Home Privacy Policy

Privacy Policy

Version September 2026

Introduction and overview

We have drafted this privacy policy to provide you with information in accordance with the requirements of General Data Protection Regulation (EU) 2016/679 and applicable national laws, to explain what personal data we, as controllers, process, will process in the future, and what lawful options you have.

In short: We will inform you comprehensively about data we process about you. We only process personal data if there is a corresponding legal basis.

Scope of application

This privacy policy applies to the processing of personal data in connection with the operation of Appartement Azalea, in particular for:

the website appartement-azalea-oetz.at and its functions
Inquiries, reservations, bookings, and the processing of accommodation contracts
Email and WhatsApp communication with guests and interested parties
statutory required guest registrations, tourist tax, and the issuance or provision of guest cards

Legal basis

We process personal data only if there is a legal basis for doing so. Depending on the processing, the following legal bases in particular apply:

Consent (Art. 6(1)(a) GDPR)
If you have given voluntary consent to a specific data processing. Consent can be revoked at any time with effect for the future.
Contract and pre-contractual measures (Art. 6 para. 1 lit. b GDPR)
For the processing of inquiries, reservations, and bookings, as well as for the performance of the accommodation contract.
Legal obligation (Art. 6(1)(c) GDPR)
Especially for statutory reporting, levy, tax, and retention obligations in connection with accommodation.
Legitimate interests (Art. 6(1)(f) GDPR)
For the secure, stable, and economical operation of our website, and to prevent or investigate abuse, provided your interests or fundamental rights do not override this.

In addition, in Austria, the Data Protection Act (DSG) applies in particular, and § 165 para. 3 of the Telecommunications Act 2021 (TKG 2021) applies to the storage of or access to information on terminal equipment.

Contact details of the person responsible

Responsible party within the meaning of the GDPR:

Andrea Keri Sole Proprietorship.
Herrenfeld 43, 6972 Fußach, Austria

Storage duration

We only store personal data for as long as is necessary for the respective purpose or as required by statutory retention periods.

Booking, accounting, and tax-relevant documents are generally retained for the statutory period; in Austria, the retention period for accounting records and vouchers is regularly seven years, calculated from the end of the respective calendar year. Longer retention periods may apply in individual cases, for example, if documents are required for pending proceedings.

We delete pure inquiries without a subsequent booking as soon as the communication is completed and there are no legitimate or legal reasons for further storage.

Rights according to the General Data Protection Regulation

Subject to the statutory requirements, you are entitled in particular to the following rights:

Right of access (Art. 15 GDPR): Right to information about processed data.
Right to rectification (Art. 16 GDPR): Right to correction of inaccurate data.
Right to erasure (Art. 17 GDPR): Right to be forgotten — Deletion of your data.
Right to restriction of processing (Art. 18 GDPR): Data may only be stored, not further processed.
Right to data portability (Art. 20 GDPR): Receive data in a common format upon request.
Right to object (Art. 21 GDPR): Objection to certain data processing is possible.
Withdrawal of consent (Art. 7 para. 3 GDPR): Consent that has been granted may be revoked at any time with effect for the future.
Right to lodge a complaint (Art. 77 GDPR): Complaint to the data protection authority possible.
Austrian Data Protection Authority www.dsb.gv.at

Data transfer to third countries

When using certain external services, personal data may be processed outside the European Economic Area. Such a transfer only takes place if the requirements of Art. 44 et seq. GDPR are met, for example on the basis of an adequacy decision by the European Commission or appropriate safeguards such as EU Standard Contractual Clauses. Details can be found in the information on the respective services used.

Data processing security

To protect personal data, we have implemented both technical and organizational measures. We encrypt data where possible and use SSL/TLS encryption for data transfer on our website (recognizable by the padlock icon in the browser's address bar).

Communication

If you contact us by email or through other offered contact channels, we process the data you provide—in particular your name, contact details, and message content—to process your request, prepare a booking, or manage an existing stay.

Legal basis: Art. 6 (1) lit. b GDPR, insofar as the communication serves the initiation or performance of a contract; otherwise Art. 6 (1) lit. f GDPR. The data will be deleted as soon as they are no longer required for the purpose and there are no statutory retention obligations or legitimate grounds for further storage.

Cookies and similar technologies

Our website may use technically necessary cookies or comparable technologies that are required for the provision of expressly requested functions, such as for session, security, or booking functions.

According to Section 165 Paragraph 3 of the 2021 Telecommunications Act (TKG 2021), technically non-essential cookies or comparable technologies may generally only be used after you have given your consent. If no technically non-essential cookies are used on this website, no consent is required for this.

Legal bases: § 165 para. 3 of the 2021 Telecommunications Act (TKG 2021) as well as – insofar as personal data is processed – the respective applicable legal basis under Art. 6 of the GDPR.

Web hosting and server log files

When accessing our website, the hosting provider processes technically necessary connection data in server log files. This may include, in particular, the IP address, date and time of access, page or file accessed, referrer URL, browser type, and operating system.

The processing is carried out to ensure the provision, stability, and security of the website based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. Log data is stored only as long as necessary for these purposes or due to legal obligations.

Guest registration, visitor's tax and guest card

As accommodation providers, we are obliged to collect certain guest data and process it for statutory registration and tax purposes. In particular, this may include name, date of birth or other legally required registration data, length of stay, and information regarding tax liability.

The required data can be transmitted to the responsible authorities, in particular the municipality, the tourism association, or their contracted technical systems. If a guest card or digital guest card is issued for the stay, the data required for this will also be transmitted to the system used for that purpose.

Legal basis: Article 6 paragraph 1 lit. c GDPR in conjunction with the statutory reporting and levy obligations applicable to accommodation providers, in particular the Registration Act 1991 (Meldegesetz 1991) and the Tyrol Accommodation Levy Act 2003 (Tiroler Aufenthaltsabgabegesetz 2003).

Social Media (Instagram & Facebook)

Our website may contain links to our presence on Instagram and Facebook. Simply visiting our website does not transfer any data to Meta through an ordinary external link. Only when you open such a link do you leave our website, and the privacy policy of the respective platform operator applies.

The provider for Instagram and Facebook is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Further information can be found in Meta's privacy policy: Meta Privacy Policy.

Use of Webplanner as a booking tool

To display the availability, booking requests, and bookings for our holiday apartment, we use the Webplanner software. When loading the embedded booking section, technically necessary connection data, in particular the IP address, may be transmitted to Webplanner.

All personal data that you provide as part of a booking inquiry or booking via our website will be processed by us in order to process your inquiry or booking and to provide you with all information relevant to the booking and your stay. This may include, in particular, your name, contact details, travel dates, number of guests, and other information provided by you during the booking process.

To the extent necessary for the processing and execution of the booking, the collected data will be processed via Webplanner. Webplanner is used as a data processor in this regard. We have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR.

webplanner.de – Vacation rental management for landlords
Drubbel 3
48143 Münster
Germany

Legal basis: Article 6 paragraph 1 lit. b GDPR for pre-contractual measures and the performance of the accommodation contract; insofar as technically necessary connection data is processed, additionally Article 6 paragraph 1 lit. f GDPR.

Further information on data processing by Webplanner can be found at: Privacy Policy of Webplanner.

WhatsApp Communication

If you contact us voluntarily via WhatsApp, we process your telephone number, your profile name – as far as visible – as well as the messages and content submitted by you in order to process your inquiry or booking.

WhatsApp is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. In this context, data processing by Meta and a transfer to third countries cannot be ruled out.

Legal basis for our processing: Art. 6 para. 1 lit. b GDPR, insofar as the communication relates to an inquiry, booking, or contract processing; otherwise Art. 6 para. 1 lit. f GDPR. More information: WhatsApp Privacy Policy.

Explanation of terms used

Personal data
All information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR).
Processing
Any operation involving the processing of personal data (collection, storage, use, disclosure, deletion, etc.).
Responsible person
Natural or legal person who determines the purposes and means of processing personal data.

If you have any questions about this privacy policy, please contact us at any time:

urlaub@appartement-azalea-oetz.at
As of September 2026. We will update this privacy policy if legal requirements or the services used on this website change.