Privacy policy

The protection of personal data is taken very seriously and the website hotelvienna.at naturally adheres strictly to the rules of data protection laws. Personal data is only collected on this website if you contact us. Under no circumstances will the collected data be sold.

Data collected for this are:

First Name
Last Name
Address
Post code
Place
Country
Phone number
Email address

If you do not agree to the storage of your data for this purpose, please send us an email hotel.vienna@aon.at. Your data will then be deleted immediately.

Data transmission and logging for internal system and statistical purposes

This website automatically collects and stores information in its server log files that your Internet browser transmits to us. These are:

The time of the server inquiry
Operating system used
Browser type/version
Referrer URL
IP address

This data cannot be assigned to specific persons. A combination of this data with other data sources does not take place. The data will be deleted after a statistical evaluation.

Controller

The person responsible within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data. The person responsible for the personal data processed on this website within the meaning of the GDPR is:

Name: Thomas Lerch
Address: Große Stadtgutgasse 31
Telephone number: + 43 1 214 33 17
E-mail: lerch.hotel.vienna@gmail.com

Your rights

With regard to the personal data that we process about you, you have the following rights:

You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, we will inform you of the personal data stored about you and further information.

You have the right to have any incorrect personal data concerning you corrected immediately. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data - including by means of a supplementary declaration.

We will notify any correction or deletion of your personal data and restriction of processing to all recipients to whom we have disclosed personal data relating to you, unless this proves impossible or involves a disproportionate effort. We will also inform you about these recipients if you request this.

You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format and you can request that we transfer this data to another person responsible without hindrance, as far as this is technically possible.

If data processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the legality of the data processing that took place up to your withdrawal.

Right of objection

If you exercise your right to object, we will no longer process the data in question, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or that the processing is necessary for the assertion, exercise or defense of legal claims.

Social Media

Social media buttons may be displayed on our website; they can be recognized by the logos of the social media platforms. These are links to the respective platforms based in the USA. Clicking on such a link calls up the website of the respective platform, whereby the IP address of the calling device and the address of the page from which the link is made are transmitted to the called platform in the USA. However, we do not collect or process any data in connection with the social media buttons.

processors

To support the booking, data is transmitted via the booking system of the company Kognitiv GmbH, Neubaugasse 10/15, 1070 Vienna. As a technical service provider for the operation of our website on the Internet, we use the services of World4You - Internet Services GmbH as a processor.

Use of cookies

When you visit our website, we place a "cookie" on your end device. This is a small text file with which we can recognize your end device. With the help of the cookie we can also analyze certain user behavior, for example which pages you look at, how long you stay on our site and when and how often you return to our website.

You can prevent the creation of cookies by going to the cookie settings of your internet browser and objecting to the creation of cookies for our site or for all websites. You can also delete cookies that have already been stored there.

We declare that we are not responsible for the content of external websites that are linked to.

General information about bookings via likemagic.tech

From booking to check-in and access to our facilities and even check-out, we predominantly use digital processes in our hotel so that we can offer our guests a unique hotel service and stay which can be organized and designed by our guests according to their needs via their mobile device (here-inafter “Guest Journey”). The following explanations for the website also apply analogously for apps and other channels that are used by us to create the Guest Journey.

We use the software-supported hotel management solution and central data management platform likeMagic from SV (Schweiz) AG, Memphispark, Wallisellenstrasse 57, 8600 Dübendorf, Switzerland (hereinafter “Platform”) for the Guest Journey, which enables the management, support, processing, analysis and evaluation of lodging processes in hotel facilities and in which all functions in the areas of reservation, front office, and property management functions are combined in one user interface. Interfaces connect the Platform with other applications and infrastructure for operating and managing our hotel. Furthermore, the Platform bundles access for us via corresponding interfaces to applica-tion programs that we license from third parties and thereby supports defined services in essential operational processes typical for hotels within the framework of the Guest Journey, such as booking, billing, guest check-in and guest check-out processing, guest communication, guest catering, lock-ing system management, facility management, etc. The data entered into the Platform is in our re-sponsibility (Hotel Vienna GmbH) and is stored on Google’s servers in Switzerland.

We have entered into a data processing agreement with SV (Schweiz) AG to ensure that your per-sonal data is protected. By agreeing to this privacy policy, you hereby authorize SV (Schweiz) AG to use the personal data that we process for proprietary research and product development purposes.

Categories of personal data

The personal data that we collect from you and other people (e.g., family members, companion) via our website, apps, and other channels in connection with the Guest Journey are entered into and processed in the aforementioned Platform (see also section 1.3).

In particular, this concerns the following categories of personal data:

Data and information that is provided to us during bookings (particularly title, first and last name, address, e-mail address, date of birth, telephone number, language, reservation de-tails [date of stay, number of rooms, room category, number of people on the booking, se-lected additional packages, etc.], credit card information (encrypted as per PCI/DSS), date and time of booking [time stamp]; where applicable, the expected arrival time, desired bed type and/or other preferences, comments)
Data and information related to your stay at our hotel that are disclosed to us or become known to us, particularly for complying with statutory registration requirements (first and last name, address and canton, date of birth, place of birth, nationality, day of arrival and depar-ture; incl. copy of official identification document and signature, room number), along with the purchase of additional (fee-based) services such as restaurant, mini bar, wellness, ex-cursion offerings, sports offerings, etc. (particularly first and last name, object of perfor-mance, time of service procurement/rendering), or about which you inform us (e.g. prefer-ences)
Data and information that is generated in conjunction with the use of our facilities, common areas and your room (e.g. date and time of entry)
Data and information that is provided to us when using the communication functions and dur-ing communication with you (particularly first and last name and/or user name, where appli-cable; communication channel; communication product/solution; e-mail address and/or tele-phone number; date and time of communication; status of messages (opened, read, clicked); content of communication)
Data that is provided to us when opening a customer account (particularly first and last name, e-mail address, password [encrypted as a hash with salt], date and time of registra-tion [time stamp], status of the e-mail verification)
Data that is provided to us when logging into the customer account, depending on the type of login that you have chosen (e-mail login authentication data [e-mail address, password] and/or social login authentication data [e-mail address, ID token], data and time of login [time stamp])

Personal data are generally collected from our guests themselves. However, they can also be col-lected via third parties such as when a guest provides personal information from other peo-ple/companions (e.g. family members) or, for instance, a third person makes a booking. If you pro-vide us with personal data from other people (e.g. family members, companions), we ask that you ensure that these people are familiar with this privacy policy and only share their personal data with us if you are authorized to do so and if this personal data is correct.

We will obtain certain data of you via interfaces that connect the Platform with application programs licensed from third parties in connection with the Guest Journey and that deal with essential opera-tional processes that are typical for hotels such as booking, billing, guest check-in and guest check-out, guest communication, guest catering, locking system management, facility management etc., along with the remaining applications and infrastructure of our hotel.

If a booking or check-in is made using a customer account, the required booking and/or check-in data that is already saved in the customer account such as title, first and last name, address, e-mail address, date of birth, telephone number, language and registration form data are used by us for that purpose.

If you book your stay via a third-party platform, we obtain many different kinds of personal data from the respective platform service provider that we enter into and process in the Platform that we use. This is essentially data and information that we also collect in case of a booking that we receive without a third party platform, i.e. title, first and last name, address, e-mail address, date of birth, telephone number, language, reservation details (date of stay, number of rooms, room category, number of people in the booking, selected additional packages, etc., date and time of the booking [time stamp]; where applicable, expected arrival time, type of bed and/or other preferences, com-ments).

Central storage and linking of your data

The data and information mentioned in section 1.2 above, which we particularly collect in connection with the Guest Journey, are systematically collected and linked by us for the purpose of processing your booking and providing the contractual services. As mentioned above, we use likeMagic, a soft-ware-assisted hotel management solution and central data management platform from SV (Schweiz) AG, Dübendorf, Switzerland to that end. Your personal data is entered into the Platform via interfaces that the Platform connects with application programs licensed from third parties in connection with the Guest Journey in the area of essential operational processes that are typical for hotels such as booking, billing, guest check-in and guest check-out, guest communication, guest catering, locking system management, facility management etc., along with other applications and infrastructure of our hotel.

In order to store and link the personal data of our guests, a standalone guest ID for the respective hotel and/or a hotel group is created for each guest. Accordingly, we also aim to identify the guest in our database each time a booking is made. If you have previously stayed with us and we are author-ized to do so, we furthermore will compare your personal data with personal information we may have saved in order to keep our customer data in particular up to date, to make check-in efficient for you and to ensure that your stay is tailored to your needs.

We base this processing on our legitimate interest in efficiently managing and directing our hotel and in customer-friendly and efficient customer data management.

Furthermore, please note that – with your permission by consenting to this privacy policy – we may also use the personal data and information aforementioned in section 1.2, which we save and link in the Platform, with the help of the software-assisted hotel management solution we employ to analyze certain personal aspects such as personal preferences, interests, etc. We may use the knowledge gained from this to tailor your stay to your needs or to present you with offers that are tailored to your personal interests and preferences. Furthermore, such data generally assists us to increase the efficiency of our operational processes and to consistently improve our offer for our guests.

Disclosure of Personal Information

The personal data collected from you in the course of the Guest Journey will be passed on, if neces-sary, to internal recipients or, via corresponding interfaces, to external service providers domestical-ly and abroad – particularly when processing and handling your booking and your stay. In addition to the aforementioned SV (Schweiz) AG, Dübendorf, Switzerland, there are additional processors and service providers to which your personal data may be forwarded and/or who have or may have ac-cess to them (including IT service providers, service providers for processing booking data [proper-ty management] or CRM, payment processing, digital key solution, etc.). An overview of the proces-sors and service providers associated with the Platform can be found on SV (Schweiz) AG’s website at www.likemagic.tech. www.likemagic.tech a DAK Bungalow.

We contractually ensure the protection of your personal data (e.g. by using the EU standard contrac-tual clauses for data transfers) if – in association with the procurement of an external service provid-er – your personal information needs to be transferred to a country whose level of data protection does not match that of Switzerland or Europe.

Furthermore, we disclose your personal information only if you have explicitly agreed to do so, if it is necessary for initiating or processing the contract, if there is a legal obligation to do so, or if it is necessary for enforcing our rights – particularly for enforcing claims arising from the contractual relationship or other rights – or if the processing is carried out to protect a legitimate interest on our part or on the part of third parties. In rare cases, it may be necessary to disclose personal data in order to protect the vital interests of the person concerned or another natural person.

Retention period

Without your consent, we store your personal information on the Platform beyond the retention period only to the extent necessary to meet our statutory obligations or if we have a legitimate interest in doing so (such as an interest in furnishing evidence in case of claims, documenting compliance of legal or other provisions, or an interest in non-personal evaluations). For instance, we particularly store contractual data according to statutory retention obligations. Retention obligation that oblige us to retain data originate from provisions regarding the right to report, financial reporting, and fiscal law. According to these provisions, business communications (incl. e-mails), concluded agreements and booking receipts must be stored for up to 10 years. If we no longer require this data to render the services for you, the data shall be blocked. This means that, afterwards, the data may be used only for invoicing and fiscal purposes.

If we are authorized to process your personal data beyond contract initiation and execution of the contract processing, we generally process this data for an indefinite time period. We store this data for as long as necessary to achieve the contractual purposes or until you request that we cease this processing (and for a short period of time afterwards so that we can comply with your request), un-less we have other legally permissible grounds to continue storing your personal data. We also rec-ord the fact that you have ask to stop processing your data so that we can continue to carry out your wish. The consent to retention may be revoked at any time, with effect for the future, by sending an e-mail to hotel.vienna@aon.at. hotel.vienna@aon.at be revoked.

If you have a customer account, we will save the data saved in your customer account and/or linked with it until you delete your customer account, unless otherwise stipulated by statutory retention ob-ligations or our legitimate interests.

Hotel Vienna GmbH

Grosse Stadtgutgasse 31
1020 Vienna / Austria
Austria

Phone: +43 1 214 33 17
Fax: + 43 1 216 10 79
E-mail: hotel.vienna@aon.at