Protection of your personal data and privacy is important to us. For this reason we are explaining in the following how we handle your personal data, and particularly why we process your personal data, who we transmit it to, and what your data protection claims and rights are. When we talk of data in the following, we mean your personal data. This is all information which can be used to identify you as an individual, directly or indirectly.
We process your personal data in compliance with statutory regulations (specifically the General Data Protection Regulation [GDPR], the Data Protection Act [DPA] in the prevailing versions and the 2003 Telecommunications Act [TA 2003]). Please read the following information carefully.
1) This website is an information offer and online shop of:
Imperial Hotels Austria GmbH
(the controller, under data protection regulations)
Kärntner Ring 16
Phone: +43 1 501 10-313
Fax: +43 1 501 10-410
Imperial Hotels Austria GmbH
Registered office Vienna • Vienna commercial court • FN 110877F
VAT ID No.: ATU15671306
2) Responsible for content:
3) Personal data and data storage
Imperial Hotels Austria GmbH stores data transferred to us by you on www.imperialtorte.com only for the purpose of your orders and processing these and for the security and optimization of the website (see 5 below). With the exception of our service partners (transport companies) which require transfer of data for making delivery, no personal data is transmitted to third parties! In the exceptional cases, the scope of the data transmitted is limited to the necessary minimum.
Every online shop user and customer can search our website without explicitly entering personal data. If an order is placed, our online shop only requests the relevant information necessary to execute the order.
We recommend opening an account for your convenience when ordering. However, you can place an order at any time even without a customer account.
On accessing our website and placing an order or registering information is automatically collected on
a) the name of the website accessed
b) the data and time of accessing a page of our website
c) the quantity of data transmitted
d) a report on successful accesses
e) your IP address
f) the browser type and version
g) the user’s operating system
h) the website (referring URL) you visited before accessing this website
i) the requesting provider
j) specific cookies and
k) the information you provide in the course of any order or registration
and is processed by us.
Specifically during processing of the order or registration,
- the full name of the purchaser,
- name of the recipient,
- the delivery address for the products,
- the billing address (if different from the delivery address),
- a contact number (landline or cell phone) for both the purchaser and the recipient,
- the email addresses of both the purchaser and the recipient (if different) and
- the means of payment (specifically which credit card)
are requested and stored, and accordingly processed.
In addition to the number of the credit card we need the expiration date, the three-digit security code (on the back of the credit card) and the mobile TAN code of your credit card company. The mobile TAN code is transmitted to your cell phone by SMS after entering the credit card data. By entering the TAN code, you identify yourself as the credit card holder and approve your payment. If you do not have a cell phone, please place your order by
Please do not enter your credit card number in any of your emails to us. This data is deleted immediately for security reasons. You can transmit your credit card number by phone.
If you do not want this, you can set your browser to notify you of any cookies for your approval on a case by case basis. You can also block cookies or delete them after they are stored on your computer.
Deactivating or blocking cookies may restrict the functionality of our website and adversely affect your online experience.
5) Purpose of processing
We process your personal data for the following purposes:
- to enable you to make use of our extensive offer in the online shop, including shipping goods,
- to transmit our newsletter (but only if you checked the appropriate box during registration, see below),
- to make the website available to you, to make your online experience as pleasant as possible, and to continue improving the website,
- to generate use statistics for operations, security and optimization of the offer,
- to prevent attacks on our website and investigate these.
We reserve the right to check the log data retrospectively if there are concrete indications justifying the suspicion of illegal use.
The email address you give in the course of registration is only used to send our newsletter if you select the relevant check box, explicitly approving data processing for this purpose. Please note in this connection that you can withdraw your consent to sending the newsletter at any time and without giving reasons , although this will not affect the legality of data processing prior to the time of withdrawal.
6) Legal basis for processing
The legal basis for processing your personal data is your consent in accordance with art. 6 (1) (a) GDPR (specifically for the purpose in (5) (2)), fulfilment of the contract you entered into in accordance with art. 6 (1) (b) GDPR (specifically for the purpose in (5) (1)) and our overriding justified interest in accordance with art. 6 (1) (f) GDPR, based on achieving the purposes listed in (5) (3)-(5).
7) Your rights
You have the right to information, rectification, supplementation, erasure, restriction, data portability, withdrawal of consent and objection. You are also entitled to know the identity of third parties to which your personal data is transmitted. If you believe that processing of your data violates data protection regulations or otherwise violates your privacy claims, you can complain to the supervisory authority. In Austria, this is the data protection agency.
8) Duration of storage
In the event of entry into a contract all data from the contractual relationship is stored until the end of the retention period under tax legislation (seven years).
If you contact us by email your data will be stored for six months for the purpose of processing your enquiry and any subsequent questions. We do not forward this data without your consent.
If you register on our website your data is stored for as long as your account is open, and subsequently only as long as legal obligations require.
9) Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”) on the legal basis of an overriding le3gitimate interest (analysis of website use) in accordance with art. 6 (1) (f) GDPR. We have entered into a contract with Google on data processing.
This website uses the function “activate IP anonymization”. Google uses this to truncate your IP address within European Union member states or other European Economic Area member states. The full IP address is only transmitted to a Google server in the USA and truncated there in exceptional instances.
According to Google it uses the collected data to analyse use of the website, generate reports on website activity and provide other services in connection with website and internet use.
Google may also transmit this information to third parties if required by law or if third parties process the data under a contract with Google.
You will find detailed information on how Google Analytics handles user data in the Google or Google Analytics privacy statement.
10) Google Analytics Re-Marketing
Our websites use the functions of Google Analytics Re-marketing in combination with the cross-device functions of Google AdWords and Goggle DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This function makes it possible to combine the advertising target groups generated with Google Analytics Re-marketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way interest-related personalized advertising customized for you on the basis of your earlier use and surfing behaviour on a device (e.g. cell phone) can be displayed on another device (e.g. tablet or PC).
If you have given the corresponding consent, Google links your web and app browser use with your Google account. With this, the same personalized advertising can be displayed on any device where you are signed in to your Google account.
To support this function, Google Analytics records Google authenticated IDs of users, which are temporarily linked with our Google Analytics data in order to define and generate target groups for cross-device advertising.
You can block cross-device re-marketing and targeting permanently by deactivating personalized advertising on your Google account (to do this, follow this link).
The summary of your stored data on your Google account is solely on the basis of your consent, which you can give or recall on Google (art. 6 (1) (a) GDPR). Data collection for data summary processes not carried out on your Google account (e.g. because you do not have a Google account or have objected to the summary) is based on art. 6 (1) (f) GDPR. Legitimate interest is based on the fact that the website operator has an interest in anonymized analysis of website visitors for marketing purposes.
You can find further information and the data protection provisions in Google’s privacy statement.
11) Deactivating Google Analytics
You can generally block collection of your user data on our website by setting your browser preference to “Do not track”. Our website takes into account the “Do not track” signal which your browser then sends to all websites.
You can block collection of your user data by Google Analytics generally on all websites by downloading and installing the browser plug-in available at the following link: download browser extension.
You can block collection of your user data by Google Analytics on this website only by clicking on the following link. An opt-out cookie is set which blocks collection of your data on future visits to this website: deactivate Google Analytics.
12) "Share" Buttons
Our website has buttons for sharing page content on the Facebook, Google, Instagram and YouTube social media platforms.
The buttons are ideally designed in the interest of protecting the personal data of our website visitors, as the script (computer program) behind the buttons does not collect or process any personal data.
Website visitors who want to share our pages and click the buttons are transferred directly to the “share” pages of the relevant social platforms. The scripts needed to share page content are only loaded at this point. The General Terms & Conditions and privacy conditions of the relevant social media platforms apply. More information on this is available at the Facebook, Google Plus, Instagram and YouTube platforms.
It is possible for you to subscribe for a free newsletter in our web shop. During the registration process for the newsletter, the data is transferred to us from the input screen. The IP address of the calling computer and the date and time of registration is collected during the registration process. The legal basis for the processing of data, if the user’s consent has been received, is Art. 6(1a) of the GDPR. The processing of personal data from the input screen has the sole purpose of allowing us to make the initial contact. In the case that contact is made by e-mail, this also involves the necessary legitimate interest to the processing of data. The data will be deleted as soon as it is no longer necessary to reach the purpose for which it has been collected. For personal data taken from the input screen of the contact form and any that has been sent via e-mail, this applies if the respective conversation with the user has ended. The user has the possibility, at any time, to revoke consent for the processing of personal data. If the user contacts us by e-mail, he/she may object to the storage of his/her personal data at any time. In such a case, the conversation cannot be continued. All personal data that has been stored during the contact process will be deleted in this case.