Data protectionGeneral information on data processing

Allgemeines zur Datenverarbeitung

1. Umfang der Verarbeitung personenbezogener Daten

Wir verarbeiten personenbezogene Daten unserer Nutzer grundsätzlich nur, soweit dies zur Bereitstellung einer funktionsfähigen Webseite sowie unserer Inhalte und Leistungen erforderlich ist. Die Erhebung und Verwendung personenbezogener Daten unserer Nutzer erfolgt regelmäßig nur nach Einwilligung des Nutzers. Eine Ausnahme gilt in solchen Fällen, in denen eine vorherige Einholung einer Einwilligung aus tatsächlichen Gründen nicht möglich ist und die Verarbeitung der Daten durch gesetzliche Vorschriften gestattet ist.

2. Rechtsgrundlage für die Verarbeitung personenbezogener Daten

Soweit wir für Verarbeitungsvorgänge personenbezogener Daten eine Einwilligung der betroffenen Person einholen, dient Art. 6 Abs. 1 S.1 lit. a EU-Datenschutzgrundverordnung (DSGVO) als Rechtsgrundlage. Bei der Verarbeitung von personenbezogenen Daten, die zur Erfüllung eines Vertrages, dessen Vertragspartei die betroffene Person ist, erforderlich ist, dient Art. 6 Abs. 1 S.1 lit. b DSGVO als Rechtsgrundlage. Dies gilt auch für Verarbeitungsvorgänge, die zur Durchführung vorvertraglicher Maßnahmen erforderlich sind. Soweit eine Verarbeitung personenbezogener Daten zur Erfüllung einer rechtlichen Verpflichtung erforderlich ist, der unser Unternehmen unterliegt, dient Art. 6 Abs. 1 S.1 lit. c DSGVO als Rechtsgrundlage. Für den Fall, dass lebenswichtige Interessen der betroffenen Person oder einer anderen natürlichen Person eine Verarbeitung personenbezogener Daten erforderlich machen, dient Art. 6 Abs. 1 S.1 lit. d DSGVO als Rechtsgrundlage.

Ist die Verarbeitung zur Wahrung eines berechtigten Interesses unseres Unternehmens oder eines Dritten erforderlich und überwiegen die Interessen, Grundrechte und Grundfreiheiten des Betroffenen das erstgenannte Interesse nicht, so dient Art. 6 Abs. 1 S.1 lit. f DSGVO als Rechtsgrundlage für die Verarbeitung.

3. Datenlöschung und Speicherdauer

Die personenbezogenen Daten der betroffenen Person werden gelöscht oder gesperrt, sobald der Zweck der Speicherung entfällt. Eine Speicherung kann darüber hinaus erfolgen, wenn dies durch den europäischen oder nationalen Gesetzgeber in unionsrechtlichen Verordnungen, Gesetzen oder sonstigen Vorschriften, denen der Verantwortliche unterliegt, vorgesehen wurde. Eine Sperrung oder Löschung der Daten erfolgt auch dann, wenn eine durch die genannten Normen vorgeschriebene Speicherfrist abläuft, es sei denn, dass eine Erforderlichkeit zur weiteren Speicherung der Daten für einen Vertragsabschluss oder eine Vertragserfüllung besteht.

 

Bereitstellung der Webseite und Erstellung von Logfiles

1. Beschreibung und Umfang der Datenverarbeitung

Bei jedem Aufruf unserer Internetseite erfasst unser System automatisiert Daten und Informationen vom Computersystem des aufrufenden Rechners.

Folgende Daten werden hierbei erhoben:

1. Informationen über den Browsertyp und die verwendete Version
2. Das Betriebssystem des Nutzers
3. Den Internet-Service-Provider des Nutzers
4. Die IP-Adresse des Nutzers
5. Datum und Uhrzeit des Zugriffs
6. Webseiten, von denen das System des Nutzers auf unsere Internetseite gelangt
7. Webseiten, die vom System des Nutzers über unsere Webseite aufgerufen werden

Die Daten werden ebenfalls in den Logfiles unseres Systems gespeichert. Eine Speicherung dieser Daten zusammen mit anderen personenbezogenen Daten des Nutzers findet nicht statt.

2. Rechtsgrundlage für die Datenverarbeitung

Rechtsgrundlage für die vorübergehende Speicherung der Daten und der Logfiles ist Art. 6 Abs. 1 lit. f DSGVO.

3. Zweck der Datenverarbeitung

Die vorübergehende Speicherung der IP-Adresse durch das System ist notwendig, um eine Auslieferung der Website an den Rechner des Nutzers zu ermöglichen. Hierfür muss die IP-Adresse des Nutzers für die Dauer der Sitzung gespeichert bleiben. Die Speicherung in Logfiles erfolgt, um die Funktionsfähigkeit der Website sicherzustellen. Zudem dienen uns die Daten zur Optimierung der Website und zur Sicherstellung der Sicherheit unserer informationstechnischen Systeme. Eine Auswertung der Daten zu Marketingzwecken findet in diesem Zusammenhang nicht statt. In diesen Zwecken liegt auch unser berechtigtes Interesse an der Datenverarbeitung nach Art. 6 Abs. 1 lit. f DSGVO.

4. Dauer der Speicherung

Die Daten werden gelöscht, sobald sie für die Erreichung des Zweckes ihrer Erhebung nicht mehr erforderlich sind. Im Falle der Erfassung der Daten zur Bereitstellung der Webseite ist dies der Fall, wenn die jeweilige Sitzung beendet ist.

Im Falle der Speicherung der Daten in Logfiles ist dies nach spätestens sieben Tagen der Fall. Eine darüberhinausgehende Speicherung ist möglich. In diesem Fall werden die IP-Adressen der Nutzer gelöscht oder verfremdet, sodass eine Zuordnung des aufrufenden Clients nicht mehr möglich ist.

5. Widerspruchs- und Beseitungsöglichkeit

Die Erfassung der Daten zur Bereitstellung der Webseite und die Speicherung der Daten in Logfiles ist für den Betrieb der Internetseite zwingend erforderlich. Es besteht folglich seitens des Nutzers keine Widerspruchsmöglichkeit.

Data controller

Hotel Eden Betriebsgesellschaft m.b.H. & Co KG
FN 246412x
Münchner Straße 136, 6100 Seefeld

Provision of the website

1. Scope and purpose of data processing

For technical reasons, every time you visit our website, our system automatically collects the following data and information that your device transmits to our website server:

1. Browser type and version used
2. Operating system of the device
3. Internet service provider
4. IP address of the device (anonymized if necessary)
5. Date and time of access
6. Websites from which the device accesses our website
7. Websites accessed by the device via our website

This data is processed to ensure a smooth connection to the website and to optimize our website and our offers. The aforementioned data is also temporarily stored in our system’s log files. This data is not stored together with any personal data you may have provided, so that it cannot be used to identify a specific person. IP addresses are only stored in anonymized form.

2. Legal basis for data processing

Our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

3. Recipient

This data is also processed by the following recipients: our IT service providers in accordance with their obligation to us.

4. Storage period

In the case of data collection for the provision of the website: immediately after the end of the respective session.

In the case of data storage in log files: after seven days at the latest.

Cookies and implemented technologies

We use cookies and third-party technologies on our website. For more information about cookies and how to manage them, please click here.
You can change your cookie settings here: Change settings

Contacting us

1. Scope and purpose of data processing

We offer you various options (telephone, contact forms, email) for getting in touch with us. The data you provide, enter, or send by email will be processed and stored. In the case of digital data transmission, additional information such as your IP address and the date and time of your request will also be stored. We require this information in order to process your request. Your data will not be passed on to third parties without your consent. The data collected in this way will also not be compared with data that may be collected by other components of our website.

The provision of your personal data is voluntary. However, without this information, we are unable to provide you with a contact option via email or form.

2. Legal basis for data processing

Your consent pursuant to Art. 6 (1) (a) GDPR or the fulfillment of the contract/implementation of pre-contractual measures pursuant to Art. 6 (1) (b) GDPR.

3. Recipient

The data is also processed by the following recipients: our IT service providers in accordance with their obligation to us.

4. Storage period

• Until the purpose is achieved
• 12 months for requests with long-term validity
• 7 years for matters subject to tax law retention requirements

Newsletter

1. Scope and purpose of data processing

On our website, we offer you the opportunity to subscribe to our newsletter. With this newsletter, we provide regular updates about our services, events, and news. To receive our newsletter, you need a valid email address. We use the double opt-in procedure for this. First, a confirmation email is sent to the email address you provided, asking you to confirm your subscription. Your registration will only become effective once you click on the activation link contained in the confirmation email. When you register for our newsletter, we will store your name, email address, IP address, and the date and time of your registration. The data collected in this way will be used exclusively for the purpose of sending you our newsletter. Your data will only be passed on to our processor listed below for the purpose of processing the newsletter dispatch. No further transfer to third parties will take place. The data collected in this way will also not be compared with data that may be collected by other components of our website.

Your consent will be obtained for the processing of the data during the registration process and reference will be made to this privacy policy.

Our newsletters contain web beacons that are retrieved when the newsletter is opened. The following data is processed during this retrieval:

1. Browser type and version used
2. Operating system of the end device
3. Internet service provider
4. IP address of the end device (anonymized if necessary)
5. Date and time of access

In addition, links clicked in the newsletter are processed via click tracking URLs, including the time and frequency of the clicks.

This data is processed for the technical improvement of our service and for statistical evaluations (delivery rate, opening rate, click rate, unsubscribe rate, access times). This data is not stored together with any personal data you may have provided, so that it does not allow any conclusions to be drawn about a specific person. IP addresses are only stored in anonymized form.

If you make bookings on our website and provide your email address, we may use this address to send you a newsletter in accordance with Section 174 (4) TKG 2021. In such cases, the newsletter will only be used to send direct advertising for our own similar goods or services. In connection with data processing for the purpose of sending newsletters, no data will be passed on to third parties. The data will be used exclusively for sending the newsletter.

2. Legal basis for data processing

Your consent pursuant to Art. 6 (1) (a) GDPR or § 174 (4) TKG 2021.

3. Recipient

The data is also processed by the following recipients: our IT service providers in accordance with their obligation to us.

4. Storage period

Until consent is revoked.

Hotel booking, voucher purchase and withdrawal

1. Scope and purpose of data processing

You have the option of booking rooms and/or purchasing vouchers on our website. We use the booking products OnePageBooking and VoucherBooking from HotelNetSolutions GmbH for this purpose. During the booking/voucher purchase process, the data provided in the booking or order form will be processed.

The personal data you provide will be used exclusively for processing the booking or order.

If you exercise your statutory right of withdrawal (which only applies to the online purchase of vouchers) and use our online withdrawal form for this purpose, we will process the data you enter there (e.g., name, order number, contact details) as well as the date and time of receipt exclusively for the purpose of processing and unwinding your contract.

The provision of your personal data is voluntary. However, it is not possible to make hotel bookings, order vouchers via our website or use our online withdrawal form without providing this data.

2. Legal basis for data processing

Contract fulfillment/implementation of pre-contractual measures in accordance with Art. 6 (1) (b) GDPR or fulfillment of a legal obligation in accordance with Art. 6 (1) (c) GDPR.

3. Recipient

The data is also processed by the following recipients: our IT service providers in accordance with our contract, processing banks/payment service providers, and, in the case of vouchers sent by post, shipping service providers.

4. Storage period

If the booking/order is canceled: immediately after the end of the session.

If the booking, order or withdrawal is completed: until the expiry of the tax retention period (7 years).

Job applications

1. Scope and purpose of data processing

We offer you various options for applying for a position at Hotel Eden Seefeld. As part of the application process, we process the data that you provide to us in the course of this process.

The provision of your personal data is voluntary. However, it is not possible to apply for a job via our website without providing this data.

2. Legal basis

Contract fulfillment/implementation of pre-contractual measures in accordance with Art. 6 (1) (b) GDPR or our legitimate interest in centralized applicant management in accordance with Art. 6 (1) (f) GDPR.

3. Recipient

The data is also processed by the following recipients: our IT service providers in accordance with our contract, List Beteiligungsges.m.b.H.

4. Storage period

For applicants who are not hired: no later than 6 months after completion of the application process.

Video surveillance

1. Scope and purpose of data processing

Encrypted video surveillance is used in our hotel. In accordance with legal requirements, the video surveillance is indicated prior to entering the hotel or the respective monitored areas.

The data is processed for the protection of property, protection against damage, containment, prevention and prosecution of criminal activities, as well as for the exercise of domiciliary rights. The provision of the data is voluntary. However, entering our hotel or monitored areas without providing the data, i.e., without being recorded by video surveillance, is not possible.

2. Legal basis for data processing

Safeguarding the legitimate interests referred to in point 1. (Art. 6 (1) (f) GDPR; Section 12 para. 2 no. 4 in conjunction with Section 3 para. 2 of the Data Protection Act, Section 80 of the Code of Criminal Procedure, Sections 353 et seq. of the Austrian Civil Code).

3. (Categories of) Recipients of personal data

Where necessary, the data will be transferred to the following recipients:

­ IT service providers acting as our data processors in accordance with their contractual obligations to us,

­ courts for the preservation of evidence in civil matters,

­ Insurance companies for the settlement of insurance claims; solicitors exclusively for the enforcement or defense of legal claims,

­ Authorities and courts for the preservation of evidence in criminal matters,

­ Security authorities for security police purposes,

­ Other authorities within the scope of their remit.

4. Storage period or criteria for the storage period

72 hours (Section 13 para. 3 Data Protection Act), unless a longer retention period is necessary for specific reasons to fulfil the purposes of data protection and the preservation of evidence.

Processing of health data

1. Scope and purpose of data processing

If you voluntarily provide us with information regarding your health status (such as food allergies, intolerances, physical impairments, or pregnancies) during your reservation, via contact forms, by email, at check-in, or prior to spa treatments, we will collect and process this sensitive data. These special categories of personal data are processed exclusively for the purpose of tailoring our services (in particular food preparation in the kitchen or the provision of treatments in the spa area) to your specific health needs and to ensure a safe stay for you. The provision of this data is absolutely voluntary. However, please note that without this information, we unfortunately cannot take your specific health needs into account when providing our services.

2. Legal basis for data processing

Your explicit consent pursuant to Art. 9 Para. 2 lit. a GDPR. You may withdraw this consent informally (e.g., via email) at any time with effect for the future.

3. Recipients

The data is treated strictly confidentially. Internally, this information is only shared on a “need-to-know” basis with those employees (e.g., head chef, restaurant management, wellness and spa personnel) who absolutely require it for the safe provision of services. Externally, the data is processed by our IT service providers (e.g., hotel software) acting in accordance with our instructions as data processors.

4. Storage period

Until consent is withdrawn, but no later than the expiry of the statutory limitation periods for potential claims for damages (usually 3 years after your departure).

Rights of data subjects – access, rectification, transfer, and erasure

In accordance with current data protection regulations, you have the right to obtain information about your personal data processed by us.

In addition, you have the right to correct inaccurate personal data concerning you and to complete incomplete personal data.

You are entitled to request the deletion of personal data concerning you. We will delete your personal data if the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, if consent required for processing is revoked, if the personal data has been processed unlawfully, or if the deletion of the personal data is necessary to fulfill a legal obligation. Data that we need to assert, exercise, or defend legal claims, as well as data that we are required to retain due to mandatory provisions, are excluded from deletion.

You may revoke any consent you have given to the collection and storage of your personal data at any time, in whole or in part, with effect for the future. In the event of your revocation, certain services may no longer be provided or may only be provided to a limited extent.

You may also have the right to restrict the processing of your data and the right to receive the personal data you have provided in a structured, commonly used, and machine-readable format.

For any explanations or inquiries regarding the above points of the privacy policy, please contact the above-mentioned controller in writing or send an email to: [email protected].

To protect your security and privacy, we reserve the right to verify your identity before responding to your request or taking any of the above measures.

If you believe that the processing of your personal data violates data protection law or that your data protection rights have been violated in any other way, you have the right to lodge a complaint with the data protection authority.

Complaints should be addressed to:

Austrian Data Protection Authority | Barichgasse 40-42 | 1030 Vienna | Telephone: +43 1 52 152-0 | Email: [email protected]

SSL encryption

Our website uses SSL encryption to securely transmit your data (e.g., contact form). You can recognize an encrypted connection by the string “https://” and the lock icon in the address bar of your browser.

Changes to this privacy policy

We reserve the right to amend this privacy policy as necessary, in particular in the event of changes to data protection requirements. Subject to any mandatory statutory provisions to the contrary, the amendment shall take effect upon publication on our website.