Privacy Policy

1. Controller

The controller for data processing on this website is:

For any data protection questions you can reach us at this email address at any time.

2. Your rights

With regard to the data we store, you generally have the following rights:

• ›Right of access (Art. 15 GDPR)
• ›Right to rectification (Art. 16 GDPR)
• ›Right to erasure (Art. 17 GDPR)
• ›Right to restriction of processing (Art. 18 GDPR)
• ›Right to data portability (Art. 20 GDPR)
• ›Right to object (Art. 21 GDPR) and the right to withdraw consent at any time

If you believe that the processing of your data breaches data protection law, you can lodge a complaint with the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, dsb.gv.at.

3. Hosting and server log files

This website is hosted by a service provider that processes the data on our behalf (processing on behalf of a controller pursuant to Art. 28 GDPR). When the website is accessed, the server automatically stores information in what are known as log files:

• ›IP address of the accessing device
• ›date and time of access
• ›page or file accessed
• ›browser type, browser version and operating system
• ›volume of data transferred and access status

This data is technically necessary in order to deliver the website, ensure its stability and security and investigate misuse. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. This data is not merged with other data sources.

4. Cookies

This website uses cookies. We set technically necessary cookies on the basis of our legitimate interest (Art. 6(1)(f) GDPR) and all others only with your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time. Details on the purpose and storage period of the individual cookies can be found in our Cookie PolicyCookie settings.

5. Online booking and voucher purchase

For slot bookings and voucher sales we use an external booking system embedded in our pages. In doing so we process the data you enter – in particular name, email address, telephone number, room selected, date, group size, any comments, and payment and invoicing data.

This processing is necessary for the performance of the contract with you (Art. 6(1)(b) GDPR). The provider of the booking system and the payment service provider act as processors or, in the context of payment handling, as controllers in their own right.

We retain booking and invoicing data for the duration of the statutory retention periods (in Austria generally seven years pursuant to §132 of the Federal Fiscal Code).

6. Contact forms, email and telephone

If you contact us via a form on this website, by email or by telephone, we process the data you provide – such as name, email address, telephone number, company and your message – exclusively in order to handle your enquiry and any follow-up questions.

The legal basis is Art. 6(1)(b) GDPR for enquiries connected with a booking or a contract, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR). We do not pass this data on without your agreement and delete it as soon as the enquiry has been concluded and no statutory retention obligations stand in the way.

7. Fonts

This website uses web fonts in order to display text consistently. If these fonts are loaded from an external provider, your IP address is transferred to that provider's server in the process. The legal basis is our legitimate interest in a consistent presentation (Art. 6(1)(f) GDPR).

8. Maps and external links

We do not embed any interactive map application automatically. On the contact page we merely link to a map service; data is only transferred to the respective provider once you actively click that link. The same applies to links to our social media profiles. Only the operators of the linked pages are responsible for the data processing that takes place there.

9. Retention period

We store personal data only for as long as is necessary for the respective purpose or as provided for by statutory retention periods. After that the data is deleted or anonymised.