1. Controller
Michael Grander
Kaiserstraße 1
6380 St. Johann in Tirol
T: +43 (0) 5352 62332
M: info@hotel-fischer.com
2. Use of our website
You can access and use our website without disclosing any personal data to us. Personal data is only stored if you provide it of your own accord, e.g. as part of an enquiry, a job application, an order or for the conclusion or performance of a contract. The data is only stored for as long as is necessary to fulfil the purpose.
2.1. Contact form
If you use the contact form on our website, we process the data you provide to us in order to handle your enquiry. This data is stored for a period of six months in case of follow-up questions. Your data will not be passed on to third parties without your consent.
2.2. Use of cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (session cookies). Other cookies remain on your device and enable us to recognise your browser on your next visit (persistent cookies).
You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or in general, and delete persistent cookies that have already been stored from your hard drive.
2.3. Use of Google Analytics for web analysis
This website uses Google Analytics, a web analysis service of Google Inc. (www.google.de). Google Analytics also uses cookies, which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. If IP anonymisation is activated on this website, however, your IP address will first be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. IP anonymisation is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website and internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by selecting the appropriate setting in your browser software.
You can prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout
2.4. Use of Matomo for web analysis
This website also uses the web analysis service Matomo. Matomo also uses cookies. These cookies enable us to analyse the use of the website. For this purpose, the usage information generated (including your truncated IP address) is transferred to our server and stored for usage analysis purposes, which serves to optimise the website. Your IP address is anonymised, so that you as a user remain completely anonymous to us. The information generated by the cookie about your use of this website is not passed on to third parties.
If you do not agree to the storage and evaluation of this data from your visit, you can deactivate this at any time with a mouse click. In this case, a so-called opt-out cookie is placed in your browser, with the result that Matomo does not collect any session data whatsoever. Please note: deleting your cookies also deletes the opt-out cookie. The setting must therefore be made again after deletion.
Your visit to this website is currently being recorded by Matomo web analytics.
2.5. Google Maps
This website uses Google Maps to display map information. When Google Maps is used, Google also collects, processes and uses data about visitors' use of the map functions. For more information on data processing by Google, please refer to Google's privacy notice at https://policies.google.com/privacy. There, in the Privacy Center, you can also change your settings so that you can manage and protect your data.
3. Purposes of processing and legal bases
We process your personal data for the purpose of providing the services you have commissioned (performance of a contract) or for carrying out pre-contractual measures. The processing of your data is based on Art. 6(1)(b) of the General Data Protection Regulation (GDPR; German: DSGVO).
We are also required to process your data in the context of statutory obligations (obligation to keep books, obligation to render accounts, documentation obligation, tax obligation) on the basis of Art. 6(1)(c) GDPR.
The data under 4.1 is strictly necessary for the conclusion or performance of the contract. If you do not provide us with this data, or only provide it incompletely, we cannot fully meet our contractual obligations or cannot conclude a contract with you. The provision of other personal data under 4.2 is voluntary.
In addition, we process your data in accordance with Art. 6(1)(f) GDPR “for the purposes of the legitimate interests pursued”. These interests lie in maintaining customer relationships and in advertising our own products and services.
4. Categories of data processed
4.1. Required personal data
Data that we need to handle enquiries, to prepare offers, to process a job application and to perform the contract, such as in particular surname and first name, address, contact information (e.g. email address, telephone number), bank details, information on the type and content of our contractual relationship.
4.2. Other personal data
Data provided with your consent or otherwise lawfully in the course of initiating the contract or during the contractual relationship, such as in particular gender, academic degree, signatory or representative authority, or other information about you that you have evidently made public yourself.
This is merely a general list. We do not have all of the data listed above in every case. For a detailed, individual statement, you have a right of access and can request this from us (see section 9, Your rights with regard to the processing of your data).
5. Use of processors
Even when we use a processor (Art. 4(8) GDPR), we remain your point of contact for the protection of your data. We only use processors outside the European Union or the EEA if there is an adequacy decision of the European Commission for the third country concerned (Art. 45 GDPR) or if appropriate safeguards (Art. 46 GDPR) are in place with the processor.
6. Disclosure of data to third parties
For the performance of the contract (e.g. preparation of offers, provision of services) and on the basis of statutory provisions, it is necessary to pass on your data to third parties such as sub-suppliers, transport companies and sub-contractors, but also, for example, to tax advisers, banks or authorities (such as the tax office). However, the type and scope of the disclosure are limited to the minimum required for the respective purpose.
7. Data deletion
Your master data and other personal data are generally deleted after the end of the contractual relationship, but at the latest after all statutory retention obligations have expired.
An overview of the most common statutory retention periods can be found on the website of the Austrian Economic Chamber (Wirtschaftskammer Österreich) at https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-speicher-und-aufbewahrungsfristen.html.
For all data covered by the Urkundenarchiv-Verordnung 2007 (Austrian Deed Archive Ordinance 2007), we are obliged to retain it for 30 years. Likewise, in order to safeguard legal, warranty and copyright claims, we retain the data required for this purpose for a period of 30 years.
For the purpose of maintaining the customer relationship, we store your personal data for the duration of the ongoing business relationship and for a further 5 years after it has ended.
Instead of deletion, the data may also be anonymised, which means that any personal reference is irretrievably removed.
If you have applied to us for a position, we store your application data for a period of one year. Your application data will only be stored in our applicant pool for a further two years if you have consented to this.
8. Profiling
No automated data processing procedure is used to analyse user behaviour. We therefore do not use so-called profiling within the meaning of Art. 4(10) GDPR.
9. Your rights with regard to the processing of your data
9.1. Right of access (Art. 15 GDPR)
You have the right to find out from us whether and to what extent we process your data.
9.2. Right to rectification (Art. 16 GDPR)
If we process incomplete or incorrect personal data about you, you can request its rectification or completion at any time.
9.3. Right to erasure (Art. 17 GDPR)
If, in your opinion, we are processing your personal data unlawfully, you can request that we erase your personal data. However, there may well be reasons that prevent immediate erasure. In particular, these are, for example, statutory retention obligations or retention obligations in order to enforce legal and warranty claims.
9.4. Right to restriction of processing (Art. 18 GDPR)
You can request the restriction of the processing of your data if you contest the accuracy of the data, for the duration of the verification; if the processing of the personal data is unlawful but you do not wish it to be erased; if we no longer need the data for the agreed purpose but you need it for the assertion/enforcement of legal claims; or if you have objected to the processing of the data.
9.5. Right to data portability (Art. 20 GDPR)
You have the right to request that the data you have provided to us be handed over in a machine-readable format, provided that the processing is based on consent or a contract.
9.6. Right to object (Art. 21 GDPR)
If the processing of your personal data serves the performance of tasks carried out in the public interest or the exercise of official authority, or if we have a legitimate interest, you can object to this data processing, provided that there is an interest worthy of protection in your personal data.
9.7. Right to lodge a complaint (Art. 77 GDPR)
If, in your opinion, the processing of your personal data infringes European or Austrian data protection law, please contact us so that we can clarify any questions.
You of course have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde). You can find the contact details of the Austrian Data Protection Authority at www.dsb.gv.at.
10. Exercising your rights
To exercise any of the above rights against us, please contact us.
Michael Grander
Kaiserstraße 1
6380 St. Johann in Tirol
T: +43 (0) 5352 62332
M: info@hotel-fischer.com
10.1. Confirmation of identity
To protect your rights and your privacy, we are entitled to request proof of identity in case of doubt.
10.2. Excessive exercise of rights
If you exercise any of the above rights in a manifestly unfounded manner or particularly frequently, we are entitled to charge a reasonable processing fee or to refuse to act on your request.
10.3. Duty to cooperate
Within the scope of duties to cooperate, we are obliged to hand over data upon request in accordance with the statutory provisions (e.g. ZPO – Austrian Code of Civil Procedure, StPO – Austrian Code of Criminal Procedure, …).
11. Period of validity
This privacy policy applies from 01.08.2019 and replaces all previously existing data protection provisions.