IT & Data security

I hereby declare that I have been informed by my employer about the data secrecy pursuant to § 6 DSG and the confidentiality obligations pursuant to § 11 UWG and that I have understood them.

By signing, you confirm that you have been informed about the video surveillance and that you agree to it, as it serves to protect both the employees and the company.

Protecting the data protection rights and privacy of our guests is our top priority. Therefore, please be particularly careful when handling sensitive information.

The Austrian catering industry takes the protection of children and young people very seriously. Below you will find the current legal regulations:Going out times:Under 14 years from 5.00 a.m. to 11.00 p.m. (Upper Austria until 10.00 p.m.)14-16 years from 5.00 a.m. to 1.00 a.m. (Upper Austria until midnight)From the age of 16 no restrictionsAlcohol and cigarettes:No serving of alcohol permitted under the age of 1616-18 years only non-distilled alcohol (e.g. beer, wine and sparkling wine)From the age of 18, distilled alcohol (e.g. schnapps, vodka, whiskey, rum and liqueurs)No sale of cigarettes under the age of 18In Carinthia, alcohol may only be served from the age of 16 if the alcohol content of the blood is less than 0.5 per mille.

You are obliged to provide each customer with a receipt after completing a purchase transaction. The customer must accept the receipt and take it outside the business premises for the purposes of inspection by the tax authorities.

I hereby declare that I have been informed by my employer about the data secrecy pursuant to § 6 DSG and the confidentiality obligations pursuant to § 11 UWG and that I have understood them.

I hereby declare that I have been instructed by my employer about data secrecy and confidentiality obligations and that I have understood them.

By signing this document, you confirm that you have been informed about the video surveillance and that you agree to it, as it serves to protect both the employees and the company.

The Italian catering industry takes the protection of children and young people very seriously. Below you will find the current legal regulations:Alcohol and cigarettes:Serving alcohol to young people under the age of 18 is prohibitedAll alcohol may be served from the age of 18No sale of tobacco products is permitted under the age of 18

You are obliged to hand out a receipt to each customer after every purchase. The customer must accept the receipt and take it with him/her until outside the business premises for the purpose of inspection by the tax authorities.

From phishing emails to open Wi-Fi - digital dangers lurk everywhere. Protect yourself with secure passwords, regular updates and vigilant handling of sensitive data. Always report suspicious activities to IT immediately.

AI is a powerful tool - but data protection and transparency always take priority. Our training shows what is allowed, what is not, and how sensitive data is protected.One central principle applies: decisions remain under human supervision. AI supports processes, but does not replace human responsibility and control.

As a manager, you have strategic responsibility: you manage resources, priorities and business processes. At the same time, you are the central interface between operational business and supervisory authorities - making you a key figure in risk management. Every compliance breach has a direct impact on your company's image.In the area of data protection, all measures must be verifiable - keyword accountability in accordance with Articles 5 and 24 of the GDPR. Set up a data protection committee or a data protection officer. Establish regular reports on incidents and audit results - ideally on a monthly or quarterly basis. Provide budget approvals to ensure data protection-compliant tools and external audits.The NIS 2 directive requires the clear assignment of responsibilities for IT security and awareness. Managers should take part in annual cyber table tops in order to be prepared for crises. Cyber risk analyses must be carried out regularly and approved by management. If incidents occur, they must be escalated to the authorities and the supervisory board within 24 hours.When using artificial intelligence, a distinction must be made between high-risk and standard applications. An AI steering committee is needed to approve new use cases. All AI models used must be documented and risk-assessed. Schedule regular audits and monitoring measures.Data protection, cyber security and AI governance are interlinked. Findings from data protection or security incidents should flow directly back into AI governance. An annual review cycle with a focus on continuous improvement is recommended for all three areas.Concrete to-dos for management: approve training and budget planning, define reporting KPIs such as incident figures or response times, participate in governance committees and regularly communicate compliance results internally.