Source: http://www.garni-oetztal.at/en/metanavigation/datenschutz.html
Timestamp: 2019-04-20 16:51:39+00:00

Document:
Other personal data you provide or a third party provides with your consent, or data that is otherwise permitted at the time you initiate the agreement, throughout the contractual relationship (e.g., when the guest card is issued), or for the purpose of complying with statutory regulations: Date of birth or age, marital status, gender, profession, identification card details, bank account information, signatory or representative authority, contractual obligation, cancellation deadlines, or other personal information you have provided yourself.
Protecting your data is very important to us. Even if we use a processor e.g., Feratel – guest register in accordance with § 19 of the Austrian Registration Law (MeldeV)), we ensure that the data is processed within the European Union.
According to the Austrian Registration Law, you are required to register with us and provide us with the data specified in § 5 and § 10 of the Austrian Registration Law. This applies to the following data: Name, date of birth, gender, nationality, country of origin, and address with postal code. Foreign guests are also required to provide the type of travel document they are traveling with, its number, place of issue and issuing authority, as well as date of arrival and departure.
Arrival and departure data, together with country of origin, is forwarded in accordance with § 6 of the Regulation on Tourism Statistics (Tourismus-Statistik-Verordnung) to the municipality in which our tourist accommodation establishment is located. Aggregated data about the total number of overnight stays and the names of persons required to pay a local tourist tax are also forwarded to the respective tourism association Ötztal Tourismus to which we belong. This is done in accordance with § 9 of the Tyrolean Regulation on Local Tourist Tax (Tiroler Aufenthaltsabgabegesetz).
2.1 General informationYou can make use of a guest card. A guest card offers discounts and/or services provided by various regional businesses (e.g., discounted admission). The guest card is valid for the duration of your stay with us.
Carbon copy of the registration form.
For both the electronically generated and manually created guest card, the following personal data, which is taken from the registered data (see item 1 above), is processed: First name, last name, date of birth and duration of stay (arrival/departure), country of origin, postal code. If the guest card is issued as a carbon copy of the registration form, it includes information as stipulated in § 5 in conjunction with § 9 of the Austrian Registration Law (see 1.1 Registration data). In this case, the data is not processed electronically for guest card purposes.
The guest card system is managed by the local tourism association. Other parties involved are the local tourist accommodation establishments and local companies (service providers). Data that is processed for guest cards is deleted after forty-eight (48) months.
Data processed for guest card purposes is forwarded to the local tourism association to facilitate the billing of service providers and/or tourist accommodation establishments. Individual service providers, who honor the guest card and offer discounted services, also receive this data when you use services provided by these establishments that are offered through the guest card. To claim discounts, you must present the card containing this data to the service provider. The establishment then checks if the card is (still) valid, usually by scanning the barcode on the guest card and then by transferring the barcode data to our IT processor. At this time, personal data is also transfered to the establishment, in particular, data about your identity (to verify identity and date of birth). If the guest card is a carbon copy of the registration form, the establishment verifies its validity by means of the carbon copy of the registration form.
Your personal data and other personal data are deleted if it is no longer required for compliance with retention laws, typically after seven (7) years, or if saving the data is not permitted according to the law. In lieu of deleting the data, it is also possible to anonymize it, which means that any reference to a person is irrevocably removed.
5.1. Right to information You have the right to know if we are processing your data and to what extent.
You have the fundamental right to information, correction, deletion, limitation, data portability, revocation, and objection. If you believe that the processing of your data violates the Data Protection Law, or if your right to protected data has been violated in any way, you may report this to the regulatory authority. In Austria this is the Data Protection Authority.

References: § 19
 § 5
 § 10
 § 6
 § 9
 § 5
 § 9