Data policy

We strive to provide service/products of appropriate quality. In order to be able to guarantee this in the future and to offer you the best possible service and perfect performance, we collect and process data and activities from inquiries, bookings or when you visit our website. We process your data exclusively on the basis of the legal provisions (DSGVO, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing within the framework of our website.When you book with us, make a purchase, send us an inquiry, request information or brochure material, we process your personal data in accordance with Art. 6 para. 1 p. 1 lit b, f.

What data is collected?

Website: When you use this website, we collect technically necessary data that is automatically transmitted to our server, including IP address, date and time of the session, type of terminal device, access status/HTTP status code, browser type, language and version of the browser software, operating system.

This is technically necessary to be able to display our website to you. We also use the data to be able to improve the website according to your expectations and to ensure the security and stability of the website. The legal basis for the collection is Art. 6 para. 1 lit. f DSGVO.


Inquiries and bookings

When you contact us by form on the website or by e-mail, make an inquiry or make a booking, you provide us with the personal data (e.g. name, postal address, e-mail address, telephone number, interests, etc.) for processing that we need to be able to process your request. We do not pass them on to third parties. This does not include companies that act as order processors on our behalf and with whom we have reached an agreement that they will handle your data with the same legally required due diligence as we do. We use easyGuestmanagement (www.easyguestmanagment.at) for this purpose.


Cookies

Our website uses cookies. These are small text files that are stored on your terminal device with the help of the browser. They do not cause any damage. We need cookies to make our offer user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognize your browser on your next visit. If you do not wish this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases

If you do not allow cookies, not all functions of our website may be available.


Storage

We process and store your data only for as long as is necessary for processing or to comply with legal obligations. After the purpose of processing no longer applies, your data will be blocked or deleted. If there are additional legal obligations to store your data, we will block or delete your data when the legal storage periods expire.


Your rights

In particular, the GDPR grants you the right to information regarding your personal data (whether and which data we store, processing purposes, duration of storage), the right to rectification and completion, right to erasure, right to restriction of processing, right to data portability, right to object and right to withdraw consent under data protection law. You have the right to request confirmation from us as to whether personal data relating to you is being processed. If you would like to exercise this right of confirmation, you can contact our data protection officer at any time.


You have the right to obtain information from us at any time and free of charge about the personal data stored about you. Furthermore, the European Directive and Regulation has given you the right to obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations, if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration, the existence of automated decision-making including profiling pursuant to Article 22 para.1 and 4 DSGVO and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for you. If the personal data was not collected from you, you have the right to access all available information about the origin of the data. Furthermore, you have the right to be informed whether personal data has been transferred to a third country or to an international organization. If this is the case, you also have the right to obtain information about the appropriate safeguards in connection with the transfer.


You have the right to request the immediate correction of any personal data concerning you that is inaccurate.


You have the right to request that we erase the personal data concerning you without undue delay, provided that one of the following reasons applies and to the extent that the processing is not necessary:

  • The personal data was collected or otherwise processed for such purposes for which it is no longer necessary.
  • The data subject revokes his or her consent on which the processing was based pursuant to Art. 6(1)(a) DSGVO or Art. 9(2)(a) DSGVO and there is no other legal basis for the processing.
  • The data subject objects to the processing pursuant to Article 21(1) DSGVO and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) DSGVO.
  • The personal data have been processed unlawfully.
  • The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
  • The personal data has been collected in relation to information society services offered pursuant to Article 8(1) DSGVO.

If one of the aforementioned reasons applies, and you wish to arrange for the deletion of personal data stored by us, you can contact our data protection officer at any time. Our data protection officer or an employee appointed by him will arrange for the deletion request to be complied with immediately.


If the personal data has been made public by us and our company as the controller is obliged to erase the personal data pursuant to Article 17 (1) of the Data Protection Regulation, we shall take reasonable measures, including technical measures, taking into account the available technology and the cost of implementation, to inform other data controllers which process the published personal data that you have requested from them to erase all links to your personal data or copies or replications of your personal data, unless the processing is necessary. Our data protection officer or an employee appointed by him will arrange the necessary in individual cases.

You have the right to request us to restrict processing if one of the following conditions is met:

  • The accuracy of the personal data is contested by you for a period enabling us as the controller to verify the accuracy of the personal data.
  • The processing is unlawful, you object to the erasure of the personal data and request instead the rest
  • We, as the controller, no longer need the personal data for the purposes of processing, but you, as the data subject, need it for the assertion, exercise or defense of legal claims.

You have objected to the processing pursuant to Article 21 (1) DSGVO and it is not yet clear whether our legitimate grounds override those of you as a data subject.
If one of the aforementioned conditions is met, and you wish to request the restriction of personal data stored by us, you may, at any time, contact our data protection officer. Our data protection officer or an employee appointed by him will arrange the restriction of the processing.
You have the right to receive the personal data concerning you, which has been provided to us by you, in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us, as the controller to whom the personal data has been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) DSGVO or Article 9(2)(a) DSGVO or on a contract pursuant to Article 6(1)(b) DSGVO and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as the controller.
Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to obtain that the personal data be transferred directly from one controller to another controller where technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.
To assert the right to data portability, you can always contact our data protection officer.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (1) (e) or (f) DSGVO. This also applies to profiling based on these provisions.


How to reach us

If you have any questions about this statement or the processing of your personal data by our company, please contact us by email at info@hotel-am-hof.at.


Last modified on 20 December 2021

(Translation with deepl.com)




Share by: