Legal

Datenschutz.

Which data we process, which analytics and advertising services we use with your consent, and what rights you have.

As of: 9 November 2026

01Verantwortlicher

Controller
Eura Media e.U., owner Ferhat Ösmen
Address
Helene-Thimig-Weg 5/26, 1230 Wien, Austria
Email
redaktion@bestinvienna.at
Phone
+43 660 909 76 07

A data protection officer is not required by law. For all questions about data protection, you can reach us at the email address above.

02The key points in brief

  • bestinvienna.at can be used without registration. We do not sell personal data.
  • We process technically necessary data (e.g. server log files) so that the website works and remains secure.
  • We use audience measurement, usage analysis and advertising measurement (Google Analytics, Google Ads, Microsoft Clarity, Meta Pixel) only with your consent. Without consent, these services are not loaded at all.
  • You can withdraw or change your consent at any time via the cookie settings.

03Hosting and server log files

The website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in data centres in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

Each time the site is accessed, the server automatically stores access data in so-called log files: IP address, date and time, page accessed, amount of data transferred, referrer URL, browser and operating system.

Purpose: delivery of the website, stability, defence against attacks and error analysis. Legal basis: legitimate interest pursuant to Art. 6(1)(f) GDPR. Storage period: log files are stored only as long as necessary for these purposes and are then deleted or anonymised.

The connection to the website is encrypted with TLS (recognisable by “https://” and the padlock symbol in the browser).

Fonts and program libraries are loaded directly from our server. When the website is accessed, no connection is made to Google Fonts or to other external content delivery networks.

04Cookies and consent

Cookies are small text files stored by your browser. In accordance with Section 165(3) of the Telecommunications Act 2021 (TKG 2021), we set only technically necessary cookies without consent. We set all cookies and comparable technologies for statistics, usage analysis and marketing only if you have consented in the cookie banner (Art. 6(1)(a) GDPR).

In the cookie banner you can choose between the following categories:

NecessaryStorage of your cookie choice. Always active.
StatisticsGoogle Analytics, Microsoft Clarity.
MarketingGoogle Ads (conversion measurement, remarketing), Meta Pixel.

Without your consent, the scripts from Google, Microsoft and Meta are not loaded, and no data is transmitted to these providers. Only after you consent do we load the selected services and pass on your choice via Google's consent mode (Consent Mode v2), the consent interface of Microsoft Clarity and the consent function of the Meta Pixel.

We store your choice in the cookie biv_consent and additionally in your browser's local storage, so that the banner does not appear on every visit. After 12 months we ask again. If you withdraw consent, we delete the relevant cookies on our domain and reload the page without these services.

You can withdraw or change your consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

CookiePurposeDuration
biv_consentStores your choice in the cookie banner (cookie and local storage)12 Monate

05Google Analytics 4

With your consent we use Google Analytics 4 from Google to understand how visitors use our website: which pages are viewed, for how long, via which source (e.g. Google search, Instagram) you come to us, device type, browser and approximate region.

According to Google, data from users in the EU is received via servers in the EU. The IP address is used only briefly to determine the approximate location and is then discarded; it is not logged or stored. The retention period for usage data in Google Analytics is set to 14 months.

Legal basis: consent, Art. 6(1)(a) GDPR. Data transfer to the USA: see the Third countries section.

CookiePurposeDuration
_gaDistinguishes visitors (pseudonymous identifier)2 years
_ga_<ID>Stores the session state2 years

More information: Google's privacy policy, Privacy in Google Analytics.

06Google Ads: conversion measurement and remarketing

We advertise bestinvienna.at with Google Ads. With your consent we measure whether someone performs certain actions on the website after clicking one of our ads (conversion measurement). We can also later show suitable ads in Google networks to people who have visited our website (remarketing). The provider is Google.

In doing so, Google receives a pseudonymous cookie identifier, the page visited, the time and technical data. We ourselves receive only aggregated statistics and cannot identify you personally. If you are logged in to a Google account, Google may link the data to your account. You can also deactivate personalised advertising at adssettings.google.com.

Legal basis: consent, Art. 6(1)(a) GDPR.

CookiePurposeDuration
_gcl_auAttribution of ad clicks to conversions90 Tage
IDE (doubleclick.net)Remarketing and ad measurement13 Monate

07Google Search Console

With Google Search Console we check how our website appears in Google search, for which search terms it is shown and whether there are technical errors. The Search Console is not embedded in our website and sets no cookies on your device. From Google we receive only aggregated data on search queries, impressions and clicks, which does not allow any conclusions about individual persons.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the findability and technical quality of the website).

08Microsoft Clarity

With your consent we use Microsoft Clarity from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity shows us how the website is used: mouse movements, clicks, scroll depth, heatmaps and anonymised session recordings. This lets us see where content is hard to find or something is not working.

Entries in form fields are masked by default by Clarity and are not recorded. Without your consent, Clarity sets no cookies in the EU. According to Microsoft, the data is stored for up to 13 months.

Legal basis: consent, Art. 6(1)(a) GDPR. Data transfer to the USA: see the Third countries section.

CookiePurposeDuration
_clckStores the Clarity user identifier1 Jahr
_clskLinks page views into a session1 Tag
CLID, MUID, SM, MR, ANONCHK (clarity.ms, bing.com)Recognition of the browser by Microsoftup to 1 year

More information: Microsoft's privacy statement.

09Meta Pixel (Facebook and Instagram)

With your consent we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). With it we measure the effect of our advertising on Facebook and Instagram and can show suitable content there to visitors to our website (Custom Audiences).

In doing so, Meta receives the page visited, the time, technical data and an identifier. If you are logged in to Facebook or Instagram, Meta may link the visit to your account. We receive only aggregated statistics.

Joint controllership: We and Meta are jointly responsible for the collection and transmission of data to Meta (Art. 26 GDPR). The agreement on this is available here: Controller Addendum. Meta is solely responsible for further processing. You can also exercise your rights directly against Meta.

Legal basis: consent, Art. 6(1)(a) GDPR.

CookiePurposeDuration
_fbpDistinguishes visitors for ad measurement90 Tage
fr (facebook.com)Delivery and measurement of advertising90 Tage

More information: Meta's privacy policy. Ad settings: Meta Accounts Center.

10Data transfers to third countries

Google, Microsoft and Meta are part of groups headquartered in the USA. Access to data from the USA therefore cannot be ruled out. For the USA there is an adequacy decision by the EU Commission (EU-US Data Privacy Framework, 10 July 2023). Google LLC, Microsoft Corporation and Meta Platforms, Inc. are certified under it. In addition, the providers have concluded EU standard contractual clauses (Art. 46(2)(c) GDPR).

The Data Privacy Framework was upheld by the General Court of the EU in September 2025; an appeal to the European Court of Justice is pending. If the legal situation changes, we will adapt this statement.

11Contact by email

If you write to us by email (e.g. with tips, corrections, events or posters), we process your details in order to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering). We delete the data once the enquiry has been dealt with and no statutory retention obligations apply.

If you send us a poster or image for publication, you thereby confirm that you have the necessary rights to it.

12Price reports from readers

In individual articles (e.g. the punch check) you can report prices. For this we need neither your name nor your email address. We store only the details from the form (market, drink, price, deposit, optional note) and the time of the report, and publish them in the article.

To protect against spam and abuse, we additionally store a one-way check value (hash) of your IP address, from which the IP address cannot be recalculated. This value is not published and is deleted after 24 hours at the latest. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in an up-to-date price overview free of abuse). Please do not enter any personal data in the note field. We delete obviously false or inappropriate reports. We delete the reports at the end of the respective season at the latest.

13Editorial content about businesses

In best-of lists, reviews and event notices we name businesses, venues and, where applicable, their owners. This information comes from publicly accessible sources (e.g. the business's website, Google, the trade press) or from our own research. Processing is carried out for journalistic purposes. Section 9 of the Data Protection Act (media privilege) applies, as a result of which individual data subject rights may be restricted.

Do you run a business we mention and want to correct a detail? Write to us at redaktion@bestinvienna.at.

15Your rights

You have the right at any time to:

  • access to the data we hold about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on legitimate interests (Art. 21 GDPR)
  • withdraw consent with effect for the future (Art. 7(3) GDPR)

To do so, write to redaktion@bestinvienna.at.

Right to lodge a complaint

If you believe that the processing of your data infringes data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Wien, telephone +43 1 52 152-0, email dsb@dsb.gv.at, www.dsb.gv.at.

16Changes to this statement

We will adapt this privacy policy if the website, the services used or the legal situation change. The version published here at any given time applies. As of: 9 November 2026.