Apartment Aemilia-Paulina Marie-Christin Neuner Bödele 16 6165 Telfes im Stubai
We process the following personal data when you enter into a contract with us.
Master data: Family and first name, full address, all contact information (e.g., email address, telephone number), information about the type and content of our contractual relationship.
Other personal data, which you or third parties provide to us with your consent, or which we otherwise lawfully obtain during the initiation of the contract, during the contractual relationship (e.g., for the issuance of a guest card), or to fulfill legal obligations. Date of birth or age, marital status, gender, occupation, ID data, bank details, authorization to sign or represent, contract obligations, cancellation/withdrawal deadlines, or other information about you that you have provided to us.
Use of data processors The protection of your data is important to us. Even if we use data processors such as Feratel Media GmbH – guest directory according to § 19 Austrian Registration Act, and Google Ireland Limited – for calendar and email services (Google Calendar, Gmail) which are used to manage bookings and inquiries, we ensure that data processing takes place within the European Union.
1. Registration data
1.1. Registration obligation Under Austrian registration law, you are obliged to register with us using the data specified in §§ 5 and 10 of the Austrian Registration Act. This includes the following data: Name, date of birth, gender, nationality, country of origin, address including postal code, and – for foreign guests – type, number, place of issue and issuing authority of a travel document, as well as the dates of arrival and departure.
1.2. Guest directory Due to our legal obligations under § 19 of the Austrian Registration Act Implementation Regulation, we are required to keep this data in a guest directory and store it for seven (7) years, unless it is processed for other purposes outlined in this privacy policy. The guest directory is kept electronically, whereby we forward the data to an IT processor. The data is stored locally, and no transfer to third countries takes place.
1.3. Transfer of data The categories of data “arrival” and “departure” linked with country of origin will be forwarded to the municipality in which our accommodation business is located, in accordance with § 6 Austrian Tourism Statistics Regulation. The respective tourism association TVB Stubai, of which we are a member, and/or the municipality will also receive aggregated data on the total number of overnight stays and the number of persons liable to pay the local residence tax. This is based on § 9 of the Tyrolean Residence Tax Act.
1.4. Legal basis for processing The processing activities described under points 1.1 to 1.3 are based on Art. 6 (1) (c) GDPR (compliance with a legal obligation).
1.5. Additional transfer of data to TVB/municipality In addition, we transfer your postal code and year of birth (in pseudonymized or anonymized form) for statistical purposes, to enable the tourism association and our municipality to create and evaluate origin and age statistics. This transfer is based on Art. 6 (1) (e) GDPR (task carried out in the public interest) and Art. 6 (1) (f) GDPR (legitimate interests). You may object to this at any time for reasons relating to your particular situation (Art. 21 (1) GDPR).
2. Guest card
2.1. General information You have the option to obtain a guest card. The guest card grants you discounts and/or services at various businesses in the region (e.g., reduced admission fees). The guest card is valid for the duration of your stay with us.
2.2. Issuance of the guest card The guest card is issued by the accommodation provider only at your request. Depending on the guest card system used by the tourism association and/or accommodation provider, it may be issued as: an electronically generated guest card a manually created guest card or as a duplicate of the registration form
2.3. Processed personal data For both electronically generated and manually created guest cards, the following personal data, derived from the registration data (see section 1), is processed: First name, last name, date of birth, duration of stay (arrival/departure), country of origin, postal code. If the guest card is issued in the form of a “registration form,” it contains the information according to § 5 in conjunction with § 9 of the Austrian Registration Act. In this case, no electronic processing takes place for the purpose of the guest card. When the guest card is used, the following additional personal data is processed: usage cycle of the card, services used, bookings, transaction logs, billing data, references to registration data and the accommodation provider. This data is necessary to verify identity and the validity of the guest card at the respective service provider, and to enable billing of discounts between service providers, the tourism association, and, where applicable, accommodation providers.
2.4. Legal basis for processing The processing of data for the purposes of the guest card is based either on your consent (Art. 6 (1) (a) GDPR) or, if the guest card is part of the services provided under the accommodation contract, on contract fulfillment (Art. 6 (1) (b) GDPR). You may withdraw your consent at any time, either verbally from the accommodation provider or in writing to info@apartmentaemilia-paulina.com.
2.5. Operation of the guest card system The guest card system is operated by the local tourism association (TVB). Local accommodation providers and local companies (“service providers”) are also involved. Data processed for the guest card will be deleted after 48 months.
2.6. Recipients of data The local tourism association (TVB) receives the processed data for the purpose of billing with service providers and/or accommodation providers. Service providers offering discounts based on the guest card also receive the data, to the extent that you claim guest card services with them. To claim discounts, you must present your guest card to the service provider. The service provider checks its validity, usually by scanning the barcode and forwarding it to our IT processor. This also involves the transmission of personal data, in particular identity data (for identity and date of birth verification). If the guest card is issued in the form of a registration form, validity is checked using the duplicate of the registration form.
3. Other processing of your data
We only process the data that is strictly necessary for contract conclusion and performance. If you have given us your consent, we may also process your data in order to send you information about our services until you revoke your consent. We may use the following communication channels if you have provided them to us: telephone, email, SMS, post, or social media.
4. Data deletion
Your master data and other personal data will be deleted once it is no longer required for the purposes for which it was stored – usually after seven (7) years – or if storage becomes unlawful for legal reasons. Instead of deletion, anonymization may be carried out, meaning that any personal reference is irreversibly removed.
5. Cookies
Our website uses so-called cookies. These are small text files that are stored on your device via your browser. They cause no harm. We use cookies to make our offer more user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit. If you do not wish this, you can set your browser to notify you about cookies and allow them only in individual cases. Disabling cookies may limit the functionality of our website.
6. Web analytics
Our website uses the following web analytics services: WordPress.com Stats / Jetpack Stats A service of Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. These services allow us to statistically analyze the use of our website (e.g., number of visitors, page views, visitor origin). The collected data is generally anonymized and does not allow direct conclusions about individual persons. However, data transfer to servers in the USA cannot be ruled out. Automattic relies on EU Standard Contractual Clauses to ensure an adequate level of data protection. Google Analytics A service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to collect information about the use of our website (e.g., pages visited, length of stay, device used). The generated information is usually transmitted to and stored on servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data transfer to the USA cannot be ruled out. Google relies on EU Standard Contractual Clauses for data protection. We have entered into a data processing agreement with Google. You can prevent data collection by configuring your browser to block cookies.
7. Newsletter
You may subscribe to our newsletter through our website. For this, we require your email address and confirmation that you agree to receive the newsletter. To tailor the content, we may also process voluntarily provided information such as interests, date of birth, and postal code. Once you have registered, you will receive a confirmation email with a link to complete your subscription. You may unsubscribe from the newsletter at any time by sending your cancellation to info@apartmentaemilia-paulina.com. Your related data will then be deleted immediately.
8. Social media plug-ins
Our website uses embedded social media plug-ins (interfaces to social networks). When you visit the website, a connection is automatically established with the respective social network and data is transmitted (IP address, website visit, etc.). This transmission occurs without our involvement and is beyond our control. You can prevent this transmission by logging out of the respective social networks before visiting our website. Only when logged in can the social network associate the data with your profile. The automatically transmitted data is used exclusively by the operators of the social networks. For more details on data collection and how to adjust privacy settings, please refer to the respective social network’s privacy policy. The embedded social networks on our website are: Facebook ("Like") Facebook Inc., 1601 S California Ave, Palo Alto, CA, 94304, USA More information: https://de-de.facebook.com/policy.php Google ("+1") Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA More information: https://policies.google.com/terms?hl=en Instagram Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA More information: https://help.instagram.com/155833707900388
9. Your rights regarding data processing
9.1. Right of access You have the right to know whether and to what extent we process your personal data. Contact / Controller: Marie-Christin Neuner info@apartmentaemilia-paulina.com
9.2. Your rights You have the right to access, rectify, erase, restrict processing, data portability, withdraw consent, and object. If you believe that the processing of your data violates data protection law or that your rights under data protection law have otherwise been infringed, you may lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority.
9.3. Right to complain If you believe that the processing of your personal data violates Austrian or European data protection law, please contact us so that we can resolve any concerns. Of course, you also have the right to file a complaint with the Austrian Data Protection Authority or any supervisory authority within the EU.
10. Identity verification
To protect your rights and privacy, we are entitled to request proof of identity in case of doubt.
11. Unfounded or excessive requests
If you assert any of the above rights in an obviously unfounded or excessive manner, we are entitled to charge a reasonable processing fee or refuse to act on your request.
12. Legal obligations
Within the scope of our obligations to cooperate, we may be required to disclose data in accordance with legal requirements (e.g., Austrian Federal Fiscal Code, Registration Act, Code of Civil Procedure, Code of Criminal Procedure).
13. Validity This privacy policy is effective as of 25 May 2018 and replaces all previous privacy provisions.