address of the Controller

The controller within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection provisions is:

Q27 Linz
Hotel Nike GmbH, Gruberstraße 1, 4020 Linz, Austria
Tel.: +43 664 814 98 62
Mail: [email protected]

Name and Address of the Data Protection Officer

The data protection officer of the controller is:

Mr. Andreas Thurmann
DataSolution LUD GmbH, Isarstr. 13, D-14974 Ludwigsfelde, Germany
Tel.: +49 (0) 3378 202513
Mail: [email protected]

General Information on Data Processing

Scope of the Processing of Personal Data

We generally collect and use our users' personal data only to the extent necessary to provide a functional website as well as our content and services. The collection and use of our users' personal data generally only takes place with the user's consent.

An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by legal provisions.

Legal Basis for the Processing of Personal Data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) and Art. 7 GDPR serve as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our hotels are subject (e.g. national registration laws), Art. 6(1)(c) GDPR serves as the legal basis. If processing is necessary for the purposes of the legitimate interests pursued by our hotel group or by a third party and the interests, fundamental rights, and freedoms of the data subject do not override the former interest, Art. 6(1)(f) GDPR serves as the legal basis for processing.

Data Erasure and Storage Period

The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Storage may continue beyond this point if provided for by European or national legislators in EU regulations, laws, or other provisions to which the controller is subject.

The data will also be blocked or erased when a storage period prescribed by the above-mentioned standards expires, unless there is a necessity for further storage of the data for the conclusion or performance of a contract.

Contact Form / Email Contact

Description and Scope of Data Processing

Our website provides a contact option that can be used for electronic communication. If you make use of this option, you can contact the relevant contact person via the email addresses provided. In this case, the user's personal data transmitted with the email will be stored in the email system.

Alternatively, you may use the contact form to send us your inquiry. This data includes: title, first and last name, email address, telephone number, number of persons, date and time, and comments.

No data is passed on to third parties.

Legal Basis for Data Processing

The legal basis for processing the data is initially our legitimate interest in processing the data in the course of contact initiated by the person making the inquiry. If the contact aims at concluding a contract, the additional legal basis for processing is the initiation of a pre-contractual relationship.

Purpose of Data Processing

The processing of personal data from the input form or from an email serves solely to handle the contact request.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of Storage

The data will be deleted as soon as it is no longer necessary for achieving the purpose for which it was collected. This is the case once you have stayed with us.

For the personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed ended when the circumstances indicate that the matter in question has been conclusively clarified.

Objection and Removal Option

You have the right to object to the processing of your data at any time. For this purpose, we have set up the email address [email protected]. Please note that in the event of an objection, the conversation cannot be continued or we may be unable to make a reservation.

Online Orders via the Website

Description and Scope of Data Processing

Our website offers the option to place orders for menus. If you make use of this option, the data entered in the input form will be transmitted to us and stored. This data includes: first name, last name, email address, telephone number, order details, date and time of collection, and payment data (cash or credit card).

If you place an online order via our websites, this is done in part through the online ordering system Wix Restaurants by Wix.com Inc., 40 Nemal Tel Aviv St., Tel Aviv, Israel. All booking data entered by you is transmitted in encrypted form.

The data is used exclusively for processing the order and for communication.

Legal Basis for Data Processing

The legal basis for processing the data is the conclusion of a contract.

Purpose of Data Processing

The processing of personal data from the input form serves solely to process the order and handle payment transactions.

Duration of Storage

The data will be deleted or anonymized as soon as it is no longer required to achieve the purpose for which it was collected. In the case of a contractual relationship, we will delete the received data as soon as statutory, commercial, articles-based, or contractual retention obligations have been fulfilled.

Objection and Removal Option

You have the right to object to the processing of your data at any time. For this purpose, we have set up the email address [email protected]. Please note that in the event of an objection, the booking cannot be completed or the conversation cannot be continued.

Newsletter Service

Description and Scope of Data Processing

Our website offers the option to sign up for our newsletter service in different ways. If you make use of this option, the data entered in the input form will be transmitted to us and stored. This data includes: email address as well as optional information such as title, first name, last name, language, desired destination, or topics.

If you subscribe to our newsletter via our websites, the data will be stored in our newsletter tool provided by Revinate Inc., 1 Letterman Drive Building C, Suite CM 100, San Francisco, California 94129, USA. Revinate has committed itself to handling your transmitted data in compliance with data protection requirements. It takes all organizational and technical measures to protect your data. Further information on data protection can be found on its website.

If we receive an email address by other means and the recipient clearly states that they wish to receive our newsletter, we will also record their data via the input form on our website or transfer it to the Revinate platform.

Legal Basis for Data Processing

The legal basis for processing the data is the existence of the recipient’s consent. This is ensured by means of a double opt-in procedure.

Purpose of Data Processing

The processing of personal data serves solely to send individualized newsletters.

Duration of Storage

The data will be deleted or, if necessary, blocked as soon as the newsletter service is unsubscribed from.

Objection and Removal Option

As a newsletter recipient, you have the right to object to the processing of your data at any time. Every newsletter contains a link that allows you to unsubscribe from the newsletter service at any time. In addition, we have set up the email address [email protected]. Please provide us with the relevant email address there.

Provision of the Website and Creation of Log Files

Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:

• Information about the browser type and version used
• The user’s operating system
• The user’s IP address
• Date and time of access
• Websites from which the user’s system reaches our website
• Websites accessed by the user’s system via our website

This data is also stored in the log files of our system. This data is not stored together with other personal data of the user. Personal user profiles are not created. The stored data is used only for statistical purposes.

Legal Basis for Data Processing

The legal basis for the temporary storage of data and log files is our legitimate interest in processing data for the stated purpose.

Purpose of Data Processing

The temporary storage of the IP address by the system is necessary in order to deliver the website to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session.

Storage in log files takes place in order to ensure the functionality of the website. In addition, the data serves to optimize the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes takes place in this context.

Duration of Storage

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after no later than seven days. Storage beyond this period is possible insofar as we are required to do so by law. In this case, the users’ IP addresses are deleted or altered so that an assignment to the accessing client is no longer possible.

Objection and Removal Option

The collection of data for providing the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.

Use of Cookies and Scripts

Description and Scope of Data Processing

Cookies are small files that enable us to store specific information related to you, the user, on your PC while you visit one of our websites. Cookies help us determine the frequency of use and number of users of our websites and make our offerings as convenient and efficient as possible for you.

Further information can be found in our cookie policy.

We use cookies on our website that enable an analysis of users’ browsing behavior. In this way, the following data may be transmitted: entered search terms, frequency of page views, use of website functions. The user data collected in this way is pseudonymized by technical measures. Therefore, it is no longer possible to assign the data to the accessing user.

The data is not stored together with other personal data of the users. When accessing our websites, the user is informed about the use of cookies for analysis purposes and their consent to the processing of personal data used in this context is obtained. In this context, a reference to this privacy policy is also provided.

Legal Basis for Data Processing

The legal basis for the use of technically necessary cookies is our legitimate interest in the proper operation of our website.

The legal basis for processing personal data using cookies for analysis purposes is the user’s consent, where such consent has been given.

Purpose of Data Processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary that the browser is recognized again after a page change. The user data collected by technically necessary cookies is not used to create user profiles.

The use of analysis cookies is for the purpose of improving the quality of our website and its content. Through analysis cookies, we learn how the website is used and can thus continuously optimize our offering.

Duration of Storage, Objection and Removal Option

Cookies are stored on the user’s computer and transmitted by it to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically.

If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

Use of a Cookie Banner

Our website uses the consent manager of Cybot A/S, Havnegade 39, 1058 Copenhagen (hereinafter: cookiebot.com). We use this service to ensure, on the one hand, the full functionality of our website and, on the other hand, the data protection compliant use of marketing and tracking tools on our website. In this context, your browser may transmit personal data to cookiebot.com.

The legal basis for data processing is Art. 6(1)(f) GDPR. The legitimate interest lies in the error-free functionality of the website. The data is deleted as soon as the purpose of its collection has been fulfilled. Further information on the handling of transferred data can be found in cookiebot.com’s privacy policy.

You can prevent the collection and processing of your data by cookiebot.com by disabling the execution of script code in your browser or by installing a script blocker in your browser.

The following information is stored in our Cookiebot account:

• The user's IP address in anonymized form (the last three digits are set to “0”).
• Date and time of consent.
• The user’s browser.
• The URL from which the consent was sent.
• An anonymous, random, and encrypted key value.
• The user’s consent state, which serves as proof of consent.

The key and the consent status are also stored in the user’s browser in the “CookieConsent” cookie, so that the website can automatically read and respect the user’s consent for all subsequent page requests and future user sessions for up to 12 months. You have the option to view and change your consent settings at any time. You will find this further down on this page.

According to the law, we may store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission. This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages. You can change or withdraw your consent at any time from the cookie declaration on our website.

Change your consent here | Withdraw your consent

Script Blockers in Your Browser

It is also possible to use our services without cookies and scripts. You can disable the storage of cookies and scripts in your browser, restrict them to certain websites, or configure your browser to notify you whenever a cookie is sent. You can also delete cookies from your computer’s hard drive at any time.

To block scripts, you can install browser add-ons. NoScript for Firefox and ScriptSafe for Google Chrome are examples of such browser extensions. They block not only all kinds of JavaScript, but also selected trackers, Java, Flash, and other plugins on websites.

If you are concerned about third-party cookies, you can reject only those and still keep the cookies that allow our website to function properly.

You can reject cookies in each of the main browsers as follows:

• Mozilla Firefox
• Google Chrome
• Internet Explorer
• Safari

Please note, however, that in these cases you may have to expect restricted display of the page and limited user guidance.

Use of Analytics Tools

Use of Google Analytics, Google Conversion Tracking and Google Remarketing

Our website uses Google Analytics, Google Conversion Tracking and Google Remarketing. These are services provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

This offering uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies and scripts that are stored on users’ computers and enable an analysis of how they use the website. The information generated by the cookie about the use of this website by users is usually transmitted to and stored on a Google server in the USA.

If IP anonymization is activated on this website, however, the IP address of users will first be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.

IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to evaluate users’ use of the website, to compile reports on website activity, and to provide further services related to website usage and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Users can prevent the storage of cookies by selecting the appropriate settings in their browser software. However, this offering points out to users that in this case they may not be able to use all functions of this website to their full extent. Users can also prevent the collection of data generated by the cookie and related to their use of the website (including their IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available for this purpose.

Google Tag Manager

This website uses Google Tag Manager for the deployment of the cookies mentioned above. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The tool itself (which implements the tags) is a cookieless domain and does not collect personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data.

If deactivation has been carried out at domain or cookie level, this remains in effect for all tracking tags implemented with Google Tag Manager.

Use of Social Media Plugins

The use of social media plugins takes place in the interest of an appealing presentation and the expansion of our online services. This constitutes a legitimate interest.

Use of Facebook

Our pages integrate plugins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. You can recognize the plugins by the logo on our site.

We have no influence on the collection of data and its further processing by Facebook. Furthermore, we do not know the extent, location, and duration of data storage, the extent to which Facebook complies with deletion obligations, which evaluations and links with the data are made, and to whom the data is passed on.

If you wish to prevent Facebook from processing personal data transmitted by you to us, please contact us by other means.

Further information can be found in Facebook’s privacy policy. If you do not want Facebook to be able to associate your visit to our pages with your user account, please log out of your respective user account.

Facebook Fan Page

On our Facebook fan page, we use plugins provided by Facebook.com, which are made available by Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304, USA.

By using the fan page, data is transmitted to Facebook servers that contain information about your visits to our fan page. For logged-in users, this means that the usage data is assigned to their personal Facebook account. As soon as you, as a logged-in Facebook user, actively use the Facebook plugin, for example by clicking on the “Facebook” logo or using the comment function, this data is transferred to your Facebook account and published. You can only avoid this by logging out of your Facebook account beforehand.

We do not know exactly which data Facebook stores and uses. As a user of the fan page, you must therefore expect that Facebook also stores your actions on the fan page completely.

In all other respects, the general terms of use of Facebook Ireland Limited, Hanover Reach, 5–7 Hanover Quay, Dublin 2, Ireland apply.

The legal basis for this data processing is Art. 6(1)(a) and Art. 6(1)(f) GDPR.

Any person depicted as well as other third parties have the right to object at any time to the publication of their personal data (photos). For this purpose, we have set up the email address [email protected]. The right to object applies in particular to the future publication of images.

It may always happen that we inadvertently publish images of persons for whom no consent has been obtained. If publication is not desired, we will immediately do everything possible to comply with your rights. In the case of group photos, we reserve the right to blur faces.

Use of Instagram

This website uses the “Instagram button”. When our website is accessed, your browser establishes a connection to servers of the social network Instagram, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

When you visit our pages, a direct connection is established between your browser and the Instagram server via the plugin. Instagram thus receives the information that you have visited our site with your IP address. If you click the Instagram button while logged into your Instagram account, you can link the content of our pages to your Instagram profile. This allows Instagram to associate your visit to our pages with your user account.

We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

No data is transferred from our website to Instagram simply by visiting our website.

Further information on this can be found in Instagram’s privacy policy.

Use of Google Maps

Description and Scope of Data Processing

This website uses Google Maps API, a map service provided by Google Inc. (“Google”), to display an interactive map and to create directions. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored on a Google server in the USA. Google may transfer the information obtained through Maps to third parties if required by law or insofar as third parties process this data on Google’s behalf.

Google will under no circumstances associate your IP address with other Google data. Nevertheless, it is technically possible that Google may be able to identify at least individual users on the basis of the data received. It would be possible for personal data and personality profiles of users of the website to be processed by Google for other purposes over which we have no influence.

Legal Basis for Data Processing

The legal basis for the use of Google Maps is our legitimate interest in data processing.

Purpose of Data Processing

The purpose of using Google Maps is to show the user our location on the website and to give them the opportunity to determine different routes using Google Maps services.

Duration of Storage, Objection and Removal Option

You have the option to deactivate the Google Maps service and thus prevent data transfer to Google by disabling JavaScript in your browser. However, please note that in this case you may not be able to use the map display on our website.

Use of Google Web Fonts

Description and Scope of Data Processing

This website uses so-called web fonts provided by Google for the uniform display of fonts. When you access a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address.

Legal Basis for Data Processing

The legal basis for the use of Google Web Fonts is our legitimate interest in data processing.

Purpose of Data Processing

The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offerings. If your browser does not support web fonts, a standard font from your computer will be used.

Duration of Storage, Objection and Removal Option

To avoid tracking based on installed fonts, you can, for example, deactivate the options “Allow pages to choose their own fonts” and the CSS Font Loading API in Firefox. In that case, websites will no longer be displayed in the format intended by the operator.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy.

Protection of Minors

Our service is primarily intended for adults. We do not currently market any special areas for children. Accordingly, we do not knowingly collect information to determine age, nor do we knowingly collect personal data from children under the age of 16. However, we advise all visitors to our website under the age of 16 not to disclose or provide any personal data through our service.

In the event that we discover that a child under the age of 16 has provided us with personal data, we will, in accordance with the Children's Online Privacy Protection Act (see the Federal Trade Commission website at www.ftc.gov/kidzprivacy for further information on this law), delete the child’s personal data from our files insofar as technically possible.

Your Rights Towards Us

If personal data relating to you is processed by us, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

• You have the right to obtain information about the personal data stored about you, the purposes of the processing, any transfers to other bodies, and the duration of storage.
• If data is incorrect or no longer necessary for the purposes for which it was collected, you may request its correction, deletion, or restriction of processing. Where provided for in the processing procedures, you may also inspect your data yourself and, if necessary, correct it.
• If there are reasons arising from your particular personal situation against the processing of your personal data, you may object to such processing insofar as it is based on a legitimate interest.

The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

• If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing or profiling purposes, the personal data concerning you will no longer be processed for these purposes.

You have the right to withdraw your consent to data protection at any time via our email address [email protected]. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

If you have questions about your rights and how to exercise them, please contact the responsible office or our data protection officer.

Right to Lodge a Complaint with a Supervisory Authority

As a data subject, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority for data protection, in particular in the member state of your residence, your place of work, or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates data protection law.

The supervisory authority with which the complaint has been lodged will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy.

More information can be found on the website of the Federal Data Protection Authority.

Please follow this link.

Security

ARCOTEL Tabakfabrik uses technical and organizational security measures in accordance with Art. 32 GDPR to protect the data managed by us against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

Access is only granted to a small number of authorized persons who are specially obligated to maintain data confidentiality and who are involved in the technical, administrative, or editorial management of data.

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” address line in your browser and the lock symbol in the browser bar.

Status | March 2026