Privacy Policy & Cookies

Privacy Policy
The protection of your personal data is of particular importance to Hotel Das Kaiserblick. We process your personal data exclusively on the basis of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Telecommunications Act (TKG).

This Privacy Policy informs you about which personal data is processed when you visit our website, the purposes for which it is processed and the rights you have.

1. Controller
Hotel Das Kaiserblick Künig GmbH & Co KG
Kirchbichl 5
6352 Ellmau
Austria

Phone: +43 (0) 5358 2230
Email: office@kaiserblick.at
Website: www.kaiserblick.at

2. General information on data processing
We process personal data exclusively within the framework of the applicable legal provisions and only insofar as this is necessary to provide our website, process your enquiries, handle bookings or on the basis of your consent.
Personal data includes any information that can be used to identify you personally. This includes, for example:

• Name
• Address
• Telephone number
• Email address
• Booking data
• Payment information
• IP address
• Usage data

Processing is carried out in particular on the basis of:

• Art. 6 (1) (a) GDPR (consent)
• Art. 6 (1) (b) GDPR (contract or pre-contractual measures)
• Art. 6 (1) (c) GDPR (legal obligation)
• Art. 6 (1) (f) GDPR (legitimate interest)

3. Hosting
Our website is hosted by:

Hetzner Online GmbH
Industriestraße 25
91710 Gunzenhausen
Germany

For the purpose of securely providing the website, Hetzner processes personal data on our behalf in accordance with Art. 28 GDPR.
Further information can be found in Hetzner's privacy policy.

4. Server log files
When you visit our website, information transmitted by your browser to our server is automatically collected.

This includes in particular:

• IP address
• Date and time of access
• Browser type and browser version
• Operating system
• Referrer URL
• Pages accessed
• Amount of data transferred
• HTTP status code

This data is used exclusively for technical security, error analysis and to ensure the trouble-free operation of our website.
The legal basis for this processing is Art. 6 (1) (f) GDPR.
The log files are stored only for as long as necessary to ensure the operation of the website.


5. Cookies
Our website uses cookies and comparable technologies.
Cookies are used to make our website more user-friendly and to provide certain functions.

We distinguish between:

• Technically necessary cookies
• Statistics cookies
• Marketing cookies

Technically necessary cookies are used on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
Statistics and marketing cookies are used exclusively with your express consent pursuant to Art. 6 (1) (a) GDPR.


6. Cookie consent (ClickKeks)
We use the ClickKeks consent management platform to manage your cookie settings.
When you visit our website for the first time, you can select which categories of cookies you wish to allow.
Your consent is stored and can be withdrawn or changed at any time with effect for the future via the cookie settings.

The following information, among other data, is processed:

• Consent status
• Time of consent
• Browser information
• Pseudonymised IP address
• Consent ID

Processing is carried out on the basis of Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR in order to comply with our legal documentation obligations.


Contact
If you contact us via our contact form, by email or by telephone, we process the personal data you provide exclusively for the purpose of handling your enquiry.
Depending on the nature of your enquiry, the following data in particular may be processed:

• Name
• Email address
• Telephone number
• Content of your message
• Information provided voluntarily

The legal basis for this processing is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in processing your enquiry).

The data is stored only for as long as necessary to process your enquiry or for as long as statutory retention obligations apply.

8. Online bookings
You have the option of booking your stay directly online via our website.
As part of the booking process, we process the personal data you provide, in particular:

• First and last name
• Address
• Email address
• Telephone number
• Arrival and departure date
• Number of guests
• Services booked
• Individual requests or messages

The data is processed exclusively for the purpose of processing your booking, fulfilling the contract and complying with legal obligations.

Legal basis
Art. 6 (1) (b) GDPR (contract)
Art. 6 (1) (c) GDPR (legal obligation)

The data is stored only for as long as necessary for the performance of the contract and to comply with statutory retention obligations.

9. Deposit payments and online payments
For deposit payments and online payments, we use the payment service provider Global Payments Europe.
When you make a payment, the data required to process the payment is transmitted directly to Global Payments Europe.

This may include in particular:

• Name
• Billing address
• Payment amount
• Booking reference
• Credit card information
• Transaction data

We do not store complete credit card details ourselves.

The data is processed exclusively for the purpose of processing the payment.

Legal basis
Art. 6 (1) (b) GDPR.

Further information can be found in the privacy policy of Global Payments Europe.

10. Voucher shop
You can purchase gift vouchers via our website.

For this purpose, we process the following data in particular:

• Name
• Billing address
• Email address
• Voucher value
• Payment information

The data is processed exclusively for the purpose of processing your order and issuing and delivering the voucher.
Payments are processed via Global Payments Europe.

Legal basis
Art. 6 (1) (b) GDPR.

11. Contact form
If you use our contact form, the data you enter will be processed exclusively for the purpose of handling your enquiry.

This includes, for example:

• Name
• Email address
• Telephone number
• Content of your message

The data will not be disclosed to unauthorised third parties.

Legal basis
Art. 6 (1) (b) GDPR.

12. Table reservations
You can reserve a table in our restaurant via our website.

For this purpose, we process the following data in particular:

• Name
• Telephone number
• Email address
• Requested reservation date and time
• Number of persons
• Voluntary messages

The data is processed exclusively for the purpose of handling your reservation.

Legal basis
Art. 6 (1) (b) GDPR.

13. Conference and event enquiries
If you submit an enquiry for a conference or event via our website, we process the data you provide exclusively for the purpose of handling your enquiry.

This includes in particular:

• Name
• Company
• Telephone number
• Email address
• Event details
• Number of participants
• Individual requirements

Legal basis
Art. 6 (1) (b) GDPR.

14. Applications
You have the option of applying for open positions or submitting a speculative application via our website.

For this purpose, we process the following data in particular:

• Name
• Contact details
• Application documents
• CV
• Certificates
• Other information provided voluntarily

The data is processed exclusively for the purpose of carrying out the application process.

If no employment relationship is established, your application documents will be deleted in accordance with the applicable legal requirements, unless you have expressly consented to their storage for a longer period.

Legal basis
Art. 6 (1) (b) GDPR.

15. Newsletter
You can subscribe to our newsletter.
We use the services of Rapidmail GmbH to send our newsletter.
After registering, you will receive a confirmation email as part of the double opt-in procedure. Your email address will only be added to our newsletter mailing list once you have confirmed your registration.

The following data in particular is processed for the purpose of sending the newsletter:

• Email address
• Time of registration
• IP address
• Time of confirmation

The data is processed exclusively on the basis of your consent.

Legal basis
Art. 6 (1) (a) GDPR.
You may withdraw your consent at any time with effect for the future. You will find an unsubscribe link in every newsletter.

16. Hotel app
We provide our guests with a hotel app offering information and services related to their stay.

Depending on how the app is used, the following data in particular may be processed:

• Device information
• Operating system
• IP address
• Usage data
• Location data (only with your express consent)
• Push notification settings

The data is processed exclusively for the purpose of providing the app functions and, where you have given your consent, sending push notifications.

You can change or withdraw permission for location services or push notifications at any time in the settings of your mobile device.

The legal basis is Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR.


17. Hotel Wi-Fi
During your stay, you can use our free Wi-Fi.

Technically necessary connection data is processed for the operation of the Wi-Fi, in particular:

• IP address
• MAC address
• Time of connection
• Duration of connection

The data is processed exclusively for the purpose of providing the Wi-Fi and ensuring network security.

The legal basis is Art. 6 (1) (f) GDPR and the relevant statutory provisions.


18. Google Analytics
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited.

Google Analytics helps us analyse the use of our website and continuously improve our online services.

For this purpose, cookies are used and information about your use of the website is processed.

The data is processed exclusively after you have given your consent via our cookie consent tool.

The legal basis is Art. 6 (1) (a) GDPR.
Further information can be found in Google's privacy policy.


19. Google Ads and remarketing
We use Google Ads and Google Remarketing to advertise our website and display interest-based advertising to you.

For this purpose, cookies may be set and usage data may be processed.

The data is processed exclusively on the basis of your consent pursuant to Art. 6 (1) (a) GDPR.


20. Meta Pixel
With your consent, we use the Meta Pixel provided by Meta Platforms Ireland Limited.

The Meta Pixel enables us to analyse the effectiveness of our advertisements on Facebook and Instagram and to optimise our marketing activities.

The data is processed exclusively on the basis of your consent pursuant to Art. 6 (1) (a) GDPR.


21. YouTube
Videos from the YouTube platform are embedded on our website.
When you play a video, a connection to Google's servers may be established. Personal data may be processed in the process.

Where technically possible, YouTube videos are embedded using YouTube's privacy-enhanced mode.
The data is processed exclusively on the basis of your consent.

The legal basis is Art. 6 (1) (a) GDPR.


22. Pinterest
Our website contains content and functions from the Pinterest social network.

Personal data may only be transmitted to Pinterest after you have given your consent.

The legal basis is Art. 6 (1) (a) GDPR.


23. Google Fonts
Google Fonts are used on our website.

When the fonts are loaded, a connection to Google's servers is established. In particular, your IP address may be transmitted to Google.

Google Fonts are used exclusively after you have given your consent via our cookie consent tool.

The legal basis is Art. 6 (1) (a) GDPR.


24. WhatsApp
Our website provides a link to contact us via WhatsApp.
A connection to WhatsApp's servers is only established when you click on the link.
WhatsApp is solely responsible for the processing of personal data by WhatsApp.


25. Accessibility
To support digital accessibility, we use the accessibility tool provided by iubenda.

Depending on how the tool is used, technically necessary data may be processed in order to provide the selected accessibility functions.

Where personal data is processed for this purpose, the processing is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR in making our online services accessible.


26. Storage period
We store personal data only for as long as necessary for the respective purposes or for as long as statutory retention obligations apply.

Once the respective purpose no longer applies or statutory retention periods have expired, the data will be deleted unless further statutory retention obligations prevent its deletion.


27. Recipients of personal data
Personal data is only disclosed insofar as this is necessary for the performance of a contract, there is a legal obligation to do so or you have expressly given your consent.

Recipients may include in particular:

• Hosting service providers
• Payment service providers
• Newsletter service providers
• IT service providers
• Authorities and courts within the scope of statutory obligations

To the extent that services provided by companies based outside the European Union are used, personal data may be transferred to third countries.

Where necessary, data transfers are made on the basis of an adequacy decision by the European Commission or appropriate safeguards, in particular the standard contractual clauses pursuant to Article 46 of the GDPR.


28. Data transfers to third countries
Where services provided by companies based outside the European Union are used, personal data may be transferred to third countries.

Where required, such data transfers are carried out on the basis of an adequacy decision by the European Commission or appropriate safeguards, in particular the Standard Contractual Clauses pursuant to Art. 46 GDPR.


29. Your rights
You have the right at any time to:

• Access your stored personal data
• Rectification of inaccurate data
• Erasure of your data
• Restriction of processing
• Data portability
• Object to processing
• Withdraw consent previously given with effect for the future

In addition, you have the right to lodge a complaint with a data protection supervisory authority.

In Austria, this is:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria


30. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy in the event of changes to our website, new legal requirements or new technical developments.

The version published on our website at the time of your visit shall apply.