Source: https://www.hotelkaiser.at/en/privacy-policy/
Timestamp: 2019-04-18 10:51:27+00:00

Document:
When you visit our website, we collect the data automatically transmitted by your browser (logfiles) to our web server, including the IP address, the URLs of the websites from which you came to our websites, the browser used, the browser language, the operating system used and the interface, the device used to access the services, the date and time of access, the pages accessed and the time you spend on our websites. The legal basis for the processing of this data is our legitimate interest in accordance with Art. 6 (1f) GDPR, which follows from the purposes listed below. We use this information to: facilitate access to the website; continuously improve the website and services and further adapt them to the needs of our users; perform internal quality controls; detect, correct and prevent errors, malfunctions and possible misuse. The data is stored for a period of one year and then automatically deleted.
Cookies are small text files that are stored by your browser on your computer or mobile device. They enable the recognition of your computer or device, if necessary, across different websites. The cookies do not contain any personal information. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our affiliates to recognize your browser on your next visit (persistent cookies).
Web beacons are small graphics files (“pixels”), integrated into our website. They can be used to record user behaviour. Similar procedures include Flash cookies, HTML5 cookies or other local (browser or device) storage methods in which ‒ similar to cookies ‒ data can be stored in your browser or on your device in order to recognize your browser or device on the next visit.
If you contact us through the available contact options, some of your personal data (e.g. name, address, contact and communication data like telephone number and email address) will be collected, so that we can process and respond to your request as well as follow up on any other questions you might have. Data processing takes place in accordance with Art. 6 (1b) GDPR. We only store personal data that we process as part of a general contact request by email or contact form as long as necessary for the respective correspondence ‒ usually a period of one year after answering your request.
Personal data that we collect related to a room reservation will only be stored for as long as is necessary for the execution of the contract and any subsequent contract-related correspondence (usually one year) or in the case of commercial and/or tax-relevant documents containing personal data, as long as the statutory periods of the Commercial Code and the Tax Code provide for the retention of these documents (usually 6 to 10 years). Legal basis for the processing of personal data in connection with a room reservation: The processing of personal data is necessary to fulfil the relevant contract in connection with a room reservation (Art. 6 (1b) GDPR). In addition, we process booking data in accordance with Art. 6 (1f) GDPR on the basis of our legitimate interests for fraud prevention, the enforcement of our legal claims, accounting purposes and risk management, as well as pursuant to Art. 6 (1c) GDPR for the fulfilment of legal obligations, e.g. to comply with commercial and tax law retention obligations or to fulfil obligations to publish data on the basis of a final court order or official order.
If you have subscribed to our newsletter, you will receive regular newsletter and marketing emails related to offers and news from our company. The legal basis in this case is your consent in accordance with Art. 6 (1a) GDPR. In addition, we will use your email address (provided during a booking) for the purpose of direct mailing for similar offers, unless you have already objected to this. The legal basis in this case is our legitimate interest in direct advertising according to Art. 6 (1f) GDPR.
You can revoke your consent to receive such emails at any time and free of charge or object to the receipt of such emails, e.g. via the unsubscribe link in our emails. Your email address will be saved for the newsletter as long as you do not object.
This website uses Google Analytics, a web analytics service provided by Google LLC (in the following: Google). The legal basis is our legitimate interest in the analysis and evaluation of the use of our website as per Art. 6 (1f) GDPR.
Google Analytics uses so-called “cookies”; these are text files that are stored on your computer and that enable the analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, since IP anonymisation is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
An opt-out cookie will be installed on your device. This will prevent data collection by Google Analytics on this website and for this browser in the future, as long as the cookie remains installed in your browser.
Google automatically deletes personal information associated with cookies, user ID or promotional ID (e.g. DoubleClick cookies, Android Advertising ID, Apple’s promotional ID) after 14 months.
Google also processes your personal information in the US and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
For the purpose of the needs-based design and optimization of our pages, we use external, embedded fonts from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA (“Google”) based on Art. 6 (1f) GDPR. In doing so, your Internet browser automatically establishes a connection to Google’s servers to transfer the information listed under section Data collection. If you have an account with Google and you are logged in to Google, your data may be associated with your account by Google. We have no control over this data transfer and the further processing of data by Google.
For the purpose of the needs-based design of our website, we use the “Google Maps” component provided by Google in accordance with Art. 6 (1f) GDPR.
Each time Google Maps is accessed, Google sets a cookie to process user settings and data when viewing the page that has the Google Maps component integrated. This cookie is usually not deleted by closing the browser, but will expire after a certain amount of time unless it is manually deleted by you.
When you visit the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the information listed in Data collection is transferred to Google by your browser. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you are logged in to Google, your data will be assigned directly to your account. If you do not wish the information to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or needs-based website design. Such an evaluation takes place in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about your activities on our website. You have a right to object to the formation of these user profiles; you must forward this objection directly to Google.
We use embedded YouTube videos in enhanced privacy mode. This means that if you do not play the videos, you will not transfer any data about you as a user to YouTube. The data transfer only takes place when you watch the videos. We have no influence on this data transfer.
When you play the video, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned above under “server log files” are transmitted. This happens regardless of whether YouTube provides a user account that you are logged in to, or if there is no user account. When you are logged in to Google, your data will be assigned directly to your account. If you do not wish the information to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users about your activities on our website. You have a right to object to the creation of these user profiles; you must forward this objection directly to YouTube.
For more information about data collection: http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo.
Through the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our site and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 (1f) GDPR.
By activating the plug-in, personal data will be transmitted by you to the respective plug-in provider and stored there (with American providers in the USA).
If you are registered with and logged in to the respective social media provider at this time, the provider can assign the visit to our website and your interaction with the social media element (e.g. clicking the “Like” button) to your user profile (e.g. to your Facebook account).
We have no control over the data collected or the processing of that data, nor are we aware of the full extent of the data collection, the purpose of the processing or the retention periods. We also have no information on the deletion of the data collected by the social media provider. For more information on the purpose and scope of the data collection and its processing by the social media provider, please refer to the privacy policies of that provider (see links above). You will also find further information about your rights and settings options for the protection of your privacy.
The servers of social media services are located in the US and other countries outside the European Union. The data can therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to a data protection law which generally does not protect personal data to the same extent as is the case in the Member States of the European Union.
We use external advertising partners to draw attention to our site with the help of advertising material on external websites. We also use marketing tools to determine how successful the individual advertising measures are (“conversion tracking”).
We intend to show you advertisements that are of interest to you, to make our website more interesting to you and to achieve a fair calculation of advertising costs. The legal basis is Art. 6 (1f) GDPR.
To this end, our advertising partners set cookies and web beacons (see above), by means of which certain parameters can be measured to determine success, e.g. the display of ads or clicks by the users. These cookies are not intended to identify you personally. As long as the cookie is valid, the affiliate will be able to recognize that you have clicked on an ad and reached a specific landing page (e.g. form entry, confirmation page, newsletter signup). The affiliate uses the cookie to generate conversion statistics. These statistics include the number of users who clicked on one of our ads. In addition, it counts how many people have reached a landing page that has been tagged with a “conversion tag” (remarketing tag, see above). However, the statistics do not contain any data that identifies you.
We ourselves do not collect and process any personal data in the aforementioned advertising measures. We receive only statistical evaluations from our advertising partners. Based on these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material and cannot identify the users on the basis of this information.
Due to the conversion tracking tools used, your browser automatically establishes a direct connection with the server of the advertising partners. We have no control over the extent and continued use of data collected through the use of this tool by the advertising partners. By integrating the marketing tools, the advertising partner receives the information that you have accessed the relevant part of our website or have clicked on one of our ads. If you are registered with our advertising partner (e.g. Facebook or Google), the advertising partner can assign the visit to your account. Even if you are not registered or are not logged in, there is a possibility that the provider will collect your IP address and store it.
Our websites use so-called “retargeting tags” to place interest-based advertising on third-party websites. The legal basis is our legitimate interest in implementing advertising measures in accordance with Art. 6 (1f) GDPR.
When you sign up for our newsletter, the information you provide will be used exclusively to send you periodic newsletters and marketing emails and providing advertising and information about our offers. Subscribers may also be notified by email about circumstances relevant to the service or registration (such as changes to the newsletter or technical conditions).
For an effective registration we need a valid email address. In order to verify that an application is actually made by the owner of an email address, we use the “double-opt-in” procedure. For this purpose, we record the registration for the newsletter (data that are entered during the registration in the input mask, such as salutation, first name, name, email), the sending of a confirmation email and the receipt of the requested response. No further data is collected. The data will be used exclusively for newsletter delivery.
The legal basis for data processing is your consent in accordance with Art. 6 (1a) GDPR.
You can revoke your consent to the storage of your personal data and its use for the newsletter email at any time. Each newsletter contains a link to unsubscribe from the emails. In addition, the revocation can be made via the other contact options indicated on the website. Your data will be deleted from our system immediately.
Our website offers you the chance to compete in our contest. The data given in the contest form will be used solely to identify a winner. To do this, we record the completed participation form (data entered in the input mask, such as salutation, first name, name, email, postal address), the delivery of a confirmation email and the receipt of the requested response. No further data is collected. The data will be used exclusively for the duration of the contest and will not be passed on to third parties. After the end of the contest your data will be deleted. The legal basis is Art. 6 (1b) GDPR.
We may use external service providers, especially technical and commercial service providers. These include, in particular, hosting providers, statistics and analysis services, service providers for managing service desk and support data, service providers for the provision of CRM systems, newsletter delivery, voucher ordering, spam and abuse prevention, and IT maintenance and service development service providers. The service providers work exclusively on our behalf and may not process personal data for their own purposes. As part of a booking, we send data to Payment services providers, Financial authorities and Cities/municipalities. The data processing may also effect a transfer of information to data recipients outside the European Union. The data transfer takes place in this respect according to the principles of the so-called Privacy Shield (https://www.privacyshield.gov/welcome) or on the basis of so-called standard contractual clauses of the European Commission (http://ec.europa.eu/justice/data-protection/international-transfers/transfer/index_en.htm).
In addition to the right of revocation of your consent granted to us, you have the right of access to information according to Art. 15 GDPR, the right to rectification according to Art. 16 GDPR, the right to erasure according to Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR, the right to object according to Art. 21 GDPR and the right to data portability according to Art. 20 GDPR.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1f) GDPR (Art. 21 (1) GDPR).
Where we process your personal data based on Art. 6 (1f) GDPR for direct marketing purposes, you have the right to object at any time to such processing without giving a reason (Art. 21 (2) GDPR).
In addition, you have the right to lodge a complaint with a supervisory authority according to Art. 77 GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 21
 Art. 20
 Art. 6
 Art. 6
 Art. 77