Data Privacy

 

Chasa Allegria

Andreas & Stefanie Walser

Wiesenweg 4

6562 Mathon

 

Telefon: +43 5444 20005

Mail: info@chasa-allegria.at

 

We use the following data when you contract with us

Base data:

First and last name, full address, all contact information (e.g., e-mail address, telephone number), information about the nature and content of our contractual relationship.

Other personal data

That you or third parties make available to us, with your consent or otherwise permissible, when the contract is initiated, during the contractual relationship (for example, to issue a guest card) or to fulfill legal obligations:

Date of birth or age, marital status, gender, profession, identity card details, bank details, subscription or representation authorization, contractual commitment, notice / cancellation deadlines or other personal information that you yourself have given us.

Attracting contract processors

The protection of your data is important to us. Even if we are a contract processor

[Company Feratel, Booking.com] – guest directory according to § 19 MeldeV), we make sure that order processing takes place within the European Union.

Financial data

Compulsory registration

Under the Austrian Reporting Act you are required to register with us using the data specified in § 5 and § 10 of the Registration Act. This concerns the following data: Name, date of birth, gender, nationality, country of origin, address and postal code and – for foreign guests – the type, number, showroom and issuing authority of a travel document and the date of arrival and departure.

Guest directory

We will keep this data in a guest directory based on the legal obligation imposed on us in accordance with § 19 of the Reporting Act Implementation Ordinance and store it for a period of 7 (seven) years, unless otherwise processed for other purposes stated in this privacy policy become.

Transfer of data

The data categories “Arrival”, “Departure” linked to the country of origin are forwarded to the municipality in which our accommodation is located in accordance with § 6 Tourism Statistics Regulation. The respective tourism association [Paznaun-Ischgl Tourist Board] to which we belong and / or the municipality also has to transmit aggregated data on the number of total overnight stays and persons obliged to pay the residence tax. This is done on the basis of § 9 Tiroler Aufenthalts-Abgabegesetz.

Additional data transmission to tourism association [Paznaun-Ischgl Tourist Board] / local community In addition, we forward your postal code and year of birth (in pseudonymised or anonymised form) to our community and our TVB for statistical purposes to compile and evaluate the source and age statistics of the Tourist Board. This transfer is based on Art. 6 (1) lit e (task in the public interest) and lit f (predominant legitimate interests) DSGVO. On the other hand, they may appeal at any time for reasons arising from their particular situation (Article 21 (1) DSGVO).

Guest card

General

You have the opportunity to use a guest card. The guest card grants you benefits and / or benefits at various companies in the region (for example, reduced entry fees). The guest card is valid for the period of your stay with us.

Issue the guest card

The guest card will be issued and issued by the accommodation provider only at your request. Depending on the guest card system used by the TVB and / or the accommodation provider, it will either be in form • an electronically generated guest card,• a manually created guest card or• the punch of the registration form displayed.

Processed personal data

For both the electronically generated and the manually created guest card the following personal data, which are determined from the registration data, are processed:First name, last name, date of birth and length of stay (arrival / departure), country of origin, zip code.If the guest card is issued in the form of the “register leaf”, this contains the content according to § 5 in conjunction with § 9 Registration Act. In this case, no electronic processing for purposes of the guest card.When using the guest card, the following personal data are also processed: data on the usage cycle of the respective card, use of services, bookings, transaction logging, billing data, reference to the registration data and the accommodation provider.The data is required to identify the identity of the guest and the period of validity of the guest card at the respective service provider and to enable the billing of the benefits between service providers, the TVB and, if necessary, the accommodation providers.

Legal basis of processing

The processing of the data for purposes of the guest card is carried out either on the basis of your consent (Art. 6 para 1 lit a DSGVO) or, if the guest card is part of the provision of services within the scope of the accommodation contract, for the purpose of fulfilling the contract (Art. 6 para 1 lit b DSGVO ).A consent can be revoked by you at any time verbally to the accommodation provider or in writing to the e-mail address [info@chasa-allegria.at].

Recipient of the data

The data processed for the purposes of the guest card is provided to the local tourist information for billing purposes to the service providers and / or accommodation establishments.The individual service providers, who grant reduced benefits on the basis of the guest card, will also receive the data as far as they use these guest card services.You must show the respective guest card on which the data are displayed to the service provider to claim benefits and thus disclose yourself. The entrepreneur then checks, usually by reading the barcode on the guest card and by transmitting the barcode data to our IT processor, if it is (still) valid. Personal data are also transmitted to the entrepreneur, especially your identity data (to verify the identity and date of birth).If the guest card is issued in the form of the “register leaf”, it checks the validity on the basis of the punch of the “register leaf”.

Other processing of your data

Basically, we only process those data which are absolutely necessary for the conclusion of the contract or for the fulfillment of the contract. If you have also given us the appropriate consent, we will process your data in such a way that we will provide you with information about our services until further notice. In doing so, we use the following communication channels, if you have given us this:Phone, Email, SMS, Post or Social Media Channels.

Data deletion

Your master data and other personal data are deleted if they are no longer necessary for the fulfillment of the purpose for which they were stored – generally after 7 (seven) years – or if the storage becomes inadmissible for legal reasons. Instead of a deletion, anonymization of the data can be made, which means that any personal reference is irretrievably removed.

Cookies

Our website uses so-called cookies. These are small text files that are stored on your device using the browser. She does not do any harm.We use cookies to make our offer user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit.If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you allow this only in individual cases.Disabling cookies may limit the functionality of our website.

Social media plug-ins

The operator uses so-called “embedded” social media plug-ins (interfaces to social networks) on the website. When visiting the website, the system automatically establishes a connection with the respective social network due to the integration of the plug-ins and transmits data (IP address, visit to the website, etc.).The data transmission happens without the intervention and outside the responsibility of the operator. The user can prevent this data transmission by logging out of the respective social networks before visiting the website. Only in the “logged in” state, the social network can assign specific data to the user’s activity profile through automatic data transfer.The automatically transmitted data is used exclusively by the operators of the social networks and not by the operator. Further information, including on the content of social network data collection, can be obtained directly from the website of the corresponding social network. There you can also change the privacy settings. The social networks included on the website are:

• Facebook (“I like it”)

Facebook Inc., 1601 S California Ave, Palo Alto, CA, 94304, USA

• Twitter

Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, United States

• Google (“+1”)

Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA

• Instagram

Instagram, LLC Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, United States

 

Your rights

In principle, you have the rights to information, correction, deletion, restriction, data portability, revocation and opposition. If you believe that the processing of your data violates data protection law or if your data protection claims have otherwise been violated in a way, you can complain to the supervisory authority. In Austria, this is the data protection authority.

Right to complain

In your opinion, if the processing of your personal data violates Austrian or European data protection law, please contact us (Chasa Allegria, Andreas & Stefanie Walser, Wiesenweg 4, 6562 Mathon>, in order to clarify any questions. to complain to the Austrian Data Protection Authority or to a supervisory authority within the EU.

Confirmation of identity

To protect your rights and your privacy, we are entitled to request proof of identity in case of doubt.

Rights claim over fee

If you claim that one of these rights is manifestly unfounded or particularly frequent, we are entitled to demand a reasonable processing fee or refuse to process the application.  

Duty to participate

Within the scope of obligations to cooperate we are obliged to provide data according to the legal regulations (for example BAO, register lar, ZPO, StPO, …) on request.

Duration

This Privacy Policy applies from 25 May 2018 and supersedes the existing Privacy Policy.