Privacy policy
This policy explains how personal data is processed for the website, reservations, payments, cancellations and table service.
Controller
Level Food GmbH, Sechshauserstraße 11, 1150 Wien, Österreich. Contact: reservierung@wonder-world.at.
Data processed
- Reservation data: name, email address, optional telephone number, date, time slot, party size, menu and extras.
- Payment data: payment status and Stripe Checkout Session, Payment Intent, Customer and Payment Method references.
- Cancellation and service data: reference code, cancellation and QR tokens, and audit entries for staff actions.
- Technical data: user-agent information, IP addresses, and session and CSRF cookies required for the service. IP addresses in audit and diagnostic logs are anonymised before they are stored. Our hosting provider processes technical connection data as needed to deliver and secure the website. The scope and retention period are governed by our agreement with the provider.
Purposes and legal bases
- Reservation
- Pre-contractual measures and performance of the contract under Article 6(1)(b) GDPR.
- Payment
- Performance of the contract and our legitimate interest in secure payment processing.
- Records
- Compliance with legal obligations and our legitimate interest in being able to investigate misuse and errors.
- Technical operation
- Our legitimate interest in keeping the website secure, stable and available.
Payments with Stripe
Payments are made through Stripe Checkout. Card details are collected directly by Stripe and are not stored on this website. The application stores only technical Stripe references needed for payment status, refunds and, where applicable, additional charges at the table. Stripe processes payment data under its own terms and privacy information.
Map and external services
The location map is rendered locally. Loading this page does not embed Google services, external map tiles or OpenStreetMap content. OpenStreetMap opens only after an active click on its link.
IP address anonymisation
IP addresses recorded in audit logs are anonymised before storage by masking the last IPv4 octet or the last IPv6 segment.
Error and diagnostic logs
Limited diagnostic entries are used to investigate technical problems such as failed payments, invalid QR or cancellation links, and email delivery errors. This processing is based on our legitimate interest in secure and reliable operation. Data is minimised: IP addresses are anonymised, tokens are truncated, email addresses are masked, and payment-provider errors are stored as technical codes without card details. An anonymous error reference supports follow-up. Diagnostic entries have a default retention period of 90 days and are deleted by a scheduled cleanup script, provided its regular execution has been configured; the operator can change this period. Entries linked to a booking are also deleted when that booking is deleted. Audit logs are managed separately and are not automatically deleted by default.
Retention period
Reservation and payment data is kept for as long as needed to perform the contract, maintain accounting records and meet statutory retention obligations. Unpaid reservations may be marked as expired after their payment deadline.
Your rights
Subject to the GDPR, you may have rights to access, rectification, erasure, restriction of processing, data portability and objection. You may also lodge a complaint with the Austrian Data Protection Authority.