Protecting your personal data is of particular importance to us. We therefore process your data exclusively on the basis of the General Data Protection Regulation (GDPR) and the applicable data protection provisions in the European Union.
When operating a website, the processing of personal data is unavoidable, for example for the provision of content, for communication with users or for ensuring security and stability. The legal bases for this are derived in particular from Art. 6 para. 1 GDPR:
We only process personal data to the extent necessary and delete it as soon as the purpose of the processing ceases to apply or no statutory retention obligations exist.
Our website uses the Google Tag Manager, a service provided by Google Ireland Limited. The Tag Manager allows so-called “tags” (scripts) to be centrally integrated and managed. The Tag Manager itself does not store or evaluate any personal data. It merely ensures the triggering of other tags.
Via the Tag Manager – depending on your consent in the Consent Manager – in particular the following tracking and marketing services are integrated:
Legal basis:
The integration of these services takes place exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). If you deselect the “Marketing” category in the Consent Manager, neither the Tag Manager nor the tracking scripts it contains will be executed.
Data transfer:
Within the scope of the services mentioned, a transfer of data to third countries (in particular the USA) may take place. For such transfers, the respective providers provide appropriate safeguards (e.g. EU standard contractual clauses).
Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA ("Google")
Withdrawal:
You can revoke or adjust your consent at any time with effect for the future via the Consent Manager.
Our website embeds videos via the YouTube platform, provided by Google Ireland Limited. When you access a page with an embedded YouTube video, a connection to YouTube’s servers is established. Data such as the page accessed, your IP address and technical information may be transmitted to YouTube.
YouTube and Google may also transfer data to third countries (e.g. the USA). Appropriate safeguards (e.g. EU standard contractual clauses) exist for these transfers.
Further information on data processing by YouTube can be found in Google’s privacy policy.
Youtube, YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
Our website embeds videos via the Vimeo platform, provided by Vimeo.com, Inc. When you access a page with an embedded Vimeo video, a connection to Vimeo’s servers is established. Data such as the page accessed, your IP address and technical information may be transmitted to Vimeo. Vimeo may also transfer data to third countries (e.g. the USA). Appropriate safeguards (e.g. EU standard contractual clauses) exist for these transfers.
Further information on data processing by Vimeo can be found in Vimeo’s privacy policy.
Vimeo.com, Inc., 555 West 18th Street, New York, NY 10011, USA
Our website uses Google Maps to display interactive maps and to facilitate travel planning. The provider is Google Ireland Limited.
When you access a page with an embedded map, a connection to Google’s servers is established, during which data such as the page accessed, your IP address and location data (if released) may be transmitted.
The use of Google Maps is based exclusively on your consent via the Consent Manager (Art. 6 para. 1 lit. a GDPR). Without consent, no map will be loaded.
Here too, a transfer of data to third countries (e.g. the USA) may occur. Google uses appropriate safeguards (e.g. EU standard contractual clauses).
Further information on data processing by Google Maps can be found in Google’s privacy policy.
Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA ("Google")
If you choose to subscribe to our newsletter, your data will be processed by our email marketing service provider such as CleverReach. CleverReach places a strong emphasis on data protection and compliant email marketing. All servers are located exclusively in Germany and within the European Union, ensuring compliance with the General Data Protection Regulation (GDPR).
You may withdraw your consent to receive our newsletter at any time. Each newsletter contains a direct unsubscribe link, or you can revoke your subscription by sending a written request to us.
More information:
www.cleverreach.com/de-de/datenschutz/
Each time our website is accessed, the web server automatically logs the date, time, requested URL and the transmitted IP address. The processing serves technical operation, security (e.g. defense against attacks) and error analysis. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure, functional website).
The log files are stored for 90 days and then deleted. The recipient (as processor) is our hosting provider. There is no combination with other data.
You have the right at any time to obtain information about the personal data stored by us (Art. 15 GDPR), the right to rectification of incorrect data (Art. 16 GDPR), the right to erasure (“right to be forgotten”, Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR) and the right to object to processing (Art. 21 GDPR).
Withdrawal of consent
Consent given for the processing of personal data can be withdrawn at any time with effect for the future (Art. 7 para. 3 GDPR).
Deletion of data
Your data will be deleted as soon as the respective purpose of the processing no longer applies and there are no statutory retention obligations. If deletion is not possible, processing will be restricted.
Right to lodge a complaint
If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR). In Austria, this is the Data Protection Authority (www.dsb.gv.at).
Controller
EST Hotels & Residences
OFFICE SALZBURG
NONNTALER HAUPTSTRAßE 89
5020 SALZBURG (AUSTRIA)
PHONE: +43 662-822824-20
EMAIL: office@est-hotels.com