Data protection

Privacy Policy Hotel AVIVA Betriebs GmbH

This privacy policy provides you with information on how Hotel AVIVA collects, uses, shares and otherwise processes your personal data as an individual guest or as a participant in a company event or as a user of our other services (brewery, alpine pasture, day guest in the wellness area).

We protect the privacy of our guests as best as possible and treat all personal data in accordance with the current provisions of European and Austrian data protection law. Personal data that you send to us as part of inquiries about data protection will only be used for the purpose of processing your request. If the designation is made in the female or only in the male form, both genders are recorded equally.

Who is responsible for processing your data and who can you contact?

Data protection officer of Hotel AVIVA Betriebs GmbH:
Christian Grünbart MMBA MSc, Managing Director of the company

Which of your data is processed and why is the data stored?

In order to fulfil our obligation under the contract concluded with you, we process the following data:

Guest master data – When you contact us, register with us or use our services, we collect general data about you in order to be able to contact you in accordance with your wishes about our offers and during a stay at the Hotel Aviva or for other services. This information is recorded: name, postal address, email address, telephone numbers, gender and date of birth. For company events (companies book the hotel as a location for an event), your employer’s data is recorded. If the stay is booked through a third party (e.g. travel agency, tour operator, online booking platform, etc.), we save the travel agent’s data.

Guest and travel information – In addition to the personal data, we collect any special requests you have for your stay (e.g. allergies, intolerances, special room requests). Your customer data is saved in our reservation system Micros Fidelio (representative for Austria: Oracle Hospitality Deutschland BV & Co KG, D-80995 Munich, Riesstrasse 25 www.oracle.com ). During your stay, all additional services consumed in the hotel (drinks, snacks, treatments, purchases from the shop, …) are recorded in the cash register and transferred to the reservation system for billing. The provider of the cash register is APRO Kassensysteme GmbH, Marktstrasse 19/7, A-3312 Oed www.apro.at . The servers for the cash register and the reservation system are located directly in the hotel and are only accessible to the management and the IT data protection officer. No further data is required for the stay. Any other data you provide (e.g. contact information for emergencies, etc.) will be stored as shown. If you book the stay on behalf of your companions, we may collect the same categories of data from them. It is your responsibility to pass on the information.

Payment information – To pay for the stay and all associated services, we collect data about the payment option and all data required to process payments. The provider for processing card payments (ATM, credit card) is Card Complete Service Bank AG, Lassalestraße 3, A-1020 Vienna, www.cardcomplete.com

Marketing purposes – in order to send you targeted, personalized advertising and to create statistics on user behavior in the search and booking process on our websites, we process:

We use Google Analytics to collect information about how you use our website, including your computer’s IP address and data that can be identified from it (such as your internet service provider and general geographic location), the unique device number and other technical information. You can read more about how Google Analytics works here . The data is collected through the use of cookies and similar technologies.

Optimization of services: To ensure you receive the best possible benefit, we store your data for the following services: obtaining feedback on your stay for quality assurance purposes, sending information about the services electronically or by post, sending congratulations (e.g. birthdays, etc.), participating in the make friends club . If you do not wish to receive information about our services, please let us know in writing.

Secure Socket Layer (SSL) – All contact forms with which you send us personal information use an encrypted and therefore secure transmission method (SSL). A secure page is recognized by the domain beginning with https:// (instead of without an “s”). Certificates are required to ensure secure transmission.

As has been the case on many websites for years, the Hotel AVIVA Betriebs GmbH website uses “cookies” and other technologies to track the individual pages visited by site visitors, analyze visitor traffic, and subsequently increase the effectiveness of online marketing. The aim is to make interested guests aware of our services in search engines, but also to make navigation as easy as possible for site visitors.

Like almost all websites, we automatically collect certain information and store it in log files. These include: Internet Protocol (IP) addresses, browser type, Internet Service Provider (ISP), referring/exit pages, operating system, date/time stamps, and clickstream data.

Links to our website are offered in email messages. When you click on the URL address, you reach our web server before you reach the website. We collect this data to measure the interest and effectiveness of communication with our customers. If you want to avoid such data being collected, simply do not click on any text or graphic links in emails.

We also use “pixel tags” (tiny image files) to provide information about which areas of our website customers have visited or to measure how effective customer searches on our website were.

Pixel tags can be used to keep email messages in a format that the reader can read. We receive information about whether emails have been opened to ensure the quality of our marketing activities.

Newsletter: To provide you with information about our hotel services, price offers and other information, we send electronic newsletters at regular intervals to the email address you have provided, provided you have registered directly on the website to receive the newsletter. Addresses that have not registered directly using the registration form on the website will not receive a newsletter (e.g. guests who have booked online, etc.). The email addresses are not intended for any other purpose. If you are not interested in receiving the newsletter, you can unsubscribe at any time on the website.

Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the data on Google’s behalf. Google will never associate your IP address with any other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Use of Facebook plugins

This website uses plug-ins from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).

When you access our website with such a plugin, a connection is established to the Facebook servers and the plugin is displayed on the website by sending a message to your browser. This transmits to the Facebook server which of our websites you have visited. If you are logged in as a member of Facebook, Facebook assigns this information to your personal Facebook user account. When you use the plugin functions (e.g. clicking the “Like” button, leaving a comment), this information is also assigned to your Facebook account, which you can only prevent by logging out before using the plugin.

For more information about how Facebook collects and uses data, your rights in this regard, and options for protecting your privacy, please see Facebook’s privacy policy.

Use of Facebook Website Custom Audiences

This website uses “Website Custom Audiences” pixels from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA.

When you visit our website, a direct connection is established between your browser and the Facebook server via this tracking pixel. Facebook therefore receives the information that you have visited this website using your IP address. This enables Facebook to associate your visit to our website with your user account. The information obtained in this way can be used to display Facebook ads. We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transmitted or how it is used by Facebook.

For more information, see Facebook’s privacy policy at https://www.facebook.com/about/privacy/ . If you do not want data to be collected via Custom Audiences, you can deactivate Custom Audiences here .

Use of AdWords Remarketing

This website uses cookies to target visitors with online advertising via remarketing campaigns at a later date in the Google advertising network. To display remarketing ads, third parties such as Google use cookies based on a visit to this website. You as a user have the option of deactivating the use of cookies by Google by visiting the Google deactivation page at https://adssettings.google.com/?hl=de .

Use of HolidayCheck widgets

Our website contains web widgets from HolidayCheck AG Bahnweg 8 CH-8598 Bottighofen Switzerland. Web widgets are small programs that are integrated into the website and display information from other websites.

The content shown on our website (reviews/recommendation rate) is always retrieved from the HolidayCheck servers. In order for this to work technically, data must be exchanged between the two servers involved. This includes the date and time of the visit; the page from which the query is made; the Internet Protocol address (IP address) used, browser type and version, device type, operating system and similar technical information.

The legal basis is our legitimate interest in accordance with Art. 6 Para. 1 f) GDPR. By providing this service, we deliver current and correct content on our homepage. The data processed is only used to provide the content or to transmit data that you provide when you submit a review directly on our website. They are not processed in any other way, in particular not to analyze usage behavior.

We do not store the above data as part of this processing. In order to be able to design the widgets, we use Google Fonts. For this purpose, your IP address is transferred to the Google servers in the USA. The EU-US Privacy Shield serves as a guarantee in accordance with Art. 45 GDPR. The legal basis is our legitimate interest in accordance with Art. 6 Para. 1 f) GDPR. By using the fonts, we ensure the consistent reproduction of the widgets. Information on data processing by HolidayCheck AG can be found in the data protection declaration on the website www.holidaycheck.de/datenschutz .

Duration of storage of your data:

Your data will be stored for as long and to the extent as is required by the contractual basis (duration of stay and accounting and economic necessity). After termination of the contract, your data will be stored for a maximum of 7 years in accordance with the statutory recording obligation. In addition, your data will be stored under the following conditions:

• based on our legitimate interest until we receive a justified objection from you, or
• based on your express consent until you revoke this consent.

Sharing your data with third parties?

Your data will not be passed on to third parties without your consent. The third parties listed above are excluded. These are: reservation systems, cash registers, travel agents, billing service providers, IT support, marketing systems, debt collection services, registration offices and in the case of specific requests from government authorities, courts and banks, provided we are forced to do so as a consequence of legal framework conditions.

Your rights:

You have the following rights at any time:

• to withdraw consent to the processing of personal data without affecting the legality of the processing carried out on the basis of the consent until the withdrawal
• to request the rectification of inaccurate personal data concerning you
• that your data will be deleted immediately if there is no longer any legal basis or requirement on our part to retain the data in question
• to request the restriction of processing
• to transmit this data to another controller (without hindrance from us) and to have your data transmitted directly from us to another controller, where technically feasible and when doing so does not adversely affect the rights and freedoms of others;
• In the event of unlawful conduct on our part, you have the opportunity to lodge a complaint with the Austrian Data Protection Authority.

Data protection measures at Hotel AVIVA

We take all security measures to the best of our knowledge and belief to protect your data from unauthorized access and use. We only store your data for as long as is necessary for operational purposes, unless we are required by law or government regulations to store it for a longer period.

We ensure that as few internal people as possible come into contact with your data.

Changes

We may change this privacy policy from time to time due to changes in our business or legal requirements. If there are any material changes to this privacy policy, we will post a notice on our website before the change takes effect and, if required by applicable law, we will notify you in other ways.

Questions

If you have any questions or complaints about the processing of your data, please contact the data protection officer:

Hotel AVIVA Betriebs GmbH, A-4170 St. Stefan-Afiesl, Höhenweg 1, Mr. Christian Grünbart, gruenbart@gsieben.at

We will respond to you in writing within 30 days of receipt.

Further information on data protection can be obtained from the Data Protection Authority of the Republic of Austria.