This data protection declaration concerns all persons who use the services of Hotel Austria, Georg Strolz GmbH. We hereby inform you about the type, scope and purpose of the collection and use of your personal data by our company. We respect your privacy and strive to strictly comply with the legal requirements for the processing of your personal data (EU Regulation No. 679/2016 (GDPR), DSG 2000, DSG 2018 and TKG 2003).
All your personal data will be processed on this basis. The responsible for data processing is Georg Strolz, Hotel Austria Georg Strolz GmbH, Omesberg 287, 6764 Lech, 05583 2382, email@example.com.
2.information according to Art 13 General Data Protection Regulation
Your personal data, these are in particular
– your master data (name, first name, address, e-mail address, telephone and fax number, date of birth, customer number) as well as language and vehicle license plate,
– the data concerning the method of payment and in connection with payments, in particular with EC cards, credit cards and bank cards,
– the length of stay requested by you
– special categories of data such as health data (e.g. allergies) as well as data on special needs and on marriage/partnership
are required for our services. This includes, among other things, sending the newsletter, registration for events, information on offers or availability of rooms, booking accommodation, restaurants, ski schools or transfers, the creation of vouchers, the notification on the community.
These data are therefore stored for these purposes by us, processed and, if necessary, transmitted to third parties with whom we cooperate to provide the most effective and best possible service to our customers, – this may include service providers in third countries as processors, software and agency service providers. Profiling is used in the form of Google Analytics, see below, as well as in the form of filtering the guest file by length of stay.
We process your data based on at least one of the bases listed:
- consent (Article 6(1) lit. a GDPR; Section 174 TKG): You have given us your consent to process data for a specific purpose.
- contract (Article 6(1)(b) GDPR): In order to fulfill a contract or pre-contractual obligations with you, we process your data.
- legal obligation (Article 6(1) lit. c GDPR; Section 96 TKG): If we are subject to a legal obligation, we process your data (e.g. documentation rights and obligations under accounting, tax and customs law, contracts, reporting, litigation).
- legitimate interests (Article 6(1)(f) GDPR): In case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data.
Duration of processing
We process your personal data – to the extent necessary – for the duration of the entire business relationship (from the initiation, processing to the termination of a contract as well as until the settlement of outstanding receivables). Once the contract has been fully processed, your data will be stored until the expiry of the warranty, limitation and compensation periods and statutory retention periods applicable to us, and beyond this until the end of any legal disputes in which the data is required as evidence.
We store data that you have provided to us for marketing and information purposes, such as for sending a newsletter, until you revoke your consent to do so.
You have the right to revoke your consent at any time free of charge. However, the lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by your revocation. To declare your revocation, please click on the unsubscribe link in the respective newsletter or contact firstname.lastname@example.org.
You provide your data voluntarily. However, the processing of your data is necessary in order to make a booking.
Data from log files are stored by us for 14 months.
We use technical and organizational security measures to protect your personal data against accidental or intentional manipulation, loss or destruction and against access by unauthorized persons, in accordance with Article 32 of the General Data Protection Regulation. Our security measures are continuously improved in accordance with technical progress.
When you access our website, your access data is automatically collected and stored. This access data may include, in particular, the page accessed, the files viewed, the date and time of the access, the IP address of the user, data of the accessing computer, in particular the browser and the operating system, as well as the amount of data and the notification of successful access. This access data is used by us for
internal statistical purposes, to ensure the security of our offer and to optimize the offer. In case of suspicion of an illegal act, the access data will be evaluated to preserve evidence.
By entering your personal data in one of our contact forms, you agree to the transmission to and storage and processing by us for the duration of the support of this specific request. This applies in particular to your inquiries via contact form and e-mails that you send to us. We need this data to process your request and in these cases also store your IP address for purposes of preserving evidence. The data is stored for as long as is necessary to answer any additional or subsequent questions you or we may have. The legal bases for this data processing are your consent, our pre-contractual and contractual obligations to you, our legitimate interests and legal obligations of all kinds and § 96 TKG.
The content of our website has been carefully prepared and checked several times, but we do not take any liability for the actuality, correctness and completeness of the information provided. Claims for damages due to the use or non-use of the information or due to the use of incorrect or incomplete information, are excluded. All offers are subject to change and non-binding. We reserve the right to change, amend or delete the offer or parts thereof without prior notice or to temporarily or permanently cease publication of the website.
The content and programming of our website are protected by copyright and ancillary copyright. Any duplication – also in extracts – and public reproduction, in particular the copying of texts, graphics and photos, is prohibited without our prior written consent.
4.transmission to third parties / obligations of order processors
Your personal data may be transferred by us to data processors as well as, to third parties who need to be involved for the provision of the services requested by you, all of whom have committed themselves to us to comply with the applicable data protection standards.
If compliance with European data protection standards is not possible – for example, because standard contractual clauses, adequacy decisions or certifications are not guaranteed in the specific case – we will inform you in good time and also obtain the necessary consents from you. For more information, please contact us at email@example.com.
Integration of services and contents of third parties as well as data transfer to third countries
– Google Analytics, Google IP Locator, Google Maps, Google Maps Distance Api, Google reCAPTCHA Owner: Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
– YouTube content owner: Google Inc, Amphitheatre Parkway, Mountain View, CA 94043, USA
– Social network Facebook Owner: Meta Inc., Menlo Park, California, USA
– Social network Google Plus Owner: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
– Social network Instagram Owner: Meta Inc., Menlo Park, California, USA
– Hotjar Owner: Hotjar Ltd, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta.
Other external content can be loaded via widgets and iFrames. To view this list, an email must be sent to firstname.lastname@example.org.
5.cookies and tracking services
We also use third-party content on our website to make our Internet presence as informative and convenient as possible for you. These third-party providers receive your IP address for technical reasons. We have no influence on the use of this data by the third-party provider. This data protection declaration applies exclusively to our website www.hotelaustria.com. The websites linked from this page are not covered by this. In this regard, we refer to the privacy statements of the respective providers.
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Legal basis: Art. 6 para. 1 lit. f GDPR.
Google Maps This site uses the map service Google Maps. To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. Legal basis: Art. 6 para. 1 lit. f GDPR Storage period: until the end of use.
Google Tag Manager In Google Tag Manager, we collect bundled tools for website analysis. Google Tag Manager collects data from website visitors in order to forward it to the respective tool. The data is not collected or stored in the process. The tools collected in Google Tag Manager are set by us in accordance with data protection.
Legal basis: Art. 6 para. 1 lit. f GDPR Storage period: until the end of use.
Remarketing/Retargeting We use “meta pixels” operated by Meta Inc,1 Hacker Way, Menlo Park, CA 94025, USA, or for residents of the European Union, the European Economic Area and Switzerland, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).
When you visit our pages, a direct connection is established between your browser and the Facebook server via the meta pixel. Facebook thereby receives the information that you have visited our site with your IP address. This allows Facebook to assign the visit to our pages to your user account. We can use the information thus obtained for the display of Facebook Ads or for tracking functionalities. The data collected is anonymous for us as the operator.
Hotjar We use Hotjar Technology “Testing and Optimization”, a service provided by Hotjar Ltd, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta . For more information on Hotjar, please refer to the website
Social Media In addition to our website, we also maintain presences in social networks, specifically Facebook and Instagram of Meta Inc. to increase awareness of our company and for marketing purposes. When you visit one of our presences, personal data may be transmitted to the operator of the social network. In addition, the operator may associate your profile with ours, provided you are logged into the respective network. Legal basis: legitimate interest (Art 6 para 1 lit f GDPR) Processor Details about the specific data collection and processing by the respective operator can be found in the following links: Facebook: https://de-de.facebook.com/about/privacy/ Instagram: https://help.instagram.com/155833707900388
Our website uses plugins of the YouTube page operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
In the interest of public safety, there may be video surveillance in the area of the hotel entrance, the reception, at the garage entrances and accesses, the pool, as well as around the staff areas.
Recorded video may be stored for a maximum of 72 hours. In the interest of public safety at resorts, the video footage may be shared with authorities or police in case of an incident.
You can request information about your personal data stored by us free of charge at any time. As a data subject, you also have the right to revocation, information, deletion, correction, restriction and transfer of your personal data, insofar as this is not opposed by any legal obligation to retain data on our part.
Consequences of revocation: DELETION
For more information about your rights as a data subject, please contact us at Georg Strolz GmbH, Omesberg 287, 6764 Lech, email@example.com. We will be happy to help you. The Austrian Data Protection Authority (DPA), Wickenburggasse 8-10, 1080 Vienna, is the competent supervisory authority for complaints.