PRIVACY POLICY

1. Data Processing When Visiting the Website

Server Log Files

When you visit our website, information is automatically collected and stored in server log files. This information is technically necessary to ensure the stability, security and proper functioning of the website.

Processed data includes:

• IP address

• Browser type and version

• Operating system

• Referrer URL

• Access date and time

• Accessed pages and files

Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in secure and error-free operation).

Our website is hosted on the platform Wix.com Ltd.​​​​​

Cookies

Our website uses cookies to ensure basic functionality and to improve user experience.

• Strictly necessary cookies are set on the basis of our legitimate interest and do not require consent.

• Optional cookies (e.g. analytics or marketing cookies) are used only with your prior explicit consent in accordance with Art. 6(1)(a) GDPR and §165 TKG 2021.

You can give, refuse or withdraw your consent at any time via the cookie settings on our website.

Analytics

If you have given your consent, we use analytics tools provided by Wix.com Ltd. to analyse the use of our website.

The data is processed in a pseudonymised manner. No direct identification of individual users takes place.

Legal basis:
Art. 6(1)(a) GDPR (consent).

Contact Form

If you contact us via the contact form, we process the data you provide to handle your enquiry and any follow-up communication.

Processed data may include:

• Name

• Email address

• Telephone number (optional)

• Message content

Legal basis:
Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR.

Your data will be deleted once the enquiry has been fully processed, unless statutory retention obligations apply.​

​

2. Booking, Stay and Contract Performance

For booking, guest registration and contract performance, we process personal data as required by law and to fulfil contractual obligations.

Processed data may include:

• Name, address, nationality

• Date and place of birth

• Identification document data

• Contact details

• Payment information

Legal basis:
Art. 6(1)(b) GDPR (contract performance)
Art. 6(1)(c) GDPR (legal obligations, e.g. guest registration requirements)​

​

3. Marketing Communication

Information about our services, offers or customer surveys is sent only with your explicit consent (double opt-in procedure).

Legal basis:
Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future.

​

4. Data Disclosure

Your personal data will not be disclosed to unauthorised third parties. Data may be shared only if:

• required to fulfil contractual obligations,

• required by law,

• you have given explicit consent, or

• processing is carried out by commissioned processors.

Processors include:

• Wix.com Ltd.

• Feratel Deskline

Data processing agreements pursuant to Art. 28 GDPR have been concluded with all processors.​

​

5. Data Transfers to Third Countries

Due to the use of service providers such as Wix or Google, data may be transferred to countries outside the EU/EEA (e.g. the USA).

Such transfers occur only:

• on the basis of your explicit consent (Art. 49(1)(a) GDPR), or

• with appropriate safeguards such as EU Standard Contractual Clauses, where applicable.

We inform you that third countries may not provide a level of data protection equivalent to the EU and that access by public authorities may occur.

You may withdraw your consent at any time via the cookie settings.

​​​

6. Google Maps

Our website uses Google Maps to display location information.

To use Google Maps, your IP address must be processed and may be transmitted to Google servers in the USA.

Legal basis:
Art. 6(1)(a) GDPR (consent).

Further information can be found in Google’s privacy policy:

https://policies.google.com/?hl=en-GB

​​​

7. Data Retention

Personal data is stored only for as long as necessary to fulfil the respective purposes or as required by statutory retention periods (e.g. under Austrian tax and commercial law).

​

8. Your Rights

You have the right to:

• access your personal data

• rectification

• erasure

• restriction of processing

• data portability

• withdraw consent at any time

• object to processing based on legitimate interests

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna, Austria
https://www.dsb.gv.at

 

9. SSL / TLS Encryption

This website uses SSL/TLS encryption to protect the transmission of confidential data.

​

Back to Home Page