Legal
Privacy
This English version is provided for convenience. Only the German version (Datenschutzerklärung) is legally binding.
1. General
Protecting your personal data is important to us. We process personal data exclusively in accordance with the law, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). This privacy policy informs you about the key aspects of data processing on our website.
2. Controller
STERN16 Pizza & Burger Bar / Asia Street Food, owner Alon Abramov
Rotensterngasse 16, 1020 Vienna, Austria
Phone: +43 676 3934531
Email: info@stern16.at
Further details can be found in our imprint.
3. Hosting & server log files
Our website is operated on a server of Hetzner Online GmbH. When you visit the website, the web server automatically processes information transmitted by your browser: IP address, date and time of access, page visited, referrer URL, browser type and operating system.
This data is technically necessary to deliver the website and to ensure its stability and security. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Log files are deleted after 14 days at the latest unless they are needed to investigate a security incident.
4. Fonts
All fonts are served locally from our own server. No connection is made to servers of Google or any other font provider.
5. Cookies & local storage
On your first visit our cookie banner asks which services you consent to. Without your consent we only use technically necessary storage; services that require consent are only loaded after you have agreed (§ 165(3) TKG 2021, Art. 6(1)(a) GDPR).
- Necessary: we store your cookie banner choice in your browser's local storage under "stern16-consent" so the notice does not reappear on every visit. This storage is strictly necessary (§ 165(3) TKG 2021); the legal basis is Art. 6(1)(f) GDPR. It remains stored until you delete it in your browser.
- Statistics (only with consent): Google Analytics sets the cookies "_ga" and "_ga_…" to distinguish visits (stored for up to 2 years). See the section "Google Analytics".
- External media (only with consent or on click): Google Maps and the TheFork reservation window may set their own cookies when loaded. See the respective sections.
You can change or withdraw your consent at any time with effect for the future:
6. Google Analytics
If you consent to the "Statistics" category in the cookie banner, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). It helps us understand how our website is used (e.g. pages viewed, time spent, approximate location at city/country level, device type, browser and traffic source) so we can improve it. Without your consent Google Analytics is not loaded.
Cookies ("_ga", "_ga_…") are set and pseudonymous usage data is transmitted to Google. Google Analytics 4 does not store full IP addresses. We have disabled Google Signals and use for advertising purposes. Usage data is deleted automatically after 14 months. Google processes the data as a processor under a data processing agreement.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 165(3) TKG 2021. You can withdraw it at any time via the ; existing analytics cookies are then deleted. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission). More information: Google privacy policy.
7. Google Maps
Our "Reservations & Contact" page can display a map from Google Maps, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded once you actively agree (clicking "Load map" or consenting in the cookie banner). Only then is data – in particular your IP address and information about your use of the map – transmitted to Google, and Google may set cookies.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, which you can withdraw at any time with effect for the future. Data may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework. More information: Google privacy policy.
8. Online reservations via TheFork
For online reservations at the Pizza & Burger Bar we use the reservation system of TheFork, provided by La Fourchette SAS, 70 rue Saint-Lazare, 75009 Paris, France. The reservation window is only loaded when you actively click "Book a table". Only then is a connection to TheFork's servers established; in particular your IP address and technical information about your browser are transmitted, and TheFork may use cookies or similar technologies (e.g. to prevent abuse).
The data you enter in the reservation window (e.g. name, email address, phone number, date, time, number of guests and comments) is processed by TheFork and passed on to us so that we can handle your reservation. The legal basis is the performance of pre-contractual measures or of a contract pursuant to Art. 6(1)(b) GDPR. TheFork's privacy and cookie policy also applies to processing by TheFork. You can of course also book by phone instead.
9. Catering request form, email & phone
When you contact us via the catering request form, by email or by phone, we process the data you provide (name, email address, phone number, event details such as occasion, date and number of guests, and your message) to handle your request. Form data is sent to us by email (SMTP, encrypted) via our email provider's mail server; it is not stored in a database on the website.
The legal basis is the performance of pre-contractual measures or of a contract pursuant to Art. 6(1)(b) GDPR and our legitimate interest in answering enquiries pursuant to Art. 6(1)(f) GDPR. We delete this data as soon as it is no longer required for the purpose – usually no later than 6 months after the request has been completed – unless statutory retention obligations apply.
To prevent abuse, your IP address is briefly processed in the server's memory (max. 10 minutes) when you submit the form in order to limit excessive requests.
10. Spam protection with Google reCAPTCHA
To protect our catering form against spam and automated requests (bots), we use Google reCAPTCHA v3, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA is only loaded once you use the form (e.g. click into a field) – not when the page is opened. In particular your IP address, information about your browser and device, the page visited and your behaviour on the page (e.g. mouse movements, time spent) are transmitted to and evaluated by Google; Google may set or read cookies. The result is a score that we check on submission to determine whether the request comes from a human.
The legal basis is our legitimate interest in protecting our form against abuse and spam pursuant to Art. 6(1)(f) GDPR. If you do not want this, you can always reach us by email or phone. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. Google's Privacy Policy and Terms of Service apply.
11. External links & delivery services
Our website contains links to Instagram, TikTok, YouTube, Google Maps and the delivery services foodora and Wolt. Only when you click a link are you forwarded to the respective provider's website; from then on, their privacy policy applies. No data is transmitted to these providers beforehand.
12. Your rights
You generally have the following rights:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR), in particular to processing based on legitimate interests
- Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
Simply contact us at info@stern16.at. If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
13. Data security
This website is transmitted encrypted via HTTPS. We take appropriate technical and organisational measures to protect your data against loss and unauthorised access.
Last updated: October 2026