Personal designations shall include both genders in line with the English language.
1. Contact Data and Contact Persons
Vitalhotel Sonnenhof GmbH
Rettweg 5
6353 Going am Wilden Kaiser
Österreich
Contact person:
Johann Seiwald
info@sonnenhof-going.at
Tel.: +43 (0)5358 2441
2. Protection of Personal Data of Natural Persons
Vitalhotel Sonnenhof informs about the data processing and its legal bases pursuant to Art. 13 of the GDPR. The legal bases are generally the contractual relationship and the consent.
We only collect those personal data that are required for performing and handling the con-tract and which you provided voluntarily.
Vitalhotel Sonnenhof will process your personal data in line with the GDPR based on the laws, the contract or your consent.
3. Type of Processed Data
We process your personal data which you provide to us under the contractual relationship or based on a relationship prior to entering into a contract (e.g. booking request), such as e.g. your name, address, email address, telephone number, date of birth. Moreover, we will store the data of your contact with us, such as the booking history, your inquiries, contracts, any hotel services you used, etc.
Other data will be processed if you use special services or offers (in particular our Hotel App and the Hotel’s WiFi). We will inform about them in the separate Articles below.
4. Purpose and Legal Basis of the Processing
If you contact us through our website, if you make a booking, subscribe to our newsletter or use other services of our Hotel, we will store the information you entered in the form. If any inquiry or booking process is aborted, no data will be stored.
We process your personal data for the purpose of performing our obligations prior to enter-ing into a contract, such as answering your inquiries, for the purpose of performing the con-tract and the ancillary service associated therewith, such as accounting, provision of ser-vices, etc. and to comply with our legal obligations.
The legal basis for the data processing is, thus, the contract or the relationship existing prior to entering into a contract and the Austrian legislation, insofar as any legal retention obliga-tions arise from such. If the processing is not necessary for contractual purposes, it will be made on the basis of your consent.
5. Newsletter and Sending of Advertising Materials, Competitions
Insofar as you have given your consent, we will process your data also for advertising and information purposes, for example, to send you our newsletter or offers or for your partici-pation in competitions. > Link
You may withdraw your consent at any time.
6. Use of the Hotel’s WiFi
If you use our WiFi network, data of this internet connection (traffic data), such as, in partic-ular, your IP address, MAC address, time of access and duration of the connection, will be stored. No contents data will be stored. The data will be stored and deleted in line with the provisions of the TKG (Austrian Telecommunication Act).
7. Payment Systems
When you place your booking through the Hotel’s online booking and payment system, you may pay with your credit card. For this purpose, you will be directed to a credit card pay-ment system where you can directly enter the data of the credit card.Your payment data (credit card data) will be processed for handling the payment.
8. Retention of Data
We will only store your data for as long as it is required for the above mentioned purpose or for as long as it is necessary pursuant to legal retention obligations or justified for protecting legitimate interests, such as to defend against claims for damages.
Moreover, the data will only be stored based on your consent and until such is withdrawn. We are not obliged to permanently store the data, despite your consent, and may thus delete them at any time.
The traffic data of WiFi connections will be stored or deleted pursuant to the provisions of the TKG.
9. Transfer of Data
Data will only be transferred to third parties, in particular, external service providers, such as IT service providers, tax advisors or accountants if that is required for the performance of a contract or to perform measures prior to entering into a contract. The data may also be shared with lawyers or authorities to protect our legitimate interests.
Please note that under the conditions set out in Sec. 99(5) of the TKG, we are authorised and obliged to share traffic data of WiFi connections with courts, prosecutors and authorities.
Data processor contracts are concluded with the service providers pursuant to Art. 28 of the GDPR.
The data will be transmitted by and stored in servers of our IT service provider and our payment service provider that are located in the EU / EEA. No data will be transmitted to non-EU countries.
10. Data Security
We take adequate precautions pursuant to the state of the art and technical and organisa-tional measures to protect your personal data.
But, despite our efforts, it cannot be excluded that information that you transfer over the in-ternet or through other telecommunication networks will be inspected and used by other persons. We assume no liability for such unauthorised use of your data by third parties.
11. Your Rights
As a data subject, you have the right, at any time, to access the personal data we store about you, to receive information on their origin and recipient and the purpose of the data pro-cessing; you also have a right to rectification, data transfer, objection, restriction of pro-cessing and blocking or erasure of incorrect data or data that is unlawfully processed. You have the right, at any time, to withdraw the consent you have given for the use of your per-sonal data.
Your wish can be complied with, unless that is opposed by laws, agreements or legitimate in-terests of the controller.
Insofar as your personal data are subject to change, please provide us with a notification.
You may direct your request for access, erasure, rectification, objection and/or data trans-fer, in the latter case, unless that causes disproportionate efforts, to the above mentioned ad-dress of the controller.
If you are of the opinion that the processing of your personal data by us violates applicable data protection laws or that your claims under data protection laws were violated in any other way, please provide us with information to enable an investigation. You have also the option to complain before the competent supervisory authority. The competent authority in Austria is the Austrian Data Protection Authority.
12. Additional Data Privacy Notice Website + Cookie Pop-Up
12.1. Server Log Files
Access Data: The operator of the website or provider of the website collects data on ac-cesses on the site and stores them as ”Server Log Files“. The following data will be logged:
The collected data will only be used for statistical evaluations and to improve the web-site. The operator of the websites reserves the right, however, to subsequently verify the server log files if they have concrete indications for an unlawful use.
12.2. Cookies
Our website uses so-called cookies. These are small text files which the browser places on your computer. They will not cause any damage.
We use cookies to make our offer more user friendly. Some cookies will remain on your computer, until you delete them. They allow us to recognise your browser during your next visit.
If you reject or deactivate cookies, the functionality of our website can be restricted.
12.3. Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google“). Google Analytics uses so-called “Cookies“, which are text files placed on your computer to help the website analyse how you use it. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to a server of Google in the USA and stored there. Google will use this information for the pur-pose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services to website operators relating to website activity and internet usage. Google may also transmit this information to third parties, if that is legally prescribed or insofar as third parties process these data on behalf of Google. Google will in no case associate your IP address with other data of Google. You may prevent the storage of cookies by selecting the appropriate setting on your browser software, however, we must advice you that, in this case, you might not be able to use all functions of this website to the fullest extent. By using this website, you give your consent to the processing of the data col-lected about you by Google in the manner described above and for the purpose mentioned above.
12.4. AdWords Remarketing
The provider uses the Remarketing- or “similar target groups” function of the Google Inc. (“Google”) on the website. With this function the provider can address the visitors of the website with ads by advertising with personalized, interest-based ads for the visitors of the website when visiting other websites in the Google Display network. For the analysis of the website usage which is the basis for the preparation of the interest-based ads, Google uses so-called cookies. For this purpose Google stores a small file with a sequence of numbers in the browsers of the users of the website. If you consecutively visit another website in the Google Display network, it is very likely that ads which take previously retrieved product- and information areas into account. You can permanently deactivate the usage of cookies through Google by following the subsequent link and download the plugin you’ll find there: https://support.google.com/ads/answer/7395996.
12.5. Usage of Facebook Pixels and conversion measurement
With your consent we place the “Visitor action pixel” of the Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) within our web presence. By means of Facebook pixels we can retrace the actions of users after they have seen or clicked on a Facebook ad. The goal is to measure the efficiency of Facebook ads optimally and to act strategically. The collected data is anonymous for us; in other words, we don’t see the personal data of individual users. The data is stored and processed by Facebook and connected to your Facebook account.
The social media platform uses the data for own advertising purposes corresponding to Facebook’s data privacy policy https://www.facebook.com/about/privacy/.
12.6. Facebook-Plugins
On these web pages plugins of the social network facebook.com that is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, are being used (“Facebook”).
If you call up web pages of our web presence provided with such a plugin, a connection to the Facebook servers will be established and in the process the plugin is shown on the web page through notification to your browser. That way the data of which sites you have visited is transmitted to the Facebook server. Facebook assigns this information to your personal account. Ehen using the plugin functions (e.g. clicking on the „like“ button, making a comment), this information is also assigned to your Facebook account. You can prevent this allocation by logging out of your account.
You can find more details regarding the collection and usage of the data through Facebook in the data protection notice from Facebook.
12.7. Instagram-Plugin
On this website functions of the Instagram service are integrated. These funktions. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you have an Instagram account, you can link the content of our site to your Instagram profile by clicking the Instagram button at any time. Instagram will therefore be able to match the visit to our site with your user account. We would like to point out that as the provider of the site, we do not receive any knowledge of the content of the data transferred or its use by Instagram.
Further information can be found in the Instagram data privacy statement: https://instagram.com/about/legal/privacy/.
