1. name and address of the person responsible
Hotel Seven, DDE Immobilien GbmH
Kleinsattelstraße 2, 9500 Villach
Phone: +43 4242 37 000
office@hotel-seven.at
Competent supervisory authority:
Municipality of Villach, Rathausplatz 1, 9500 Villach
1. personal data
We, DDE Immobilien GmbH, (hereinafter referred to as "Hotel Seven" or "we", "us" or "our"), collect, store, process and transmit your personal data on our website for the purposes agreed with you or if there is another legal basis in accordance with the GDPR; this is done in compliance with data protection and civil law provisions.
We only collect personal data that is necessary for the performance and processing of our services or that you have provided to us voluntarily.
Personal data is all data that contains information about personal or factual circumstances of living persons, for example name, address, email address, telephone number, date of birth, age, gender, video recordings, photographs, voice recordings of persons, but also information that only allows conclusions to be drawn about specific persons through comparison with other data. We also collect, process and store personal data of one or more special categories in accordance with Art. 9 para. 1 GDPR - for example, origin-related data in accordance with Art. 10 GDPR.
2. purposes and legal bases
We process your personal data that we collect in connection with our website for the following purposes:
-
To provide the usual website functions, such as the correct display of the website in your browser, but also to monitor the IP addresses accessing the website and the web server behind it in order to be able to guarantee its function, by our Internet provider, World4You Internet Services GmbH, based in Austria.
-
Legal basis: In accordance with Art. 6 para. 1 lit. f GDPR, we have a legitimate interest in making our website available to its visitors in a readable and operable form, which is at least as important as your interest in the confidentiality of your IP address or other identifiable data that we must process in order to make our website available to you in this form. The same applies to the legitimate interest of World4You Internet Services GmbH in protecting the functionality and security of its server.
-
Possible consequences of non-provision: If you do not provide us with your IP addresses and the date of their access for this processing purpose, this may lead to limited functionality of the website or even to it not being accessible.
-
Possible consequences of non-provision: If you do not wish to provide us with your data for this processing purpose, we can protect this right in legal or official proceedings.
-
Legal basis: In accordance with Art. 6 para. 1 lit. f GDPR, we have a legitimate interest in having a small amount of personal data that can only be traced back to you by linking it with other data evaluated by our Internet provider for statistical purposes in order to adapt our website to the needs and wishes of our visitors, which is at least as important as your interest in the confidentiality of your IP address or other identifiable data that we process for this purpose or have processed by third parties.
-
Possible consequences of non-provision: If you do not provide us with your data for this processing purpose, you will not be able to benefit from the advantages of a website adapted to your needs.
-
Collection and storage of your data by our Internet provider World4You Internet Services GmbH to fulfill the legal orders of our Internet provider in accordance with Section 12 of the Telecommunications Act (TKG), for example to monitor telecommunications traffic in accordance with Section 94 TKG in accordance with the provisions of the Code of Criminal Procedure or to fulfill the storage obligation for traffic data in accordance with Section 99 TKG, for master data in accordance with Section 97 TKG, for content data in accordance with Section 101 TKG and for location data other than traffic data in accordance with Section 102 TKG.
- Legal basis: In accordance with Art. 6 para. 1 lit. f GDPR, we have a legitimate interest in operating a website with an Internet provider that complies with the data protection provisions of the TKG and in enabling this provider to collect personal data within the scope of its legal mandates, which is at least as important as your interest in the confidentiality of the personal data collected in the process, especially since the interest of our Internet provider is based on a simple legal balancing of the interest in data protection protected by fundamental rights and important public interests - such as the administration of criminal justice.
3. your rights as a data subject
As a data subject, you have the right at any time to
-
Information about your personal data stored by us, its origin and recipients, the purposes and legal basis of the data processing and to receive a copy of the data records concerning you under the contact options specified under point 1;
-
Correction including supplementation of the personal data stored by us;
-
Data transfer to another controller, if technically possible, but otherwise in a common standard format;
-
Objection to processing in certain cases, in particular in the case of direct advertising or if we no longer have an important interest in data processing;
-
Restriction of processing in certain cases;
-
Deletion of incorrect or inadmissibly processed data.
The above rights only apply insofar as this does not contradict the applicable legal obligations, in particular the duty of confidentiality, and after any proof of your identity and verification of the proportionality of your request. Should there be any changes to your personal data, please inform us accordingly.
You have the right to withdraw your consent to the use of your personal data at any time. Your request for information, deletion, correction, objection and/or data transfer can be sent to our address stated in point 1 of this declaration, whereby we reserve the right to verify your identity by suitable means in case of doubt.
If you are of the opinion that the processing of your personal data by us violates the applicable data protection law or your data protection claims have been violated in any other way, you have the option of complaining to the competent supervisory authority. In Austria, the data protection authority is responsible for this.
4. data security
Your personal data is protected by appropriate organizational and technical precautions, including at World4You. These precautions relate in particular to protection against unauthorized, unlawful or accidental access, processing, loss, use and manipulation.
Notwithstanding our efforts to maintain an appropriately high level of due diligence at all times, it cannot be ruled out that information that you disclose to us via the Internet may be viewed and used by other persons.
Please note that we therefore accept no liability whatsoever for the disclosure of information due to errors in data transmission not caused by us and/or unauthorized access by third parties (e.g. hacking of the website, database, email account or telephone, interception of faxes).
5. processing of your data for a specific purpose
We will not process the data provided to us for purposes other than those covered by your contract, your consent or otherwise by a provision in accordance with the GDPR. Excluded from this is the further use for statistical purposes, provided that the data provided has been pseudonymized or anonymized.
6. recipient of your personal data
In order to fulfill your requests and orders, it is necessary to disclose your data to third parties. However, these are only authorities and courts based in Austria and our internet provider World4You Internet Services GmbH, which is based and stores data in Austria.
Your data will only be disclosed on the basis of the GDPR, in particular to fulfill your order or on the basis of your prior consent.
None of the above-mentioned recipients of your personal data are located outside the EU in third countries or process your personal data there, at most via processors or sub-processors. The level of data protection in other countries may not correspond to that of Austria or other EU member states. If we do transfer your personal data to third countries, we either only transfer it to countries for which the EU Commission has decided that they have an adequate level of data protection, or we take measures to ensure that all recipients comply with an adequate level of data protection, for which purpose we conclude standard contractual clauses (2010/87/EC and/or 2004/915/EC) with them before transferring the data.
7. disclosure of data breaches
We endeavor to ensure that data breaches are identified at an early stage and, if necessary, reported immediately to you or the competent supervisory authority, taking into account the respective data categories that are affected.
8. storage period for the retention of data
We will not store data for longer than is necessary to fulfill our contractual or legal obligations and for the purpose of their processing, but in particular to defend against any liability claims.
While we generally only retain data contained in contracts for a maximum of 2 years after termination of the contract in accordance with Section 6 para. 1 no. 5 DSG 2000, we retain some of this data for the maximum period for asserting claims for damages of up to 30 years. However, we retain invoice data for the processing of fee payments and other personal data contained in our books of account for 7 years from the end of the financial year in which the calendar or financial year ends for which the entry was made in the books or to which a document relates, due to the legal obligation pursuant to Section 132 (1) BAO.
9. server log files
In order to optimize this website in terms of system performance, user-friendliness and the provision of useful information about our services, the website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes your internet protocol address (IP address), browser and language setting, operating system, referrer URL, your internet service provider and date/time.
This data is not merged with personal data sources that identify you. We reserve the right to check this data retrospectively and to establish a personal reference if we become aware of specific indications of unlawful use.