Privacy policy

The person responsible under data protection law for the processing of your personal data on our website is Hotel Moosmair in the person of its legal representative Helmut Ebenkofler. The data of Hotel Moosmair can be found in the imprint. Whenever this privacy policy refers to "we", "us", "our" or similar, Hotel Moosmair is meant.

General

We take the protection of your personal data very seriously. We process your personal data in accordance with the legal data protection regulations (data protection declaration within the meaning of Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and on the repeal of Directive 95/46/EC - basic data protection regulation). This privacy policy informs you about the purposes for which your personal data are processed, the processing duration, the relevant legal basis, the categories of recipients, if any, your rights under data protection law (so-called "data subject rights") and other data protection circumstances of the processing of your personal data. As a rule, it is possible to use our website without providing personal data. Insofar as personal data is collected on our pages, this is done on a voluntary basis, in particular on the basis of your browser settings, or because this is technically necessary. In the following paragraphs you will see in detail which personal data is processed.

Closing your account

After closing your account, we still need some of your data for legal obligations, such as tax matters and audits. Furthermore, there is a legitimate interest in further processing with regard to fraud detection and prevention as well as security assurance.

Data for bookings

When searching for your perfect accommodation, we cannot help you without information. To do this, we need the information you provide or are asked to provide, such as your name and those of the people travelling with you, your email address and payment information. For bookings, we may also ask you to provide your place of residence, telephone number, date of birth and any preferences. In the case of health-related information, we ask you to give us this by telephone.

Disclosure of booking data

The purpose of passing on your data is to complete your booking with the accommodation you have chosen and to pass on your information to the relevant provider. Where necessary to complete the booking, your data will be shared with persons assisting us. Such recipients include financial institutions, advertising companies or even public authorities. Their headquarters are always located within the EEA or in data-protection-safe third countries. We do not sell or rent out your personal data.

Data we receive from you about others

As a rule, you book not only for yourself, but also for guests travelling with you, whose details you provide when booking. This is of course also the case when you make a booking for someone else. In some cases, you can use our platform to share information with others (e.g. in referral programmes). Information on data processing is given separately there. We would like to point out that it is your responsibility to ensure that the persons whose personal data you transmit to us have given their consent accordingly.

Legal basis and duration of processing for bookings

The provision of personal data in the context of bookings is necessary because otherwise the agreed services cannot be provided. The legal basis for the above data processing is the fulfilment of the agreed services to which the data subject is a party or processing for the fulfilment of a legal obligation (Art. 6 para. 1 lit. b or lit. c DSGVO). The data will be processed or stored until the above purposes cease to apply.

Data that we collect automatically

When you visit our website, we may automatically process data. This may include IP address, date and time of your use, hardware, software or browser type, operating system of your computer, language settings and information about clicks and which pages are displayed to you. If you use our service with your mobile device, we may process additional information: Mobile device type and operating system, device specific settings and features, geographical location and other system activity. The legal basis for this processing is the fulfilment of the agreed services or the technical necessity of the processing or our legitimate interests, namely the traceability and optimisation of our services, whereby the interests or fundamental rights of the party concerned are not overridden (Art. 6 para. 1 lit. f DSGVO). In connection with the last legal ground, the data subject has a right of objection in case of predominant interest - for details see below on data subject rights. The data will be processed or stored until the aforementioned purposes cease to apply.

Processors, recipients

We process your personal data with the assistance of processors who assist us in providing the Services. These include: Web host, email newsletter delivery service. These processors are obliged to strictly protect your personal data and are not allowed to process your personal data for any other purpose than to provide our services. Furthermore, your personal data will only be passed on to typical business service providers such as banks (in the case of bank transfers to you), tax advisors (if you are included in our accounting), dispatch service providers (in the case of dispatch to you), etc., which are themselves subject to data protection regulations.

Contacting us via contact form / e-mail / post / telephone

When contacting us via contact form, mail or e-mail, your data will be processed for the purpose of handling the contact request. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
When using the contact form - fields: Name, address, e-mail, other form fields
After sending the contact form, the personal data entered by you will be processed by the data protection officer for the purpose of processing your enquiry on the basis of your consent given by sending the form. There is no legal or contractual obligation to provide the personal data. The only consequence of not providing it is that you do not submit your request and we are unable to process it. You have the right to revoke your consent at any time by written notification without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

Further processing of contact form data

Further processing of the data, which is compatible with the original processing purpose, takes place on the same legal basis for the purpose of direct marketing in forms not subject to consent, such as the addressed postal dispatch of advertising, until objection is raised. In this case, the data will be passed on to the mailing service provider. You have the right to object to the use of your personal data for the purpose of direct advertising at any time - for details see below on data subject rights. In the event of an objection, your personal data will no longer be processed for the purpose of direct advertising.

E-mail newsletter

By subscribing to the newsletter, you consent to the processing of your personal data for the purpose of informing you about current events and offers by means of an e-mail newsletter by the data protection controller until revoked. There is no legal or contractual obligation to provide the personal data. The only consequence of non-consent is that you will not receive an e-mail newsletter. You have the right to revoke your consent at any time by written notification or by clicking on the unsubscribe link in the e-mail newsletter, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

Cookies

This website uses cookies. Cookies make websites more user-friendly and efficient for the user. A cookie is a small text file that is used to store information. When a website is visited, the website may place a cookie on the website visitor's computer. If the user visits the website again later, the website can read the data from the previously stored cookie and thus determine, for example, whether the user has visited the website before and which areas of the website the user was particularly interested in. You can find more information on cookies at http://de.wikipedia.org/wiki/HTTP-Cookie.

Changing the cookie settings

How the web browser handles cookies, which cookies are allowed or rejected, can be determined by the user in the settings of the web browser. Where exactly these settings are located depends on the respective web browser. Detailed information on this can be called up via the help function of the respective web browser. If the use of cookies is restricted, it may no longer be possible to use all the functions of this website to their full extent.

Cookies on our website

Our website processes the following cookies:

• _ga, origin: Google. Google Analytics cookie to distinguish different users. Valid for 2 years.
• _gat, Origin: Google. Google Analytics cookie to limit the request rate. Valid for 1 minute.
• _gid, origin: Google. Google Analytics cookie that registers a unique ID to generate statistical data on how a user uses the website. Valid for 24 hours.
• ARRAffinity, Origin: Microsoft Windows Azure cloud platform. Cookie used for load balancing to allow the user to connect to the same server in each session. Valid until the end of the session.
• cookieconsent_status, Origin: Silktide Ltd. cookie consent by insites. Cookie used to store the current status of the cookie consent. Valid for 1 year.
• _fbp, Origin: Facebook. Cookie used by Facebook to display personalised advertising. Valid for 1 day.
• _hjIncludedInSample. Origin: Hotjar. Cookie used to anonymously record user statistics and anonymous advertising. Valid for 1 year.
• PHPSESSID, origin: moosmair.it. Cookie that contains an anonymous user ID in order to be able to assign several page requests of a user to the same session. Valid until end of session.
• XSRF-TOKEN, origin: moosmair.it. Session cookie that helps prevent cross-site request forgery attacks. Valid until end of session.
• XSRF-V, origin: moosmair.it. Session cookie that helps prevent cross-site request forgery attacks. Valid until end of session.

If third-party content is included on the site, e.g. in the form of widgets or similar, these may use additional cookies. In this case, the type and number of cookies may change depending on the session, browser, etc. and are therefore beyond our control. Please contact the respective third-party provider directly for information on the type and purpose of the individual cookies. The use of third-party cookies can usually be prevented by making the appropriate settings in the browser.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland, on the legal basis of overriding legitimate interest (analysis of website usage). For this purpose, we have concluded a contract with Google for commissioned data processing. When our website is called up, a connection to Google's servers is established via software and data is transmitted to Google's servers. Google Analytics also uses cookies to store information about the website user and to analyse the use of the website by website users. This website uses the "IP anonymisation" function. This means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and thus anonymised. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google, Google will use the collected data for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Detailed information on the handling of user data with Google Analytics can be found in the Google privacy policy: https://policies.google.com/privacy?hl=de.

Deactivate Google Analytics

You can generally prevent the collection of your user data on our website by setting "Do Not Track" in your web browser. Our website takes into account the "Do Not Track" signal that your web browser then sends to all websites. You can generally prevent the collection of your user data by Google Analytics on all websites by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Deactivate Google Remarketing / Adwords

This website uses Google Remarketing, a software that is used to present interest-based advertisements to users of our websites. Google Remarketing uses cookies for this purpose (see above). Data processing in this context is carried out on the basis of Art. 6 para. 1 lit. f DS-GVO. This function can be technically prevented by the user of the websites by deactivating JavaScript and cookies in their web browser. Details of the settings required for this can be found in the product descriptions or instructions of the various browser providers. Data processing by Google can also be prevented by the user using a browser add-on to deactivate Google. Further information on the terms of use and data protection of Google Remarketing/Adwords can be found at https://policies.google.com/technologies/ads?hl=de.

Google Maps

This website uses Google Maps from Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland, on the legal basis of overriding legitimate interest (display of the location of addresses and directions in interactive maps directly on the website). For this purpose, we have concluded a contract with Google for commissioned data processing. When our website is called up, a connection to Google's servers is established via software and data is transmitted to Google's servers. Google Maps also uses cookies to store information about the website user and to analyse the use of the website by website users. According to Google, Google will use the data collected for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Detailed information on how Google Maps handles user data can be found in the Google Maps Terms of Use: https://www.google.com/intl/de_de/help/terms_maps.html and in Google's general privacy policy: https://policies.google.com/privacy?hl=de and in the privacy policy for advertising by Google: https://policies.google.com/technologies/ads.

Facebook Pixel

This website uses Facebook Pixel, a web analytics service provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook") on the legal basis of overriding legitimate interest (analysis of website usage). For this purpose, we have concluded a contract with Facebook for commissioned data processing. The data is partially transferred to the USA. The transfer of data to the USA takes place on the basis of the Privacy Shield. When our website is called up, a connection to Facebook's servers is established via software and data is transmitted to Facebook's servers, some of which are located in the USA. Facebook Pixel also uses cookies to store information about the website user and to analyse the use of the website by website users. According to Facebook, Facebook will use the data collected to evaluate the use of the website, to compile reports on website activity and to provide other services related to website and internet use. Facebook may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Facebook's behalf. Detailed information on the handling of user data by Facebook can be found in the Facebook privacy policy: https://www.facebook.com/privacy/explanation

Deactivate Facebook Pixel

You can generally prevent the collection of your user data on our website by setting "Do Not Track" in your web browser. Our website takes into account the "Do Not Track" signal that your web browser then sends to all websites.

Social media presence

We have social plugins and/or profiles or fan pages in social media in order to communicate with the users connected and registered there and to inform them about our offers and services. The US providers are certified under the so-called Privacy Shield and are thus obliged to comply with European data protection. When you use and call up our profile in the respective network, the respective data protection information and terms of use of the respective network apply. We process the data you send us via these networks in order to communicate with you and to reply to your messages there.
You can find the data protection notices, information options and opt-out options of the respective networks here:

• Facebook: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA – Datenschutzerklärung: https://www.facebook.com/policy.php, Opt-Out: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
• Instagram: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA – Datenschutzerklärung/Opt-Out: http://instagram.com/about/legal/privacy/

Server Log File

This website processes the following personal data in a server log file for the purpose of monitoring the technical function and increasing the operational security of the web server on the basis of the overriding legitimate interest of the controller (technical security measures):

• Called content
• Time of the server request
• Browser type / browser version
• Operating system used
• Referrer URL
• IP address
• Host name

The IP address is anonymised.

Security

We continually improve our administrative, technical and physical security measures to protect the privacy of your information from unauthorised access, loss, destruction or alteration. The security measures used include firewalls and data encryption as well as access controls on shared information. For security reasons and to protect the transmission of confidential content, this website uses the SSL (Secure Sockets Layer) coding system. You can recognise this encryption by the "https://" and the lock symbol in the address line of the browser. In this way, the data cannot be read by third parties. However, we would like to point out that data transmission on the web can have security gaps. Complete protection against access by third parties is not possible.

Your (data subject) rights

You have the right to information and, under certain circumstances, to correction, deletion and restriction of the processing of personal data. If the legal basis for the processing of your personal data is your consent or a contract concluded with you, you also have the right to data portability. You have the right to revoke any consent you may have given for the processing of your personal data. The lawfulness of the processing of the personal data until the revocation is not affected by the revocation. You have the right to object to the processing of your personal data for the purpose of direct marketing or in case of predominant legitimate interest. In the event of an objection, your personal data will no longer be processed for the purpose of direct marketing. To exercise your data protection rights, please contact us using the contact details provided at the top of this privacy statement.
Furthermore, you have the right to lodge a complaint with the supervisory authorities in

• Germany: German Federal Commissioner for Data Protection and Freedom of Information, Husarenstr. 30, 53117 Bonn, redaktion@bfdi.bund.de
• Austria: Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna, dsb@dsb.gv.at
• Italy: Garante per la protezione dei dati personali, Piazza di Monte Citorio 121, 00186 Roma, garante@gpdp.it
• Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggenweg 1, 3003 Bern

Links to other websites

We link websites of providers not affiliated with us (third parties). When you open these links, we no longer have any influence on the collection and use of your data. Information on this can be found in the data protection declarations of the respective providers of the linked websites. We cannot assume any responsibility for the data collection and processing. Therefore, when you leave our services by clicking on a link, you will be informed as far as possible that you are accessing another provider. If this is not clear from the text, the link will be marked with a note such as "external link".

Changes to this privacy policy

We reserve the right to adapt and change our privacy policy at any time in accordance with these provisions. If changes are made, this will be indicated on our platform and the last modification date of this privacy policy will be publicly updated.

Status 01.02.2019