We are pleased that you are visiting our website and thank you for your interest! The protection of your privacy when using our website is important to us, so please take note of the following information on how we handle your data.

As we attach great importance to data protection, we strictly adhere to the statutory provisions of the Data Protection Act when collecting, processing and using data.

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2003). In this data protection information, we inform you about the most important aspects of data processing on our website.

Contact us:
If you contact us by email via our website, the data you provide will be stored by us for the purpose of processing your inquiry and in the event of follow-up questions. We will not pass on this data without your consent. If you make inquiries via our website, you give us your consent to contact you. E-mails sent by you to e-mail addresses on this medium are registered and forwarded to the responsible employees for processing. The data you provide will be checked for validity and up-to-dateness against the data already lawfully available. If necessary, the data stored by us will be updated in accordance with the regulations. Your data will only be passed on to third parties if this is necessary for the fulfillment of a contractual relationship.
Where necessary, in the context of balancing interests in favor of the controller or a processor, data may be processed beyond the actual fulfillment of the contract to safeguard the legitimate interests of the controller or processors, in particular for consultation and data exchange with credit agencies to determine creditworthiness or default risks and for the purpose of advertising our own products, customer evaluation, market and opinion research, insofar as you do not object to the use of your data in accordance with Art. 21 GDPR. default risks and for the purpose of advertising our own products, customer evaluation, market and opinion research, unless you have objected to the use of your data in accordance with Art. 21 GDPR, in the context of legal prosecution for the defense and assertion of legal claims, for tax and legal advice and IT services.

Newsletter:
You provide separate, voluntary and informed consent for our newsletter. This consent can be revoked at any time, for example by sending us an e-mail.

Participation in the competition:
All information about the current prize opportunities, conditions of participation and the closing date as well as the prizes drawn can be found on the Internet at www.m-rast.at or you will also be informed as a newsletter subscriber. The newsletter or SMS service subscription is free of charge and can be canceled at any time on the Internet at www.m-rast.at or by telephone on 03577/24 888. The prize draw is subject to the exclusion of legal recourse. No cash redemption possible. Participation in the competition is independent of purchase. Use of your data for advertising purposes for personal advertising: The competition participant hereby expressly agrees that the data provided to M-Raststätte Betriebs GmbH (first and last name, full address and e-mail address, optional mobile number) may be used for target group-oriented self-promotion. Advertising will be sent by newsletter e-mail. Further information on data protection: www.m-rast.at/impressum.html The winners will be notified in writing. By participating, you consent to the processing and use of your data for in-house advertising and marketing purposes. Duration of data storage (see: Duration of storage). Your data will be entered into our company database accordingly and the completed participation cards will be filed.

Data categories and data origin:
We process the following categories of data collected from you: Personal master data, communication data (e-mail, address, telephone number), VAT number, contract data, payment information. The respective contracts with the data controller apply as contract data processors.

Transfer of your data:
As part of the fulfillment of the contract, we will transfer your data to our tax consultancy firm and to the following categories of recipients if this is necessary for the fulfillment of the contract: suppliers, shipping and logistics companies, auditors, debt collection agencies, courts, tax offices, lawyers, social insurance companies and in particular for the creation and maintenance of our M-Rast customer cards.

Rights of the data subject:
If the legal requirements are met, you have the following rights under Art. 15 to 22 GDPR: right of access, rectification, erasure, restriction of processing and data portability. You also have the right to object to processing based on Art. 6 (1) (f) GDPR in accordance with Art. 14 (2) (c) in conjunction with Art. 21 GDPR. If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the data protection authority.

Your rights:
As a user/data subject, you have the following rights at all times in accordance with the applicable statutory data protection provisions [GDPR; DSG 2018]:
Right to information (Art. 15 GDPR)
You have the right to information about the data stored about you, its origin and recipients and the purpose of the data processing. You can obtain information about stored data by emailing us at
Right to rectification (Art. 16 GDPR)
You have the right to rectification of the data stored about you at any time. Please contact us by e-mail for the rectification of your data.
Right to erasure (“to be forgotten”) (Art. 17 GDPR)
You have the right to erasure of the data stored about you at any time. Please contact us by email to have your data erased.
Right to restriction of processing (Art. 18 GDPR)
You have the right to restriction of processing of your personal data at any time. Please contact us by email to restrict the processing of your data.
Right to data portability (Art. 20 GDPR)
You have the right at any time to receive the personal data concerning you in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance. Please contact us by email regarding the right to data portability.
Right to object (Art. 21 GDPR)
You have the right to object to the use of your personal data stored at any time. Please contact us by email to exercise your right to object to the use of your data.
Withdrawal of consent Your rights are important to us. You have the right to information, correction or deletion of your stored data at any time. You can revoke your consent to the use of your data at any time by sending us an e-mail.

Web analysis/cookies:
Our website uses functions of the web analysis service Google Analytics. Cookies are used for this purpose, which enable your use of the website to be analyzed. The information generated in this way is transferred to the provider’s server and stored there.
You can prevent this by setting up your browser so that no cookies are stored.
We have concluded a corresponding contract with the provider for commissioned data processing.
Your IP address is recorded, but immediately pseudonymized. This means that only a rough localization is possible.
Data processing is carried out on the basis of the legal provisions of § 96 para. 3 TKG and Art 6 para. 1 lit a (consent) and/or f (legitimate interest) of the GDPR.
Our concern within the meaning of the GDPR (legitimate interest) is the improvement of our offer and our website. Since the privacy of our users is important to us, the user data is pseudonymized.

Use of data for advertising purposes:
Personalized advertising: The user hereby expressly agrees that the data transmitted to M-Raststätte Betriebs GmbH may be used for target group-oriented self-promotion and, if necessary, self-promotion by partner companies, whereby the user will be sent advertising or, upon request and prior order, newsletters by e-mail or to his user account.

You can reach us at the following contact details or identity of the person responsible:
M-Raststätte Betriebs GmbH
A-8740 Zeltweg, Hauptstraße 242, Austria
Phone: +43 3577/24 888, Fax: +43 3577/24 888-705
Fritz Mayer

Plugins and widgets for social media:
We integrate plugins for Facebook, Twitter, Pinterest and other social media on the platform. If you click the Facebook Like button, Facebook’s data protection provisions apply. If you are logged in to Facebook and the platform at the same time, Facebook will link your use of the services to your Facebook account.
The platform integrates plugins for social media such as
a) Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA;
b) Instagram, LLC, 1601 1601 Willow Rd. Menlo Park, CA 94025;
c) Twitter, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; or
d) Pinterest, 808 Brannan Street, San Francisco, CA 94103, USA.
These plugins may collect the user’s IP address and the page the user has accessed on the platform and may set a cookie to enable the function to work properly. Social media plugins and widgets are either hosted by third parties or directly on our websites. The user’s interaction with these features is governed by the privacy policy of the company providing the feature. We are not responsible for the policies and practices regarding collection, use, disclosure, including data security practices of other companies, such as Facebook, Twitter, Pinterest and others.
Users can recognize Facebook plugins, for example, by the Facebook logo or the addition “Facebook Social Plugin” or the “Like-Button” on the platform. An overview of Facebook plugins can be found on the following page: http://developers.facebook.com/docs/plugins/.
By using a plugin, for example by clicking the “Like” button or entering a comment while the user is logged into their Facebook account, the user links the content of the platform to their Facebook profile. In this way, Facebook can link the visit to the platform with the account of the respective user. We do not know the content of the transmitted data or how Facebook uses such data. More information on this topic can be found on the following page: http://www.facebook.com/about/privacy/.
If the user wishes to prevent Facebook from linking their visits and activities on the platform to their Facebook account, the user must log out of their Facebook account.
Use of Facebook Custom Audiences
Description and scope of data processing
This website also uses “Custom Audiences from customer lists” from Facebook Inc. with your consent, 1 Hacker Way, Menlo Park, California 94025, USA.
With their help, Facebook can target our advertisements to newsletter subscribers who are registered with Facebook. This enables us to target advertising to people who have already expressed an interest in our products or our company. This data is hashed and transmitted to Facebook in encrypted form. Facebook compares the hash values of the customer list with the hash values of its own user data already in stock. Facebook then checks the matching data to see whether someone has not yet liked our Facebook page and delivers our advertising to these Facebook users. Further information on the collection and use of data, the purpose and scope of data collection and the further processing and use of data by Facebook as well as your setting options to protect your privacy and rights can be found in Facebook’s privacy policy, which can be found at https://www.facebook.com/ads/website_custom_audiences and https://www.facebook.com/privacy/explanation, among others.
Legal basis for data processing
The legal basis for data processing is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR.
Purpose of data processing
This data is processed for our company’s advertising purposes and to increase the efficiency of our website.
Transmission of data
This personal data is transmitted to the following recipients for the above-mentioned purposes:
Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA Provider of the Facebook Custom Audiences service
Data transfer to the USA
With your consent, we use Facebook Custom Audiences from Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA to display advertising on Facebook. Your data will be transmitted to Facebook Inc. in the USA. Facebook Inc. is a company that has been entered in the Privacy Shield list in accordance with the Privacy Shield. The EU-US Privacy Shield was adopted by the European Commission by means of adequacy decision C(2016) 4176 final of 12.07.2016. Accordingly, Facebook Inc. provides adequate safeguards for the transfer of data to the USA. You can find more information on the official Privacy Shield website https://www.privacyshield.gov take.
Duration of storage
The data is deleted as soon as it is no longer required for the purpose for which it was collected.
Security
We protect your data using technical and organizational security measures to prevent accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures, such as data encryption, are regularly improved in line with technological developments.

Reservation:
In order to do justice to the constant development of the Internet, we can adapt this data protection declaration at any time in compliance with data protection regulations.

Right to lodge a complaint with the supervisory authority:
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that your personal data is being processed unlawfully. The address of the supervisory authority responsible for our company is: Austrian Data Protection Authority
Wickenburggasse 8, 1080 Vienna