Data protection

Apartments Zinner-Pale
Marion Pale
6166 Fulpmes, Tax No. 43 699 10319880 Commercial Register Court: Innsbruck, UID ATU 43 699 10319880
We use the following data when you conclude a contract with us

Base data:
Last name and first name, full address, all contact information (e.g. email address, telephone number), information about the nature and content of our contractual relationship.

Other personal data which you or third parties provide to us with your consent or otherwise permissible when initiating the contract, during the contractual relationship (e.g. to issue a guest card) or to fulfil legal obligations:
Date of birth or age, marital status, gender, occupation, ID details, bank details, signing or representation authority, contractual commitment, notice/cancellation periods or other information about you which you have provided to us.

Engaging processors
The protection of your data is important to us. Even if we use a processor, e.g. Feratel - guest directory according to Section 19 MeldeV, hotel program Casablanca, we ensure that the order processing takes place within the European Union.

1. Reporting data

1.1 Reporting obligation

According to the Austrian Registration Act, you are obliged to register with us using the data specified in § 5 and § 10 of the Registration Act. This concerns the following data:
Name, date of birth, gender, nationality, country of origin, address including postcode and – for foreign guests – type, number, place of issue and issuing authority of a travel document as well as the date of arrival and departure.

1.2. Guest directory
Due to the legal obligation imposed on us in accordance with Section 19 of the Registration Act Implementation Ordinance, we will keep this data in a guest register and store it for a period of 7 (seven) years, unless it is processed for a longer period for other purposes stated in this data protection declaration.

We keep the guest list electronically and forward the data to an IT processor. The data is stored locally by the processor. It is not transmitted to a third country.

1.3. Transfer of data
The data categories "arrival" and "departure" linked to the country of origin are forwarded to the municipality in which our accommodation facility is located in accordance with Section 6 of the Tourism Statistics Ordinance. Aggregated data on the total number of overnight stays and the number of people who are obliged to pay the tourist tax must also be sent to the respective Stubai Valley Tourism Association, to which we belong, and/or the municipality. This is done on the basis of Section 9 of the Tyrolean Tourist Tax Act.

1.4. Legal basis for processing

The processing according to points 1.1 to 1.3 above is based on Art. 6 paragraph 1 letter c GDPR (fulfilment of a legal obligation).

1.5. Additional data transmission to TVB/municipality

In addition, we forward your postcode and year of birth (in pseudonymized or anonymized form) to our municipality and our TVB for statistical purposes for the creation and evaluation of origin and age statistics by the tourism association. This forwarding is based on Art. 6 Para. 1 lit. e (task in the public interest) and lit. f (overriding legitimate interests) GDPR. You can object to this at any time for reasons arising from your particular situation (Art. 21 Para. 1 GDPR).

2. Guest card

2.1 General

You have the option of using a guest card. The guest card grants you discounts and/or services at various companies in the region (e.g. discounted admission). The guest card is valid for the duration of your stay with us.

2.2 Issuing the guest card

The guest card is issued and distributed by the accommodation provider only at your request. Depending on the guest card system used by the TVB and/or the accommodation provider, it is either in the form of

• an electronically generated guest card,
• a manually created guest card or
• the carbon copy of the registration form

displayed.

2.3. Personal data processed

For both the electronically generated and the manually created guest card, the following personal data, which is determined from the registration data (see point 1 above), is processed:
First name, last name, date of birth and duration of stay (arrival/departure), country of origin, postal code.
If the guest card is issued in the form of a “registration form”, this contains the content according to Section 5 in conjunction with Section 9 of the Registration Act (see point “Registration data” 1.1 above). In this case, no electronic processing takes place for the purposes of the guest card.
When using the guest card, the following personal data is also processed: data on the usage cycle of the respective card, service usage, bookings, transaction logging, billing data, reference to the registration data and the accommodation facility.
The data is required, on the one hand, to verify identity and, on the other hand, to determine the period of validity of the guest card with the respective service provider and to enable the settlement of discounts between service providers, the TVB and, if applicable, the accommodation providers.

2.4. Legal basis for processing

The processing of data for the purposes of the guest card takes place either on the basis of your consent (Art. 6 Para. 1 lit. a GDPR) or, if the guest card is part of the provision of services within the framework of the accommodation contract, for the purposes of contract fulfilment (Art. 6 Para. 1 lit. b GDPR).
You can revoke your consent at any time verbally to the accommodation provider or in writing to the email address info@appartements-zinner-pale.at.

2.5. Operation of the guest card system

The guest card system is operated by the local tourism association (“TVB”). Local accommodation providers and local companies (“service providers”) are also involved.
The data processed for the guest card will be deleted after 7 years.

2.6. Recipients of the data

The data processed for the purposes of the guest card is received by the local TVB for the purposes of billing the service providers and/or accommodation providers.
The individual service providers who offer discounted services based on the guest card will also receive the data if you make use of the guest card services with these companies.
In order to claim discounts, you must show the relevant guest card, on which the data is shown, to the service provider and thus disclose it yourself. The company then checks whether the card is (still) valid, usually by reading the barcode on the guest card and transmitting the barcode data to our IT processor. Personal data is also transmitted to the company, in particular your identity data (to verify your identity and date of birth).
If the guest card is issued in the form of a “registration form”, the validity is checked using a carbon copy of the “registration form”.

3. Other processing of your data

In principle, we only process data that is absolutely necessary for the conclusion or fulfillment of the contract. If you have also given us your consent, we will process your data to send you information about our services until you revoke your consent. We use the following communication channels, provided you have given them to us:
Telephone, email, SMS, post or social media channels.

4. Data deletion

Your master data and other personal data will be deleted if they are no longer required to fulfil the purpose for which they were stored – usually after 7 (seven) years – or if storage becomes inadmissible for legal reasons.

Instead of deletion, the data can also be anonymized, which means that any personal reference is irretrievably removed.

5. Newsletter

In order to provide you with targeted information, we also collect and process voluntarily provided information about areas of interest, date of birth and postcode […].
You can cancel your newsletter subscription at any time. Please send your cancellation to the following email address: [Enter email address]. We will then immediately delete your data in connection with the newsletter dispatch.

6. You can assert the following rights with regard to the processing of your data:

6.1. Right to information: You have the right to know from us whether and to what extent we process your data.
Contact / Person responsible:
Marion Pale

6.2. Your rights
You generally have the right to information, correction, deletion, restriction, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated in any way, you can complain to the supervisory authority. In Austria, this is the Data Protection Authority.

6.3. Right to complain: If you believe that the processing of your personal data violates Austrian or European data protection law, please contact us so that we can clarify any questions you may have. Of course, you have the right to complain to the Austrian data protection authority or to a supervisory authority within the EU.

7. Confirmation of identity:
To protect your rights and your privacy, we are entitled to request proof of identity in case of doubt.

8. Excessive claims of rights:
If you request one of the above-mentioned rights in a manifestly unfounded manner or particularly frequently, we are entitled to charge an appropriate processing fee or to refuse to process the request.

9. Obligation to cooperate:
As part of our duty to cooperate, we are obliged to release data upon request in accordance with the statutory provisions (e.g. BAO, Registration Act, ZPO, StPO, ...).

10. Period of validity:

This privacy policy is effective from May 25, 2018 and replaces the existing data protection provisions.