This is a courtesy translation. The German version is legally binding.
Draft: This privacy policy describes the technical implementation of the new website and must be legally reviewed before publication.
Protecting your personal data is particularly important to us. We process your data solely on the basis of the statutory provisions (GDPR, Austrian Data Protection Act, Austrian Telecommunications Act 2021). Below we inform you about the most important aspects of data processing on our website.
Controller
Frühstückspension Sunnhäusl, Helga Harlander-Stoffel
Haidachweg 2, 5621 St. Veit im Pongau, Austria
Phone: +43 6415 7448 · Email: info@sunnhaeusl.at
Visiting the website
When you visit our website, our hosting provider processes technically necessary data (IP address, date and time, page requested, browser) in server log files. This is required for secure operation and is based on our legitimate interest (Art. 6(1)(f) GDPR). Hosting provider and retention period of the log files: [to be completed].
Our website uses no analytics or advertising cookies and no tracking. Fonts and all other resources are loaded from our own server.
Enquiry form and email
If you contact us via the enquiry form or by email, we process the information you provide (name, email address, optionally phone number, travel dates, number of guests, children’s ages, message) in order to answer your enquiry and prepare an offer (Art. 6(1)(b) GDPR). Enquiries sent via the form are stored on our website and automatically deleted after no more than 6 months unless they result in a booking. In the case of a booking, the statutory retention obligations apply. We do not pass on your data without your consent.
To protect against spam, we do not use any external service (no reCAPTCHA), only technical checks on our own server.
Map (OpenStreetMap)
On the home page and the contact page you can load a map from OpenStreetMap. The map is only loaded when you click “Load map”. Only then is your IP address transmitted to the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by clicking. An adequacy decision of the European Commission exists for the United Kingdom. More at osmfoundation.org.
Availability calendar (bergfex)
On the room pages you can load the availability calendar from bergfex (bergfex GmbH, Austria). Here too, a connection to bergfex is only established, and your IP address transmitted, after you click “Load availability calendar” (Art. 6(1)(a) GDPR). More in the bergfex privacy policy.
Notifications (push notifications) and app
You can save our website as an app on your device and subscribe to notifications about offers (e.g. early booking bonus) and news. You will only receive notifications if you turn them on yourself and allow them in your browser (consent, Art. 6(1)(a) GDPR).
For this purpose we store only the technical delivery address that your browser generates, together with the date of subscription – no name, no email address. Delivery takes place via your browser’s push service (depending on the device, Google, Mozilla, Apple or Microsoft); this service receives only a content-free “wake-up call”. Your device loads the text of the notification directly from our website.
You can unsubscribe at any time via “turn on notifications” in the footer of our website (unsubscribe) or in your browser or device settings. Subscriptions that can no longer be reached are deleted automatically. For faster loading, the website also stores design files and images on your device (service worker); no personal data is collected in the process.
External links
Links to other websites (e.g. Google Maps for route planning, Booking.com, Tripadvisor, tourism associations) only open the respective page when clicked. The respective provider is responsible for their data processing.
Your rights
In principle, you have the rights of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw any consent you have given at any time with effect for the future. If you believe that the processing of your data violates data protection law, you can lodge a complaint with us or with the Austrian Data Protection Authority (dsb.gv.at).