Privacy policy
Thank you for visiting kleinerloewe.at. Stadthotel kleiner Löwe (“we” or “kleiner Löwe”) takes data protection very seriously.
This page explains who is responsible for processing your data (section I), how we process data in connection with your visit to our website (section II), including website provision and log files (II.A), cookies and other tracking technologies (II.B), and online room bookings (II.C), your stay at our hotel (section III), and your rights (section IV).
I. Name and address of the controller
The controller within the meaning of the EU General Data Protection Regulation 2016/679 (“GDPR”) is:
KM5 HotelbetriebsGmbH
Kornmarktplatz 5
6900 Bregenz
Email: hallo@kleinerloewe.at
II. Data processing when you visit our website
This section applies only to visits to kleinerloewe.at. Links on our website may lead to other websites, which are governed by their respective privacy policies.
A. Providing the website and creating log files
1. Description and scope of processing
Whenever our website is accessed, our system automatically collects data and information from the accessing computer’s system, including:
• browser type and version;
• language and version of the browser software;
• the user’s IP address;
• HTTP status code.
This data is also stored in our system’s log files.
2. Purpose of processing
Temporary storage of the IP address is necessary to deliver the website to the user’s computer. The IP address must therefore remain stored for the duration of the session. Log files help ensure that the website functions properly. We also use this data to optimise the website and protect the security of our IT systems.
3. Legal basis
The legal basis for temporary storage of data and log files is our legitimate interest under Article 6(1)(f) GDPR in pursuing the purposes described in II.A.2, particularly ensuring website functionality and the security of our IT systems.
4. Recipients
Your data is disclosed to:
• arkulpa GmbH, Rheinstraße 26, 6890 Lustenau (IT service provider).
5. Storage period
The data is deleted or anonymised after one day. It is not retained for longer in a form that permits identification of data subjects.
B. Cookies and other tracking technologies
1. What are cookies?
Cookies are small text files stored in your browser. Your browser downloads them when you first visit our website. When you return using the same device or browser, the cookie and the information it contains are sent either to the website that created it (a first-party cookie) or to another website to which it belongs (a third-party cookie).
2. Necessary cookies
We use necessary cookies to transmit communications and provide the services you request. Processing through these cookies is based on our legitimate interests in providing a fully functioning website and the requested services under Article 6(1)(f) GDPR. A description of the necessary cookies used on this website is available in the cookie declaration, accessible through the cookie settings.
3. Other cookies
Where you have given consent under Article 6(1)(a) GDPR, we also use other cookies, such as analytics, marketing and preference cookies. These are not strictly necessary to use the website but perform additional functions. Without them, features that make browsing more convenient may be unavailable. For example, your settings may not be saved and may need to be requested again on each page. We may also be unable to present individually tailored offers. Further information is available in the cookie declaration accessible through the cookie settings.
4. Your cookie settings
You can block or restrict cookies through your browser settings. Cookies already stored can be deleted at any time. Disabling cookies for our website may prevent some features from functioning fully. Instructions for managing and deleting cookies are available in your browser’s help function. You can also manage your consent to cookies in the cookie settings on our website.
C. Online room bookings
1. Description and scope of processing
When you book online through our website, we process:
• personal details: first name, surname, title and, where applicable, company and VAT identification number;
• contact details: address, email address and telephone number;
• arrival and departure dates;
• number of people per room, including adults and children;
• room selection, any extras, booking cost and purpose of travel (business or private);
• payment details, such as credit card number, bank details and billing address;
• any additional information or comments you provide.
2. Purpose of processing
We process your personal data to review and handle your booking and either confirm it or decline it if the requested booking is not possible.
3. Legal basis
Processing in connection with your booking is based on performance of a contract or steps taken before entering into a contract under Article 6(1)(b) GDPR.
4. Recipients
Your data is disclosed to:
• IT service providers for the booking platform;
• payment service providers, where applicable.
5. Storage period
We generally retain your data until the contractual relationship has been fulfilled or ended. If no contractual relationship is established, we generally delete your data one year after the last contact.
We are also subject to various retention obligations requiring certain data to be retained beyond the contractual relationship, for example under tax law or the Austrian Registration Act. The tax and registration retention periods are both seven years. We may also retain your data for as long as legal claims connected with your contract can be asserted. If official or court proceedings are pending, the data is retained until those proceedings have ended.
III. Data processing in connection with your stay at our hotel
1. Description and scope of processing
In the course of operating the hotel, we process your personal data when you send us an enquiry, make a booking or stay with us. We collect and process:
• personal details: first name, surname, date of birth, gender, nationality and passport or identity card number;
• contact details: home address, email address and telephone number;
• contract details: arrival and departure dates, room selection, any extras, booking cost, purpose of travel (business or private) and information about accompanying travellers;
• payment details, such as credit card number and bank details;
• communication data, such as emails.
If you add other guests to your booking, we also process their personal data.
2. Purpose of processing
The purpose depends on the context of your contact with us. If you send an enquiry, we process your personal data to answer it. If you make a booking, we process your personal data to review and handle it. During your stay, we process your personal data to fulfil our contractual obligations and provide your stay. We also use data to make future bookings and stays more efficient by pre-filling certain information during booking and check-in.
3. Legal basis
Answering your enquiry is based either on our legitimate interest in responding to customer enquiries under Article 6(1)(f) GDPR, or on performance of a contract or pre-contractual steps under Article 6(1)(b) GDPR.
Reviewing and handling your booking is based on performance of a contract or pre-contractual steps under Article 6(1)(b) GDPR.
Providing your stay is based on performance of a contract or pre-contractual steps under Article 6(1)(b) GDPR and compliance with legal obligations under Article 6(1)(c) GDPR. For example, we must keep a guest register and allow the registration authority to inspect it.
Using your data for future bookings and stays is based on our legitimate interest under Article 6(1)(f) GDPR in reducing the time needed for booking and check-in.
4. Recipients
Your data is disclosed to:
• the competent registration authority;
• tax authorities, courts and the bank (SEPA payments);
• IT service providers.
5. Storage period
We generally retain your data until the contractual relationship has been fulfilled or ended. If no contractual relationship is established, we generally delete your data one year after the last contact.
We are also subject to various retention obligations requiring certain data to be retained beyond the contractual relationship, for example under tax law or the Austrian Registration Act. The tax and registration retention periods are both seven years. We may also retain your data for as long as legal claims connected with your contract can be asserted. If official or court proceedings are pending, the data is retained until those proceedings have ended.
IV. Your rights in connection with data processing
The GDPR grants you rights as a data subject. The following sections describe these rights.
1. Withdrawal of consent — Article 7(3) GDPR
Where we collect and process your personal data on the basis of consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.
2. Right of access — Article 15 GDPR
You may request information about the origin, categories, storage period, recipients and purpose of the personal data we process about you, and the way it is processed.
3. Rectification — Article 16 GDPR — and erasure — Article 17 GDPR
If we process personal data about you that is inaccurate or incomplete, you may request its correction or completion. You may also request erasure of data that has been processed unlawfully.
4. Restriction of processing — Article 18 GDPR
If it is unclear whether your data is inaccurate, incomplete or being processed unlawfully, you may request restriction of processing until the matter has been clarified.
5. Right to object — Article 21 GDPR
You may object where we process your data on the basis of a legitimate interest under Article 6(1)(f) GDPR. If you object, we will assess whether the statutory conditions are met. If they are, we will stop the processing. In certain cases, your right to object is unconditional, for example where we process your data for direct marketing on the basis of a legitimate interest.
6. Data portability
You may receive, in a machine-readable format, the personal data you have provided to us, or instruct us to transmit it directly to a third party of your choice, provided that the recipient enables us to do so technically and the transfer is not prevented by unreasonable effort, statutory or other confidentiality obligations, or confidentiality considerations.
7. Right to complain
You may lodge a complaint with the Austrian Data Protection Authority (https://www.dsb.gv.at/) if you believe that processing of your personal data infringes data protection law.
8. Contact for exercising your rights
To exercise these rights, please write by letter or email to the contact in section I, or email hallo@kleinerloewe.at.
This page explains who is responsible for processing your data (section I), how we process data in connection with your visit to our website (section II), including website provision and log files (II.A), cookies and other tracking technologies (II.B), and online room bookings (II.C), your stay at our hotel (section III), and your rights (section IV).
I. Name and address of the controller
The controller within the meaning of the EU General Data Protection Regulation 2016/679 (“GDPR”) is:
KM5 HotelbetriebsGmbH
Kornmarktplatz 5
6900 Bregenz
Email: hallo@kleinerloewe.at
II. Data processing when you visit our website
This section applies only to visits to kleinerloewe.at. Links on our website may lead to other websites, which are governed by their respective privacy policies.
A. Providing the website and creating log files
1. Description and scope of processing
Whenever our website is accessed, our system automatically collects data and information from the accessing computer’s system, including:
• browser type and version;
• language and version of the browser software;
• the user’s IP address;
• HTTP status code.
This data is also stored in our system’s log files.
2. Purpose of processing
Temporary storage of the IP address is necessary to deliver the website to the user’s computer. The IP address must therefore remain stored for the duration of the session. Log files help ensure that the website functions properly. We also use this data to optimise the website and protect the security of our IT systems.
3. Legal basis
The legal basis for temporary storage of data and log files is our legitimate interest under Article 6(1)(f) GDPR in pursuing the purposes described in II.A.2, particularly ensuring website functionality and the security of our IT systems.
4. Recipients
Your data is disclosed to:
• arkulpa GmbH, Rheinstraße 26, 6890 Lustenau (IT service provider).
5. Storage period
The data is deleted or anonymised after one day. It is not retained for longer in a form that permits identification of data subjects.
B. Cookies and other tracking technologies
1. What are cookies?
Cookies are small text files stored in your browser. Your browser downloads them when you first visit our website. When you return using the same device or browser, the cookie and the information it contains are sent either to the website that created it (a first-party cookie) or to another website to which it belongs (a third-party cookie).
2. Necessary cookies
We use necessary cookies to transmit communications and provide the services you request. Processing through these cookies is based on our legitimate interests in providing a fully functioning website and the requested services under Article 6(1)(f) GDPR. A description of the necessary cookies used on this website is available in the cookie declaration, accessible through the cookie settings.
3. Other cookies
Where you have given consent under Article 6(1)(a) GDPR, we also use other cookies, such as analytics, marketing and preference cookies. These are not strictly necessary to use the website but perform additional functions. Without them, features that make browsing more convenient may be unavailable. For example, your settings may not be saved and may need to be requested again on each page. We may also be unable to present individually tailored offers. Further information is available in the cookie declaration accessible through the cookie settings.
4. Your cookie settings
You can block or restrict cookies through your browser settings. Cookies already stored can be deleted at any time. Disabling cookies for our website may prevent some features from functioning fully. Instructions for managing and deleting cookies are available in your browser’s help function. You can also manage your consent to cookies in the cookie settings on our website.
C. Online room bookings
1. Description and scope of processing
When you book online through our website, we process:
• personal details: first name, surname, title and, where applicable, company and VAT identification number;
• contact details: address, email address and telephone number;
• arrival and departure dates;
• number of people per room, including adults and children;
• room selection, any extras, booking cost and purpose of travel (business or private);
• payment details, such as credit card number, bank details and billing address;
• any additional information or comments you provide.
2. Purpose of processing
We process your personal data to review and handle your booking and either confirm it or decline it if the requested booking is not possible.
3. Legal basis
Processing in connection with your booking is based on performance of a contract or steps taken before entering into a contract under Article 6(1)(b) GDPR.
4. Recipients
Your data is disclosed to:
• IT service providers for the booking platform;
• payment service providers, where applicable.
5. Storage period
We generally retain your data until the contractual relationship has been fulfilled or ended. If no contractual relationship is established, we generally delete your data one year after the last contact.
We are also subject to various retention obligations requiring certain data to be retained beyond the contractual relationship, for example under tax law or the Austrian Registration Act. The tax and registration retention periods are both seven years. We may also retain your data for as long as legal claims connected with your contract can be asserted. If official or court proceedings are pending, the data is retained until those proceedings have ended.
III. Data processing in connection with your stay at our hotel
1. Description and scope of processing
In the course of operating the hotel, we process your personal data when you send us an enquiry, make a booking or stay with us. We collect and process:
• personal details: first name, surname, date of birth, gender, nationality and passport or identity card number;
• contact details: home address, email address and telephone number;
• contract details: arrival and departure dates, room selection, any extras, booking cost, purpose of travel (business or private) and information about accompanying travellers;
• payment details, such as credit card number and bank details;
• communication data, such as emails.
If you add other guests to your booking, we also process their personal data.
2. Purpose of processing
The purpose depends on the context of your contact with us. If you send an enquiry, we process your personal data to answer it. If you make a booking, we process your personal data to review and handle it. During your stay, we process your personal data to fulfil our contractual obligations and provide your stay. We also use data to make future bookings and stays more efficient by pre-filling certain information during booking and check-in.
3. Legal basis
Answering your enquiry is based either on our legitimate interest in responding to customer enquiries under Article 6(1)(f) GDPR, or on performance of a contract or pre-contractual steps under Article 6(1)(b) GDPR.
Reviewing and handling your booking is based on performance of a contract or pre-contractual steps under Article 6(1)(b) GDPR.
Providing your stay is based on performance of a contract or pre-contractual steps under Article 6(1)(b) GDPR and compliance with legal obligations under Article 6(1)(c) GDPR. For example, we must keep a guest register and allow the registration authority to inspect it.
Using your data for future bookings and stays is based on our legitimate interest under Article 6(1)(f) GDPR in reducing the time needed for booking and check-in.
4. Recipients
Your data is disclosed to:
• the competent registration authority;
• tax authorities, courts and the bank (SEPA payments);
• IT service providers.
5. Storage period
We generally retain your data until the contractual relationship has been fulfilled or ended. If no contractual relationship is established, we generally delete your data one year after the last contact.
We are also subject to various retention obligations requiring certain data to be retained beyond the contractual relationship, for example under tax law or the Austrian Registration Act. The tax and registration retention periods are both seven years. We may also retain your data for as long as legal claims connected with your contract can be asserted. If official or court proceedings are pending, the data is retained until those proceedings have ended.
IV. Your rights in connection with data processing
The GDPR grants you rights as a data subject. The following sections describe these rights.
1. Withdrawal of consent — Article 7(3) GDPR
Where we collect and process your personal data on the basis of consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.
2. Right of access — Article 15 GDPR
You may request information about the origin, categories, storage period, recipients and purpose of the personal data we process about you, and the way it is processed.
3. Rectification — Article 16 GDPR — and erasure — Article 17 GDPR
If we process personal data about you that is inaccurate or incomplete, you may request its correction or completion. You may also request erasure of data that has been processed unlawfully.
4. Restriction of processing — Article 18 GDPR
If it is unclear whether your data is inaccurate, incomplete or being processed unlawfully, you may request restriction of processing until the matter has been clarified.
5. Right to object — Article 21 GDPR
You may object where we process your data on the basis of a legitimate interest under Article 6(1)(f) GDPR. If you object, we will assess whether the statutory conditions are met. If they are, we will stop the processing. In certain cases, your right to object is unconditional, for example where we process your data for direct marketing on the basis of a legitimate interest.
6. Data portability
You may receive, in a machine-readable format, the personal data you have provided to us, or instruct us to transmit it directly to a third party of your choice, provided that the recipient enables us to do so technically and the transfer is not prevented by unreasonable effort, statutory or other confidentiality obligations, or confidentiality considerations.
7. Right to complain
You may lodge a complaint with the Austrian Data Protection Authority (https://www.dsb.gv.at/) if you believe that processing of your personal data infringes data protection law.
8. Contact for exercising your rights
To exercise these rights, please write by letter or email to the contact in section I, or email hallo@kleinerloewe.at.