Data protection

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

HOTEL ZUR POST GmbH Maxglaner Hauptstrasse 45, A-5020 SALZBURG Tel. +43 (0) 662 / 83 23 39 – 0 Fax +43 (0) 662 / 83 23 39 – 5 Email: info@hotelzurpost.info

2. General Information on Data Processing

The protection of your personal data is important to us. We process personal data exclusively in accordance with the GDPR, the Austrian Data Protection Act (Datenschutzgesetz – DSG) and other applicable legal provisions (e.g. the Telecommunications Act, the Artificial Intelligence Act).

Personal data is any information relating to an identified or identifiable natural person (e.g. name, email address or IP address).

Personal data may be processed when you visit and use this website. Depending on the functions you use, cookies may also be set and third-party services embedded. The applicable legal basis is stated in the relevant section for each processing operation. Details of the services used can be found under Section 6 (Integrated Services and Tools).

3. Hosting

This website is hosted by the following provider:

Framer B.V., Rokin 75, 1012 KL Amsterdam, Netherlands.

When you access the website, the provider processes the technically necessary access data (see Section 4) on our behalf for the purpose of providing the website and ensuring its technical functionality. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider, ensuring that processing complies with data protection law. The legal basis for this processing is our legitimate interest in the secure and efficient provision and operation of the website (Art. 6(1)(f) GDPR). The provision of personal data is neither required by law or contract nor necessary for the conclusion of a contract; however, displaying the website is not possible without the provision of this data.

4. Access Data / Server Log Files

Each time the website is accessed, technical data transmitted by your browser is automatically recorded. This includes in particular:

the IP address of the accessing device
the date and time of access
the page or file requested
the volume of data transferred
the browser type and operating system used
the previously visited page (referrer), where transmitted

This data is technically necessary in order to deliver the website correctly, to ensure its stability and security and to defend against attacks. This data is not merged with other data sources, nor is it analysed for marketing purposes.

5. Storage Period

We store personal data only for as long as is necessary for the purposes stated or for as long as statutory retention obligations exist. Technical access data is deleted or anonymised after a short period, as soon as it is no longer required for the operation of the website.

6. Integrated Services and Tools

The services and tools listed below are used on this website. For each service, we provide information on the provider, the purpose, the data processed, the legal basis and the storage period.

Fonts

Provider / delivery: The fonts used are delivered locally via the hosting of this website. No connection to third-party servers (e.g. Google) is established when the fonts are loaded.
Purpose: consistent and appealing presentation of the content.
Data processed: none beyond the access data referred to in Section 4 (server log files) — the font files are loaded via the hosting like any other file on this website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent presentation). The provision of personal data is neither required by law nor by contract. Failure to provide the data would mean that the visual presentation of the website is not possible.
Transfers to third countries: none.
Storage period: stored until the request has been fully processed and provided that no statutory retention obligations apply. The information on the storage period for server log files applies.

Online Booking via Seekda

For the online booking of our rooms, we redirect you to the booking system operated by seekda GmbH (Komschweg 2, 1220 Vienna, Austria).

When you make a booking, you leave our website. The personal data entered there (name, address, payment data, travel details) is collected and processed directly by Seekda or transmitted by Seekda to us for the performance of the contract. The legal basis for the processing of this data is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures). Further information on data protection at Seekda can be found in the privacy policy on the Seekda booking page.

7. Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol in your browser's address bar and by the prefix "https://".

8. Your Rights as a Data Subject

You have the following rights with regard to your personal data:

right of access (Art. 15 GDPR)
right to rectification of inaccurate data (Art. 16 GDPR)
right to erasure (Art. 17 GDPR)
right to restriction of processing (Art. 18 GDPR)
right to data portability (Art. 20 GDPR)
right to object to processing (Art. 21 GDPR)
right to withdraw consent given, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, an informal message to the contact details listed under Section 1 is sufficient.

9. Right to Lodge a Complaint with the Supervisory Authority

If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with the supervisory authority. The competent authority in Austria is:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde) Barichgasse 40-42, 1030 Vienna Email: dsb@dsb.gv.at Web: www.dsb.gv.at