Privacy
The protection of your personal data is very important to us. We therefore process your data exclusively on the basis of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). This notice explains which data we process when you visit our website or contact us, and what rights you have in this regard.
Controller
The controller responsible for the processing of personal data on this website is:
Klaus im Weinviertel GmbH
Julius Bittner Platz 4
A-2120 Wolkersdorf im Weinviertel, Austria
E-mail: info@hotel-klaus.at
Phone: +43 2245 2224
Server log files
When you access our website, your browser automatically transmits technical information to our web server. We log in particular the date and time of the request, the URL requested, the amount of data transferred, the browser and operating system used, the referrer URL and the IP address. These data are needed to operate the site and to maintain its security and stability (Art. 6(1)(f) GDPR – legitimate interest in the stable operation of the website). Log files are automatically deleted after 14 days at the latest, unless they are exceptionally required for longer in order to investigate a specific security incident.
Contacting us by e-mail or phone
If you contact us by e-mail or telephone, we process the data you provide (name, contact details, content of your message) in order to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where a contractual relationship is being prepared or already exists, and Art. 6(1)(f) GDPR (our legitimate interest in communicating with guests and prospective guests) in all other cases. The data are retained for as long as necessary to handle your enquiry, at most until any applicable statutory retention periods expire (in particular tax-law retention periods for actual bookings).
Enquiry and contact forms
Our website offers several forms (general contact, room enquiry, offer enquiry, conference enquiry). The data you enter in these forms – typically salutation, first and last name, address, phone number, e-mail address, intended stay period and your message – are transmitted to our mail server via an encrypted connection (HTTPS) and forwarded to us by e-mail. The data are used solely to process your specific enquiry and are not passed on to third parties. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract).
To protect against automated spam submissions we use an invisible form field ("honeypot") and verify on the server how quickly a form is submitted. No additional personal data are collected in this process; we merely detect whether a submission plausibly originates from a human. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).
Online booking (Casablanca IBE)
For direct online room bookings, on the page hotel-klaus.at/en/booking we embed the Internet Booking Engine (IBE) of Casablanca hotelsoftware GmbH, Rennweg 31, 6020 Innsbruck, Austria. When you access that page, scripts and data are loaded from Casablanca's servers; this involves transmitting your IP address to Casablanca. Any data you enter during the booking process (stay dates, personal details, payment data) are transmitted directly to Casablanca for contract processing. The legal basis is Art. 6(1)(b) GDPR. For further details please see the Casablanca privacy policy at casablanca.at/datenschutz.
Audience measurement with Umami
For statistical analysis of the traffic on our website we use Umami, a privacy-friendly alternative to Google Analytics (provider: Umami Software, Inc.). Umami does not use cookies, does not collect any persistent identifiers and does not build user profiles. IP addresses are not stored, only processed in hashed form and discarded after aggregation. We collect only aggregated information such as pages visited, referrer, approximate country (derived from the IP at the time of the visit) and browser / operating system categories. The legal basis is our legitimate interest in analysing and improving our website based on actual usage (Art. 6(1)(f) GDPR). Because Umami is cookieless and stores no personally identifiable data, we consider that no user consent is required. Further information: umami.is/privacy.
Google Maps
On our location and arrival pages we offer map material from "Google Maps" (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is not loaded automatically: when you first open the page you only see a placeholder; only when you actively click "Show map" is the iFrame loaded from Google and your IP address transmitted to Google – if you are simultaneously signed in to a Google account, Google can link the request to your account. The legal basis for this transfer is your consent, given by clicking the button (Art. 6(1)(a) GDPR). Details: policies.google.com/privacy.
Cookies
Our website does not set any cookies of its own. Strictly necessary cookies may be set as part of the online booking process (Casablanca) to the extent required to handle the booking; these are processed exclusively on the basis of Art. 6(1)(b) GDPR and are unrelated to audience measurement or marketing. You can prevent the storage of cookies at any time by configuring your browser accordingly, or delete cookies that have already been stored; if you disable cookies entirely, online booking may no longer work.
Retention period
We retain personal data only for as long as is necessary for the respective purpose. Enquiries not followed by an actual booking are generally deleted after at most 12 months. Where a booking has been made, statutory retention obligations under Austrian tax and commercial law apply (generally 7 years).
Your rights
Under the GDPR you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing based on legitimate interests (Art. 21 GDPR)
- Right to withdraw consent at any time (Art. 7(3) GDPR), without affecting the lawfulness of processing carried out prior to withdrawal
An informal message to the contact details above is sufficient to exercise these rights.
Right to lodge a complaint
If you believe that the processing of your personal data infringes data protection law or that your data protection rights have otherwise been violated, you have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at.
Status and changes to this privacy notice
This privacy notice is currently in force. Further development of our website or changes to legal requirements may make it necessary to amend this notice. The latest version is always available at this URL.
