Privacy Policy

1. Controller

Teinfaltstraße 6 Gastronomie GmbH
Johnstraße 69/14
1150 Wien
Austria

Phone: +43 1 533 23 11
Email: office@mollydarcys.at

Under the GDPR, the controller is whoever decides on the purposes and means of processing personal data. Further details are in our legal notice.

2. Server logs

Every time you open a page, your browser sends technical data that our server records:

• browser type and version
• operating system
• referrer URL
• host name of the requesting computer
• time of the request
• IP address

We need this data to deliver the website reliably and to detect attacks. The legal basis is our legitimate interest in secure operation (Art 6(1)(f) GDPR). We do not combine this data with other sources and do not analyse it on a personal level.

The website runs on a server operated by Hetzner Online GmbH, which processes this data on our behalf as a processor under Art 28 GDPR.

3. Cookies and local storage

This website stores exactly two things on your device:

PHPSESSID

Session cookie. Remembers your choice of language and keeps the booking form together. Deleted when you close your browser. Strictly necessary, therefore exempt from consent (section 165(3) Austrian Telecommunications Act 2021, Art 6(1)(f) GDPR).

md-karte-ok

Not a cookie but an entry in your browser's local storage. It is created only if you click “Load map”, and remembers that decision for your next visit. You can remove it by clearing site data in your browser settings.

We set no advertising or analytics cookies. There is no audience measurement, no pixel, no retargeting.

4. Table bookings

When you request a table through the form, we process your name, email address, preferred date, time, number of guests and your optional message.

We use these details solely to handle your request and reply to you. The legal basis is the taking of steps at your request prior to entering into a contract (Art 6(1)(b) GDPR).

After you submit the form, a confirmation goes to your email address and a copy to our bookings address. The request is also recorded in our server's operating log, so that no booking is lost if sending the email fails.

We keep the data for three months — in case there are questions about your visit — and delete it afterwards. We do not pass it on to third parties. You can request deletion at any time with an informal email to office@mollydarcys.at.

5. Google Maps

We offer a Google Maps map on the home page. It is not embedded in advance: as long as you do not click “Load map”, no contact is made with Google and no data is transmitted.

If you do click, the map loads from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In doing so Google learns, among other things, your IP address and that you are visiting this page; a transfer to Google LLC in the USA cannot be ruled out. The legal basis is your consent (Art 6(1)(a) GDPR), which you give with that click.

Your consent carries over to future visits because we store it locally (see point 3). You can withdraw it by clearing your browser's site data. Withdrawal takes effect immediately; processing carried out until then remains lawful. What Google does with the data is set out in its privacy policy: policies.google.com/privacy.

6. Links to Instagram and Facebook

We link to our Instagram and Facebook profiles in the footer. These are ordinary links, not embedded content and not social media plugins: only when you click one do you leave our site, and the respective provider's privacy terms then apply.

7. Encryption

The connection to this website is encrypted end to end with TLS, which you can recognise by the https:// in the address bar and the padlock icon in your browser. What you send us through the form cannot be read by third parties in transit.

8. Your rights

You are entitled at any time to:

• access to the data we hold about you (Art 15 GDPR)
• rectification of inaccurate data (Art 16 GDPR)
• erasure (Art 17 GDPR)
• restriction of processing (Art 18 GDPR)
• data portability in a common format (Art 20 GDPR)
• objection to processing based on legitimate interests (Art 21 GDPR)
• withdrawal of consent, with effect for the future (Art 7(3) GDPR)

An informal message to office@mollydarcys.at is enough.

If you believe we are processing your data unlawfully, you can lodge a complaint with the supervisory authority. In Austria this is the Data Protection Authority, Barichgasse 40–42, 1030 Vienna — dsb.gv.at.

9. Marketing emails

We expressly object to the use of the contact details published in our legal notice for sending unsolicited advertising.