REQUEST A PROPOSAL
Instagram Linkedin-in

Imprint

Convivium GmbH Praterstraße 28 1020 Vienna, Austria

Managing Directors: Gerardo Jiménez, Bernhard Bonelli

Phone: +43 664 88 11 69 70 Email: office@convivium.at

Company Register Number (Firmenbuchnummer): FN 681345 d Company Register Court (Firmenbuchgericht): Commercial Court of Vienna (Handelsgericht Wien) VAT ID (UID-Nummer): [pending / to be added once issued]

Business purpose / trade: Independent cook / private chef services (Mietkoch) — meal preparation for non-catering clients (Speisenzubereitung für nicht gastgewerbliche Auftraggeber). This is a free trade (freies Gewerbe) under Austrian law, requiring no additional qualification certificate.

Applicable legal provisions: Austrian Trade Act (Gewerbeordnung 1994), available at www.ris.bka.gv.at Trade authority (Gewerbebehörde): Magistrat der Stadt Wien Chamber membership: Member of the Vienna Chamber of Commerce (Wirtschaftskammer Wien)

Person responsible for content: Gerardo Jiménez / Bernhard Bonelli, at the above address.

Online dispute resolution: The European Commission provides a platform for online dispute resolution (ODR), accessible at ec.europa.eu/consumers/odr. Convivium GmbH is not obligated and not willing to participate in dispute resolution proceedings before a consumer arbitration board. 

 

Privacy Policy

As of: September 2026

1. Controller

The controller for the processing of personal data in connection with this website is:

Convivium GmbH

Praterstraße 28

1020 Vienna

Austria

Email: office@convivium.at

Phone: +43 664 88 11 69 70

2. General Information on Data Processing

We process personal data in compliance with the applicable data protection provisions, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz – DSG).

Personal data is only processed to the extent necessary to operate our website, process inquiries, initiate and perform our services, fulfill legal obligations, or if you have given your consent to such processing.

3. Hosting and Server Log Files

Our website is hosted by Hostinger International Ltd. (61 Lordou Vironos Street, 6023 Larnaca, Cyprus).

When you access our website, the hosting provider processes technically required information. This may include, in particular, the following data:

  • IP address,
  • Date and time of access,
  • Requested page or file and volume of data transferred,
  • Browser type and browser version,
  • Operating system used,
  • Referrer URL, and
  • Technical status and access information (e.g., HTTP status code).

Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, functional, and fault-free operation of our website, performance optimization (via LiteSpeed Web Server), as well as the detection and prevention of abusive access attempts.

Server log files are generally stored for a maximum of 30 days and subsequently deleted. Longer storage may occur if required to investigate or document a specific security incident.

Insofar as the hosting provider processes personal data on our behalf, a Data Processing Agreement pursuant to Art. 28 GDPR has been concluded.

4. Cookies and Comparable Technologies

Our website uses technically necessary cookies or comparable technologies to the extent required for the operation and basic functions of the website.

Where information is stored on or accessed from your terminal device, we observe the requirements of Section 165(3) TKG 2021 (Austrian Telecommunications Act).

Technically non-essential cookies as well as analytics, marketing, or tracking technologies are only deployed if you have given your express prior consent. In this case, processing is based on Art. 6(1)(a) GDPR. You may revoke your consent at any time via the cookie settings with future effect.

To manage and document the consents granted, we use the consent management tool CookieYes (CookieYes Limited, 3 Grand Canal Plaza, Grand Canal Street Upper, Dublin 4, D04 V882, Ireland). The consent cookie stores your preference status on your terminal device for a period of 12 months unless deleted earlier (Legal basis: Art. 6(1)(c) GDPR).

5. Fonts and External Content

Headlines and custom design fonts used on our website are served locally from our own server (via Use Any Font). When loading these fonts, no connection to third-party servers is established.

In addition, we use fonts provided by Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for body text. In this process, your IP address is transmitted to Google servers. The integration takes place in the interest of a uniform and attractive presentation of our online offer on the basis of Art. 6(1)(f) GDPR. Any third-country data transfer to the USA is based on the EU-U.S. Data Privacy Framework or the Standard Contractual Clauses of the EU Commission.

6. Contact and Inquiries

When you contact us via the contact or booking form (provided via Elementor Pro), by email, or by phone, we process the personal data you transmit to the extent necessary to handle your request.

In particular, the following data may be processed:

  • Name,
  • Email address and phone number,
  • Requested date and time of an event,
  • Occasion and number of guests,
  • Details regarding requested services and menus,
  • Billing and address data,
  • Company name and VAT number, as well as
  • Further information, free-text messages, and notes that you communicate to us as part of your request.

If the contact is made to initiate or fulfill a contract, processing is based on Art. 6(1)(b) GDPR. Insofar as processing is necessary to fulfill legal obligations, it is based on Art. 6(1)(c) GDPR.

Inquiries that do not lead to a contractual relationship will be deleted as soon as they are no longer required to process the inquiry and any follow-up questions, provided that no statutory retention obligations or legitimate grounds for longer storage exist.

7. Allergies, Intolerances, and Special Dietary Requirements

For the planning and safe preparation of our meals, it may be necessary to take allergies, intolerances, or special dietary requirements into account.

To the extent that conclusions about a specific person’s state of health can be drawn from this information, this constitutes health data and thus special categories of personal data within the meaning of Art. 9 GDPR.

Please only share information with us that is strictly necessary for the safe and proper preparation of the meals. Wherever possible, dietary requirements should be transmitted anonymously and without naming the data subject, for example: „One guest requires a gluten-free menu.“

If health data of an identified or identifiable person is communicated to us, we process it exclusively to plan and carry out the agreed service and only if a legally permissible basis under data protection law exists. Where processing is based on explicit consent, it is carried out pursuant to Art. 6(1)(a) and Art. 9(2)(a) GDPR. You may revoke your consent at any time with future effect.

If you communicate health data of another person to us, you may only do so if you are authorized to disclose this information. We recommend transmitting third-party information in an anonymized manner and without mentioning names wherever possible.

Health-related information is stored only for as long as necessary for the planning and execution of the respective event, unless a statutory basis requires longer processing.

8. Contract Fulfillment and Bookings

If a booking is made, we process the data required for planning, organizing, executing, and billing the agreed services on the basis of Art. 6(1)(b) GDPR.

To the extent that invoices, booking records, or other documents are subject to statutory retention obligations, they will be stored in accordance with legal requirements. Accounting-related documents must generally be retained for seven years pursuant to Section 132 BAO (Austrian Federal Fiscal Code). Longer retention may be required, in particular, as long as documents are relevant to pending proceedings.

9. Recipients and Processors

Personal data is only passed on to third parties insofar as this is necessary to provide our services, fulfill legal obligations, operate our business, or if you have consented to such transfer.

Depending on the specific case, the following categories of recipients in particular may receive data:

  • Service providers or subcontractors engaged for the specific event,
  • Hosting and IT service providers (Hostinger International Ltd.),
  • Software and plugin providers (Elementor Ltd. for form processing),
  • Email and communication service providers,
  • Booking, CRM, or payment service providers,
  • Tax advisors and accounting professionals, as well as
  • Authorities and other public bodies, provided a legal obligation exists.

Where service providers process personal data on our behalf, this is done on the basis of a Data Processing Agreement pursuant to Art. 28 GDPR.

Personal data is not sold to third parties or made available to them for their own advertising purposes.

10. Data Transfers to Third Countries

Where services are used in which personal data may be transferred to recipients outside the European Economic Area (e.g., Google Fonts), the transfer takes place strictly in compliance with the requirements of Art. 44 et seq. GDPR.

Transfers may be based, in particular, on an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework) or appropriate safeguards, such as the Standard Contractual Clauses of the European Commission.

11. Social Media

Our website contains links to our profiles on Instagram (Meta Platforms Ireland Limited) and LinkedIn (LinkedIn Ireland Unlimited Company). Merely visiting our website does not establish a connection to the respective social media platforms. Only when you click a corresponding link will you leave our website. From that point on, the data protection policies of the respective platform operator apply.

12. Storage Duration

We generally store personal data only for as long as necessary for the respective processing purpose.

In addition, we store data to the extent that statutory retention obligations exist or further storage is required to assert, exercise, or defend legal claims.

After the processing purpose ceases to apply and any statutory retention periods expire, the data will be deleted or anonymized.

13. Automated Decision-Making

Automated decision-making, including profiling pursuant to Art. 22 GDPR, does not take place on our website.

14. Your Rights

Subject to statutory requirements, you have the following rights regarding your processed data:

  • Right of access pursuant to Art. 15 GDPR,
  • Right to rectification pursuant to Art. 16 GDPR,
  • Right to erasure pursuant to Art. 17 GDPR,
  • Right to restriction of processing pursuant to Art. 18 GDPR,
  • Right to data portability pursuant to Art. 20 GDPR,
  • Right to object pursuant to Art. 21 GDPR, and
  • Right to withdraw consent pursuant to Art. 7(3) GDPR.

The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, you can contact us at office@convivium.at.

If you believe that the processing of your personal data violates data protection provisions, you also have the right to lodge a complaint with a data protection supervisory authority.

In Austria, this is in particular:

Österreichische Datenschutzbehörde (Austrian Data Protection Authority)

Barichgasse 40–42

1030 Vienna

Austria

Email: dsb@dsb.gv.at

Website: www.dsb.gv.at

15. Data Security

We take appropriate technical and organizational measures to protect personal data against loss, unauthorized access, alteration, or disclosure.

Data transmission via our website is encrypted using TLS/SSL technology.

16. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy whenever the services we use, our data processing practices, or legal frameworks change.

The current version is always accessible on this website.