THEOPHIL Holding GmbH (hereinafter referred to as “THEOPHIL Holding GmbH”, “we” or “us”) is the responsible party within the meaning of the General Data Protection Regulation (GDPR). The responsible handling of personal data is a high priority for us. It is very important to us that you feel safe when visiting our website. We process your data exclusively on the basis of legal and contractual provisions and in accordance with the GDPR and the Austrian Data Protection Act in the currently applicable version.

All non-specific gender information in this privacy policy and on the website follows the unisex principle and therefore applies equally to all genders.

1. General Information
Responsible
THEOPHIL Holding GmbH
Vienna Business Park, Turm A/34
A-1100 Vienna
Tel.: +43 1 2260226-0
dsgvo@theophil.at

Data protection officer
MMag. Christina Toth Lawyer
Laudongasse 12/2,
A- 1080 Vienna
Tel.: +43 1 9946613
office@christinatoth.at

If you have any questions in connection with the processing of your personal data and exercising your rights in connection with data protection, please contact our data protection officer: office@christinatoth.at.

There is no automated decision-making, including profiling. If we process your personal data for a purpose other than that for which we collected this data, we will inform you of this fact.

2. Data processing when visiting our website
2.1 Website Access
We are responsible for the content of this website and are both media owner and publisher. During your visit to our website, we collect the following information:

Date and time our website was accessed
IP address of the end device and device type,
Name and URL of the retrieved file,
Website from which access is made,
Browser used and, if applicable, the operating system of your computer and the name of your access provider,
Information about how your website has interacted with our website (pages accessed, links clicked);
We process this data to make this website available to you, and to further improve and develop this website. Furthermore, the data can be used to ensure network and data security.

2.2 Cookies
This website uses cookies. Cookies are text files that are filed and saved on a computer system. Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which websites and servers can be assigned to the specific Internet browser in which the cookie was stored. A specific internet browser can be recognised and identified using the unique cookie ID. Cookies that are not strictly necessary to provide the services on this website are only used after consent has been given (“cookie banner”). You can set your browser so that you will be informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies in certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functions of this website may be limited. The legal basis for the processing of personal data using cookies that are necessary to enable the website to function properly or to transmit messages is our legitimate interest. Other cookies are processed based on your consent and are only set by us after you have given your consent.

2.3 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies to help analyse the use of the website. The information generated by the cookie about your use of this website is typically transmitted to a Google server in the USA and stored there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, summarise reports on website activities and provide other services related to website and Internet usage to the website operator. The IP address transferred from your browser as part of Google Analytics will not be combined with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

You can deactivate Google Analytics for display advertising and adapt the adverts in the Google Display Network by accessing the advert settings at this link: https://www.google.de/settings/ads.

You can find further information on the terms of use and data privacy at http://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=de&gl=de.

2.4 Google Maps
This website uses Google Maps to display maps. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this website you agree that Google, one of its representatives, or third parties can collect, process and use data that is automatically collected or entered by you.

You can find the terms of use for Google Maps at https://www.google.de/intl/de/policies/terms/regional.html, and the additional terms of use for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html. You can find detailed information on data protection in connection with the use of Google Maps on the Google website (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/.

3. Data processing in the context of your registration and login
You can register and log in on our website in order to use additional functions of our website. The personal data entered by you is only processed for the purposes of using the respective product or service for which you registered.

4. Data processing in the context of contacting us
If you contact us by post, email or using the form provided on the website or send an enquiry, the personal data you provide (title, surname, email address and other information that you provide voluntarily) is processed by us for the purpose of processing and answering your enquiry and in the event of follow-up questions.

5. Data processing in the context of the application process
When you apply for a position with us or a BURGER KING franchisee, your personal data (title, name and surname, contact details and other information provided voluntarily) will be processed for the purpose of conducting the application process. The application can be made electronically via email or in person in the branch. In principle, the provision of your personal data within the application process is voluntary. Please note, however, that the application cannot be processed without your name or contact details. The company to which you specifically apply is responsible for filling the position and processing the relevant applications. If you send an unsolicited application via our general email address (jobs@tqsr.at) or apply for a specific position with a BURGER KING franchisee, your application will be sent there.

In the event that an employment contract is concluded with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no employment contract is concluded with the applicant, the application documents will be automatically deleted seven months after notification of the rejection decision, unless the applicant explicitly consents to a longer retention.

6. Data processing for newsletter subscriptions
On our website, you have the option to subscribe to our newsletter. When subscribing, you give us permission to process your email address (and if specified, title, surname and first name) automatically, i.e. to store it and use it to send you our newsletter and to receive information from us about promotions and offers.

If you decide to revoke your consent, the legality of the data processing carried out on the basis of your consent up until your revocation remains unaffected. You can unsubscribe from our newsletter or revoke your consent at any time using our personal login area, by clicking the link at the end of each newsletter, or by sending an email to dsgvo@theophil.at. You will remain on our newsletter mailing list until you unsubscribe.

7. Legal basis
The legal basis for processing your personal data is the fulfilment of our contractual or legal obligations, our legitimate interest or your consent. Consent to data processing is on a voluntary basis and can be revoked at any time. If you decide to revoke your consent, the legality of the processing carried out on the basis of your consent up until your revocation remains unaffected.

8. Duration of storage
We will only retain your personal data for as long as we reasonably consider necessary to achieve the stated purposes and as permitted by applicable law. We store your personal data as long as statutory retention obligations exist.

9. Transfer of your personal data to third parties
The data is stored securely and not passed on to third parties without your consent, unless it is necessary for the provision of services, for the secure processing of personal data or due to legal obligations (e.g. IT service providers, group companies). In these cases, we only use partners and processors who offer sufficient guarantees that they also guarantee the protection of your personal data within the meaning of the GDPR and have made appropriate agreements.

10. Deletion of personal data
The party responsible for the processing only processes and stores personal data of the person concerned for the period of time which is necessary in order to achieve the purpose of the processing, and as long as statutory retention periods exist.

If the storage purpose ceases to apply or if a prescribed storage period expires, the personal data will be blocked or deleted in accordance with the statutory provisions.

11. Your rights in relation to your personal data
In principle, you have the right to information, correction, deletion, restriction, objection and data portability. If you are of the opinion that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, please first contact:

MMag. Christina Toth Lawyer
Laudongasse 12/2,
A- 1080 Vienna
Tel.: +43 1 9946613
office@christinatoth.at

We will process your request as soon as possible and get back to you within 30 days at the latest. You also have the option of contacting the Data Protection Authority.

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at

12. Changes
From time to time, it may be necessary to change or supplement this privacy policy. We therefore recommend that you read this privacy policy at regular intervals. However, you can be assured that changes will not take effect retrospectively and that we will not fundamentally change the way in which previously collected data is used.

13. Copyright
The layout of the website, the graphics and images used, the collection and individual contributions are protected by copyright. All rights are reserved, including those of photomechanical reproduction, duplication and distribution using special processes -– for example, data processing, data carriers and data networks – even in part. The information is for personal use only. Any further use – in particular storage in databases, duplication and any form of commercial use as well as disclosure to third parties (also in part, or in revised form) – without our consent is prohibited.

14. Disclaimer
We have carefully checked the correctness and completeness of all information and data provided. With regard to the technical characteristics of the Internet, however, no guarantee can be given for the authenticity, correctness and completeness of the information made available on the Internet. Furthermore, no guarantee is given for the availability or operation of this website and its content.

Any liability for direct, indirect or other damages, regardless of their causes, arising from the use or non-availability of the data and information on this homepage is excluded to the extent legally permissible. We would like to point out that no responsibility and no liability is assumed for the content of hyperlinks. Any integration of individual pages or other excerpts from our website into external frames is prohibited.

We do not check other websites that are directly accessible (links) from our website with regard to content and legality, and have no influence on the design of these websites and expressly distance ourselves from any illegal content. Furthermore, no responsibility is taken for such content and no liability is assumed for such content. This declaration applies to all links on this website.