Privacy Policy

The use of this website may involve the processing of personal data. To ensure transparency regarding this processing, we would like to provide you with an overview of these processes in the following information. Furthermore, to guarantee fair processing, we would like to inform you about your rights under the European General Data Protection Regulation (GDPR) and the Austrian Federal Data Protection Act (DSG).

Contact Information

If you have any questions or suggestions regarding this information, or if you wish to contact us to exercise your rights, please send your inquiry to:

Postal address:
Amadee Appartements
Karin und Alfred Hummer
Hochosterwitzer Str. 1
9300 St. Veit an der Glan
Austria

A data protection officer has not been appointed, as there is no legal obligation to do so.

General information on the legal basis, storage period, recipients and data transfer to third countries

Legal basis

We process personal data in compliance with the applicable data protection regulations, in particular the GDPR and the German Federal Data Protection Act (BDSG). Data processing by us only takes place on the basis of a legal authorization. When you use this website, we process personal data only with your consent (Art. 6 para. 1 lit. a GDPR), for the performance of a contract to which you are a party, or at your request for the implementation of pre-contractual measures (Art. 6 para. 1 lit. b GDPR), for compliance with a legal obligation (Art. 6 para. 1 lit. c GDPR), or if processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, override those interests (Art. 6 para. 1 lit. f GDPR).

Duration of storage

Unless otherwise stated in the following information, we store data only as long as necessary to achieve the processing purpose or to fulfill our contractual or legal obligations. Such legal retention obligations may arise, in particular, from commercial or tax regulations.

We delete personal information as soon as it is no longer needed and, in any case, upon expiry of the maximum retention period prescribed by applicable law.

Categories of recipients of the data

We use data processors to process your data. The processing operations carried out by these data processors include, for example, hosting the website, sending, receiving, and storing emails, providing the technical infrastructure, processing server log files, and supporting the maintenance and security of our systems. A data processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the data controller. Data processors do not use the data for their own purposes but process it exclusively for the controller and are contractually obligated to implement appropriate technical and organizational measures to ensure data protection. Furthermore, we may transfer your personal data to entities such as postal and delivery services, our bank, tax advisors/auditors, or the tax authorities. Other recipients may be listed in the following information.

Data transfer to third countries

Personal data is not transferred to third countries.

Automated data processing of the server

Hosting and email provider

We host our website with our data processor, easyname GmbH, Canettistrasse 5/10, 1100 Vienna, Austria.

Connection data is processed for the purpose of providing and delivering the website. The data is not stored beyond what is necessary for the delivery and provision of the website.

The legal basis for this data processing is our legitimate interest (the absolute technical necessity for providing and delivering the service you expressly requested by accessing the website) pursuant to Art. 6 para. 1 lit. f GDPR.

For the operation of the website, connection data and other personal data are also processed within the scope of various other functions and services. Details regarding this processing are provided in this privacy policy under the respective functions and services.

Furthermore, easyname acts as an email provider (sending, receiving, and storing emails).

Server-log-files

For the purpose of monitoring the technical functionality and increasing the operational reliability of our web host, connection data is processed. The processing period is limited. IP addresses are anonymized after 24 hours and completely deleted after a maximum of three months.

Based on the stored information, we are unable to identify you as a data subject.

Since it is not possible to identify you based on the stored data, the data subject rights under Articles 15 to 22 of the GDPR do not apply pursuant to Article 11(2) of the GDPR, unless you provide additional information that allows us to identify you.

The legal basis for this processing is Article 6(1)(f) of the GDPR (legitimate interest), as the processing is necessary for compelling technical reasons related to error analysis, preventing security risks, and ensuring the secure operation of the website.

Registering

Personal Information

If you decide to register with us or to make a reservation on this site, we will collect Personal Information about you, such as your name, email and mailing addresses, telephone number(s), credit card information, that you voluntarily share with us. We process Personal Information mainly by electronic and automatic means. Personal Information may also be processed in paper form. We collect Personal Information that is necessary for us to provide you with the services offered on our site. When you browse, reserve or purchase travel services through our site such information may be provided to the applicable vendors or other involved third parties to fulfill your travel arrangements, subject to the conditions described in the section below.

Purchasing, Booking or Reserving Travel Services or Accommodations

Purpose

We collect, process, and use your personal information to provide the services you have requested from us, specifically to set up and manage your guest account, process your bookings, inquiries, and payments, and to communicate with you regarding the purposes listed above.

Refusing to provide your personal information for the aforementioned purposes may impair our ability to fulfill our contractual obligations or provide you with services, information, and/or requested materials.

If you have given us your consent, we may also use your personal information to send you advertising and informational materials about us or other companies via automated means (email or fax), as well as by postal mail and operator-assisted telephone calls. Certain personal information that you have provided to us may be shared with the airline, car rental agency, hotel or accommodation provider, tour operator, or other involved third parties to book your travel arrangements.

Storage of Personal Information

The Personal Information you provide will be transferred and stored in a jurisdiction that may not provide an adequate level of protection to Personal Information equivalent to that provided by your home jurisdiction. We have engaged the following service providers for the purposes of processing your reservation requests:

Inquiries via email or contact form

When you send us inquiries via email or our contact form, the information you provide, including your contact details, will be processed and stored for the purpose of handling your inquiry and for any follow-up questions. This data will not be shared without your consent.

The legal basis for this processing is Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (legitimate interest in the efficient handling of inquiries).

Emails are sent, received, and stored via our email provider and data processor in accordance with Article 28 GDPR:
easyname GmbH, Canettistrasse 5/10, 1100 Vienna, Austria (host and email provider).

Online bookings via external booking systems

Direct bookings can be made on our website via the booking system of MBN Tourismus GmbH. For this purpose, either an embedded booking widget is integrated or a redirect to the external booking page of the tourism organization is provided.

The booking process and the processing of your personal data, in particular booking and payment data, are carried out exclusively by the respective tourism organization as the independent data controller within the meaning of the General Data Protection Regulation (GDPR).

The legal basis for linking to or integrating the external booking system is Article 6(1)(f) GDPR (legitimate interest), as this serves the purpose of providing user-friendly booking information.

The legal basis for processing personal data within the booking process is Article 6(1)(b) GDPR (performance of a contract or implementation of pre-contractual measures) and is the responsibility of the respective tourism organization.

Please refer to the privacy policy of MBN Tourismus GmbH (Millstätter See – Bad Kleinkirchheim – Nockberge Tourismusmanagement GmbH, Hauptstraße 4/2, 9545 Radenthein, Austria):

https://www.lakeandmountain.at/service/data-privacy/

Inquiry and booking management

We use the "Zimmersoftware" software as a SaaS (Software as a Service) solution to handle inquiries and to collect and process booking data. All personal data collected in "Zimmersoftware" is assigned to clearly defined data categories and is automatically deleted once the respective legal basis for processing no longer applies.

The legal basis for processing is Article 6(1)(b) GDPR (performance of a contract or in order to take steps prior to entering into a contract) and Article 6(1)(f) GDPR (legitimate interest in the efficient and proper handling of inquiries and bookings).

The Zimmersoftware KG acts as a data processor in accordance with Article 28 GDPR:
Zimmersoftware KG, Stammersdorferstraße 420 / 16b, 2201 Gerasdorf bei Wien, Austria

Storage period for inquiry and booking data

Booking and invoice data are stored in accordance with statutory retention requirements (currently 7 years according to the Austrian Federal Fiscal Code). The data you enter via email or the contact form will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions – in particular, retention periods – remain unaffected.

Required Disclosures

In addition to the circumstances described above, Amadee Appartements may disclose information you have provided if required to do so by law, court order, as requested by any government or law enforcement authority, or in the good faith belief that disclosure is otherwise necessary or advisable including, without limitation, to protect the rights or properties of Amadee Appartements when we have reason to believe that disclosing the information is necessary to identify, contact or bring legal action against someone who may be causing interference with our rights or properties, whether intentionally or otherwise, or when anyone else could be harmed by such activities.

Cookies, Tracking, Plugins, externe Inhalte

Cookies

Our website may use technically necessary cookies, which are essential for the website's operation.
Analytics cookies are only used with your consent.

The legal basis for technically necessary cookies is Article 6(1)(f) GDPR (legitimate interest).
The legal basis for analytics cookies is Article 6(1)(a) GDPR (consent).

The following cookies are used on our website:

You change your cookie preferences here:

What are cookies?

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. Cookies are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of your browser session, i.e. after closing your browser (these are referred to as session cookies). Other cookies remain on your end device and enable us to recognize your browser the next time you visit (persistent cookies). You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them, exclude the acceptance of cookies for certain cases or accept cookies in general. If cookies are not accepted, the functionality of our website may be restricted.

Web analysis with Matomo

With your consent, we use the open source software Matomo to analyze and statistically evaluate the use of the website. Cookies are used for this. The information obtained about website usage is only transmitted to our server and summarized in pseudonymous usage profiles. We use the data to evaluate the use of the website. The data collected will not be passed on to third parties.

The IP addresses are anonymized (IP masking) so that they cannot be assigned to individual users.

The data is processed on the basis of Article 6 Paragraph 1 Clause 1 Letter a GDPR. We are thus pursuing our legitimate interest in optimizing our website for our external presentation.

You can withdraw your consent at any time by deleting the cookies in your browser or by changing your privacy settings.

During your visit to the website, the following data, among others, is recorded:

The data on this website and Matomo are hosted in Austria (see also information on the hosting provider). The data never leaves the EU.

Data Security

We maintain technical, electronic, and organizational security procedures to maintain the security of Personal Information, and safeguard Personal Information against unauthorized or unlawful processing and/or against accidental or unlawful loss, alteration, disclosure or access. Our security procedures include contractual terms with any contractors, agents or data processors that require such entities to protect the security and confidentiality of Personal Information in accordance with our standards.

It is your responsibility to safeguard any email or password that you have created or used in connection with this site, and to notify us if you ever suspect that the security and confidentiality of such email or password has been compromised in any way. You are solely responsible for any use of this site via your email and password.

SSL Encryption

For security reasons and to protect the transmission of confidential data, such as enquiries you sent to us as the provider, this website uses an SSL encryption. You recognise an encrypted transmission by the change of the address line of the browser from “https://” to “https://” and by the lock-symbol in your browser address line.

If the SSL encryption is active, the data you have transmitted to us cannot be accessed by third parties.

Links

Our site provides links to other sites. When you click on one of these links, you are leaving our site and entering another site that we do not control and for which we cannot be responsible. You should carefully review the privacy statements or policies on any other site that you visit because those privacy statements or policies will apply to your visit to that site and may be very different from our policy.

Notification of Changes

We reserve the right to amend this privacy policy from time to time to reflect changes in legislation, data processing practices, or updated services. Changes affecting your contractual relationship with Amadee Appartements or requiring your consent as a user will only be implemented with your explicit agreement.

Customers, prospective customers, and users of our website are encouraged to review the current privacy policy regularly.

Rights of those affected, right to lodge a complaint

Your rights

As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:

If you have given us separate consent to data processing, you can withdraw this consent at any time in accordance with Article 7(3) GDPR. Such a revocation does not affect the lawfulness of the processing carried out on the basis of the consent prior to the revocation.

Complaint to a supervisory authority

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR. In Austria, this is the Austrian Data Protection Authority.

Right to object

Pursuant to Article 21(1) GDPR, you have the right to object to any processing based on the legal grounds of Article 6(1)(e) or (f) GDPR. If we process your personal data for direct marketing purposes, you may object to this processing pursuant to Article 21(2) and (3) GDPR.