Data protection
We use the following data when you enter into a contract with us

Master data: Surname and first name, full address, all contact information (e.g. email address, telephone number), information about the nature and content of our contractual relationship.

Other personal data that you or third parties provide to us with your consent or otherwise permissible when initiating a contract, during the contractual relationship (e.g. to issue a guest card) or to fulfill legal obligations:

Date of birth or age, marital status, gender, occupation, ID data, bank details, authority to sign or represent, contractual commitment, notice/cancellation deadlines or other personal information that you have given us.

Use of processors

The protection of your data is important to us. Even if we use a processor, e.g. Feratel - guest directory according to § 19 Reporting Ordinance, company Kognitiv), we make sure that the order processing takes place within the European Union.

1. Reporting Data

1.1. obligation to report

According to the Austrian Registration Act, you are obliged to register with us using the data specified in § 5 and § 10 of the Registration Act. This concerns the following data:

Name, date of birth, gender, nationality, country of origin, address including postal code and - for foreign guests - type, number, issuance room and issuing authority of a travel document as well as the date of arrival and departure.

1.2. guest directory

We will keep this data in a guest directory due to the legal obligation imposed on us in accordance with Section 19 of the Registration Act Implementation Ordinance and store it for a period of 7 (seven) years, unless it is processed longer for other purposes specified in this data protection declaration become.

The guest directory is kept electronically by us, whereby we forward the data to an IT processor. With this, the data is stored locally. A transfer to a third country does not take place.

1.3. Sharing of Data

The data categories "Arrival", "Departure" linked to the country of origin are forwarded to the municipality in which our accommodation is located in accordance with § 6 Tourism Statistics Ordinance. Aggregated data on the total number of overnight stays and the persons who are obliged to pay the residence tax must also be sent to the Mayrhofen tourism association to which we belong and/or the municipality. This is based on Section 9 of the Tyrolean Residence Tax Act.

1.4. Legal basis of the processing

The processing in accordance with points 1.1 to 1.3 above is based on Article 6 (1) (c) GDPR (fulfilment of a legal obligation).

1.5. Additional data transmission to TVB/municipality

In addition, we forward your postal code and year of birth (in pseudonymised or anonymous form) for statistical purposes to the tourism association to create and evaluate origin and age statistics to our municipality and our TVB. This forwarding is based on Art. 6 Para. 1 lit e (task in the public interest) and lit f (overriding legitimate interests) GDPR. You can object to this at any time for reasons that arise from your particular situation (Article 21 (1) GDPR).

2. Guest card

2.1 General

You have the option of using a guest card. The guest card grants you discounts and/or services at various companies in the region (e.g. discounted entrance fees). The guest card is valid for the period of your stay with us.

2.2 Issuing the guest card

The guest card is only issued and handed out by the accommodation provider at your request. Depending on the guest card system used by the TVB and/or the accommodation provider, it is either in the form of

an electronically generated guest card,
a manually created guest card or
the carbon copy of the registration form
displayed.

2.3. Processed personal data

The following personal data, which is determined from the registration data (see point 1 above), is processed for both the electronically generated and the manually created guest card:

First name, last name, date of birth and length of stay (arrival/departure), country of origin, postal code.

If the guest card is issued in the form of the “registration form”, this contains the contents in accordance with Section 5 in conjunction with Section 9 of the Registration Act (see point “Reporting data” 1.1 above). In this case, there will be no electronic processing for guest card purposes.

When using the guest card, the following personal data is also processed: data about the usage cycle of the respective card, service usage, bookings, transaction logging, billing data, reference to the registration data and the accommodation provider.

The data is necessary in order to establish identity and, on the other hand, to determine the period of validity of the guest card with the respective service provider and to enable the billing of discounts between service providers, the TVB and, if necessary, the accommodation providers.

2.4. Legal basis for the processing

The data is processed for the purposes of the guest card either based on your consent (Art. 6 Para. 1 lit. a GDPR) or, if the guest card is part of the service provision within the framework of the accommodation contract, for the purposes of fulfilling the contract (Art. 6 Para. 1 lit. b GDPR ).

You can revoke your consent at any time verbally to the accommodation provider or in writing to the email address info@apartkreidl.at.

2.5. Operation of the guest card system

The guest card system is operated by the local tourism association (“TVB”). Local accommodation providers and local companies (“service providers”) are also involved. The data processed for the guest card will be deleted after 48 (forty-eight) months.

2.6. Recipient of the data

The local TVB receives the data processed for the purposes of the guest card for the purposes of billing the service providers and/or accommodation providers. The individual service providers who offer discounted services based on the guest card also receive the data if you use the guest card services for these companies.

To take advantage of discounts, you must show the respective guest card on which the data is shown to the service provider and therefore disclose it yourself. The entrepreneur then checks whether it is (still) valid, usually by reading the barcode on the guest card and sending the barcode data to our IT processor. Personal data is also transmitted to the entrepreneur, in particular your identity data (to verify identity and date of birth).

If the guest card is issued in the form of the “registration slip”, he checks its validity based on the carbon copy of the “registration slip”.

3. Other processing of your data

In principle, we only process the data that is absolutely necessary for the conclusion of the contract or for the fulfillment of the contract. If you have given us your consent, we will process your data so that we can send you information about our services until you revoke your consent. We use the following communication channels, provided you have provided them to us: telephone, email, SMS, post or social media channels.

4. Data deletion

Your master data and other personal data will be deleted if they are no longer required to fulfill the purpose for which they were stored - usually after 7 (seven) years - or if storage becomes inadmissible for legal reasons.

Instead of deletion, the data can also be anonymized, which means that any personal reference is irretrievably removed.

5. Cookies

Our website uses so-called cookies. These are small text files that are stored on your device using the browser. They do no harm. We use cookies to make our offering user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser the next time you visit.

If you do not wish this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases.

If cookies are deactivated, the functionality of our website may be restricted.

6. Web analytics

Our website uses Google Analytics functions. Cookies are used for this purpose, which enable an analysis of the use of the website by your users. The information generated in this way is transferred to the provider's server and stored there.

You can prevent this by setting your browser so that no cookies are stored. We have concluded a corresponding order processing contract with the provider.

7. You can exercise the following rights with regard to the processing of your data:

7.1. Right to information: You have the right to find out from us whether and to what extent we process your data.

Contact/person responsible:

Charlotte Kreidl
Neu-Burgstall 328
6290 Schwendau
info@apartkreidl.at

7.2. Your rights

In principle, you have the rights to information, correction, deletion, restriction, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can complain to the supervisory authority. In Austria this is the data protection authority.

7.3. Right of appeal

If you believe that the processing of your personal data violates Austrian or European data protection law, please contact us to clarify any questions you may have. Of course, you have the right to complain to the Austrian data protection authority or a supervisory authority within the EU.

8. Confirmation of Identity:

To protect your rights and your privacy, we are entitled to request proof of identity in case of doubt.

9. Claiming rights excessively:

If you request one of the rights mentioned above for obviously unfounded reasons or particularly frequently, we are entitled to demand an appropriate processing fee or to refuse to process the request.

10. Obligation to cooperate:

As part of our obligation to cooperate, we are obliged to release data upon request in accordance with the legal provisions (e.g. BAO, Registration Act, ZPO, StPO, etc.).

11. Duration of validity:

This data protection declaration is valid from May 25, 2018 and replaces the existing data protection regulations.