Privacy Policy

The responsible entity within the meaning of data protection laws is:

Stoaberg GmbH & Co KG
Brain Ride 6
5771 Leogang
Austria

UID: ATU83580689
Tel: 0043 (0)6583/8420

Data Protection Officer under the GDPR: Thomas Gruber

Data collection when visiting our website

When visiting our website, we regularly collect the data automatically transmitted by your browser to our web server (server logs), such as your IP address, the URLs of the websites from which you accessed our websites, the browser used, the browser language, the operating system and the surface used, the device used to access the services, the date and time of access, the pages of our websites visited and the time spent on our websites. The legal basis for processing this data is, pursuant to Art. 6(1f) GDPR, our legitimate interest resulting from the purposes listed below. We use this information to enable the retrieval and viewing of the website, to continuously improve the websites and offerings and to adapt them to the needs of our users, to conduct internal quality controls, to identify, correct and prevent errors, disruptions and possible misuse. The data is stored for a period of one year and then automatically deleted.

Cookies, web beacons and similar methods

Like almost all service providers, we use cookies, web beacons or similar methods when you visit our websites or use our offerings.

Cookies are small text files that are stored by your browser on your computer or mobile device, and which may also enable recognition of your computer or device across different websites. The cookies do not contain any personal data. Some of the cookies we use are deleted again after the end of the browser session, i.e. after closing your browser (so-called session cookies or session cookies). Other cookies remain on your device and enable us or our partner companies to recognize your browser upon your next visit (persistent cookies).
You can prevent the use of cookies by adjusting your browser settings accordingly. However, it is possible that certain areas of the websites or services will not function properly as intended.
Web beacons are small graphic files („pixels“) that can be embedded in our website and can be used to track user behavior. Similar methods include Flash cookies, HTML5 cookies, or other local storage methods (browser- or device-specific) in which, similar to cookies, data can be stored in your browser or device to recognize your browser or device the next time you visit or during a session.
The use of cookies and similar methods allows us to collect information about users in order to make their use of the websites easier and more comfortable, or to enable certain offers to be made available to them.
We use cookies, among other things, for the following booking function, inquiry function, voucher shop
The service providers we use for web analytics, retargeting and conversion tracking may also use cookies (see below).

Contact form

If you contact us using the contact options offered, some personal data such as name, address, contact and communication details such as phone number and email address will be collected so that they can be used to process and answer your request and for any follow-up questions. The data processing is carried out in accordance with Article 6(1b) GDPR. Personal data processed by us in the context of a general contact request via email or contact form will only be stored for as long as is necessary for the respective correspondence, usually for a period of one year after your request has been answered.

Direct booking option and booking requests on the hotel website

Personal data requested by us in connection with a room booking will only be stored for as long as is necessary for the contract processing and any subsequent contractual correspondence (usually one year), or in the case of documents relevant to commercial and/or tax law that contain personal data, for as long as the statutory retention periods of the Commercial Code and the Tax Code require the retention of these documents (usually 6 to 10 years). Legal basis for the processing of personal data in connection with a room booking: Personal data processed in connection with a room booking are necessary for the fulfillment of the corresponding contract, Article 6(1b) GDPR. We also process booking data in accordance with Art. 6(1f) GDPR based on our legitimate interests in fraud prevention, the enforcement of our legal claims, for accounting and risk management purposes. In accordance with Art. 6(1c) GDPR to fulfill legal obligations, e.g. to comply with commercial and tax retention obligations or to fulfill obligations to disclose data based on a final court decision or regulatory order.

Direct booking option on a hotel website, combined with direct advertising via newsletter:

If you have signed up for our newsletter, we will regularly send you a newsletter and marketing emails via email, in which we inform you about offers and updates from our company. The legal basis in this case is your consent pursuant to Art. 6(1a) GDPR. Furthermore, we use your email address provided during a booking for direct marketing purposes for similar offers from us, unless you have already objected to this use. The legal basis in this case is our legitimate interest in direct marketing pursuant to Art. 6(1f) GDPR.

You can revoke your consent to receive such emails at any time and free of charge, or object to the receipt of such emails, e.g. via the unsubscribe link in our emails. Your email address will be stored for the newsletter for as long as it is not objected to its use.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter: Google). The legal basis is our legitimate interest pursuant to Art. 6(1f) GDPR in analyzing and evaluating the use of our website.
Google Analytics uses so-called „cookies“, which are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be abbreviated by Google beforehand within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address provided by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by adjusting your browser settings accordingly; however, we point out that in this case you may not be able to use all the functions of this website to the full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: The current link is http://tools.google.com/dlpage/gaoptout?hl=de
In addition to or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages.

Disable Google Analytics

In doing so, an opt-out cookie is installed on your device. This prevents the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.
The personal data collected by Google, linked to cookies, user IDs or advertising IDs (e.g., DoubleClick cookies, Android Advertising ID, Apple Advertising ID), is automatically deleted after 14 months.
Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield., https://www.privacyshield.gov/EU-US-Framework.

Use of Google Webfonts

For the purpose of designing and optimizing our pages according to demand, we use external fonts (fonts) embedded by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA („Google“) based on Art. 6(1f) GDPR. Your internet browser automatically establishes a connection to servers of Google, where the aforementioned data is transmitted by your browser to Google. If you have a user account with Google and are logged in to Google, your data may be associated with your account by Google. We have no influence on this data transfer and the further data processing by Google.
Further information about the purpose and scope of data collection and its processing by Google, as well as your rights and options for protecting your privacy, can be found here: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield., https://www.privacyshield.gov/EU-US-Framework

Use of Google Maps

On our site, we use the component „Google Maps“ for the purpose of adapting our website to meet user needs in accordance with Art. 6(1f) GDPR. Each time the „Google Maps“ component is called up, Google sets a cookie to process user settings and data when displaying the page on which the „Google Maps“ component is integrated. This cookie is not usually deleted by closing the browser; it expires after a certain period of time unless it is manually deleted by you beforehand.
By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the aforementioned data is transmitted to Google by your browser. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in with Google, your data are directly associated with your account. If you do not wish to be associated with your profile with Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or to tailor its website. Such analysis takes place, in particular (even for non-logged-in users), to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

Further information about the purpose and scope of data collection and its processing by Google, as well as your rights and options for protecting your privacy, can be found here: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield., https://www.privacyshield.gov/EU-US-Framework.

Embedded YouTube videos

This website incorporates a „YouTube plugin“ into its information offering. This YouTube software uses cookies to collect data and to perform statistical data analysis. YouTube uses cookies, among other things, to collect reliable video statistics, to prevent fraud, and to improve user friendliness. The website operator receives statistical data from YouTube cookies regarding the access to individual videos embedded in the website without any connection to the respective user. The legal basis for the use of YouTube plugins is our legitimate interest in an interesting and demand-oriented website in accordance with Art. 6(1f) GDPR.

Design of our website. We use embedded YouTube videos in expanded privacy mode. This means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos are the data mentioned below transmitted. We have no influence on this data transmission.
By playing the video, YouTube receives the information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned above under „Server log files“ is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in with Google, your data is directly associated with your account. If you do not wish for the association to be made with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and/or to tailor its website. Such analysis takes place in particular (even for non-logged-in users) to provide demand-oriented advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.

Further information about the purpose and scope of data collection and its processing by
You can find YouTube's privacy policy here. There you will also find further information about your rights and the settings you can use to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield., https://www.privacyshield.gov/EU-US-Framework.

Social Plugins

We use sharing features on our website with the following social media providers:
Facebook: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA, http://de-de.facebook.com/about/privacy/
Further information about data collection: http://www.facebook.com/about/privacy/your-info-on-other#applications as well http://www.facebook.com/about/privacy/your-info#everyoneinfo.
Facebook has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework
Google+: Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA, https://www.google.com/policies/privacy/partners/?hl=de Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework
Instagram: Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA
https://help.instagram.com/155833707900388/
Instagram has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework
USA („Pinterest“) https://developers.pinterest.com/docs/getting-started/introduction/
Pinterest has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework
Through the plugins, we offer you the opportunity to interact with social networks and other users, so that we can improve our offerings and make them more interesting for you as a user. The legal basis for the use of the plugins is Art. 6(1f) GDPR.

We use the so-called two-click solution. This means that when you visit our site, no personal data is generally transmitted to the providers of the plugins. You can recognize the provider of the plugin by the marking on the box above its initials or the logo. We offer you the option of communicating directly with the plugin provider via the button. Only when you click on the marked field and thereby activate it, does the plugin provider receive the information that you have accessed the corresponding website of our online offering. Additionally, the log data mentioned above is transmitted. These include, for example:
– Address of the website where the activated link is located,
– Date and time of the call to the website or the activation of the link,
– Information about the browser used and the operating system used,
– IP address.

By activating the plugin, personal data is therefore transmitted from you to the respective plugin provider and stored there (in the case of US-based providers in the USA).
To the extent that you are logged in at the respective social media provider at this time, it may be possible for this provider to associate your visit to our website and your further interaction with the social media provider (e.g., clicking the „Like“ button) with your user profile (e.g., your Facebook account).

We have no influence over the data collected or the data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, or the retention periods. We are also not aware of any information regarding the deletion of the collected data by the social media provider. For more information about the purpose and scope of data collection and its processing by the social media provider, please refer to the privacy statements of these providers, which are provided above. There you will also find further information about your rights and options for protecting your privacy in this regard.

The servers of the social media services are located in the USA and other countries outside the European Union. The data can therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that generally do not protect personal data to the same extent as in the Member States of the European Union.

Conversion Tracking

We use the services of external advertising partners to make our offers more visible on external websites using advertising tools. We also use marketing tools to determine the success of individual advertising campaigns („conversion tracking“).
We do this in order to track the interest in displaying advertisements that are of interest to you, to make our website more interesting for you and to achieve fair calculation of advertising costs. The legal basis is Art. 6(1f) GDPR.
In addition, cookies and web beacons are set by our advertising partners (see above) to measure certain performance metrics, such as the number of times ads are displayed or the number of clicks by users. These cookies are not intended to identify you personally. As long as the cookie is valid, the advertising partner can recognize that you have clicked on an ad and have reached a specific destination page (e.g., form submission, confirmation page, newsletter registration). The cookie generates conversion statistics for the advertising partner. These statistics record the number of users who clicked on one of our ads. Additionally, they count how many users have reached a destination page that has been equipped with a „conversion tag“ (remarketing tag, see above). However, these statistics do not contain any data that can be used to identify you.
We do not collect or process any personal data in the aforementioned advertising activities. We only receive statistical evaluations from our advertising partners. Using these evaluations, we can identify which advertising measures are particularly effective. We do not receive any further data from the use of the advertising materials; in particular, we cannot identify users based on this information. Due to the conversion tracking tools used, your browser automatically establishes a direct connection to the server of the advertising partners. We have no influence on the scope and further use of the data collected by the advertising partners through the use of this tool. By integrating the marketing tools, the advertising partner receives the information that you have accessed the relevant part of our website or clicked on an advertisement from us. If you are registered with our advertising partner (e.g., Facebook or Google), the advertising partner can associate the visit with your account. Even if you are not registered or have not logged in, there is a possibility that the provider will obtain and store your IP address.

We use conversion tracking from the following advertising partners:
Google Adwords
Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA
Further information about data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org visit. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can prevent conversion tracking by Google Adwords by disabling the conversion tracking cookies by setting your browser to block cookies from the domain „www.googleadservices.com“., https://www.google.de/settings/ads, where these settings are deleted when you delete your cookies, or permanently stored in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin deactivate.

Facebook

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA Further information on data protection at Facebook can be found here: http://de-de.facebook.com/about/privacy/ . If you do not want Facebook to associate the collected information with your Facebook account, you can disable this here: https://www.facebook.com/settings/?tab=ads
To do this, you must be logged into Facebook. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

The UK Trade Desk Ltd.

On this website, we use The Trade Desk tool from The UK Trade Desk Ltd. (Co. No. 8539108), 10th Floor, 1 Bartholomew Close, London EC1A 7BL, United Kingdom, which collects data for analytical, marketing and optimization purposes and helps us improve our marketing efforts and our website or app. The data collected is used by The Trade Desk to link advertising contacts and clicks on advertisements with the resulting use of our website. In this way, we can determine whether internet users who have seen our ads visit our website and for which products and content they are interested. Through The Trade Desk’s technology, we can also recognize the users of our website and, in future advertising contact, customize the advertisements in the content to your interests (e.g., products viewed and information). The analysis of advertising contacts and the content viewed on our website help us to more efficiently use our advertising budget. To collect data, pseudonymous online identification numbers are used. No unique user-related data such as name or address are stored in this context. All the IDs we use only allow us to recognize your end device, your internet browser, or the app you are using. The collected data will not be used to personally identify you as a user of our website or app without your separate consent. The legal basis for the processing of the aforementioned data is our legitimate interest in the aforementioned purposes, pursuant to Art. 6 (1) (f) GDPR. If you do not wish to have data collected by The Trade Desk, you can object HERE https://www.adsrvr.org/().

Further information about the technology used by The Trade Desk and about data protection can be found at the following link: http://thetradedesk.com/general/privacy-policy

Use of Google Remarketing

Our websites use so-called „retargeting tags“ to display interest-based advertising on third-party websites. The legal basis is our legitimate interest in advertising activities pursuant to Art. 6(1f) GDPR.
A retargeting tag is a JavaScript element that is placed in the source code of a website. When a user visits a page on such a website that contains a retargeting tag, an online advertising provider („retargeting provider“, e.g., Google, Facebook) places a cookie on the user’s computer and adds it to corresponding retargeting target lists. The respective retargeting providers use the cookie to collect interest data (e.g., the pages visited on our website or search queries) using pseudonyms. Based on this information, interest-related advertising is then displayed by the retargeting providers. No directly personal data is stored and no usage profiles are created with personal data about you. However, the retargeting provider may be able to identify you and associate your usage behavior on our website with you, especially if you are a registered user of the retargeting provider (e.g., by having a Google or Facebook account).

We use the following retargeting providers:
Facebook Retargeting
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA Your IP address and the pages you view on the GoEuro website are transmitted to Facebook. You can find more information about data processing by Facebook and your rights and options to protect your personal data in the Facebook privacy policy at: http://de-de.facebook.com/about/privacy/
If you do not want Facebook to associate the collected information with your Facebook account, you can disable the retargeting features here:
https://www.facebook.com/settings/?tab=ads
To do this, you must be logged into Facebook.
Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

Google Remarketing (DoubleClick)

Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA. Users of this website can disable the use of cookies by Google and retargeting by changing their settings in the „Google Ad Preferences“ (http://www.google.com/ads/preferences/) To learn more about the data processing by Google, please see https://www.google.com/intl/en/policies/technologies/ads/ and https://policies.google.com/privacy/partners
Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

When registering to receive our newsletter, the data you provide is exclusively used to send you a newsletter and marketing emails with advertising and information about our offers via email on a regular basis. Subscribers can also be informed by email about circumstances relevant to the service or registration (for example, changes to the newsletter offering or technical issues).
For an effective registration, we require a valid email address. To verify that a registration has actually been made by the owner of an email address, we use the „double-opt-in“ procedure. To do this, we log the order of the newsletter (the data entered in the registration form, such as address, first name, last name, e-mail), the sending of a confirmation email, and the receipt of the response requested therein. No further data is collected. The data is used exclusively for the newsletter delivery.

The legal basis for data processing is your consent pursuant to Art. 6(1a) GDPR.
You can revoke your consent to the storage of your personal data and their use for the newsletter distribution at any time. A corresponding link can be found in each newsletter. In addition, you can revoke your consent via the additional contact options provided on the website. Your data will then be deleted immediately from our system.

Competition

On our website you have the opportunity to participate in an in-house prize draw. The data provided in the prize draw form is used exclusively to determine a winner/winners. We record the filled in entry form (data entered in the input form, such as title, first name, last name, e-mail, postal address), the sending of a confirmation email and the receipt of the answer requested. No further data is collected. The data is used exclusively for the duration of the prize draw and is not passed on to third parties. After the prize draw has ended, your data will be deleted. The legal basis is Art. 6(1b) GDPR.

Data recipients

We use external service providers, in particular technical and commercial service providers. These include, in particular, hosting providers, statistics and analysis services, service desk and support data management providers, CRM system providers, newsletter delivery providers, voucher ordering providers, spam and abuse prevention providers, and IT maintenance and development service providers. The service providers act solely on our behalf and are not permitted to process personal data for their own purposes. As part of a booking, we transmit data to payment service providers and financial authorities.
as well as the local administration. The data processing may also result in the transfer of data to data recipients outside the European Union. The data transfer takes place to the extent that it complies with the principles of the so-called Privacy Shield (https://www.privacyshield.gov/welcome) or on the basis of so-called standard contractual clauses of the European Commission (http://ec.europa.eu/justice/data-protection/international-transfers/transfer/index_en.htm).

Your rights

In addition to the right to revoke any consent granted to us, you are entitled, subject to the relevant legal requirements, to the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR, and the right to data portability under Article 20 GDPR.
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data that takes place on the basis of Art. 6(1f) GDPR (Art. 21(1) GDPR).
To the extent that we process your personal data for direct marketing purposes in accordance with Art. 6(1f) GDPR, you have the right to object at any time, without giving reasons (Art. 21(2) GDPR).
Furthermore, there is a right of appeal to data protection supervisory authorities pursuant to Article 77 of the GDPR.

Questions about data protection

If you have any questions about data protection, please write us an email at
info@das-stoaberg.com