Last updated: 12 October 2025

1. Controller

In Bocca Al Lupo

Email: office@inboccaallupo.at

2. Purposes and Legal Bases of Processing

We process your personal data for the following purposes, in each case on the basis of Article 6(1) GDPR:

Table reservations and communication (Article 6(1)(b) – contract/pre-contractual steps)

Processing reservations, enquiries and change requests, and managing waiting lists and no-shows.

Payment processing (Article 6(1)(b) and (f) – contract/legitimate interest)

Processing and documenting payments, and preventing fraud.

Website operation, IT security and server logs (Article 6(1)(f) – legitimate interest)

Stability, error analysis and attack detection.

Marketing/newsletters (Article 6(1)(a) – consent)

Sending offers and news if you have consented. You may withdraw your consent at any time.

Legal compliance/retention (Article 6(1)(c) – legal obligation)

Trade, tax and accounting obligations.

3. Categories of Data

Basic data: name and contact details (email, phone).

Reservation data: date/time, number of guests and notes (e.g. allergies).

Payment data: payment method and transaction/receipt data (we do not store full card details).

Usage data: IP address, date/time, pages accessed and browser/device information (server log files).

Marketing preferences: newsletter opt-in/opt-out.

4. Cookies & Tracking

We use cookies and similar technologies to make the website user-friendly, store preferences and analyse usage.

Necessary cookies: for the website’s basic functions (legal basis: Article 6(1)(f)).

Statistics/marketing cookies: only with consent (Article 6(1)(a)).

You can adjust your cookie settings at any time through the cookie banner or your browser.

5. Recipients and Processors

We share data with trusted service providers only as necessary (processors under Article 28 GDPR), for example:

Hosting/IT service providers (website hosting, email, backups)

Reservation/table management tools (where used, e.g. OpenTable/Quandoo etc.)

Payment service providers (e.g. card processors)

Newsletter/marketing services (only with consent)

Authorities and advisers (where required by law)

Appropriate agreements are in place with all processors.

6. Transfers to Third Countries

Where service providers process data outside the EU/EEA, this only takes place if an EU adequacy decision is in place or appropriate safeguards exist, in particular EU Standard Contractual Clauses. We will provide details on request.

7. Retention Periods

We retain personal data only for as long as necessary for the relevant purposes or as required by law:

Reservation and communication data: generally 12 months after the last contact.

Payment/accounting records: 7 years (tax/commercial law retention requirements in Austria).

Server logs: generally 14–60 days (for security purposes).

Newsletter data: until you withdraw your consent.

8. Your Rights (Articles 15–21 GDPR)

You have the right to:

access information about the processing of your data,

rectification of inaccurate data,

erasure (“right to be forgotten”), provided no legal obligations prevent this,

restriction of processing,

data portability,

object to processing based on legitimate interests,

withdraw consent with effect for the future.

To exercise your rights, contact us at office@inboccaallupo.at

Right to lodge a complaint:

You may lodge a complaint with the Austrian Data Protection Authority:

Barichgasse 40–42, 1030 Wien, Österreich – dsb@dsb.gv.at

– www.dsb.gv.at

9. Obligation to Provide Data

Certain data, such as contact and reservation details, is required to process your reservation. Without this data, the contract cannot be fulfilled.

10. Automated Decision-Making/Profiling

We do not carry out automated decision-making, including profiling, that produces legal effects or similarly significantly affects you.

11. Data Security

We implement appropriate technical and organisational measures, including access controls, encryption and backups, to protect your data against loss, misuse and unauthorised access.

12. Changes to This Privacy Policy

We may amend this policy to keep it up to date. The version published on this website applies in each case.

13. Contact

Questions about data protection? Write to us at:

office@inboccaallupo.at