Privacy Policy

I. General information about data processing

1.Scope of processing of personal data
In principle, we collect and use personal data of our users only to the extent necessary for the provision of a functional website and our content and services. The collection and use of personal data of our users regularly takes place only with the consent of the user. An exception applies to cases in which prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) GDPR serves as the legal basis. For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures. Insofar as the processing of personal data is required to fulfil a legal obligation that our company is subject to (e.g. national reporting laws), Art. 6 (1) (c) GDPR serves as the legal basis. If the processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing.

3. Deletion of data and duration of storage
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage ceases to exist. In addition, storage may be provided for by European or national legislators in EU regulations, laws or other provisions to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the provisions mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

For purposes of General Data Protection Regulation (GDPR) (EU) 2016/679 Kevin und Sarah Sherratt GnbR is the data officer and controller.

II. Provision of the website and creation of log files

1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the system of the computer accessing it. The following data is collected:
(1) Information about the browser type and version used
(2) The operating system of the user
(3) The IP address of the user
(4) Date and time of access
(5) Websites from which the system of the user is rerouted to our website
(6) Websites accessed by the user’s system via our website. The data is also stored in our system’s log files. No storage of this data together with other personal data of the user takes place. Personal user profiles cannot be created. The stored data is only evaluated for statistical purposes.

2. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR.

3. Purpose of data processing
The temporary storage of the IP address by the system is necessary to allow delivery of website to the user’s computer. To do this, the user’s IP address must be kept stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. In addition, the data is used to optimise the website and ensure the security of our information technology systems. No evaluation of the data for marketing purposes takes place in this context. These purposes also represent our legitimate interest in the processing of data according to Art. 6 (1) (f) GDPR.

4. Duration of storage
The data is deleted as soon as it is no longer necessary for the purpose of its collection. If the data is collected for the purpose of the providing the website, this is the case when the respective session is ended. If the data is stored in log files, this is the case after no more than seven days. Further storage is possible. In this case, the IP addresses of the users are deleted or anonymised, thus preventing them from being associated with the visiting client.

5. Objection and removal options
The collection of data for the provision of the website and the storage of the data in log files is essential for the website’s operation. As a result, the user has no option to object.

III. Contact/email contact

1. Description and scope of data processing
A contact option is available on our website which can be used for electronic contact. If a user makes use of this option, they can contact the relevant contact person via the email address provided. In this case, the user’s personal data transmitted by email is stored in the email system. In this context, there is no disclosure of data to third parties. The data is used exclusively for processing the conversation.

2. Legal basis for data processing
The legal basis for the processing of these data is Art. 6 (1) (a) GDPR if the user has granted its consent. The legal basis for the processing of the data is, moreover, Art. 6 (1) (f) GDPR. If contact is established in order to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.

3. Purpose of data processing
For the processing of personal data as part of email contact, the required legitimate interest in the processing of data is given.

4. Duration of storage
The data is deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been definitively clarified. If the contact is a pre-contractual relationship (offer or reservation request), the data transferred is also stored in our hotel software and used for contract performance. If no contractual relationship arises, we will delete the data after one year effective at the end of the year.

5. Objection and removal options
The user has the option to object to the processing of their personal data at any time. We have the email address info@pensionenzian.com for this purpose. Please note that in the case of an objection, the conversation cannot be continued and we cannot create offers etc. All personal data stored in the course of making contact will be deleted in this case.

Official scope

This privacy statement explains users on the nature, scope and purpose of the collection and use of personal data through this site. The legal basis for data protection is based on the Austrian Telecommunications Act (TKG) and the Data protection Act (DSG).

Access data / Server-Logfiles
Kevin and Sarah Sherratt (or our internet provider) collect data on each access to the offer (so-called “server log files”). These are the following access data: Name of the requested Web page, file, date and time of access, amount of data transferred, notification of successful retrieval, browser type incl. version, the operating system of the user, referrer URL (previously visited), IP address and the requesting provider.

We use the logged data only for statistical purposes, for the purpose of operation, security and optimization of our range. However, we reserve the right, to check the log data later if there is reasonable suspicion of unlawful use due to concrete indications.

Cookies

Cookies are small digital files that are persistently stored on a user’s device and save specific information related to the device. They are used for better usability of websites or statistical reasons. The user can refer to the use of cookies influence. Most browsers have an option with the limitations on storage of cookies or completely prevented their activity. If you deactivate cookies on your device for our website, we would like to inform you, that in particular cases the use of comfort without cookies will be restricted.

This site uses cookies to give you the information and services with optimal quality.

Personal data handling

Personal data is digital information that will help to track and identify a user. This includes name, email address, phone number, preferences, hobbies, memberships, or which websites were viewed by the user. Personal data will only be collected and distributed by the Kevin und Sarah Sherratt GnbR if permitted by law or the user itself. Digital contact While contacting the Kevin und Sarah Sherratt GnbR (eg. by contact-form, chat or e-mail), the information of the user for the purpose of processing the request or follow up questions are saved.

Newsletter

With the newsletter we inform you about events and our offers. If you want to receive our newsletter, we require a valid e-mail address and information that allow us to verify that you are the owner of the email address or that its owner agrees to receive the newsletter. Further data is not collected. These data are used only for sending the newsletter and will not be disclosed to 3rd-parties. By registering for the newsletter the Kevin und Sarah Sherratt GnbR saves your IP address and date of registration. This storage is used only for the evidence in the case that a 3rd-party abused an email address and logs in without the knowledge of the owner of the e-mail address. Your approval to the storage of data, e-mail address and receipt of recurring newsletters can be revoked at any time. The revocation can be made via a link in the newsletters itself, in your profile area or send a message to the above contact details.

Integration of services and content of 3rd-parties

It may happen that within our website you will access 3rd-party content. This always assumes that the provider of such content (hereinafter referred to as “3rd-party”) take user´s IP address. Without having the IP address, it would be impossible to send the content to the browser. The IP address is therefore necessary for the presentation of that content. Kevon und Sarah Sherratt GnbR endeavours to include external content using IP storage only to deliver the content itself. However, we have no control over the 3rd-party’s IP address activities. Insofar as is known to us, we clarify this to our users.

Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files which are stored on your computer to help analyze the use of the website. The information generated by the cookie about your use of this website (including your IP address) is sent to a Google server in the U.S. and stored there. Google will use this information to evaluate your use of the website, compiling reports on website activity for website operators and providing other website activity and internet related services. In addition, Google may also transfer this information to third parties unless required by law or if third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by changing the settings on your browser. We would point out; however, that In this case you cannot use all the features of this website. By using this website, you consent to the processing of data about you by Google in the manner described and for the aforementioned purpose.

If you don´t want Google and us to collect IP-address, language parameters, user device etc. you should install Google Analytics Browser-Add-on for Google Analytics deactivation. This Browser-Add-on allows you to have better control, which your devices data will be collected by Google Analytics. The Add-on itself sends the JavaScript (ga.js) regarding to Google Analytics that there will be no information stored about your website visit.

If you want to use this function, please feel free to download the add-on and install it for your web browsers. The browser add-on for Google Analytics Opt is available for Internet Explorer, Google Chrome, Mozilla Firefox, Apple Safari, and Opera.

Cancellation, changes, corrections, and updates

The user has the right to request to receive free information about the personal data that have been stored about him. In addition, the user has the right to correct inaccurate data, blocking and deletion of personal data, as far as the there is no legal obligation to retain.

Others

If any parts or individual formulations of this text should fail to conform to the valid legal situation, or be no longer or not fully in conformity therewith, this shall not affect the content or validity of the remaining parts of the document.