Privacy policy

Status as of February 1, 2021

This Privacy Policy applies to all services offered on the websites owned and operated by us (the “Services”). When we refer to “we” or “our”, we are referring to Apartments Hohenberger, Mag. Florian Hohenberger, Mallnitz 117, A-9822 Mallnitz Austria. We are the controller pursuant to Art. 4(7) of the EU General Data Protection Regulation No 2016/679 (hereinafter “GDPR”).

1. basic principles of the data protection policy

In the course of our business, we may collect personal information about you and we recognize and respect the privacy rights relating to and the importance of protecting that information. To demonstrate our deepest commitment and responsibility to protect your personal information, we have created this Privacy Policy. Our management and employees are expected to strictly comply with all regulatory, legal and corporate requirements for the handling and protection of personal data. We have also established internal security standards, accountability protocols and procedures, and preventive measures to protect against unauthorized access, disclosure, alteration or destruction of personal information. As part of our ongoing efforts to monitor and ensure the security of your personal information, we regularly review our personal information management system, including our management’s and employees’ compliance with this Privacy Policy.

2. lawful procurement

We only acquire personal data by reasonable and lawful means and not by deception or other unlawful means. Where personal data is provided to us by third parties, we take appropriate steps to verify that this information is reliable and obtained by reasonable means.

3. processing of personal data / purpose of processing

1. when surfing our website for information purposes

The provider of the website automatically collects and stores information that your browser automatically transmits to us in “server log files”. These are

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server requestIP address of the accessing computer

This data is not combined with data from other sources. The basis for data processing is Art. 6 (1) (f) GDPR, which allows the processing of data on the legitimate interest of the controller. Our legitimate interest is to ensure unhindered and trouble-free access to our websites. Further information on the processing of cookies and third-party tools can be found in section 4 below. The websites and the services we offer are hosted by an external service provider in the EU on our behalf. Your data is stored on protected servers within the EU. Access is only possible for a few specially authorized persons who are involved in the technical, commercial or editorial support of the servers.

2. when booking a stay

When you book a stay, we collect your e-mail address, your first and last name, your date of birth, your gender, your address including zip code and town, telephone number / cell phone number.

The processing of your personal data is necessary to fulfill our contractual obligation towards you (Art. 6 (1) (b) GDPR). The processing is also covered by our legitimate interest in providing the services and improving the user experience and convenience with our services and, if necessary, claims management (Art. 6 (1) (f) GDPR). Your data will be stored until you request deletion.

3. when using our contact form

When you use our contact form, we collect your e-mail address, your name and the content you provide. We will only process your personal data in order to process your request and provide you with the relevant feedback. The personal data is processed to protect our legitimate interest to provide you with the service and to increase customer satisfaction (Art. 6 (1) (f) GDPR). We will delete your personal data as soon as your request has been finally answered.

If you have given your consent, we will send you a newsletter / information at irregular intervals to inform you about news, offers and surveys relating to the platform and other platforms and information services of Apartments Hohenberger or its affiliated companies in the area of social media services. For this we need your e-mail address. You can unsubscribe from the newsletter at any time by clicking on the corresponding link in the e-mail. The legal basis for sending the newsletter is Art. 6 (1) (a) GDPR. If you revoke your consent or rightfully object to the processing, we will delete your personal data – insofar as collected in connection with the newsletter dispatch – immediately.

4. cookies and other technologies

We use cookies with our services. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you use our services. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we immediately become aware of your identity. On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our website. In addition, we also use temporary cookies that are stored on your end device for a certain period of time in order to optimize user-friendliness. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again. On the other hand, we use cookies to statistically record and evaluate the use of our website for you and to optimize our offer. These cookies enable us to automatically recognize when you return to our site that you have already visited us. These cookies are automatically deleted after a certain period of time. The data processed by cookies is required for the above-mentioned purposes in order to protect our legitimate interests and those of third parties (Art. 6 (1) (f) GDPR). Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message is always displayed before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.
We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the related consents. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.
The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consent.
We use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”), to design and continuously optimize our website in line with requirements. In this context, pseudonymized user profiles (containing no personal data) are created and cookies (see above) are used. The information generated by the cookie about your use of this website such as
1. Browser type / version,
2. Operating system used ,
3. Referrer URL (the previously visited page),
4. Host name of the accessing computer (IP address),
5. Time of the server request,
are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be passed on to third parties if this is required by law or if third parties process this data on behalf of the company. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that they cannot be assigned. You can refuse the use of cookies by selecting the appropriate settings in your browser. Please note, however, that you may not be able to use the full functionality of this website. You can also disable the collection of data generated by the cookie and the use of this website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on ( https://tools.google.com/dlpage/gaoptout?hl=de ). As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie is set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found in the Google Analytics help section ( https://support.google.com/analytics/answer/6004245?hl=en ).
We measure the reach of our website using Matomo, an open source tool that we operate on our own server. A cookie may be placed on the user’s device to track activities and recognize recurring visits, for example. The user’s IP address is automatically truncated so that it is no longer possible to identify individual persons. Among other things, the approximate geographical location, end device, screen resolution, browser and pages visited, including the length of stay, are evaluated. Insofar as we obtain the user’s consent, the processing of data is carried out on the legal basis of Art. 6 para. 1 subpara. 1 letter a) GDPR. Otherwise, it is based on Art. 6 para. 1 subpara. 1 letter f) GDPR. Our legitimate interest lies in the optimization of our website, the improvement of our offers and online marketing.
We use DoubleClick, a remarketing service from Google. The service enables users who have already visited our websites and online services and are interested in the offer to be addressed again through targeted advertising on the pages of the Google Partner Network. Advertising is inserted through the use of cookies. Cookies can be used to analyze user behavior when visiting the website and used for targeted product recommendations and interest-based advertising. If you do not wish to receive interest-based advertising, you can deactivate the use of cookies by Google for these purposes at https://www.google.de/settings/ads/onweb#display_optout. Alternatively, you can disable the use of cookies by third parties by visiting the Network Advertising Initiative opt-out page: http://optout.networkadvertising.org. Information about your use of this website is generally transmitted to a Google server in the USA and stored there.
This website uses Google Tag Manager.Google Tag Manager is a solution operated by Google that allows marketed website tags to be managed via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not register any personal data. The tool causes other tags to be activated, which in turn may register data under certain circumstances. Google Tag Manager does not access this information. If recording has been deactivated at domain or cookie level, this setting remains in place for all tracking tags implemented with Google Tag Manager.
This website uses Google AdSense. This is a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for the integration of advertisements. Google AdSense uses cookies. These are files that Google can store on your PC to analyze the data of your use of our website. Google AdSense also uses web beacons, invisible graphics that enable Google to analyze clicks on this website, traffic on this website and similar information. The information obtained via cookies and web beacons, your IP address and the delivery of advertising formats are transmitted to a Google server located in the USA and stored there. Google may pass this collected information on to third parties if this is required by law or if Google commissions third parties to process the data. However, Google will merge your IP address with the other stored data. You can prevent the aforementioned cookies from being stored on your PC by making the appropriate settings in your Internet browser. However, this may mean that you will no longer be able to use the content of this website to the same extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
We use the OpenStreetMap (OSM) map service.
We integrate the map material from OpenStreetMap on the server of the OpenStreetMap Foundation, St John’s Innovation Center, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The United Kingdom is considered a safe third country under data protection law. This means that Great Britain has a level of data protection that corresponds to the level of data protection in the European Union. When using the OpenStreetMap maps, a connection is established to the servers of the OpenStreetMap Foundation. Among other things, your IP address and other information about your behavior on this website may be forwarded to the OSMF. For this purpose, OpenStreetMap may store cookies in your browser or use comparable recognition technologies.
The use of OpenStreetMap is in the interest of an appealing presentation of our online offers and an easy findability of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Cross-border data transfers
As indicated in this Privacy Policy, your personal data may be transferred to other countries (including countries outside the EEA) which may have different data protection standards to your country of residence. Please note that data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement agencies and regulators. However, we will endeavor to take reasonable steps to maintain an adequate level of data protection when transferring your personal data to these countries. We transfer your personal data to Japan. This transfer is either necessary for the performance of our contractual obligations as a service provider, subject to your consent, or covered by EU standard contractual clauses.
Transfer of personal information to third partiesUnless permitted by applicable data protection laws, we will not share or disclose your personal information to third parties without your prior consent, except in the following cases:
1. Compliance with all applicable laws, regulations or official requirements;
2. To ensure protection against direct harm to personal safety or property and when it is difficult to obtain the prior consent of the data subject;
3. For reasons of public health and in matters relating to the privacy of children and to protect other public interest interests where it is difficult to obtain the prior consent of the data subject.
4. To ensure the necessary cooperation with the competent national and local government authorities and the prior consent of the person concerned would be difficult or jeopardize the investigation work;
5. for outsourcing to third party providers in connection with the provision of certain services on our behalf, such as direct mail and telephone calls, through contractual and written agreements that require such third parties to comply with these confidentiality and privacy terms;
6. For outsourcing to payment transaction processors and the provision of related services in connection with your payment transactions, through contractual and written agreements that require such third parties to comply with these confidentiality and privacy terms.

7. third-party service providers

When we share or disclose your personal data with third party service providers to process personal data for us, we conduct thorough investigations to verify the reliability and trustworthiness of these service providers and take the necessary measures to ensure their compliance with the Privacy Policy and other appropriate confidentiality and security measures.

The newsletter is sent by the mailing service provider “MailGun”, a newsletter mailing platform of the US provider Mailgun Technologies, Inc. 548 Market St. #43099 San Francisco, CA 94104, USA. You can view the privacy policy of the mailing service provider here: https://www.mailgun.com/privacy-policy The mailing service provider is used on the basis of our legitimate interests pursuant to Art. 6 (1). (f) GDPR and an order processing contract pursuant to Art. 28 para. 3 sentence 1 GDPR. The mailing service provider may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletter or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a dispatch service provider, from their server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, is initially collected and used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the mailing service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

8. safety

We have implemented measures, including SSL or TLS encryption, to protect your personal information from accidental loss and from unauthorized access, use, alteration and disclosure.

9. no obligation to provide personal data

The provision of your personal data is generally voluntary and there is no legal or contractual obligation to provide your personal data. We generally do not contractually require the provision of your personal data; however, please note that failure to provide personal data may prevent you from using some of our services or parts thereof.

10. data retention

We aim to keep our processing of your personal data to a minimum. In the absence of specific retention periods set out in this policy, your personal data will only be retained for as long as we need it to fulfill the purpose for which we collected it and, where applicable, for as long as required by legal retention obligations. If we maintain a user account, your data will be stored for as long as this account remains active. If you have given your consent, your personal data will be deleted immediately after you withdraw your consent.

11. your rights

You have the right at any time to

to request information about your data stored by us without giving reasons in accordance with Art. 15 GDPR. You will not incur any costs as a result of the request, with the exception of any connection fees charged by your provider;
to have data collected in accordance with Art. 16 GDPR corrected;
to have data collected in accordance with Art. 17 GDPR deleted;
to have data collected in accordance with Art. 18 GDPR restricted;
to object to the processing for sending the newsletter in accordance with Art. 21 para. 2 GDPR;
to object to the other processing of your personal data in accordance with Art. 21 (1) GDPR;
to revoke any consent given to us for the collection and use of data without giving reasons in accordance with Art. 7 (3) GDPR (however, such revocation has no influence on the admissibility of processing under other permissions in accordance with Art. 6 GDPR);
in accordance with Art. 20 GDPR, to receive the personal data you have provided in a machine-readable format and to transmit this data to another controller;
to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR without prejudice to any other administrative or judicial remedy.

12. revision

We may change this Privacy Policy from time to time. Once revised, the latest version of the Privacy Policy will be uploaded to our website.

13. contact

If you have any questions that this privacy policy could not answer, or if you require further information on a specific point, please do not hesitate to contact us at any time. You can reach us at the above address or by e-mail to our data protection officer at florian@hohenberger.at.

The address of our website is: https://www.hohenberger.at.

14. comments

When visitors post comments on the website, we collect the data displayed in the comment form, the visitor’s IP address and the user agent string (which identifies the browser) to help detect spam.

An anonymized string of characters (also known as a hash) can be created from your email address and passed to the Gravatar service to check whether you are using it. You can find the Gravatar service’s privacy policy here: https://automattic.com/privacy/. After your comment has been approved, your profile picture will be publicly visible in the context of your comment.

15. media

If you are a registered user and upload photos to this website, you should avoid uploading photos with an EXIF GPS location. Visitors to this website could download photos stored on this website and extract their location information.

16. embedded content from other websites

Posts on this website may contain embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves exactly as if the visitor had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking services and record your interaction with this embedded content, including your interaction with the embedded content if you have an account and are logged in to this website.

17 How long we store your data

When you post a comment, it is saved indefinitely, including metadata. This way, we can automatically recognize and approve follow-up comments instead of holding them in a moderation queue.

For users who register on our website, we also store the personal information they provide in their user profiles. All users can view, change or delete their personal information at any time (the user name cannot be changed). Website administrators can also view and change this information.

18 What rights you have to your data

If you have an account on this website or have written comments, you can request an export of your personal data from us, including any data you have provided to us. In addition, you can request the deletion of all personal data that we have stored about you. This does not include data that we are required to retain for administrative, legal or security purposes.

19 Where your data is sent

Visitor comments could be analyzed by an automated spam detection service.