Source: https://www.zeitgeist-vienna.com/it/datenschutz/
Timestamp: 2019-04-19 18:36:38+00:00

Document:
The security and protection of your personal data is an issue of great concern to us. Therefore, we want to provide you with a list of all the information on how we handle and save your data whenever you visit our website.
Collection of your personal data is needed for you to be able to use all the functions and services of our website. Data processing and storage will only be performed according to legal guidelines and specifications of the General Data Protection Regulation (GDPR) and the Telecommunications Act (TKG) 2003.
In the following you will be provided with an overview of which of your personal data we collect, why this is required and your rights concerning your personal data.
All employees of the Zeitgeist Vienna hotel are bound to secrecy and proper handling of your data as well as to correct data input into our data processing systems.
You have the right to information, rectification, deletion, restriction, transmission, revocation and objection of your personal data that are saved or processed on our servers at any time.
Website graphic artist & designer: DEVICE consult | brand | design, Hermann Redlingshofer MDes.
1. Your data will be processed electronically for the purpose of taking pre-contractual measures and for contractual performance, also for inquiries and reservations (by phone, email, in person or via website form). The processing is performed according to legal guidelines. When providing your personal data you automatically give explicit consent – in case of the conclusion of a possible transaction – to saving and processing of your personal data and the correctness of the latter. After contract formation all data concerned with the contractual relationship will be saved until the end of the legal obligation to retain data for tax purposes, which is at least 7 years. These data include the following information: first and second name, address and if specified the buyer’s credit card number. In addition, we will also save the following data for the purpose of contract formation: date of birth, voluntary information on food intolerance or allergies, preferences, hobbies, memberships. The data you provide are necessary to form a contract as well as for taking pre-contractual measures and will be saved in our hotel booking system (Protel).
Data processing is performed on the basis of legal regulations of § 96 section 3 TKG as well as article 6 section 1 lit a and/or lit b of the GDPR.
3. We are using AVVIO’s booking engine with the following AVVIO data protection directives.
4. In order to comply with Registration Act your data will be transmitted to the authority in charge, which is the municipal 10th district office, in Laxenburger Straße 43-4, 1100 Vienna. For payment transactions of the agreed invoice amount, the bank institution or payment service provider will be provided with the credit card details. Our tax advisor agency (P W B Wirtschaftsprüfungs- und Steuerberatungs GmbH, Wolfholzgasse 1/3, 2345 Brunn am Gebirge) will also be provided with the credit card details for complying with the fiscal obligations.
5. We use the services of Hotelchamp, a professional provider of online software and services, to help us improve our online booking process and to help us personalize and improve our interaction with you. In providing this service to us and for you, Hotelchamp may process some of your personal data on our behalf. Both Hotelchamp and ourselves value and respect your privacy, and we process and protect your personal data in accordance with all applicable laws and regulations. We have concluded a ‘data processing agreement’ with Hotelchamp to make specific arrangements about the processing and protection of your personal data.
1. Collection is done only for support purposes and as a security measure.
2. Processing: access to web content will be traced in log files (access.log).
The following personal data will be saved: IP-address, host name, time of access.
3. Transfer: log files will not be given to third parties.
4. Deletion: access logs (access.logs) will be deleted after 8 weeks.
On our website you can enter personal data via a contact form. If you use this form we will collect and save the data you enter in the input mask (first and second name, email address, your message). A passing to third parties does not occur.
Legal basis for the processing will be art. 6 sections. 1 lit. a of the GDPR in the case of a given consent. Should your inquiry imply the preparation to a contract formation, art. 6 section 1 lit. b of the GDPR will be the additional legal basis. We only use these data to process and respond to you inquiry.
You can subscribe to a newsletter on our website. Should you subscribe, we will process and save the data you entered into the input mask (first name, second name, email address). These data will be transmitted to our email marketing software Revinate (for details about Revinate please refer to menu item “use of personal data”). You can only subscribe to our newsletter by giving your consent. Legal basis for the processing is art. 6 section1 lit. a of the GDPR. We only used the data for sending newsletters and emails.
This is technically necessary so as to display our website. We additionally use these data to ensure safety and stability of the site. Legal basis for the data collection is art. 6 section1 lit. of the GDPR.
Most web browsers accept cookies automatically. Saved cookies can be deleted in the settings section of your web browser. You can also adjust your web browser settings so that it will not save any cookies. However, the availability of all our web features might not be given.
We use Google Analytics in order to analyse and improve the use of our website.
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
In case of an anonymous IP activation on this website, the IP address of Google users within the member state of the European Union or any other contracting States to the Agreement on the European Economic Area will be shortened beforehand. The full IP address will be transferred to a server in the US and then shortened only in rare cases. On behalf of the website operator, Google will use this information for the purpose of evaluating your use of the website, for compiling reports on website activity for website operators and providing other services relating to website activity and Internet usage. Legal basis for data processing by means of Google Analytics is art. 6 section 1 lit. of the GDPR. The IP address generated by your browser in the framework of Google Anayltics will not be merged with other data collected by Google.
We use Google Analytics with the “_anonymizeIp()” extension. That means the IP address will be shortened (so called IP masking). The clear identification of the website visitor is therewith impossible. Google takes part in the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. This means that there is also a proper level of data safety in the exceptional cases when Google transmits data to the US.
We use Google Adwords to display advertisement on Google websites to you and to third parties. By means of the conversion tracking we are able to detect the success of single advertising measures. The aim of this is to display ads that will be of interest for you and to make our website more interesting for you. Legal basis for data processing is art. 6 section 1 lit. of the GDPR.
These cookies allow Google to recognize your Internet browser. Provided a user visits certain sites of an Adwords client website and should the cookie saved on this computer be still valid, both Google and the client are able to see that the users clicked on the ad and was directed to this site. There is a different cookie for each Adwords client. Therefore, cookies cannot be traced via the Adwords client’s website. We ourselves do not collect or process and personal data of the stated ad measures. Google solely provides us with statistical evaluations. By means of these evaluations we are able to detect the best performance of the ad measures used. We do not get any further data from the ads. What is more, we are not able to identify the user by means of this information.
Google is able to assign the visit to your account. Even if you do not have a Google account or if you are not logged in, there is the possibility for your provider to know and safe your IP address.
Google takes part in the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
On our website you can make credit card payments. During the transaction payment data is transferred to VISA, MASTERCARD, AMERICAN EXPRESS or DINERS CLUB, in order to process payment. Legal basis for data processing is Art. 6, section.1 lit. of the GDPR. VISA, MASTERCARD, AMERICAN EXPRESS or DINERS CLUB gathers information on the transaction as well as further information concerning the transaction such as booking information, financial information, information on the interaction between the client (you) and VISA, MASTERCARD, AMERICAN EXPRESS or DINERS CLUB, dealer information including payment instrument information, device specific information and location data.
VISA, MASTERCARD, AMERICAN EXPRESS or DINERS CLUB use the data among others for payment processing, for credit assessment as well as monitoring and improvement of their services.
You will find details on data processing as well as processing purposes in the data protection regulations: VISA, MASTERCARD, AMERICAN EXPRESS or DINERS CLUB.

References: § 96
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 Art. 6