Privacy Policy and Consents
Contents
1. Objective and responsible body
2. Basic information on data processing
3. Processing of personal data
4. Collection of access data
5. Cookies & Reach Measurement
6. Integration of third-party services and content
7. User Rights and Deletion
8. Changes to the Privacy Policy
1. Objective and responsible body
This privacy policy explains the nature, scope, and purpose of the processing (including collection, processing, and use, as well as obtaining consent) of personal data within our online offering and its associated websites, functions, and content (hereinafter collectively referred to as „online offering“ or „website“). The privacy policy applies regardless of the domains, systems, platforms, and devices (e.g. desktop or mobile) used on which the online offering is operated.
The provider of the online service and the data protection responsible party is, ,
(Austria) (hereinafter referred to as „Provider“, „we“ or „us“). For contact details, please refer to our imprint.
The term „user“ includes all customers and visitors of our online offering. The terminology used, such as „user,“ is to be understood as gender-neutral.
2. Basic information on data processing
We process personal data of users only in compliance with the relevant data protection regulations, in accordance with the principles of data economy and data avoidance. This means that user data will only be processed if there is a legal permission, in particular if the data is required for the provision of our contractual services and online services, or is legally required, or if consent has been given.
We implement organisational, contractual and technical security measures in accordance with the state of the art to ensure compliance with data protection laws and thereby protect the data processed by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.
Where content, tools or other means from other providers (hereinafter collectively referred to as „third-party providers“) are used within the scope of this data protection declaration, and their registered office is located abroad, it is to be assumed that data transfer to the registered office states of the third-party providers is taking place. The transmission of data to third countries occurs either on the basis of legal permission, the consent of the users, or special contractual clauses that ensure legally required data security.
3. Processing of personal data
The personal data will be processed for the following purposes, in addition to the uses expressly stated in this privacy policy, on the basis of legal permissions or user consent:
– The provision, execution, maintenance, optimisation and security of our services, service and user benefits;
– Ensuring effective customer service and technical support.
We only transmit user data to third parties if this is necessary for billing purposes (e.g. to a payment service provider) or for other purposes if they are necessary to fulfil our contractual obligations to users (e.g. forwarding an address to suppliers).
When you contact us (via the contact form or email), your details will be stored for the purpose of processing your request and in case of follow-up questions.
Personal data will be deleted once its purpose has been fulfilled, provided that no retention obligations preclude deletion.
4. Collection of access data
We collect data on every access to the server on which this service is located (so-called server log files). Access data includes the name of the retrieved website, file, date and time of retrieval, amount of data transferred, message about successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider.
We use the log data without associating it with the user or creating any other profiles, in accordance with legal provisions, solely for statistical analyses for the purposes of operating, securing, and optimising our online offering. However, we reserve the right to retrospectively review the log data if there are reasonable grounds to suspect unlawful use.
5. Cookies & Reach Measurement
Cookies are pieces of information that are transmitted from our web server or third-party web servers to users' web browsers and stored there for later retrieval. Users are informed about the use of cookies within the scope of pseudonymous reach measurement in accordance with this privacy policy.
Viewing this online offer is also possible without cookies. If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in their browser's system settings. Stored cookies can be deleted in the browser's system settings. The exclusion of cookies may lead to functional limitations of this online offer.
It is possible to manage many online advertising cookies from companies via the US site http://www.aboutads.info/choices or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/.
6. Integration of third-party services and content
It may occur that within our online offering, content or services from third-party providers, such as city maps or fonts from other websites, are integrated. The integration of third-party content always requires that the third-party providers perceive the users' IP address, as without the IP address, they could not send the content to the users' browsers. The IP address is therefore necessary for the display of this content. Furthermore, the providers of third-party content may set their own cookies and process user data for their own purposes. Usage profiles of users can be created from the processed data. We will use this content as sparingly and data-avoiding as possible, and we will choose reliable third-party providers with regard to data security.
The following overview provides details of third-party providers and their content, along with links to their privacy policies, which contain further information on data processing and, in some cases, opt-out options.
„easybooking“ booking system (zadego GmbH)
For online enquiries, offers, bookings and, if applicable, online check-in, we use the web booking engine easybooking from the provider zadego GmbH, Anton-Melzer-Straße 10, 6020 Innsbruck, Austria, E-mail: datenschutz@easybooking.eu. You can find details on the provider's data protection here https://www.easybooking.eu/datenschutz.
Processed data types: Master data (e.g. name, address), contact details (email, telephone), booking/travel data (travel period, number of persons, special requests), if applicable, data of fellow travellers, communication content, and technical usage data (IP address, browser/device information). If an online payment method is selected, payment data may be forwarded to the respective payment service (e.g. credit card provider/payment service provider).
Purposes and Legal Basis Carrying out pre-contractual measures and fulfilling an accommodation contract (Art. 6(1)(b) GDPR), legal obligations (e.g. reporting/tax/retention obligations; Art. 6(1)(c) GDPR), as well as – where necessary – consents (Art. 6(1)(a) GDPR), for example for optional analysis/marketing cookies in the booking tool.
Roles of the stakeholders: We are responsible parties within the meaning of the GDPR; easybooking (zadego GmbH) processes data as a processor. Processing is carried out only in accordance with our instructions.
Recipient zadego GmbH (contract processor) as well as – depending on the selected service – payment service providers and, if applicable, the provider's IT/hosting service providers.
Storage duration: We process personal data for the duration of contract processing as well as in accordance with statutory retention periods (e.g. tax/commercial law). Enquiry/booking data will subsequently be blocked or deleted, provided no legal obligations preclude this.
Cookies and integration When using the booking form, technically necessary cookies may be set; optional cookies (e.g. statistics/marketing) are only activated with consent. For technical reasons, the booking tool also records the IP address and browser information when it is loaded. Please refer to the provider's cookie notices for more information.
Data subject rights You have the right to access, rectification, erasure, restriction of processing, data portability, withdrawal of consent, and objection to certain processing. You can send requests regarding these to us or to the provider at datenschutz@easybooking.eu direct.
7. User Rights and Data Deletion
Users have the right, upon request, to receive free information about the personal data that we have stored about them.
In addition, users have the right to have inaccurate data rectified, to withdraw consent, to block and erase their personal data, and to lodge a complaint with the competent supervisory authority in the event of unlawful data processing.
The data stored by us will be deleted as soon as it is no longer required for its purpose and no statutory retention obligations prevent deletion.
8. Changes to the Privacy Policy
We reserve the right to amend the Privacy Policy to adapt it to changed legal situations, or in the event of changes to the service or data processing. This applies, however, only with regard to declarations on data processing. If user consent is required or components of the Privacy Policy contain provisions of the contractual relationship with the users, amendments will only be made with the users' consent. Users are requested to inform themselves regularly about the content of the Privacy Policy.
