Privacy policy
Last updated: August 2026
Data controller
Rodizio GmbH (“Mariahilferbräu”), Mariahilfer Straße 152, 1150 Vienna, Austria
Phone: +43 (0)1 897 47 49, email: office@mariahilferbrau.com
Hosting and server logs
This website runs on a server we rent from Hetzner Online GmbH in Germany (Nuremberg); no data is transferred to third countries in the process. When you visit the website, technically necessary access data (in particular IP address, date and time of access, page requested, browser type) is processed in server logs. The purpose is the technical provision and security of the website; the legal basis is our legitimate interest in secure and stable operation (Art 6(1)(f) GDPR). Server logs are deleted automatically after 14 days. To detect and block attacks we additionally use security software that may log and block suspicious requests including their IP address; these security logs are deleted after 30 days at the latest.
Web analytics (Umami)
This website uses the open-source web analytics software Umami, which we run ourselves on our server at Hetzner in Germany. Umami does not use cookies and does not store any information on your device. It records only anonymised usage data (pages visited, referrer, browser type, operating system, device type, screen size, language, and country, region and city of origin). Your IP address is not stored; it is only processed transiently to derive an anonymous session identifier that changes monthly. Visits cannot be linked to each other beyond that period, and individual visitors cannot be identified. We keep the statistics indefinitely in this anonymised form. The legal basis is our legitimate interest (Art 6(1)(f) GDPR) in statistically analysing usage to improve our website.
Cookies and consent
Our website does not itself set any cookies that require consent, nor does it use third-party tracking services. To manage consent we use the consent tool Complianz, which runs on our own server. If you make a choice in the cookie notice, that choice is stored in a functional cookie on your device (for up to one year) so it can be respected on future visits (§ 165(3) of the Austrian Telecommunications Act, TKG 2021).
Contacting us
When you contact us (for example by email or phone), we process the details you provide (name, contact details, content of your enquiry) in order to handle your enquiry. The legal basis is Art 6(1)(b) GDPR (steps prior to entering into a contract or performance of a contract) and our legitimate interest in answering enquiries (Art 6(1)(f) GDPR). Without this information we cannot answer your enquiry. The data is deleted once your enquiry has been dealt with, unless statutory retention obligations apply.
Group reservations (enquiry form)
For group reservations you can use our enquiry form. We process the data you provide (name, email address, phone number if given, number of guests, preferred date and time, remarks) to handle and answer your reservation enquiry. The data is stored on our server and is not passed on to third parties. The legal basis is Art 6(1)(b) GDPR (steps prior to entering into a contract); without the required fields we cannot process your enquiry. We delete reservation enquiries once they are no longer needed for handling the reservation, at the latest twelve months after the requested date.
Table reservations (DISH)
For online table reservations we embed the DISH reservation widget, a service of DISH Digital Solutions GmbH, Metro-Straße 1, 40235 Düsseldorf, Germany. When you visit our website, the widget is loaded from DISH servers, which transmits your IP address to DISH. The legal basis for this is our legitimate interest in offering a convenient online reservation option (Art 6(1)(f) GDPR). If you reserve a table through the widget, DISH processes the data you enter (name, contact details, reservation details) to carry out the reservation (Art 6(1)(b) GDPR). For details, see the DISH privacy policy.
Map (OpenStreetMap)
To show our location we embed a map from OpenStreetMap, a service of the OpenStreetMap Foundation, Cambridge, United Kingdom. When you open a page with an embedded map, your IP address is transmitted to servers of the OpenStreetMap Foundation. An adequacy decision of the European Commission is in place for the United Kingdom. The legal basis is our legitimate interest in providing clear directions to our venue (Art 6(1)(f) GDPR).
Your rights
You have the right to obtain information about the personal data we process about you, and to have it rectified or erased, to restriction of processing, and to data portability. To exercise these rights, contact office@mariahilferbrau.com. You can also lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at).
Right to object: You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Art 21 GDPR).