Privacy Policy

1. General

The protection of your personal data is very important to us. Therefore, we process your data exclusively on the basis of the legal regulations (GDPR, TKG 2021). In this privacy policy, we inform you about the most important aspects of data processing within the framework of our website.

Controller: Dara Stojanovic (La Casa Flera)
Bundesstraße 21, 9241 Wernberg, Austria
Email: dara@lacasaflera.at

2. Hosting (Vercel)

Our website is hosted by Vercel Inc. The server locations we use are located in Frankfurt (Germany/EU) to ensure fast and secure data processing in accordance with European standards. Since Vercel is a US provider, data processing could theoretically also take place in the USA; however, we have concluded a Data Processing Agreement (DPA) to protect your data.

3. Data Collection for Table Reservations

When you reserve a table via our website, we collect the following personal data:

• Name
• Email address
• Phone number
• Date, time, and number of persons
• Comment (optional)

Purpose & Legal Basis: This data is processed exclusively for the purpose of handling the reservation and ensuring service quality (Art. 6 (1) (b) GDPR – performance of a contract/pre-contractual measures).

Storage Period: Your reservation data will be stored for a maximum of 30 days to process the booking and clarify any queries. After this period expires, the data will be automatically deleted, provided there are no statutory retention obligations (e.g., tax laws regarding invoicing).

4. Newsletter (MailerLite)

If you sign up for our newsletter, we use your email address to regularly send you information about offers, vouchers, and news.

• Double-Opt-In Procedure: Registration takes place via the so-called double-opt-in procedure. This means that after registering, you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register with someone else's email address.
• Use of MailerLite: The newsletter is sent via "MailerLite," a platform of the provider MailerLite International DAC (Ireland/EU). Our recipients' email addresses are stored on MailerLite's servers in the EU. We have concluded a Data Processing Agreement with MailerLite.
• Statistical Analysis: The newsletters contain a so-called "web beacon," which allows us to recognize whether the emails have been opened. This information is used to improve our offer.

Legal Basis & Withdrawal: Processing is based on your consent (Art. 6 (1) (a) GDPR). You can unsubscribe from the newsletter at any time via the link at the end of every email. This revokes your consent for the future.

5. Cookies

Our website does not use tracking or advertising cookies for which consent would be required. We only use technically necessary cookies or similar technologies (Local Storage) that are essential for the operation and functionality of the website (e.g., to store your language preference or the status of the reservation form).

Legal Basis: Our legitimate interest in a functioning website (Art. 6 (1) (f) GDPR).

6. Web Analytics (Plausible Analytics)

We use "Plausible Analytics" on this website, a privacy-friendly web analytics service provided by Plausible Insights OÜ (Estonia, EU).

• Why Plausible? Plausible does not use cookies and does not store personal data. No information is stored in the user's browser, and no data is passed on to advertising networks. Instead, your IP address is only processed briefly to create an anonymized "Daily Digest" identifier that changes every 24 hours. It is not possible for us to identify you personally.
• Processed Data: Only aggregated data is recorded, such as page views, time spent on the site, country of origin (not precise location), browser used, and operating system.

Legal Basis: Processing is carried out on the basis of our legitimate interest (Art. 6 (1) (f) GDPR) in statistically analyzing and optimizing the use of our website without interfering with user privacy. Consent (cookie banner) is therefore not required.

Further information can be found in Plausible's privacy policy: https://plausible.io/data-policy

7. Your Rights

In principle, you have the rights to access, rectification, erasure, restriction, data portability, revocation, and objection.

If you believe that the processing of your data violates data protection law or if your data protection claims have been violated in any other way, you can complain to us (dara@lacasaflera.at) or the data protection authority.