Privacy

Didi's Pizza & Döner OG
Ottakringer Straße 153, 1160 Wien
didispizzadoener@gmx.at · +43 681 204 12 891

When you place an order we process your name, phone number, optionally your email address and, for deliveries, your address. We need this data to prepare and deliver your order and to contact you if anything is unclear.

The legal basis is Art. 6(1)(b) GDPR — processing is necessary for the performance of a contract.

Your order is not stored on our server. It is assembled in your browser and handed over to WhatsApp as a prepared message — it is only sent once you tap send in the WhatsApp window. From that point the privacy policy of WhatsApp Ireland Limited applies in addition.

If you prefer not to send data to WhatsApp, simply call us: +43 681 204 12 891

For card payments we use Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. You enter your card details directly with Stripe — we never see or store them. Stripe only tells us whether the payment succeeded.

Your cart is kept in your browser’s local storage so it survives a page reload. This data never leaves your device and we do not read it. You can delete it at any time in your browser settings. We do not set any tracking or marketing cookies.

The fonts used are hosted on our own server; loading the page does not connect to Google. The map is embedded via OpenStreetMap, which transmits your IP address to the OpenStreetMap Foundation — technically necessary to deliver the map tiles.

Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA

When you visit the site, technically necessary access data is logged (IP address, time, page requested, browser type). The legal basis is our legitimate interest in the secure operation of the website under Art. 6(1)(f) GDPR.

A data processing agreement under Art. 28 GDPR is in place with this provider.

Our hosting provider is based in the USA. When you visit the website, technically necessary connection data — in particular your IP address — is therefore transferred to a company in a third country outside the European Union.

This transfer is based on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework of 10 July 2023, to the extent our provider is certified under it. Otherwise we rely on the European Commission’s standard contractual clauses pursuant to Art. 46(2)(c) GDPR.

Despite these safeguards, access by US authorities cannot be entirely ruled out. If you would rather avoid this, simply order by phone — no data is transferred to our hosting provider in that case: +43 681 204 12 891

We keep order data for as long as tax and commercial retention periods require — in Austria usually seven years.

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Just get in touch at didispizzadoener@gmx.at.

If you believe we process your data incorrectly, you may lodge a complaint with the Austrian Data Protection Authority: dsb.gv.at