Introduction and Overview

Protecting your personal data is very important to us. In this Privacy Policy, we inform you about which personal data we process in connection with our website, the purposes for which this processing takes place, the legal bases on which it is based, and the rights you have.

Personal data is processed in particular on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and, where applicable, the Austrian Telecommunications Act 2021 (TKG 2021).

Personal data means any information relating to an identified or identifiable natural person, such as a name, email address, IP address or booking data.

Scope

This Privacy Policy applies to the processing of personal data in connection with this website and the functions and services offered through it. These include, in particular, contacting us, online bookings, as well as analytics, map and review services integrated into the website.

The following sections explain which data is processed, for what purpose and which third-party providers are used.

Legal Bases

We process personal data only where there is a legal basis for doing so. Depending on the type and purpose of the processing, the following legal bases pursuant to Article 6(1) GDPR may apply in particular:

• Consent (Article 6(1)(a) GDPR): You have given us your consent to process personal data for a specific purpose. You may withdraw your consent at any time with effect for the future.
• Contract and pre-contractual measures (Article 6(1)(b) GDPR): Processing is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract. This may apply, for example, to enquiries or bookings.
• Legal obligation (Article 6(1)(c) GDPR): Processing is necessary for compliance with a legal obligation, for example statutory retention or documentation requirements.
• Legitimate interests (Article 6(1)(f) GDPR): Processing is necessary for the purposes of our legitimate interests or those of a third party, provided that your interests or fundamental rights and freedoms do not override those interests. These may include, in particular, the secure and efficient operation of our website and protection against misuse and technical attacks.

In addition to the GDPR, the provisions of the Austrian Data Protection Act (DSG) apply. The storage of information on your terminal device or access to information already stored on your terminal device is also subject to the requirements of Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).

Where consent is required for the use of certain services, processing takes place only after you have given your consent. This applies in particular to technically non-essential cookies and comparable technologies. You may withdraw or change your consent at any time with effect for the future via the cookie settings.

Controller

The controller responsible for processing personal data on this website is:

Hans-Peter Schönauer
Schlanitzen 5
9631 Tröpolach
Austria

Email: kontakt@schoenauer-hof.com
Phone: +43 676 9118066
Legal Notice: https://www.schönauer-hof.at/impressum/

Storage Period

We generally store personal data only for as long as necessary for the respective processing purpose. Once the purpose of the processing no longer applies, the data is deleted or anonymised unless statutory retention obligations or other legal grounds prevent deletion.

Certain data may be subject in particular to retention periods under tax, corporate or civil law. Data required to comply with such statutory obligations will be stored for the duration of the respective retention period.

Where processing is based on your consent, we generally process the relevant data until you withdraw your consent, unless another legal basis permits or requires further processing.

Where different or more specific retention periods apply to individual services or processing activities, these are explained in the relevant sections of this Privacy Policy.

Your Rights

In connection with the processing of your personal data, you have the following rights under the GDPR in particular:

• Right of access (Article 15 GDPR): You may request information as to whether and which personal data we process about you.
• Right to rectification (Article 16 GDPR): You may request the correction of inaccurate personal data or the completion of incomplete personal data.
• Right to erasure (Article 17 GDPR): Subject to the statutory requirements, you may request the deletion of your personal data.
• Right to restriction of processing (Article 18 GDPR): Under certain circumstances, you may request that the processing of your data be restricted.
• Right to data portability (Article 20 GDPR): Where the statutory requirements are met, you may request to receive the personal data you have provided in a structured, commonly used and machine-readable format.
• Right to object (Article 21 GDPR): Where processing is based on legitimate interests pursuant to Article 6(1)(f) GDPR, you may object to the processing on grounds relating to your particular situation.
• Right to withdraw consent (Article 7(3) GDPR): You may withdraw consent you have given at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
• Right to lodge a complaint (Article 77 GDPR): If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with a data protection supervisory authority.

You may contact the controller at any time using the contact details provided above to exercise your rights.

Right to Lodge a Complaint with the Data Protection Authority

If you believe that the processing of your personal data infringes the GDPR or other data protection provisions, you may lodge a complaint with a data protection supervisory authority.

In Austria, the competent authority is:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at

Security of Data Processing

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, manipulation or unlawful disclosure. Our security measures are regularly reviewed and adapted in line with technological developments.

This website uses TLS encryption (HTTPS) to protect the transmission of data between your browser and our web server. In particular, data that you submit to us via forms is transmitted in encrypted form.

Contacting Us

If you contact us, for example by telephone, email or via a contact form on our website, we process the personal data you provide in order to handle your enquiry and communicate with you.

The following data may be processed in particular:

• Name
• Email address
• Telephone number
• Content and time of your enquiry
• Other information voluntarily provided by you

Purpose and Legal Basis

We use this data exclusively to handle your enquiry and communicate with you. If your enquiry relates to a booking, an existing contract or pre-contractual measures, processing is carried out on the basis of Article 6(1)(b) GDPR.

For other enquiries, processing is based on our legitimate interest in handling and responding to enquiries and maintaining proper business communications pursuant to Article 6(1)(f) GDPR.

Storage Period

We generally store data processed in connection with an enquiry only for as long as necessary to handle the enquiry. If the enquiry results in a contractual relationship, the data may be stored for a longer period in accordance with applicable statutory retention periods.

Spam Protection

To protect our contact form against automated and abusive submissions, we use a CAPTCHA function provided locally on our web server. A randomly generated CAPTCHA image is displayed and its content must be entered into the designated field for verification. The CAPTCHA files required for this purpose are temporarily stored on our web server. CAPTCHA data is not transmitted to an external CAPTCHA provider such as Google reCAPTCHA.

This protective measure is used on the basis of our legitimate interest in the security of our website and in preventing automated spam messages pursuant to Article 6(1)(f) GDPR.

Cookies and Similar Technologies

Our website uses cookies and comparable technologies. Cookies are small text files that may be stored on or read from your terminal device when you visit a website. They may be used, for example, to provide certain website functions, save your settings or analyse the use of our website.

Technically Necessary Cookies and Technologies

Certain cookies and comparable technologies are necessary to technically provide our website and the functions you expressly request. Pursuant to Section 165(3) TKG 2021, consent is not required for such strictly necessary operations.

Where personal data is processed through the use of technically necessary technologies, processing is based on the applicable legal basis pursuant to Article 6(1) GDPR, in particular our legitimate interest in the secure and functional operation of our website pursuant to Article 6(1)(f) GDPR.

Cookies and Technologies Requiring Consent

We use technically non-essential cookies and comparable technologies only if you have given your prior express consent. This applies in particular to services used to analyse website usage and to external content and media where their integration requires consent.

The legal basis for storing information on your terminal device or accessing information already stored on it is your consent pursuant to Section 165(3) TKG 2021. Where personal data is processed in this context, processing is based on your consent pursuant to Article 6(1)(a) GDPR.

Changing or Withdrawing Cookie Settings

When you first visit our website, you can use our consent management system to specify which services requiring consent you wish to accept. You may change or withdraw consent you have given at any time with effect for the future.

The specific services used, the data processed, the purposes and storage periods are described in more detail in the following sections of this Privacy Policy.

Web Hosting

We use the services of the following hosting provider to operate and provide this website:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

When you access our website, the web server processes technically necessary data. This may include the following information in particular:

• IP address of the accessing device
• Date and time of access
• Page or file accessed
• Amount of data transferred and access status
• Referrer URL
• Browser used and browser version
• Operating system used

Purpose and Legal Basis

The processing of this data is necessary to technically provide our website and to ensure its stability and security. Processing is based on our legitimate interest in the secure and functional operation of our website pursuant to Article 6(1)(f) GDPR.

Data Processing on Behalf

Where ALL-INKL.COM processes personal data on our behalf, this is carried out within the framework of data processing on behalf pursuant to Article 28 GDPR.

Further information about the processing of personal data by ALL-INKL.COM can be found in the provider's data protection information:
Data Protection Information from ALL-INKL.COM

Web Analytics with Matomo

We use the web analytics software Matomo for statistical analysis and to improve our website. Matomo is operated on our own web server. Data collected as part of web analytics is therefore not transmitted to the provider of Matomo or to other external analytics services for analysis purposes.

What Data May Be Processed?

As part of the statistical analysis, information may be processed in particular about pages viewed, the time and duration of visits, the source of the visit, the browser used, operating system and device type, as well as technical information about access.

Cookie-Free Audience Measurement

We use Matomo without tracking cookies. Therefore, no Matomo cookies are stored on your terminal device for statistical analysis.

The IP address is processed exclusively in shortened or anonymised form for statistical analysis so that direct identification of individual visitors is avoided.

Purpose and Legal Basis

Processing is carried out for the statistical analysis of the use of our website and for the technical and content-related optimisation of our services.

Where web analytics is carried out without cookies or comparable technologies requiring consent and the data collected is processed in a privacy-friendly manner, we base the processing on our legitimate interest in the statistical analysis and optimisation of our website pursuant to Article 6(1)(f) GDPR.

Storage Period

Data collected as part of web analytics is stored only for as long as necessary for the statistical analysis and optimisation of our website.

Further Information

Further information about Matomo and data protection can be found on the provider's website:
Matomo Privacy Policy

Google Analytics

We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to statistically evaluate the use of our website and improve our online services. In particular, information about page views, duration of use, interactions with the website, source of the visit, browser used, device type and operating system, as well as approximate location information, may be processed.

Google Analytics uses cookies and comparable technologies, among other things. Pseudonymous identifiers may be used to analyse visits and interactions on our website.

Consent and Legal Basis

Google Analytics is used on our website only in accordance with the choices you make via our consent management system. Where consent is required, the storage of information on your terminal device or access to information stored on it is based on your consent pursuant to Section 165(3) TKG 2021. The associated processing of personal data is based on Article 6(1)(a) GDPR.

You may change or withdraw consent you have given at any time with effect for the future via the cookie settings on our website.

IP Address and Data Processing

When Google Analytics is used, the IP address is technically used for the transmission and processing of analytics data. According to Google, IP addresses are not logged or stored in Google Analytics 4. They are used to derive certain location information and are subsequently discarded.

Storage Period

The storage period of data processed by Google Analytics depends on the retention settings configured for the Google Analytics property used. The storage period of certain cookies may differ.

Data Transfers to Third Countries

When Google Analytics is used, personal data may also be processed outside the European Economic Area, particularly in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework. In addition, the Standard Contractual Clauses approved by the European Commission may be used for relevant data transfers.

Further information about data processing by Google can be found in Google's Privacy Policy:
Google Privacy Policy

Consent Management with Complianz

We use Complianz on our website to manage your consent to the use of cookies and other technologies and services requiring consent.

Using the consent management system, you can decide when visiting our website which categories of services you wish to accept and which you wish to reject. Technically non-essential services are generally activated only in accordance with the choices you have made.

What Data Is Processed?

In particular, the following information may be processed to store and manage your consent decision:

• Your consent decision
• Date and time of your decision
• Information about the consent categories you selected
• Information about the version of the consent settings used

Complianz stores your selection in your browser using technically necessary cookies. This allows your decision to be taken into account on subsequent page views.

Purpose and Legal Basis

Processing serves to manage your privacy and consent settings and to document the choices you have made.

Where personal data is processed in order to comply with our obligations to demonstrate compliance with data protection law, processing is based on Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR.

The technically necessary storage of information on your terminal device or access to information stored on it for consent management purposes is carried out pursuant to Section 165(3) TKG 2021, as these operations are necessary to store and provide your privacy and consent settings.

Changing or Withdrawing Consent

You can change your selection at any time via the cookie settings on our website or withdraw consent you have already given with effect for the future.

Guest Reviews via Trustindex

We use Trustindex on our website to display guest reviews. The reviews originate, among other sources, from external review and booking platforms.

Trustindex content is not loaded automatically when you visit our website. A connection to Trustindex servers and, where applicable, other third-party providers whose content is embedded within the reviews is established only after you consent to the display of external guest reviews.

What Data May Be Processed?

When external content is loaded, your IP address, information about your browser and device, as well as the date and time of access, may in particular be transmitted to the third parties involved. Depending on the reviews displayed, external content such as profile images may also be loaded from the respective platforms.

Purpose and Legal Basis

The integration allows us to display guest reviews and experiences of other guests directly on our website.

External content is loaded only after you have given your consent. The storage of information on your terminal device or access to information stored on it is based on your consent pursuant to Section 165(3) TKG 2021. Where personal data is processed, processing is based on Article 6(1)(a) GDPR.

Your consent is voluntary and may be withdrawn or changed at any time with effect for the future via the privacy settings on our website.

Further Information

Further information about data processing by Trustindex can be found in the provider's privacy information:
Trustindex Privacy Policy

Locally Hosted Fonts

We use fonts on our website that are provided locally on our own web server. When these fonts are loaded, no connection is established to servers of external font providers such as Google Fonts.

Therefore, no personal data is transmitted to Google or other external font providers in connection with the provision of these fonts.

Google Maps

We use Google Maps, a map service provided by Google, on our website to clearly display our location and geographical information.

Google Maps is not loaded automatically on our website. The map is initially blocked by our consent management system. A connection to Google servers is established only after you consent to the display of Google Maps.

What Data May Be Processed?

When Google Maps is loaded, your IP address, information about your browser and device, the date and time of access, as well as other technical usage data, may in particular be transmitted to Google.

If you are logged into your Google account at the same time, Google may be able to associate information generated when Google Maps is accessed with your Google account. We have no influence over this processing by Google.

Purpose and Legal Basis

We use Google Maps to provide you with a clear representation of the location of our accommodation and directions for reaching us.

Google Maps is loaded only after you have given your consent. The storage of information on your terminal device or access to information stored on it is based on your consent pursuant to Section 165(3) TKG 2021. Where personal data is processed, processing is based on Article 6(1)(a) GDPR.

Your consent is voluntary and may be withdrawn or changed at any time with effect for the future via the privacy settings on our website.

Data Transfers to Third Countries

When Google Maps is used, personal data may be transferred to companies or servers outside the European Economic Area. Google uses the transfer mechanisms provided for under applicable data protection requirements for such data transfers.

Further Information

Further information about Google's processing of personal data can be found in Google's Privacy Policy:
Google Privacy Policy

Online Booking with easybooking

For availability checks, booking enquiries and online bookings, we use the hotel and booking software easybooking provided by zadego GmbH, Anton-Melzer-Straße 10, 6020 Innsbruck, Austria.

The booking system is integrated into our website. When you access and use the booking functions, a connection to easybooking servers is established. In this context, technically necessary connection data may be processed, in particular your IP address, browser and device information, as well as the date and time of access.

What Data Is Processed When Making an Enquiry or Booking?

If you make an enquiry or booking via easybooking, the data you enter will be processed. This may include the following data in particular:

• Name and contact details
• Email address and, where applicable, telephone number
• Requested period of stay
• Number of accompanying guests and information about them
• Booking and stay details
• Where applicable, payment and billing information
• Other information you voluntarily provide as part of your enquiry or booking

Purpose and Legal Basis

Processing is carried out in order to handle your enquiry, process your online booking and prepare for and manage your stay.

Where processing is necessary to handle a booking enquiry, process a booking or perform the accommodation contract, it is based on Article 6(1)(b) GDPR. Where statutory retention, registration or documentation obligations apply, processing is based on Article 6(1)(c) GDPR.

Processing on Our Behalf and Other Recipients

zadego GmbH processes personal data as a processor in connection with the provision of easybooking. As part of the booking process, data may also be transmitted to other recipients where this is necessary for the respective service or to comply with statutory obligations. These may include, for example, payment service providers, tourism associations, guest registration service providers or other service providers connected to the booking system.

Storage Period

Personal data is stored only for as long as necessary to handle your enquiry, process and manage your booking, and comply with statutory retention and documentation obligations.

Further Information

Further information about the processing of personal data in connection with easybooking can be found in the provider's privacy information:
easybooking Privacy Policy

All texts are protected by copyright.

Source: Privacy Policy created with the Privacy Policy Generator for Austria by AdSimple