Home Privacy Policy

Privacy Policy

May 2026 version · Created with Privacy Policy Generator from AdSimple

Introduction and overview

We have drafted this privacy policy to provide you with information in accordance with the requirements of General Data Protection Regulation (EU) 2016/679 and applicable national laws, to explain what personal data we, as controllers, process, will process in the future, and what lawful options you have.

In short: We will inform you comprehensively about data we process about you. We only process personal data if there is a corresponding legal basis.

Scope of application

This privacy policy applies to all personal data processed by us in the company. The scope includes:

All online presences (websites) that we operate
Social Media Presence and Email Communication
Mobile Apps for Smartphones and Other Devices

Legal basis

We only process your data if at least one of the following conditions applies:

Consent (Art. 6(1)(a) GDPR)
You have given us your consent to process data for a specific purpose.
Contract (Art. 6(1)(b) GDPR)
To fulfill a contract or pre-contractual obligations with you, we process your data.
Legal obligation (Art. 6(1)(c) GDPR)
If we are subject to a legal obligation, we process your data (e.g., statutory retention periods).
Legitimate interests (Art. 6(1)(f) GDPR)
In the event of legitimate interests that do not infringe upon your fundamental rights, we reserve the right to process your data (e.g., for the secure operation of the website).

In Austria, the following also applies Data Protection Act (DPA).

Contact details of the person responsible

Responsible party within the meaning of the GDPR:

Andrea Keri Sole Proprietorship.
Herrenfeld 43, 6972 Fußach, Austria

Storage duration

We only store personal data for as long as is strictly necessary to provide our services. Data will be deleted as soon as the reason for data processing no longer exists, unless there is a legal obligation to retain it (e.g., for accounting records). Upon request, your data will be deleted as quickly as possible.

Rights according to the General Data Protection Regulation

According to Art. 13, 14 GDPR, you have the following rights:

Right of access (Art. 15 GDPR): Right to information about processed data.
Right to rectification (Art. 16 GDPR): Right to correction of inaccurate data.
Right to erasure (Art. 17 GDPR): Right to be forgotten — Deletion of your data.
Right to restriction of processing (Art. 18 GDPR): Data may only be stored, not further processed.
Right to data portability (Art. 20 GDPR): Receive data in a common format upon request.
Right to object (Art. 21 GDPR): Objection to certain data processing is possible.
Right to lodge a complaint (Art. 77 GDPR): Complaint to the data protection authority possible.
Austrian Data Protection Authority www.dsb.gv.at

Data transfer to third countries

We only transfer data to countries outside the EU (third countries) if it is necessary for the performance of a contract, if you have consented, or if there is a legal obligation. If third-country transfers take place, we ensure an appropriate level of data protection in accordance with Art. 44 et seq. GDPR (e.g., EU Standard Contractual Clauses or an adequacy decision by the EU Commission).

Data processing security

To protect personal data, we have implemented both technical and organizational measures. We encrypt data where possible and use SSL/TLS encryption for data transfer on our website (recognizable by the padlock icon in the browser's address bar).

Communication

If you contact us via email or WhatsApp, your provided data (name, email address, phone number, message content) will be stored for the purpose of processing your request and for any follow-up questions.

Legal basis: Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(f) GDPR (legitimate interest). Data will be deleted as soon as the request has been fully processed and no statutory retention obligation exists.

Cookies

Our website uses cookies — small text files stored on your end device. We differentiate between:

Technically necessary cookies
Absolutely necessary for the operation of the website. No consent required.
Analysis & Marketing Cookies
Only set with your consent. You can change your cookie settings at any time.

Legal basis: Art. 6(1)(a) GDPR (Consent) for non-essential cookies, Art. 6(1)(f) GDPR (Legitimate Interest) for technically essential cookies.

Web hosting

Our website is hosted on an external server. When you visit our website, data (IP address, browser type, operating system, referrer URL, date/time) is automatically saved in server log files.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and error-free operation of the website). The data will be deleted after a maximum of 7 days.

Web Analytics (Google Analytics)

This website may use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies, which enable an analysis of the use of the website.

The information generated by cookies about your use of this website is typically transmitted to and stored by Google on servers in the United States. We use Google Analytics with IP anonymization enabled.

Legal basis: Art. 6 (1)(a) GDPR (Consent). You can object to data collection: Google Analytics Opt-out. More information: Google Privacy Policy.

Social Media (Instagram & Facebook)

We operate pages on Instagram and Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). When you visit our social media pages, data is processed by Meta. We have no influence over this data processing.

More information: Meta Privacy Policy. Legal basis: Art. 6(1)(f) GDPR.

Online booking system (Webplanner)

For online booking, we use the Webplanner service (webplanner.de). When you make a booking, your provided data (name, email, travel dates, etc.) will be transferred to Webplanner and processed there for booking purposes.

Legal basis: Art. 6(1)(b) GDPR (Performance of a contract). There is a data processing agreement (DPA) pursuant to Art. 28 GDPR.

WhatsApp Communication

We use WhatsApp (Meta Platforms Ireland Limited) as a communication channel. If you contact us via WhatsApp, your messages and contact details will be processed by Meta. Please note that WhatsApp may transfer data to the USA.

Legal basis: Art. 6 Para. 1 lit. b and f GDPR. More information: WhatsApp Privacy Policy.

Explanation of terms used

Personal data
All information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR).
Processing
Any operation involving the processing of personal data (collection, storage, use, disclosure, deletion, etc.).
Responsible person
Natural or legal person who determines the purposes and means of processing personal data.

If you have any questions about this privacy policy, please contact us at any time:

urlaub@appartement-azalea-oetz.at
This privacy policy was created with the Privacy Policy Generator from AdSimple created and adapted.