Privacy policy - Hotel Via Salina

INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA

A: In the following, we would like to inform you about the collection of personal data when using our website and services. Personal data includes all information that relates to you personally, such as your name, address, or email address.

II. This privacy policy applies to all individuals using the services of Via Salina Seehotel GmbH & Co KG, hereinafter referred to as Via Salina. We respect your privacy and strive to comply with the legal requirements for the processing of your personal data (EU Regulation No. 679/2016 (GDPR), Data Protection Act 2000, Data Protection Act 2018, and Telecommunications Act 2003). All your personal data is processed on this basis.

III. The data controller according to Article 4 (7) of the EU General Data Protection Regulation (GDPR) is Via Salina Seehotel GmbH & Co KG, Haller 11, A-6672 Nesselwängle, Phone: +43 5675 201 040, Fax: +43 5675 201 0444, Email: info@via-salina.at.

B: COLLECTION OF PERSONAL DATA (TYPE AND PURPOSE)

When Visiting Our Website
In the case of merely informative use of the website, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are in particular:

IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transmitted in each case
Website from which the request comes
Browser
Operating system and its interface
Language and version of the browser software.

Purpose of Data Processing

The purpose of data processing is to ensure the smooth connection establishment of the website, guarantee the comfortable use of our website, and enable the evaluation of system security and stability.

The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest arises from the purposes listed above for data collection. We do not use the collected data to draw conclusions about individuals.

II. When Contacting Us via Email or the Contact Form

When contacting us via email or the contact form, the data you provide (such as your name and email address) will be stored by us to answer your questions.

The data processing for the purpose of contacting us is carried out according to Art. 6(1)(a) and (b) GDPR based on your voluntarily given consent, possibly also for the execution of pre-contractual or contractual measures that occur upon your request.

III. Contacting Us by Phone

When contacting us by phone, the data you provide (your name and phone number) will be stored by us to potentially call you back.

V. When Making Bookings

When you make a booking with us, we collect, among other things:

Your basic data (name, first name, address, email address, phone and fax numbers, date of birth, customer number) as well as language and vehicle registration number,
Data in travel documents (passport number, passport details, date of birth, issuing authority, validity period, nationality) and identification documents (ID card, driver's license, etc., including issuing authority and validity period),
Data related to payment method and payments, especially with EC cards, credit cards, and bank cards,
The requested duration of stay, along with associated destinations, hotels, contact persons, conditions, special services, health data, personal preferences you disclose to us,
and special categories of data such as health data and data about special needs and marital/partnership status.

VI. Collection of these data serves the following purposes:

To identify you as our customer.
For the purpose of contract execution.
For billing purposes.
For debt management purposes.
For the execution of electronic payment transactions.
To settle payment obligations.
To perform contractually agreed services.
For the processing of complaints.
In the interest of comprehensive customer care/customer loyalty measures.
To fulfill legal or other legal obligations on our part (e.g., documentation rights and obligations under accounting, tax and customs law, contract management, reporting obligations, legal disputes), as well as § 96 TKG.
The legal basis is Art. 6(1)(b) GDPR.

If you make an online booking on www.via-salina.at, this is done through the online booking software "Webbox" from Interalp Touristik GmbH. All data necessary for the conclusion of a booking (first name, last name, address, email address, any personal details about the booking, etc.) are transmitted encrypted and processed and stored only for the purpose of processing your booking. The software provider Interalp commits to handling your data in accordance with data protection regulations and takes all organizational and technical measures to protect it.

VIII. Applications

If you apply for one of our job advertisements or send us a speculative application, we collect and process the personal data you provide in connection with the application process. The processed data categories include, in particular, your name, address, email address, phone number, curriculum vitae, relevant certificates and references, and salary expectations.

The legal basis is Art. 6(1)(a) and (b) GDPR, in order to make a decision about the establishment of an employment relationship.

Furthermore, we may process personal data about you to the extent necessary to defend against asserted legal claims arising from the application process against us.

The legal basis is Art. 6(1)(f) GDPR, where the legitimate interest is, for example, an obligation to provide evidence in a procedure under the Equal Treatment Act (Gleichbehandlungsgesetz – GlBG).

C: NEWSLETTER

With your consent, you can subscribe to our newsletter, where we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
II. For the registration for our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we will send you an email to the specified email address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and automatically deleted after one month. In addition, we store your used IP addresses and the times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

III. The only mandatory information for sending the newsletter is your email address. The provision of additional, separately marked data is voluntary and is used to address you personally. After your confirmation, we will store your email address for the purpose of sending the newsletter.

IV. The legal basis is Art. 6(1)(a) GDPR.

V. You can revoke your consent to receive the newsletter and unsubscribe at any time. You can declare the revocation by clicking on the link provided in each newsletter email or by sending a message to the contact details provided in the imprint.

D: DATA DISCLOSURE

1. Disclosure to Providers

The data is technically forwarded to the provider, who operates servers within Europe. Data sent to us via the contact form is also forwarded to this provider, as they provide the email server.

II. Other Cases of Disclosure

01. Service Providers and Agents

Only those who need access to your data for the fulfillment of contractual and legal obligations have access to it. Service providers and agents employed by us may also receive data for these purposes. These include companies in the categories of IT services, billing, logistics, credit institutions, printing services, telecommunications, debt collection, consulting, and advisory.

Recipients of personal data under these conditions may include:

Auditors, consultants;
Lawyers (debt collection);
Public authorities and institutions in the presence of a legal or regulatory obligation.

02. Analysis Tools

Furthermore, data is disclosed through the use of Google Analytics. Details can be found in section F of this privacy policy.

03. Other Cases of Disclosure

Moreover, an exceeding disclosure of your personal data to third parties does not generally occur. We only disclose your personal data to third parties if:

You have given your explicit consent under Art. 6(1)(a) GDPR,
The disclosure is necessary under Art. 6(1)(f) GDPR for the assertion, exercise, or defense of legal claims, and there is no reason to believe that you have an overriding legitimate interest in not disclosing your data,
There is a legal obligation for the disclosure under Art. 6(1)(c) GDPR,
or it is legally permissible and necessary for the execution of contractual relationships with you under Art. 6(1)(b) GDPR.

E: USE OF COOKIES

We use cookies on our site. These are small files that your browser automatically creates and stores on your device. The cookie contains information related to the device used. However, this does not mean that we gain immediate knowledge of your identity. Please note that cookies on your device cannot cause any harm.

The use of cookies aims to make your use of our offering more pleasant. For example, we use so-called session cookies to recognize which of our pages you have already visited. This data is automatically deleted after leaving our site.

In addition, temporary cookies may be used to optimize user-friendliness, which are stored on your device for a specified period. The use of cookies is in accordance with Art. 6(1)(f) GDPR based on legitimate interests.

Many browsers accept cookies automatically. You can configure your browser to prevent cookies from being stored on your computer or to display a notification when a cookie is about to be set. If you do not allow cookies, an opt-out cookie will be set in your browser. Preventing cookies may result in certain functions of the website no longer being available.

Please note that an opt-out cookie can only be applied to the browser from which it was set. Cookies set during visits to other websites are not included. However, you can delete all cookies at any time through your browser. Instructions on how to do this can be found in your browser's help function.

F: EINSATZ VON GOOGLE

I. Google Analytics

Diese Website benutzt Google Analytics, einen Webanalysedienst der Google Inc. („Google“). Google Analytics verwendet sog. „Cookies“, Textdateien, die auf Ihrem Computer gespeichert werden und die eine Analyse der Benutzung der Website durch Sie ermöglichen. Die durch das Cookie erzeugten Informationen über Ihre Benutzung dieser Website werden in der Regel an einen Server von Google in den USA übertragen und dort gespeichert. Im Falle der Aktivierung der IP-Anonymisierung auf dieser Website, wird Ihre IP-Adresse von Google jedoch innerhalb von Mitgliedstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum zuvor gekürzt. Nur in Ausnahmefällen wird die volle IP-Adresse an einen Server von Google in den USA übertragen und dort gekürzt. Im Auftrag des Betreibers dieser Website wird Google diese Informationen benutzen, um Ihre Nutzung der Website auszuwerten, um Reports über die Website-Aktivitäten zusammenzustellen und um weitere mit der Website-Nutzung und der Internetnutzung verbundene Dienstleistungen gegenüber dem Website-Betreiber zu erbringen.

Die im Rahmen von Google Analytics von Ihrem Browser übermittelte IP-Adresse wird nicht mit anderen Daten von Google zusammengeführt.

Sie können die Speicherung der Cookies durch eine entsprechende Einstellung Ihrer Browser-Software verhindern; wir weisen Sie jedoch darauf hin, dass Sie in diesem Fall gegebenenfalls nicht sämtliche Funktionen dieser Website vollumfänglich werden nutzen können. Sie können darüber hinaus die Erfassung der durch das Cookie erzeugten und auf Ihre Nutzung der Website bezogenen Daten (inkl. Ihrer IP-Adresse) an Google sowie die Verarbeitung dieser Daten durch Google verhindern, indem sie das unter dem folgenden Link verfügbare Browser-Plug-In herunterladen und installieren: http://tools.google.com/dlpage/gaoptout?hl=de.

Sie können sich durch Anklicken des nachfolgenden Link auch aus dem Google Analytics auschecken: Ja ich möchte mich auschecken.

Diese Website verwendet Google Analytics mit der Erweiterung „anonymizeIp()“. Dadurch werden IP-Adressen gekürzt weiterverarbeitet, eine Personenbeziehbarkeit kann damit ausgeschlossen werden. Soweit den über Sie erhobenen Daten ein Personenbezug zukommt, wird dieser also sofort ausgeschlossen und die personenbezogenen Daten damit umgehend gelöscht.

Wir nutzen Google Analytics, um die Nutzung unserer Website analysieren und regelmäßig verbessern zu können. Über die gewonnenen Statistiken können wir unser Angebot verbessern und für Sie als Nutzer interessanter ausgestalten. Rechtsgrundlage für die Nutzung von Google Analytics ist Art. 6 Abs. 1 S. 1 lit. f DS-GVO.

Für die Ausnahmefälle, in denen personenbezogene Daten in die USA übertragen werden, hat sich Google dem EU-US Privacy Shield unterworfen, https://www.privacyshield.gov/EU-US-Framework.

Informationen des Drittanbieters: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Nutzerbedingungen: http://www.google.com/analytics/terms/de.html, Übersicht zum Datenschutz: http://www.google.com/intl/de/analytics/learn/privacy.html, sowie die Datenschutzerklärung: http://www.google.de/intl/de/policies/privacy.

II. Google Maps

Die Website verwendet Google Maps, um geographische Informationen visuell darzustellen. Bei der Nutzung von Google Maps werden von Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, California, 94043) auch Daten über die Nutzung der Maps-Funktionen durch Besucher der Websites erhoben, verarbeitet und genutzt.

Nähere Informationen über die Datenverarbeitung durch Google können Sie den Datenschutzhinweisen von Google entnehmen, die Sie unter www.google.com/privacypolicy.html abrufen können.

Die Verwendung von Google Maps stützen wir auf Grundlage eines berechtigten Interesses im Sinne von Art. 6 Abs. 1 lit. f) DSGVO, da wir unser Onlineangebot optimieren wollen.

Sie können Sie durch Anklicken des nachfolgenden Links auch auschecken: https://adssettings.google.com/authenticated.

G: LINKS TO THIRD-PARTY WEBSITES

The links published on our website are researched and compiled with the utmost care. However, we have no influence on the current and future design and content of linked pages. We are not responsible for the content of linked pages and explicitly do not endorse the content of these pages. The provider of the linked website is solely responsible for illegal, incorrect, or incomplete content, as well as for damages resulting from the use or non-use of the information. The liability of the party referring to the publication via a link is excluded. We are only responsible for external references if we have positive knowledge of them, including any illegal or criminal content, and if it is technically possible and reasonable for us to prevent their use.

H: USE OF GOOGLE FONTS

These websites use external fonts, Google Fonts. Google Fonts is a service provided by Google Inc. ("Google"). These web fonts are integrated by calling a server, typically a Google server in the USA. This transmits to the server which of our pages you have visited. Additionally, Google stores the IP address of the visitor's device when accessing these websites.

When a page is called up, your browser loads the necessary web fonts into your browser cache to display texts and fonts correctly. The use of web fonts is in the interest of a uniform and appealing presentation of our online offerings.

This represents a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

For more information, please refer to Google's privacy policy, which you can access here: www.google.com/fonts#AboutPlace:about and www.google.com/policies/privacy/.

I: YOUR RIGHTS

Request information about your processed personal data according to Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the source of your data if it was not collected by us, and the existence of automated decision-making, including profiling, and meaningful information about its details.
Request the immediate correction of incorrect or completion of your stored personal data according to Art. 16 GDPR.
Request the deletion of your stored personal data according to Art. 17 GDPR, as long as processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.
Request the restriction of the processing of your personal data according to Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you oppose its erasure, and we no longer need the data, but you need it to assert, exercise, or defend legal claims or you have objected to processing according to Art. 21 GDPR.
Receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or request the transmission to another controller according to Art. 20 GDPR.
Withdraw your consent given under Art. 7(3) GDPR at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future.
Lodge a complaint with a supervisory authority according to Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or work or our company headquarters. For our company headquarters, the Austrian Data Protection Authority (Datenschutzbehörde - DSB) at Wickenburggasse 8-10, 1080 Vienna, is responsible.

J: RIGHT TO OBJECT

If your personal data is processed on the basis of legitimate interests according to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data according to Art. 21 GDPR, provided that there are reasons for this that arise from your particular situation.

If you object, your personal data will no longer be processed unless compelling legitimate grounds for the processing can be demonstrated that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

The objection is to be addressed to us; an email to info@via-salina.at is sufficient.

K: DURATION OF STORAGE

I. Complete IP addresses of users of the website are not stored on this website or are deleted immediately after the end of the use of the website.

II. The stored usage processes are deleted after a maximum of 7 months.

III. If you contact us via the contact form or by email or phone, the data will generally be deleted 6 months after the last communication once the inquiry is answered. An exception applies if the contact relates to a specific customer relationship. In this case, a file note may be stored in the customer file. The data is stored in accordance with legal retention periods. After that, the data is permanently deleted; in the meantime, the data is blocked, making access to this data no longer readily possible.

IV. The personal data collected by us in the context of the service provision will be deleted after the end of the contract, unless the law provides for different retention periods. If legal retention periods exist, the data will be stored during this time. After that, the data is permanently deleted. In the meantime, the data is blocked, making access to this data no longer readily possible.

V. The data collected as part of the registration for our newsletter will be stored as long as you do not unsubscribe from the newsletter. In the event of unsubscribing, we delete the data immediately.

L: OBLIGATION TO PROVIDE DATA

Regarding the collection and processing of so-called server log files, providing information is mandatory. Providing personal data, such as name and email address, when using the contact form is also mandatory.

Furthermore, in the context of a booking, providing the name, address, email, and other information marked as necessary is mandatory.

Providing additional data is voluntary.

M: AUTOMATED DECISION-MAKING

Automated decision-making according to Art. 22 GDPR does not take place.

N: CHANGE OF PURPOSE OF USE

Personal data is processed for the purpose for which it was collected. There is no change in the purpose of use.

O: DATA SECURITY

During website visits, we use the common SSL (Secure Socket Layer) protocol in conjunction with the highest encryption level supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we revert to 128-bit V3 technology. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

P: UPDATES AND CHANGES TO THIS PRIVACY POLICY

This privacy policy is currently valid and has a status of 2018.

Due to the ongoing development of our website and services, or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current privacy policy can be accessed and printed at any time on the website.