Privacy Policy.

This website is operated by an external hosting provider. When you access the website, connection data is transmitted to the hosting provider – as is technically necessary for any internet connection – and may be processed there in server log files (in particular the IP address, date and time of access, the address accessed, the amount of data transferred, and browser and device information).

This processing is necessary for the secure and stable provision of the website. The legal basis is our legitimate interest in the technically flawless operation of the website pursuant to Art. 6(1)(f) GDPR. The hosting provider acts as a processor pursuant to Art. 28 GDPR.

This website does not set any analytics, marketing or tracking cookies of its own. No profiling and no cross-site tracking takes place.

Technically necessary storage operations may take place solely to provide the functions you request. TikTok content, for which TikTok may use its own cookies or similar technologies, is only loaded after you expressly activate it (see “External content: TikTok videos”).

No web analytics, reach measurement, remarketing, or conversion tracking services are integrated on this website. In particular, no services from Google (e.g. Google Analytics, Google Ads) or Meta (e.g. Meta Pixel) are used.

If you contact us by email, we process the data you provide (in particular your email address, name, and the content of your message) exclusively to handle your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

This website provides a contact form, a form for franchise applications (initial application and supplementary questionnaire), a form for job applications and a form for catering inquiries. When you submit one of these forms, the data you enter is transmitted to us and stored in this website's database. In addition, we generate an internal notification email to the responsible team containing the content of your inquiry or application.

If you upload a CV as part of a franchise or job application, it is stored in protected file storage that is not publicly accessible. Only the persons responsible for processing it have access.

For hosting, database, file storage and sending the notification emails we use the service provider Lovable, which acts as our processor pursuant to Art. 28 GDPR. The storage period depends on the respective purpose and is governed differently for each form:

Contact form: We process your name, email address, optionally your phone number and subject, and the content of your message in order to handle your inquiry and any follow-up questions. The legal basis is our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR). If your inquiry is aimed at concluding a contract, the legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract). We store the data for as long as is necessary to handle your inquiry and any follow-up questions, normally up to 6 months. If a business relationship results from it or a legal obligation requires longer retention, we store the data for correspondingly longer.

Catering inquiry: We process the details of your event (including portions, flavours, type, date, time and location of the event, on-site conditions), your contact details and, where applicable, your company and VAT ID in order to handle your inquiry and prepare a quote. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract). The data is stored for processing and handling the inquiry. If a contract or business relationship results, statutory retention obligations (in particular under tax and commercial law, Art. 6(1)(c) GDPR) may require longer storage.

Franchise application: We process the details from the initial application (including name, contact details, desired location, store model, available equity, desired start date) and from the supplementary questionnaire (including date of birth, citizenship, place of residence, education, professional background, experience, motivation) and, where applicable, your CV in order to review and assess your application as a franchise partner. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract). The data is stored for the duration of the application and evaluation process. Thereafter we store it only for as long as is necessary for this purpose, possible further discussions, the establishment, exercise or defence of legal claims (Art. 6(1)(f) GDPR) or on the basis of legal obligations (Art. 6(1)(c) GDPR).

Job application: We process your name, contact details, country, desired location, desired position, your optional message and, where applicable, your CV in order to decide on establishing an employment relationship. The legal basis is Art. 6(1)(b) GDPR (initiation of an employment relationship). If no employment relationship is established, we generally delete your application data including your CV no later than 7 months after the completion or rejection of the application process, unless longer storage is required on the basis of consent (Art. 6(1)(a) GDPR), an employment relationship, legal obligations (Art. 6(1)(c) GDPR) or for the establishment, exercise or defence of legal claims (Art. 6(1)(f) GDPR).

The fonts used on this website are provided locally via this website's own infrastructure. When the fonts are loaded, no connection is established to third-party servers (such as Google), and no data is transmitted to third parties.

On the homepage we show content from our TikTok channel. As long as you do not activate this content, no connection to TikTok is established; only a preview image loaded from this website's infrastructure is shown, together with a notice that data may be transmitted to TikTok when the video is loaded. Only when you actively decide to load the TikTok video by clicking “Load video” is a connection to TikTok established. In particular, your IP address as well as device and browser information may be transmitted to TikTok, and TikTok may use further technologies (e.g. cookies).

The provider for users in the European Economic Area is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. According to TikTok's privacy information, data may also be processed or transferred outside the European Economic Area. Further information can be found in TikTok's privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en

The integration is based on your consent (Art. 6(1)(a) GDPR), which you give by expressly activating the TikTok content. You can withdraw your consent at any time with effect for the future by reloading the page; the video will then only be loaded again after renewed activation.

Apart from this, no maps or other third-party widgets are integrated on this website.

The footer of this website contains simple links to our profiles on external platforms. These are plain hyperlinks – no social media plugins are loaded, and no data is transmitted to the respective platforms simply by visiting our website. Only when you actively click a link do you reach the respective provider's website, whose own privacy policy applies to their data processing.

Personal data is only passed on insofar as this is necessary to provide the website and to handle your inquiries (hosting, database, storage and email service provider Lovable as processor; TikTok only after you expressly activate a video) or we are legally obliged to do so. Data is not sold.

After you expressly activate a TikTok video, data may, according to TikTok's privacy information, be processed or transferred outside the EU/EEA. Beyond this, no transfer to third countries is intended on our part.

We store personal data only for as long as is necessary for the respective purposes or statutory retention obligations exist. The rules set out in the section “Forms on this website” apply to the individual forms. Technical log data is processed by the hosting provider only for a short, operationally necessary period.

You generally have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection (Art. 21 GDPR). To exercise these rights, you can contact us at any time at office@kaisers-original.com .

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna.

The content of this website is transmitted encrypted via HTTPS. We take appropriate technical and organizational measures to protect personal data against loss and unauthorized access.

We will adapt this privacy policy as soon as the actual processing on this website changes – for example if further services are integrated.