Data protection
1. PRINCIPLES
This privacy policy concerns all persons who use the services of the
Sonnasita – Nature. Cuisine. Hotel, A – 6733, Faschina 92; Tel.: +43 5510 2060; E-Mail: hotel@sonnasita.at; UID Nr.: ATU 67780859; Commercial register number.: FN175927t; Commercial register court: Landesgericht Feldkirch; use
Our data protection officer is DOMIG PETER; peter@sonnasita.at.
We hereby inform you about the type, scope and purpose of the collection and use of your personal data by our company. We respect your privacy and strive to strictly comply with the legal requirements for the processing of your personal data (EU Regulation No. 679/2016 (DSGVO), DSG 2000, DSG 2018 and TKG 2003). All your personal data will be processed on this basis.
By using our services and providing consent as described in this statement, you confirm that you have reached the age of 14 and are capable of providing permissible consent, or that effective consent has already been provided by your legal guardian or custodian.
2. DISCLOSURES PURSUANT TO ART. 13 OF THE GERMAN SECURITIES ACT
Your personal data, which are in particular
– Your master data (name, first name, address, e-mail address, telephone and fax number, date of birth, customer number) as well as language and vehicle registration number,
– the data in travel documents (passport number, passport data, date of birth, issuing authority, term, nationality) and identity cards (ID card, driver’s license, etc. including issuing authority and term),
– the data on the method of payment and in connection with payments, in particular with debit cards, credit cards and bank cards,
– the length of stay you have requested, as well as destinations, hotels, contacts, conditions, special services, health data, frequent flyer number, personal preferences related to the stay that you disclose to us, and
– special categories of data such as health data and special needs and marriage/partnership data,
are required for our services. This also includes bookings of travel, guides, gastronomy, rental vehicles, transfers, registration processing, insurance, events, tours, accreditations, vouchers including customer creation, billing and their verification (B2B, B2C, FIT), ticket bookings.
This data is therefore stored and processed by us for these purposes and, if necessary, transferred to third parties with whom we cooperate in order to provide the most effective and best possible service for our customers – this may also include service providers in third countries as order processors, software and agency service providers.
We do not use profiling or automated decisions.
The legal bases for these data processing operations are as follows
– the fulfillment of our pre-contractual and contractual obligations towards you,
– Consents obtained from you,
– statutory, contractual or other legal obligations on our part (e.g., documentation rights and obligations under accounting, tax and customs law, contracts, reporting, legal disputes) as well as § 96 TKG and
– our legitimate interests (e.g., improving our customer service, including in the area of direct marketing, or protecting our own legal interests).
The duration of the storage is determined by the duration of our business relationship, the consents given by you, furthermore the statutory retention obligations and legal obligations applicable to us. We emphasize that in the case of regular cooperation for our best possible customer service, we strive to know your customer requirements already communicated to us so well that we can satisfy you continuously and permanently.
3. OUR ADVERTISING PRESENCE
When you access our website, your access data is automatically collected and stored. This access data may include, in particular, the page accessed, the files viewed, the date and time of the access, the IP address of the user, data of the accessing computer, in particular the browser and the operating system, as well as the amount of data and the message of the successful access. This access data is used by us for internal statistical purposes to ensure the security of our offer and to optimize the offer. In case of suspicion of an illegal act, the access data will be evaluated to preserve evidence.
By entering your personal data in one of our contact forms, you consent to the transmission to and storage and processing by us for the duration of the servicing of this specific request. This applies in particular to your inquiries via contact form, chat and e-mails that you send us. We need this data to process your request and, in these cases, also store your IP address for purposes of preserving evidence. The storage takes place as long as this is necessary for the care of any supplementary or subsequent questions asked by you or us.
The data of your account will only be transmitted via an encrypted internet connection (https). We assume no liability for the loss of data or access to your data by third parties if we have complied with the security measures required by the state of the art.
The legal bases for this data processing are your consent, our pre-contractual and contractual obligations to you, our legitimate interests and legal obligations of all kinds and § 96 TKG.
4. NEWSLETTER
You are free to subscribe to our newsletter. The registration, for which you must disclose your e-mail address and give your consent to receive the newsletter, can only become effective when you confirm a link to the registration, which you will receive by e-mail. In order to be able to provide you with targeted information in the newsletter that is of particular interest to you, we also give you the option when registering to provide information on specific interests, key dates, location details and regions and the like.
In each newsletter you receive, you will find all the necessary information to unsubscribe from the newsletter. For more information about our newsletters, please contact us using the contact details above. We will be happy to help you.
5. TRANSFER TO THIRD PARTIES / OBLIGATIONS OF CONTRACT PROCESSORS
Your personal data may be processed by us
– within the Group, taking into account the permitted uses,
– to processors (e.g. for our electronic advertising in the form of newsletters) and, to third parties who need to be involved in providing the services you have requested, all of whom have committed to us to comply with applicable data protection standards,
transmitted. If compliance with European data protection standards is not possible – for example, because standard contractual clauses, adequacy decisions or certifications are not guaranteed in the specific case – we will inform you in good time and obtain the necessary consents from you. For further information, please contact us using the contact options above.
Within the scope of our business activities, we cooperate with the following companies:
– WINDER & WILD, 6900 Bregenz, office@winderwild.at (web agency)
6. COOKIES AND TRACKING SERVICES
We use cookies, which are small text elements used to store information in web browsers. Cookies are recognized the next time you visit our website and contribute significantly to speeding up loading processes and making the use of our offers comfortable for you. The information recognized and stored by cookies is used to recognize you, but also to analyze your user behavior. They are stored on the server of the respective provider, which has committed itself as a processor to us to comply with the applicable data protection standards.
After you have visited our website, cookies remain stored on your terminal device unless you refuse them from the outset, or you actively delete cookies. Actively deactivating cookies may impair the functionality of our web presence for you. You can also prevent cookies from being stored by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of our website.
You can also prevent the forwarding of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available on the website google.com. However, the plug-in is only available for certain browser programs.
We also use third-party content on our website to make our internet presence as informative and convenient as possible for you. This includes, for example, Google maps, RSS feeds or YouTube. These third-party providers receive your IP address for technical reasons. We have no influence on the use of this data by the third-party provider. In this regard, we refer to the privacy statements of the respective providers.
Change cookie settings
SERVER – LOGFILES
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of the server request. This data cannot be assigned to specific persons. A combination of this data with other data sources is not made. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use.
GOOGLE ANALYTICS
We use Google Analytics, a web analytics service provided by Google Inc. 1600, Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies. The information generated by the cookie about your user behavior is usually transmitted to a Google server in the USA and stored there. Your IP address will be shortened beforehand within the European Union and thus anonymized or at least pseudonymized. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google uses this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and internet use to the website operator. This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. In this context, please also note Google’s privacy policy, in particular the information available under the following two links: https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de.
You can prevent the collection of data generated by the cookie and related to your use of the website to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de .
Google Analytics
GOOGLE TAG MANAGER
We use “Google Tag Manager” on our website, a service of Google Inc. Google Tag Manager allows us to manage website tags via an interface. The Google Tag Manager tool that implements the tags is a cookie-less domain and does not itself collect any personal data. Google Tag Manager takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. Google has submitted to the Privacy Shield agreement concluded between the European Union and the USA and has certified itself. This means that Google undertakes to comply with the standards and regulations of European data protection law. You can find more information in the entry linked below: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Further information on data protection can be found on the following Google web pages: Privacy Policy: https://policies.google.com/privacy?hl=de, FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html, Terms of Use Google Tag Manager: https://www.google.com/intl/de/tagmanager/use-policy.html.
GOOGLE (INVISIBLE) RECAPTCHA
To protect your requests via Internet form, we use the service reCAPTCHA of the company Google Inc (Google). The query serves to distinguish whether the input is made by a human being or improperly by automated, machine processing. The query includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other data from Google. The deviating data protection regulations of the Google company apply to this data. For more information on Google’s privacy policy, please visit: https://policies.google.com/privacy?hl=de.
TRIPADVISOR
We use plugins from TripAdvisor (TripAdvisor Inc., 141 Needham Street, Newton, MA 02464, USA. You can recognize the plugin by the corresponding logos on our site. When you visit our pages, the plugin establishes a direct connection between your browser and the server of the corresponding plugin provider. This service thereby receives the information that you have visited our site with your IP address. We would like to point out that we do not receive any knowledge of the content of the transmitted data as well as its use by Tripadvisor. For more information, please see the TripAdvisor privacy policy at: https://tripadvisor.mediaroom.com/DE-privacy-policy.
HOLIDAYCHECK
We use plugins from HolidayCheck.de (HolidayCheck AG, Bahnweg 8, CH-8598 Bottighofen, Switzerland). You can recognize the plugin by the corresponding logos on our site. When you visit our websites, the plugin establishes a direct connection between your browser and the server of the corresponding plugin provider. This provider thereby receives the information that you have visited our site with your IP address. We would like to point out that we have no knowledge of the content of the transmitted data or its use by HolidayCheck. You can find more information on this in HolidayCheck’s privacy policy at: https://www.holidaycheck.de/datenschutz.
SEEKDA COGNITIVE
We use a widget from Seekda (Dynamic Shop). The operator of the widget is Seekda GmbH, Neubaugasse 10/15, 1070 Vienna, Austria. Personal data is only collected, processed and used by Seekda to the extent that this is expressly permitted under the relevant data protection regulations or, in addition, to the extent that the data subject has given his or her effective consent. Personal data is only collected, processed and used by Seekda if you have given it to Seekda of your own accord, e.g. in the context of a registration, a survey, or for the performance of a contract, and this is done with your express consent. After the termination of a respective contractual relationship, your personal data will be deleted. Exceptions are such personal data with regard to which legal retention periods must be observed. This personal data is blocked by Seekda. Further information on Seekda’s privacy policy can be found at https://seekda.com/de/datenschutzerklarung/.
GOOGLE MAPS
We use the product Google Maps from Google Inc. By using this website, you consent to the collection, processing and use of automatically collected data by Google Inc, its representatives and third parties. The terms of use of Google Maps can be found at https://www.google.com/intl/de_de/help/terms_maps.html.
GOOGLE+
We use the “+1″ button of the social network Google Plus, which is operated by Google Inc. The button is recognizable by the “+1″ sign on a white or colored background. When a user calls up a website of this offer that contains such a button, the browser establishes a direct connection with the servers of Google. The content of the “+1″ button is transmitted by Google directly to his browser and integrated by it into the website. the provider therefore has no influence on the scope of the data that Google collects with the button. According to Google, no personal data is collected without a click on the button. Only for logged-in members, such data, including the IP address, are collected and processed. The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for protecting your privacy, can be found in Google’s privacy policy on the “+1″ button: https://developers.google.com/+/web/buttons-policy.
YOUTUBE
We use the provider YouTube to embed videos. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. Where possible, the videos were embedded in the extended data protection mode. Like most websites, however, YouTube also uses cookies to collect information about visitors to its website. YouTube uses these to collect video statistics, prevent fraud, and improve user experience, among other things. Also, this leads to a connection with the Google DoubleClick network. When you start the video, this could trigger further data processing operations. We have no control over this. For more information about data protection at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de.
DialogShift Chat Application on Our Website
Our website uses the chat application from DialogShift GmbH, Torstr. 201, 10115 Berlin. This application processes and stores data for the purpose of web analysis, operating the chat application, and responding to inquiries. For the operation of the chat function, chat texts are stored, and a cookie with a unique ID is set—this serves to recognize you as a customer. A cookie is a small text file that is stored locally in the cache on your device. With the help of this cookie, our application recognizes the device again and can retrieve past chat logs. This cookie is stored for 90 days since its last use. You can disable the storage of cookies in your browser settings. However, without the use of cookies, the chat function cannot be executed. The possible disclosure of, for example, names, email addresses, or a telephone number is voluntary and with the consent to temporarily use and store these data for the purpose of making contact until the end of the contact. These personal data are deleted after 90 days. The legal basis for data processing is according to Art. 6 Para. 1 lit. a GDPR, § 25 Para. 1 TTDSG based on your consent. DialogShift offers further information on data collection and use as well as your rights and options for protecting your privacy at https://www.dialogshift.com/datenschutz.
7. Contact
You can request information about your personal data stored by us free of charge at any time. As a data subject, you also have the right to revocation, information, deletion, correction, restriction and transfer of your personal data, insofar as this is not opposed by a legal obligation to retain data on our part.
For more information about your rights as a data subject, please contact us using the contact details above. We will be happy to help you. The Austrian Data Protection Authority (DPA), Wickenburggasse 8-10, 1080 Vienna, is the competent supervisory authority for complaints.
Other
We have implemented organizational and technical safeguards, which we evaluate on an ongoing basis and adapt as necessary, to protect your personal data that we store and process.
SSL ENCRYPTION
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
Our online offer contains links to Internet pages of other providers. We have no influence on whether these providers comply with the statutory data protection provisions. You should therefore always check the data protection statements offered.
We reserve the right to change this privacy policy at any time and to adapt it to new developments. The new version applies from the time it is made available on our website.
The content of our website has been carefully prepared and checked several times, but we assume no liability for the timeliness, accuracy and completeness of the information provided. Claims for damages for use or non-use of the information or through the use of incorrect or incomplete information, are excluded. All offers are subject to change and non-binding. We reserve the right to change, amend or delete the offer or parts thereof without prior notice or to temporarily or permanently cease publication of the website.
The content and programming of our website are protected by copyright and ancillary copyright. Any duplication – also in extracts – and public reproduction, in particular copying of texts, graphics and photos, is prohibited without our prior written consent.