Privacy Policy

The protection of your personal data is important to us. We process your data on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).

This privacy policy informs you about the processing of personal data when you visit our website, contact us and in connection with your stay.

Controller and Contact

Hans Hell GmbH

Trading as: 492 Living

Riehlweg 492

6100 Seefeld in Tirol, Austria

Phone: +43 664 38 00 969

Email: info@492.at

For questions about data protection and to exercise your rights, you can reach us using these contact details.

Contacting Us

If you contact us by email, by phone or via a contact form, we process the information you provide in order to handle your enquiry and answer any follow-up questions. This includes in particular your name, your contact details and the content of your message.

For booking enquiries, the processing is carried out to take pre-contractual measures pursuant to Art. 6 (1) (b) GDPR. We handle other enquiries on the basis of our legitimate interest in appropriate communication pursuant to Art. 6 (1) (f) GDPR.

We store your enquiry for as long as necessary to process it and to answer foreseeable follow-up questions. Any storage beyond this only takes place where statutory retention obligations apply or where the data is required for the establishment, exercise or defence of legal claims.

Booking and Stay

To process your booking, carry out your stay and handle billing, we process in particular the following data:

  • Name and address
  • Email address and phone number
  • Arrival and departure dates
  • Number of guests and booking details
  • Billing and payment information
  • Other information provided by you that is required for your stay

The processing is carried out pursuant to Art. 6 (1) (b) GDPR for the performance of the contract. Where statutory obligations apply, the legal basis is Art. 6 (1) (c) GDPR.

Without the information required for this purpose, we may not be able to process a booking or a stay.

Statutory Obligations and Guest Register

As an accommodation provider, we process the guest data required by law in order to fulfil our registration and tax obligations. This includes in particular name, date of birth, nationality, address and length of stay as well as, where applicable, legally required information on travel documents.

The legal basis is Art. 6 (1) (c) GDPR in conjunction with the applicable registration and tax regulations.

Data is transmitted to authorities or other recipients provided for by law to the extent required.

Recipients of Personal Data

We only pass on personal data where this is necessary to handle your enquiry or your stay, where there is a legal obligation to do so or where you have given your consent.

Recipients may include in particular technical service providers for the website, IT and communication, service providers entrusted with booking and payment processing, our tax advisors and the competent authorities.

Where service providers process data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Storage Period

We only store personal data for as long as necessary for the respective purpose or as long as statutory retention obligations apply.

Tax-relevant documents are generally retained for seven years from the end of the respective calendar year. Statutory guest records are generally retained for seven years from the date of entry; for collections of guest register sheets, the date of the last entry is decisive.

Longer storage periods may result from special statutory provisions or ongoing proceedings. Where data is required for the enforcement or defence of legal claims, we store it to the extent necessary until the relevant deadlines have expired or until the proceedings have been concluded.

The data is then deleted or anonymised.

Technical Provision of the Website

When you access our website, technically necessary data is processed. This may include in particular the IP address, date and time of access, pages and files accessed, browser and operating system information and technical status messages.

The processing serves to deliver the website, to ensure secure and stable operation and to detect and remedy faults.

The legal basis is our legitimate interest in a secure and functional website pursuant to Art. 6 (1) (f) GDPR.

Technical log data is only stored for as long as necessary for these purposes. In the event of specific security incidents, longer storage may be necessary for investigation and legal prosecution.

Cookies and Similar Technologies

The storage of information on your device or access to such information is governed by Section 165 (3) TKG 2021.

Consent is not required if the operation serves solely to transmit a communication or is strictly necessary to provide a service that you have expressly requested.

Non-essential cookies and similar technologies, in particular for analytics and advertising purposes, require your prior consent. Where personal data is processed in this context, the legal basis is Art. 6 (1) (a) GDPR.

You can delete stored cookies or restrict their storage via your browser settings. This may impair certain functions of the website.

Your Rights

Subject to the statutory requirements, you have the right to:

  • Access to your personal data
  • Rectification of inaccurate data or completion of incomplete data
  • Erasure of your data
  • Restriction of processing
  • Data portability

Withdrawal of consent: You can withdraw any consent you have given at any time with effect for the future. The lawfulness of the processing carried out before the withdrawal remains unaffected.

Objection: If your data is processed on the basis of legitimate interests, you can object on grounds relating to your particular situation. You can object to processing for direct marketing purposes at any time without giving reasons.

To exercise your rights, please contact us at info@492.at.

Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you can lodge a complaint with a data protection supervisory authority.

In Austria, this is:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)

Barichgasse 40–42

1030 Vienna, Austria

Email: dsb@dsb.gv.at

Website: www.dsb.gv.at