Privacy Policy

29. July 2022 2022-07-30 1:30

Privacy policy

Privacy preferences

We have written this privacy statement (version 20.07.2022) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and the Data Protection Act (DSG), what information we collect, how we use data and what decision-making options you have as a visitor to this website. Unfortunately, it is in the nature of things that these explanations sound very technical, but we have tried to describe the most important things as simply and clearly as possible when creating them.

Automatic data storage

Nowadays, when you visit websites, certain information is automatically created and stored, including on this website.

When you visit our website, as you are doing right now, our web server (computer on which this website is stored) automatically stores data such as

  • the address (URL) of the accessed web page
  • browser and browser version
  • the operating system used
  • the address (URL) of the previously visited page (referrer URL)
  • the host name and IP address of the device from which access is made
  • the date and time

in files (web server log files).

As a rule, web server log files are stored for two weeks and then automatically deleted. We do not pass on this data, but cannot exclude that this data is viewed in the event of unlawful behavior.
The legal basis, according to Article 6 (1) f DSGVO (lawfulness of processing), is that there is a legitimate interest in enabling the error-free operation of this website by collecting web server log files.

Cookies

Our website uses HTTP cookies to store user-specific data. Below we explain what cookies are and why they are used so that you can better understand the following privacy policy.

What are cookies exactly?

Whenever you browse the Internet, you use a browser. Popular browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies. One thing can’t be denied: Cookies are really useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are other cookies for other applications. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, effectively the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified. Cookies store certain user data about you, such as language or personal page settings. When you return to our site, your browser transmits the “user-related” information back to our site. Thanks to cookies, our site knows who you are and offers you your usual default setting. In some browsers, each cookie has its own file; in others, such as Firefox, all cookies are stored in a single file. There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. Also, the expiration time of a cookie varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other “pests”. Cookies also cannot access information on your PC. For example, cookie data may look like this:
  • Name: _ga
  • Expiration time: 2 years
  • Usage: Differentiation of website visitors
  • Example value: GA1.2.1326744211.152221092007

What types of cookies are there?

The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.

One can distinguish 4 types of cookies:

Absolutely necessary cookies
These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user adds a product to the shopping cart, then continues surfing on other pages and later goes to the checkout. Through these cookies, the shopping cart is not deleted even if the user closes his browser window.

Functional cookies
These cookies collect information about user behavior and whether the user receives any error messages. In addition, these cookies are also used to measure the loading time and the behavior of the website with different browsers.

Target oriented cookies
These cookies provide a better user experience. For example, entered locations, font sizes or form data are stored.

Advertisement cookies
These cookies are also called targeting cookies. They are used to deliver customized advertising to the user. This can be very convenient, but also very annoying.

Usually, when you visit a website for the first time, you are asked which of these cookie types you want to allow. And, of course, this decision is also stored in a cookie.

 

How can I delete cookies?

How and whether you want to use cookies, you decide. Regardless of which service or website the cookies come from, you always have the option to delete, only partially allow or disable cookies. For example, you can block third-party cookies but allow all other cookies.

If you want to determine which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Cookies in Chrome löschen, aktivieren und verwalten

Safari: Verwalten von Cookies und Websitedaten mit Safari

Firefox: Cookies löschen, um Daten zu entfernen, die Websites auf Ihrem Computer abgelegt haben

Internet Explorer: Löschen und Verwalten von Cookies

Microsoft Edge: Löschen und Verwalten von Cookies

If you do not want to have cookies in principle, you can set up your browser so that it always informs you when a cookie is to be set. In this way, you can decide for each individual cookie whether you allow the cookie or not. The procedure varies depending on the browser. The best way is to search for the instructions in Google with the search term “delete cookies Chrome” or “disable cookies Chrome” in case of a Chrome browser or replace the word “Chrome” with the name of your browser, e.g. Edge, Firefox, Safari.

 

What about my privacy?

The so-called “Cookie Guidelines” have been in place since 2009. These state that the storage of cookies requires the consent of the website visitor (i.e. you). Within the EU countries, however, there are still very different reactions to these directives. In Austria, however, this directive was implemented in § 96 (3) of the Telecommunications Act (TKG). If you want to know more about cookies and are not afraid of technical documentation, we recommend https://tools.ietf.org/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.

Storage of personal data

Personal data that you transmit to us electronically on this website, such as name, e-mail address, address or other personal information in the context of submitting a form or comments on the blog, will be used by us together with the time and IP address only for the purpose stated in each case, kept secure and not disclosed to third parties. We thus use your personal data only for communication with those visitors who expressly request contact and for the processing of the services and products offered on this website. We do not disclose your personal data without your consent, but we cannot exclude the possibility that this data may be accessed in the event of unlawful conduct. If you send us personal data by e-mail – thus away from this website – we cannot guarantee secure transmission and protection of your data. We recommend that you never send confidential data by e-mail without encryption. According to Article 6(1)(a) DSGVO (lawfulness of processing), the legal basis is that you give us consent to process the data you have entered. You can revoke this consent at any time – an informal e-mail is sufficient, you will find our contact details in the imprint.

Rights under the General Data Protection Regulation

According to the provisions of the GDPR and the Austrian Data Protection Act (DSG), you are generally entitled to the following rights:

  • Right of rectification (Article 16 GDPR)
  • Right to erasure (“right to be forgotten”) (Article 17 GDPR)
  • Right to restriction of processing (Article 18 DSGVO)
  • Right to notification – notification obligation in connection with the rectification or erasure of personal data or the restriction of processing (Article 19 GDPR)
  • Right to data portability (Article 20 DSGVO)
  • Right to object (Article 21 GDPR)
  • Right not to be subject to a decision based solely on automated processing, including profiling (Article 22 GDPR)

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated in any way, you may lodge a complaint with the supervisory authority, which in Austria is the data protection authority, whose website can be found at https://www.dsb.gv.at/.

 

Evaluation of visitor behavior

In the following privacy policy, we inform you whether and how we evaluate data from your visit to this website. The evaluation of the collected data is usually anonymous and we can not conclude from your behavior on this website to your person. You can find out more about how to object to this analysis of your visit data in the following data protection declaration.

TLS encryption with https

We use https to transmit data tap-proof on the Internet (data protection by design of technology Article 25(1) DSGVO). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data. You can recognize the use of this protection of data transmission by the small lock symbol at the top left of the browser and the use of the scheme https (instead of http) as part of our Internet address.

Google Analytics Privacy Policy

We use Google Analytics from Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on this website to statistically analyze visitor data. Google Analytics uses target-oriented cookies for this purpose.

Cookies from Google Analytics

  • _ga
    • Expiration time: 2 years
    • Usage: Differentiation of website visitors
    • Example value: GA1.2.1326744211.152221092007
  • _gid
    • Expiration time: 24 hours
    • Usage: differentiation of website visitors
    • Example value: GA1.2.1687193234.152221092007
  • _gat_gtag_UA_<property-id>
    • Expiration time: 1 minute
    • Usage: Used to throttle the request rate. When Google Analytics is deployed via Google Tag Manager, this cookie is named _dc_gtm_ <property-id>.
    • Example value: 1

For more information on terms of use and data privacy, please visit http://www.google.com/analytics/terms/de.html or https://support.google.com/analytics/answer/6004245?hl=de.

 

Pseudonymization

Our concern in terms of the DSGVO is the improvement of our offer and our web presence. Since the privacy of our users is important to us, the user data is pseudonymized. The data processing is carried out on the basis of the legal provisions of § 96 para 3 TKG as well as Art 6 EU-DSGVO para 1 lit a (consent) and/or f (legitimate interest) of the DSGVO.

 

Deactivation of data collection by Google Analytics

Using the browser add-on to disable Google Analytics JavaScript (ga.js, analytics.js, dc.js), website visitors can prevent Google Analytics from using their data. You can prevent the collection of data generated by the cookie and related to your use of the website to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Google Analytics Data Processing Addendum

We have entered into a direct customer agreement with Google for the use of Google Analytics by accepting the “Data Processing Addendum” in Google Analytics. You can find out more about the data processing addendum for Google Analytics here: https://support.google.com/analytics/answer/3379636?hl=de&utm_id=ad

Google Analytics IP anonymization

We have implemented Google Analytics IP address anonymization on this website. This feature was developed by Google to enable this website to comply with applicable data protection regulations and recommendations of local data protection authorities when they prohibit storage of the full IP address. The anonymization or masking of the IP takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before any storage or processing of the data takes place. More information on IP anonymization can be found at https://support.google.com/analytics/answer/2763052?hl=de.

Google Analytics reports on demographic characteristics and interests

We have turned on the advertising reports features in Google Analytics. The demographic and interest reports contain information on age, gender and interests. This allows us – without being able to assign this data to individual persons – to get a better picture of our users. You can learn more about advertising features at https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad. You can stop the use of the activities and information of your Google account under “Settings for advertising” at https://adssettings.google.com/authenticated via checkbox.

Google reCAPTCHA Privacy Policy

We use Google reCAPTCHA from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to prevent spam. The legal basis for the use is Article 6 (1) f (lawfulness of processing), because there is a legitimate interest to protect this website from bots and spam. reCAPTCHA is a free service that protects websites from spam and abuse. It uses advanced risk analysis techniques to distinguish humans from bots. With the new API, a significant number of your valid human users will pass the reCAPTCHA challenge without having to solve a CAPTCHA.  We use reCAPTCHA to secure forms. By using reCAPTCHA, data is transferred to Google which Google uses to determine whether the visitor is a human or a (spam)bot. What data is collected by Google and what it is used for, you can read at https://policies.google.com/privacy?hl=de-AT. The terms of use for Google services and products can be found at https://policies.google.com/terms?hl=de-AT.

Embedded Social Media Elements Privacy Policy

We integrate elements of social media services on our website to display images, videos and texts.
When you visit pages that display these elements, data is transferred from your browser to the respective social media service and stored there. We do not have access to this data.

The following links will take you to the pages of the respective social media services where it is explained how they handle your data:

 

Instagram privacy policy

We use functions of the social media network Instagram of the company Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA on our website. With the functions for embedding Instagram content (embed function), we can display images and videos. By calling up pages that use such functions, data (IP address, browser data, date, time, cookies) are transmitted to Instagram, stored and evaluated. If you have an Instagram account and are logged in, this data will be assigned to your personal account and the data stored therein. The privacy policy, which information Instagram collects and how they use it can be found at https://help.instagram.com/519522125107875.

Source: Created with the privacy generator from firmenwebseiten.at (own translation)

 

Check Availabity

1 Room , 1 Guests
Rooms
Guests