Privacy Policy

Introduction

cyberionis AG ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or use our services. We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Collection

The data we collect may include the following personal information:

• Contact information such as name, email address, phone number, and postal address
• Company information including restaurant name, number of locations, and business details
• Communication preferences and enquiry details
• Technical information including IP address, browser type, and device information
• Website usage data through cookies and similar tracking technologies
• Information you provide when contacting us or using our services

How We Use Your Information

We use of your data is based on the following legal grounds and for the following purposes:

• Contract Performance: To provide our restaurant management services and respond to your enquiries
• Legitimate Interest: To improve our services, conduct business analysis, and maintain our website
• Consent: For marketing communications and non-essential cookies (where applicable)
• Legal Obligation: To comply with applicable laws and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing and Third Parties

We may share your personal data with:

• Service providers who assist us in operating our website and delivering our services
• Professional advisers including lawyers, accountants, and consultants
• Regulatory authorities where required by law
• Third parties in connection with a business transfer or acquisition

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including adequacy decisions by the European Commission or standard contractual clauses.

Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Generally, we retain contact and communication data for up to seven years after our last interaction, unless a longer retention period is required by law.

Your Rights

Under the GDPR and other applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right of Rectification: Request correction of inaccurate or incomplete data
• Right of Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of processing in certain situations
• Right to Data Portability: Request transfer of your data to another controller
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure data transmission, access controls, and regular security assessments.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us so we can take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out using the following contact information:

Supervisory Authority

You have the right to lodge a complaint with the relevant data protection supervisory authority if you believe we have not handled your personal data in accordance with applicable laws. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde).