Privacy policy
Controller
Natalie Schönegger, Villa St. Oswald, private room rental (Privatzimmervermietung), Münchner Straße 123, 6100 Seefeld in Tirol, Österreich, villa@sankt-oswald.at, +43 664 113 33 40
No cookies of our own, no tracking
This website sets no cookies of its own and uses no analytics or marketing services (no Google Analytics, no advertising pixels, no social media plug-ins). Fonts are served from our own web space, not from third parties. The only cookie is set by the booking system embedded on the “Booking” page (see “Online booking”).
Hosting (Cloudflare)
The website is delivered via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary data such as IP address, time, page requested and browser details in order to deliver the website and protect it against attacks (Art. 6(1)(f) GDPR). Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework; in addition, Cloudflare’s Data Processing Addendum (Art. 28 GDPR, part of Cloudflare’s terms of service) applies, which incorporates the EU Standard Contractual Clauses (Art. 46 GDPR). Under this agreement, the data is only stored for as long as is necessary to deliver the website, at the latest until the contract ends.
Online booking (easyGuestmanagement)
The “Booking” page embeds the easyGuestmanagement online booking system. Provider: easyGuestmanagement GmbH, Baurenhof 7a, 6632 Ehrwald, Austria (company register FN 611587 v, info@easyguest.management). As soon as the page loads, a connection is made to the provider’s servers (booking.easyGuestmanagement.at). Technically necessary data is processed in the process – IP address, browser type and version, operating system, referrer URL, host name and time of access (Art. 6(1)(f) GDPR) – and the cookie “GAESA” is set. It comes from the Google Cloud infrastructure (Google App Engine) on which the booking system runs, is used for load balancing – your requests are routed to the same server so that the booking process works smoothly – and is valid for about 30 days.
The data you enter in the booking or enquiry form – in particular name, address, email address, phone number, travel dates, number of guests and your requests – is processed to handle your booking or enquiry and passed on to us (Art. 6(1)(b) GDPR). According to the provider’s privacy policy, booking data may also be passed on to connected parties such as guest-registration providers and tourist boards; statutory retention obligations remain unaffected.
easyGuestmanagement privacy policy: www.easyguestmanagement.at/web/documents/dataPrivacyRegulation.php?lang=2
We have concluded a data processing agreement with easyGuestmanagement GmbH in accordance with Art. 28 GDPR.
Enquiries by email or phone
The enquiry form on this website stores no data; it simply opens your email program. We process your message to answer your enquiry and, where applicable, to prepare your stay (Art. 6(1)(b) GDPR). Statutory retention obligations (e.g. guest registration under the Austrian Registration Act, tax rules) remain unaffected.
External map services
The map on the “Location” page is initially only a locally stored image (map data © OpenStreetMap contributors); no connection to third parties is made. Only when you click “Load map” is the map from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) embedded. Your IP address and technical browser data are then transmitted to Google, possibly also to the USA (Google is certified under the EU-US Data Privacy Framework), and Google may set cookies. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can end at any time by reloading the page. Google privacy policy: policies.google.com/privacy. Links to OpenStreetMap and Google Maps only open in a new window after you click them.
The contact page contains a link and a QR code for WhatsApp (WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland). A connection to WhatsApp is only made when you use it; WhatsApp’s privacy policy then applies. Data may also be transferred to the USA. If you prefer not to use WhatsApp, you can reach us by email or phone.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Please contact us at the address above. You may lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).