SUMMER MENU - fresh and tasty dishes - LIMITED EDITION
Book a table

INFORMATION ON THE PROTECTION OF PERSONAL DATA (PRIVACY NOTICE) FOR USERS OF THE WEBSITE www.wienerhaus.en

WHO WE ARE
CIGIERRE – Compagnia Generale Ristorazione S.p.A. (hereinafter "CIGIERRE" or the "Company") located in Tavagnacco - Street Nazionale 35, pays the utmost attention to the security and confidentiality of its customers' personal data running its business.
The Company is therefore the Data Controller of the personal data collected on the website www.wienerhaus.en (hereinafter also referred to as the "Site").

WHAT PERSONAL DATA ABOUT YOU CAN BE COLLECTED

The following categories of personal data about you may be collected (the term “personal data” shall refer to all the categories listed below, collectively considered):

  • Contact Data – information relating to your first name, last name, address, email address, mobile phone number, residence and/or domicile address
  • Other Personal Data – information you voluntarily provide by filling out the form in the “Contact Us and Help Us Improve” section
  • Payment Data – data related to the financial transaction for the purchase of Products via the take away and delivery page of the Site
  • Interests – information you provide us regarding your preferences (in particular, indication of your preferred Restaurant)
  • Website Usage – information related to how you use the website, open or forward our communications, including information collected through cookies (you can find our Cookie Policy regulating the details here).

If you provide personal data on behalf of someone else, you must ensure beforehand that the data subjects have read this Privacy Policy.
We ask you to help us keep your personal data up to date by informing us of any changes.

HOW WE COLLECT YOUR PERSONAL DATA
We may collect and process your personal data in the following circumstances:

  • if you fill out the newsletter subscription form

  • if you complete the “Contact Us and Help Us Improve” form

  • if you enter data related to your “Preferred Restaurant” and give marketing consent in the appropriate section

  • if you request take away/delivery service

  • if you book a table

If you access the “Work with Us” form, you will be immediately redirected to the website of Cigierre S.p.A., the company managing the recruitment process. In this case, Cigierre S.p.A. will process your personal data according to its own privacy policy, accessible from the data collection form related to the application. Only if the selection process, carried out independently by Cigierre S.p.A., concludes positively, your data will be forwarded to us for the conclusion of the employment relationship. In such case, you will receive a specific privacy notice from us.

FOR WHAT PURPOSES CAN YOUR PERSONAL DATA BE USED

The processing of personal data must be legitimized by one of the legal bases provided by the current legislation on personal data protection, as described below.

a) Subscription to the Newsletter service
Your Contact Data may be used by Cigierre to send you a periodic newsletter, upon your explicit request by subscribing to the service, containing news and insights related to the Wiener Haus world.
Legal basis for processing: performance of a contract to which the data subject is party.
Providing the data is mandatory; otherwise, you will not be able to subscribe and receive the newsletter.

c) Response to your requests submitted through the “Contact Us and Help Us Improve” section
Contact Data and Other Personal Data may be used by Cigierre to respond to the requests you submitted by filling out the “Contact Us and Help Us Improve” form. When submitting your request in the text field, please use polite language and limit the information to what is strictly necessary for the Company to respond to your request.
Legal basis for processing: performance of a contract or pre-contractual measures.
Providing the data is mandatory; otherwise, it will not be possible to respond to your request.

d) Marketing to provide you with commercial and promotional offers (general marketing)
Your Contact Data and Interests (in particular, the data regarding your Preferred Restaurant) may be processed for direct marketing purposes, that is, to send you advertising and commercial communications about promotional sales initiatives, carried out through automated contact methods (email, SMS, other mass messaging tools, push notifications, etc.) and traditional contact methods, or for market research, if you give us your specific consent and within the limits described in the related consent form.
You may object at any time to receiving promotional communications through the contact methods indicated in the “CONTACTS” section of this privacy notice.
Legal basis for processing: consent.
Failure to provide consent does not affect contractual relationships.
Consent may be revoked at any time through the channels specified in the “CONTACTS” section below.

e) Purposes related to the purchase of Products online and the take away/delivery service
You have the possibility to view Products online in the dedicated section of the Site and receive delivery at home or pick them up at the Restaurant.
Legal basis for processing: fulfillment of pre-contractual obligations (during the identification and selection of products to purchase) and contractual obligations (following the purchase phase and related to delivery and any post-sale assistance). Providing data, while not mandatory, is essential and indispensable for the management, in whole or in part, of pre-contractual and contractual relationships; without it, we cannot proceed.

f) Purposes related to table reservation
You have the possibility to request a table reservation service, indicating the venue, date, time, and number of people at your preferred restaurant.
Legal basis for processing: fulfillment of pre-contractual obligations (during the identification of the venue, choice of preferred date and time, indication of the number of participants) and contractual obligations (when the service is performed and provided). Providing your data is necessary to achieve this purpose; otherwise, you will not be able to use the service.

g) Defense of rights in judicial, administrative, or out-of-court proceedings and in disputes arising in relation to the services offered
Your personal data may be processed by Cigierre to defend its rights or take legal action, or also to make claims against you or third parties.
Legal basis for processing: legitimate interest of the Company to protect its rights.
Providing personal data for this purpose is mandatory because otherwise the Company would be unable to defend its rights.

h) Purposes connected to obligations imposed by laws, regulations, or EU legislation, or by provisions/requests of authorities legally empowered by law and/or supervisory and control bodies
Wienerhaus may process your personal data to fulfill the obligations it is subject to.
Legal basis for processing: compliance with a legal obligation.
Providing personal data for this purpose is mandatory because otherwise the Company would be unable to comply with its legal obligations.

i) Evaluation of the professional profile of the candidate
If you submit your application through the appropriate form on the “Work with Us” page, you will be redirected to the corresponding page on the website Lavora con Noi - Cigierre Spa
The collection and processing of your data are necessary for the personnel recruitment and selection activities of Cigierre. We ask you not to include or send any “sensitive” data in your Curriculum Vitae (meaning data that could reveal, for example, general health status, inability to perform certain tasks, union membership, political party affiliation, religious beliefs, racial or ethnic origin). Otherwise, the Company will immediately delete such data.
Legal basis for processing: performance of pre-contractual obligations.
Providing data is mandatory to respond to your requests; otherwise, we will not be able to proceed.

HOW WE KEEP YOUR DATA SECURE
 

The Company uses appropriate security measures in order to improve the protection and maintenance of the security, integrity, and accessibility of your personal data.
All your personal data are stored on our secure servers (or secure paper copies) or those of our suppliers or business partners, and are accessible and used according to our security standards and policies (or equivalent standards for our suppliers or business partners).
It is, however, your responsibility to keep the password to access your reserved area confidential; therefore, we ask you not to share it with anyone.

Cigierre undertakes to:

  • ensure the accuracy and updating of the data processed, promptly receiving any corrections and/or additions requested by the data subject;

  • notify the data subject, within the timeframes and cases provided by applicable law, of any personal data breaches;

  • guarantee the compliance of processing operations with applicable legal provisions.

Furthermore, Cigierre processes your personal data in full compliance with the principles of fairness, lawfulness, and transparency. In compliance with Privacy Regulations, the Company configures, or in any case commits to configuring, information systems and software programs to minimize the use of personal data, so as to exclude processing whenever the purposes pursued can be achieved by using anonymous data or appropriate methods that allow identifying the data subject only if necessary. Finally, it is specified that the data are not used for the adoption of automated decision-making processes.

TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION AND THE EUROPEAN ECONOMIC AREA
For the provision of various services, data may be recorded in the company database, cash register systems, and our applications. In any case, no storage or transfer of data to Third Countries or outside the European Union or the European Economic Area will take place.

HOW LONG WE KEEP YOUR INFORMATION
The Company retains your personal data only for the time necessary to achieve the purposes for which they were collected or for any other legitimate related purpose. Therefore, if personal data are processed for two or more different purposes, we will keep such data until the purpose with the longest retention period ceases; however, we will no longer process personal data for the purpose whose retention period has expired.
Your personal data that are no longer necessary, or for which there is no longer a legal basis for retention, will be irreversibly anonymized or securely destroyed.

Below are the retention periods for the various types of data processed:

  • Contact Data
    These data, processed for sending newsletters, will be kept until you request the cancellation of the related service, following the instructions at the bottom of each newsletter;
    Contact data will also be processed, together with Interests, for marketing purposes for 24 months from collection; however, we will periodically refresh your consent for these purposes to respect your choices;
    If processed for the “take away and delivery” and “book a table” services, data may be retained only for the time necessary to fulfill your requests and, in any case, no longer than the following 10 (ten) years, regarding data necessary for administrative-accounting purposes.
    If processed for the “BOOK A TABLE” service, data may be retained for the periods imposed by the anti-Covid regulations (national regulations as well as Regional Presidents’ Ordinances), in order to demonstrate to the competent authorities the customer flow accessing the restaurants.

  • Legal Protection and Authority Requests
    With particular regard to judicial protection of our rights or in case of requests by authorities, the data processed will be retained as long as necessary to comply with the request or to pursue the protection of our rights. In any case, for technical reasons, the cessation of processing and the consequent definitive deletion or irreversible anonymization of the relevant personal data will be completed within thirty days from the above-mentioned deadlines.

  • Other Personal Data
    Information you provide by filling out the “Contact Us and Help Us Improve” form will be retained only for the time necessary to respond to your request and in any case no longer than 6 months from collection.

  • Interests
    These data will be retained for 12 months from collection; however, we will periodically refresh your consent for these purposes to respect your choices.

  • Payment Data
    These data, processed for the “order online” service, may be retained only for the time necessary to fulfill your requests and, in any case, no longer than the following 10 (ten) years, regarding data necessary for administrative-accounting purposes.

  • Curriculum Vitae Data
    Data processed for this purpose may be retained for a period not exceeding 12 months.

  • Social Log-In
    Data will be processed according to the privacy preferences you have set on the relevant Social Network.

  • Website Usage Data
    Such data will be retained as long as the account is active. The retention periods of any cookies used are available in the dedicated Cookie Policy.

In any case, for technical reasons, the cessation of processing and the consequent definitive deletion or irreversible anonymization of the relevant personal data will be completed within thirty days from the above deadlines.

WITH WHOM WE MAY SHARE YOUR PERSONAL DATA
Your personal data may be accessed by duly authorized employees, as well as external suppliers, appointed, if necessary, as data processors, who provide support for the provision of services, as well as law enforcement, government agencies, regulatory bodies, courts, or other public authorities authorized by law, including health authorities within the scope of actions to prevent and contain the spread of Covid-19.
If you wish to request to view the list of data processors and other recipients of your data, please send a specific request using the contact methods indicated in the following section “Contacts.”

CONTACTS
If you have questions about the processing of your personal data, please use the web form “privacy question/complaint” available in the “CONTACT US AND HELP US IMPROVE” section of the Site at the following link. Alternatively, you may contact us directly by phone at +39 (0432) 804 804, asking for the Data Protection Officer (DPO), or by sending an email directly to dpo@cigierre.com.

YOUR RIGHTS REGARDING DATA PROTECTION AND YOUR RIGHT TO FILE COMPLAINTS WITH THE SUPERVISORY AUTHORITY
Under certain conditions, you have the right to ask the Company for:

  • access to your personal data;

  • a copy of the personal data you have provided to us (so-called portability);

  • correction of the data we hold;

  • deletion of any data for which the Company no longer has a legal basis to process;

  • objection to processing where permitted by applicable law;

  • withdrawal of consent, if the processing is based on consent;

  • restriction of the manner in which the Company processes your personal data, within the limits provided by current legislation.

The exercise of these rights is subject to some exceptions aimed at safeguarding public interest (for example, the prevention or identification of crimes) and the interests of the Company. If you exercise any of the aforementioned rights, the Company will verify that you are entitled to exercise them and will usually respond within one month.
For any complaints or reports regarding the processing of your data, we will make every effort to address your concerns. However, if you wish, you may submit complaints or reports to the data protection authority, the Italian Data Protection Authority (Garante per la protezione dei dati personali), using the contact details available on the website www.garanteprivacy.it.