Data ProtectionSimm's Hotel

General information on data processing

Data controller

Design Hotel Management GmbH
FN 233996m
Kärntner Straße 13-15, 1010 Vienna

Provision of the website

1. Scope and purpose of data processing

For technical reasons, every time you visit our website, our system automatically collects the following data and information that your device transmits to our website’s server:

1. Browser type and version used
2. Operating system of the end device
3. Internet service provider
4. IP address of the end device (anonymized if applicable)
5. Date and time of access
6. Websites from which the end device accesses our website
7. Websites accessed by the end device via our website

This data is processed to ensure smooth connection to the website and to optimize our website and our offerings. The aforementioned data is also temporarily stored in our system’s log files. This data is not stored together with any personal data you may have provided, so it cannot be used to identify a specific person. IP addresses are only stored in anonymized form.

2. Legal basis for data processing

Our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

3. Recipient

This data is also processed by the following recipients: our IT service providers acting in accordance with our instructions.

4. Storage period

In the case of data collection for the provision of the website: immediately after the end of the respective session.

In the case of data storage in log files: after seven days at the latest.

Cookies and implemented technologies

We use cookies and implemented third-party technologies on our website. Further information about cookies and how to manage them can be found here.

You can change your cookie settings here: Change settings

Contacting us

1. Scope and purpose of data processing

We offer you various options (telephone, contact forms, email) for getting in touch with us. The data you provide, enter, or send by email will be processed and stored. In the case of digital data transmission, additional information such as your IP address, the date and time of your request will also be stored. We require this information to process your request. Your data will not be passed on to third parties without your consent. The data collected in this way will also not be compared with data that may be collected by other components of our website.

The provision of your personal data is voluntary. However, without this information, we are unable to provide you with a contact option via email or form.

2. Legal basis for data processing

Your consent pursuant to Art. 6 (1) (a) GDPR or the performance of the contract/implementation of pre-contractual measures pursuant to Art. 6 (1) (b) GDPR.

3. Recipient

The data is also processed by the following recipients: our IT service providers acting in accordance with our instructions.

4. Storage period

• Until the purpose is achieved
• 12 months for requests with long-term validity
• 7 years for matters subject to tax law retention requirements

Hotel reservation

1. Scope and purpose of data processing

You can book rooms on our website. We use the OnePageBooking booking product from HotelNetSolutions GmbH for this purpose. The data provided in the booking form is processed during the booking process.

The personal data you provide will be used exclusively for processing your booking.

The provision of your personal data is voluntary. However, it is not possible to make hotel reservations via our website without providing this data.

2. Legal basis for data processing

Performance of a contract/implementation of pre-contractual measures in accordance with Art. 6 (1) (b) GDPR or fulfillment of a legal obligation in accordance with Art. 6 (1) (c) GDPR.

3. Recipients

The data is also processed by the following recipients: our IT service providers acting in accordance with our instructions, processing banks/payment service providers.

4. Storage period

If the booking is canceled: immediately after the end of the session.

If the booking is confirmed: until the expiry of the tax retention period (7 years).

Job applications

1. Scope and purpose of data processing

We offer you various options for applying for a position at Simm’s Hotel. As part of the application process, we process the data that you provide to us.

The provision of your personal data is voluntary. However, it is not possible to apply for a job via our website without providing this data.

2. Legal basis for data processing

Performance of a contract/implementation of pre-contractual measures in accordance with Art. 6 (1) (b) GDPR or our legitimate interest in centralized applicant management in accordance with Art. 6 (1) (f) GDPR.

3. Recipients

The data is also processed by the following recipients: our IT service providers acting in accordance with our instructions, List Beteiligungsges.m.b.H.

4. Storage period

For applicants who are not hired: no later than 6 months after completion of the application process.

Video surveillance

1. Scope and purpose of data processing

Encrypted video surveillance is used in our hotel. In accordance with legal requirements, the video surveillance is indicated prior to entering the hotel or the respective monitored areas.

The data is processed for the protection of property, protection against damage, containment, prevention and prosecution of criminal activities, as well as for the exercise of domiciliary rights. The provision of the data is voluntary. However, entering our hotel or monitored areas without providing the data, i.e., without being recorded by video surveillance, is not possible.

2. Legal basis for data processing

Safeguarding the legitimate interests referred to in point 1. (Art. 6 (1) (f) GDPR; Section 12 para. 2 no. 4 in conjunction with Section 3 para. 2 of the Data Protection Act, Section 80 of the Code of Criminal Procedure, Sections 353 et seq. of the Austrian Civil Code).

3. (Categories of) Recipients of personal data

Where necessary, the data will be transferred to the following recipients:

• IT service providers acting as our data processors in accordance with their contractual obligations to us,
• courts for the preservation of evidence in civil matters,
• Insurance companies for the settlement of insurance claims; solicitors exclusively for the enforcement or defense of legal claims,
• Authorities and courts for the preservation of evidence in criminal matters,
• Security authorities for security police purposes,
• Other authorities within the scope of their remit.

4. Storage period or criteria for the storage period

72 hours (Section 13 para. 3 Data Protection Act), unless a longer retention period is necessary for specific reasons to fulfil the purposes of data protection and the preservation of evidence.

Processing of health data

1. Scope and purpose of data processing

If you voluntarily provide us with information regarding your health status (such as food allergies, intolerances or physical impairments) during your reservation, via contact forms, by email or at check-in, we will collect and process this sensitive data. These special categories of personal data are processed exclusively for the purpose of tailoring our services (in particular food preparation in the kitchen) to your specific health needs and to ensure a safe stay for you. The provision of this data is absolutely voluntary. However, please note that without this information, we unfortunately cannot take your specific health needs into account when providing our services.

2. Legal basis for data processing

Your explicit consent pursuant to Art. 9 Para. 2 lit. a GDPR. You may withdraw this consent informally (e.g., via email) at any time with effect for the future.

3. Recipients

The data is treated strictly confidentially. Internally, this information is only shared on a “need-to-know” basis with those employees (e.g., head chef, restaurant management) who absolutely require it for the safe provision of services. Externally, the data is processed by our IT service providers (e.g., hotel software) acting in accordance with our instructions as data processors.

4. Storage period

Until consent is withdrawn, but no later than the expiry of the statutory limitation periods for potential claims for damages (usually 3 years after your departure).

Data subject rights – access, rectification, data portability, and erasure

In accordance with current data protection regulations, you have the right to obtain information about your personal data processed by us.

In addition, you have the right to rectification inaccurate personal data concerning you and to have incomplete personal data completed.

You are entitled to request the deletion of personal data concerning you. We will delete your personal data if the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, if consent required for processing is withdrawn, if the personal data has been processed unlawfully, or if the deletion of the personal data is required to fulfill a legal obligation. Data necessary for the establishment, exercise, or defence of legal claims, as well as data that we are required to retain due to mandatory provisions, are excluded from deletion.

You may withdraw any consent you have given to the collection and storage of your personal data at any time, in whole or in part, with effect for the future. In the event of your withdrawal, certain services may no longer be provided or may only be provided to a limited extent.

You may also have the right to restrict the processing of your data and the right to receive the personal data you have provided in a structured, commonly used, and machine-readable format.

For any declarations or inquiries regarding the above points of the privacy policy, please contact the above-mentioned controller in writing or send an email to: [email protected]t.

To protect your security and privacy, we reserve the right to verify your identity before responding to your request or taking any of the above measures.

If you believe that the processing of your personal data violates data protection law or that your data protection rights have been violated in any other way, you have the right to lodge a complaint with the data protection authority.

Complaints should be addressed to:

Austrian Data Protection Authority | Barichgasse 40-42 | 1030 Vienna | Telephone: +43 1 52 152-0 | Email: [email protected]

SSL encryption

Our website uses SSL encryption to securely transmit your data (e.g., contact form). You can recognize an encrypted connection by the string “https://” and the lock symbol in the address bar of your browser.

Changes to this privacy policy

We reserve the right to amend this privacy policy as necessary, in particular in the event of changes to data protection requirements. Subject to any mandatory statutory provisions to the contrary, the amendment shall take effect upon publication on our website.

Contact form and email contact

 1. Description and scope of data processing

On our website, we offer users the opportunity to contact us by providing personal data via a contact form or by email. The data is entered into an input mask, transmitted to us and stored. The data is not passed on to third parties. The following data is collected during the registration process. The following data is also stored at the time of registration:

• The user’s IP address
• Date and time of registration

Your consent will be obtained for the processing of data as part of the sending process and reference will be made to this privacy policy. Alternatively, you can contact us via the email address provided. In this case, the user’s personal data transmitted with the email will be stored. In this context, the data will not be passed on to third parties. The data will be used exclusively for the processing of the conversation.

 2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.

 3. Purpose of data processing

The processing of personal data from the input mask serves us solely for the purpose of processing the contact request. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

 4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data from the input mask of the contact form and that sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

 5. Right to object and right to erasure

The user may revoke their consent to the processing of personal data at any time. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. The revocation is made by sending an email to . In this case, all personal data stored in the course of contacting us will be deleted.

Newsletter

 1. Description and scope of data processing

• IP address of the calling computer
• Date and time of registration
• Email address

Your consent will be obtained for the processing of data during the registration process and reference will be made to this privacy policy. If you purchase goods or services on our website and provide your email address, we may use this address to send you a newsletter. In such cases, the newsletter will only be used to send direct advertising for our own similar goods or services. In connection with data processing for the purpose of sending newsletters, no data will be passed on to third parties. The data will be used exclusively for sending the newsletter.

 2. Legal basis for data processing

The legal basis for processing data after the user has subscribed to the newsletter is Art. 6(1)(a) GDPR, provided the user has given their consent. The legal basis for sending the newsletter following the sale of goods or services is Section 7(3) UWG.

 3. Purpose of data processing

The user’s email address is collected for the purpose of delivering the newsletter. Other personal data collected during the registration process is used to prevent misuse of the services or the email address used.

 4. Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. The user’s email address will therefore be stored for as long as the newsletter subscription is active. Other personal data collected during the registration process will generally be deleted after a period of seven days.

 5. Right to object and right to erasure

The newsletter subscription can be cancelled by the user concerned at any time. For this purpose, a corresponding link is provided in each newsletter. This also allows the user to revoke their consent to the storage of personal data collected during the registration process.

Web analytics and meta plug-in

This website uses Google Analytics, a web analytics service provided by Google Inc. (‘Google’). Google Analytics uses ‘cookies’, which are text files placed on users’ computers, to help the website analyse how users use the site. The information generated by the cookie about users’ use of this website is usually transferred to a Google server in the USA and stored there.

However, if IP anonymisation is activated on this website, the IP address of users within member states of the European Union or in other signatory states to the Agreement on the European Economic Area will be truncated beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. IP anonymisation is active on this website. On behalf of the operator of this website, Google will use this information to evaluate the use of the website by users, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

However, if IP anonymisation is activated on this website, the IP address of users within member states of the European Union or in other signatory states to the Agreement on the European Economic Area will be truncated beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. IP anonymisation is active on this website. On behalf of the operator of this website, Google will use this information to evaluate the use of the website by users, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

Terms of Service | Google Analytics – Google

Datenschutzerklärung & Nutzungsbedingungen – Google

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Users can prevent the storage of cookies by adjusting their browser software settings accordingly; however, this offer advises users that in this case they may not be able to use all functions of this website to their full extent. Users can also prevent Google from collecting the data generated by the cookie and relating to their use of the website (including their IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

We use Facebook social plug-ins from the social network Facebook, operated by Facebook Ireland Limited, 4 Grand Canal Square Dublin 2, Ireland, and Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94303, USA. These plug-ins are buttons that Facebook uses to measure who visits our website. If the visitor is also registered and logged in to Facebook as a user, additional information is stored by Facebook. Facebook receives your IP address for technical reasons. We have no influence on the use of this data by Facebook. In this regard, we refer to Facebook’s privacy policy, in particular the information available at the following link:

Customise how advertisements are displayed to you on Facebook based on information from advertising partners about your activities | Facebook Help Centre

 

There you will also find information on how to block Facebook social plug-ins in your browser.

 1. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.

 2. Purpose of data processing

The processing of users’ personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. These purposes also constitute our legitimate interest in processing the data in accordance with Art. 6(1)(f) GDPR. The anonymisation of the IP address takes sufficient account of the users’ interest in the protection of their personal data.

 3. Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

 4. Right to object and right to erasure

Cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent. We offer our users the option of opting out of the analysis process on our website. To do this, you must follow the corresponding link. This will set another cookie on your system that signals our system not to store the user’s data. If the user deletes the corresponding cookie from their own system in the meantime, they must set the opt-out cookie again.

Rights of data subjects – access, rectification, transfer and erasure

In accordance with current data protection regulations, you have the right to obtain information about your personal data processed by us. In addition, you have the right to correct inaccurate data and to block and delete your data, provided that there is no legal obligation to retain it.

For information on data protection issues and to assert your rights as a data subject, please send an email to: [email protected]