Privacy Policy | Potions The Magical Pub

1. General Information We process your personal data in accordance with the European General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Telecommunications Act (TKG 2021).

2. Data Controller Bianca Damda (Potions Vienna) Liechtensteinstraße 104–106, 1090 Wien, Austria Email: contact@potions.at

3. Data Collection: Reservations & Website We collect data you provide directly (reservations) and data generated by your visit:

Contact Info: Name, email, phone number.
Reservation Details: Date, time, party size, preferences.
Technical Data: IP address, browser type, cookies.

Legal Basis: Art. 6 (1) (a) (Consent), (b) (Contract), and (f) (Legitimate Interest) GDPR.

4. Data Processing (Wix & Mailchimp) Our website is hosted on the Wix.com platform. Wix and Mailchimp (Intuit Inc.) provide the tools for our reservations and email marketing.

International Transfer: As these are US-based companies, data transfer is based on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses to ensure a high level of data protection.

5. Marketing & Analytics If you subscribe to our newsletter, we use your data for email marketing and performance analytics (e.g., open rates). This is based on your explicit consent (Double Opt-In). You can unsubscribe at any time via the link in the email.

6. Retention Period

Reservations: Up to 2 years.
Tax Records: 7 years (as required by Austrian tax law § 132 BAO).
Newsletter: Until you withdraw consent.

7. Your Rights You have the right to access, rectify, delete, or restrict the processing of your data. You may lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).