Data Privacy

Apartments Anneliese – Holiday Apartments in Rauris

Last updated: 17.05.2026

1. Data controllers

The controllers responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) are:

Apartments Anneliese, owners Lisa Schöberl & Elena Schöberl, letting partnership Gaisbachstraße 8, 5661 Rauris, Austria
Email: info@apartments-anneliese.com
Telephone: +4915781208076
VAT identification number: ATU83198914

2. Personal data we collect

2.1 When you visit our website. When you access our website, the web server automatically records technical access data:

IP address (anonymised where analytics tools are used);
date and time of access;
pages accessed;
browser type,
operating system and screen resolution;
referring website (referrer URL).

2.2 When you contact us. If you contact us by email, telephone, contact form or messenger (for example WhatsApp), we collect: first name and surname; email address; telephone number (if provided); the content of your message and enquiry; and, for messenger contact, your messenger profile name. Note on WhatsApp: if you contact us via WhatsApp, data may be transferred to Meta Platforms Inc. in the USA. If you would prefer to avoid this, please contact us by email or telephone instead.

2.3 When you make a booking. As part of a booking — whether directly or through platforms such as Airbnb or Booking.com — we process: the name and address of all guests; travel details (arrival and departure, number of people); payment information (depending on the payment method); correspondence relating to the booking; and registration data under §§ 5 and 7 of the Registration Act 1991 (the guest registration form). Providing this data is required by law or necessary to perform the accommodation contract. Without it, we cannot process a booking.

3. Purposes and legal bases of processing

3.1 Operating the website. Technical access data is processed to ensure the proper operation and security of our website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

3.2 Responding to enquiries. Data from contact made through the form, email, telephone or WhatsApp is used solely to deal with your enquiry. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering a contract) or Art. 6(1)(a) GDPR (consent).

3.3 Processing bookings and statutory registration. Booking data is processed to perform the accommodation contract and to meet statutory registration obligations under §§ 5 and 7 of the Registration Act 1991. Legal bases: Art. 6(1)(b) and (c) GDPR. 3.4 Web analytics. With your consent, we use a web analytics tool on our website to evaluate usage statistically and improve what we offer. Your IP address is processed in anonymised form. Where Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) is used, personal data may be transferred to Google LLC in the USA. This transfer is based on the European Commission's adequacy decision of 10 July 2023 (EU-US Data Privacy Framework), under which Google LLC is certified. The EU standard contractual clauses apply in addition. You may withdraw your consent at any time via our cookie banner. Legal basis: Art. 6(1)(a) GDPR.

3.5 Booking platforms (Airbnb, Booking.com). Bookings made through external platforms are also subject to the data protection provisions of the respective provider. Airbnb and Booking.com are independently responsible under data protection law for the data collected through their platforms. We receive from these platforms only the data required to process your booking. Legal basis: Art. 6(1)(b) GDPR.

4. Disclosure of data to third parties Your personal data is disclosed to third parties only in the following cases: — booking platforms (Airbnb, Booking.com), as part of processing your booking — payment service providers, to process payments — our website hosting provider, Wix.com — our email provider, Zoho — Google Ireland Ltd., where Google Analytics is used (only with your consent) — our tax adviser, as part of bookkeeping — public authorities, where required by law, in particular the registration authority under the Registration Act We have contracts in place with all processors in accordance with Art. 28 GDPR, ensuring compliance with data protection requirements.

5. Cookies and tracking Our website uses cookies. Technically necessary cookies are set without consent and are required for the website to function. We use analytics and marketing cookies only with your express consent, which you can give via our cookie consent banner. You may withdraw your consent at any time with effect for the future. You can change your choices at any time using the "Cookie settings" link in the footer of our website. You can also disable or delete cookies through your browser settings.

6. Retention periods — Contact enquiries: up to 3 years after the correspondence ends — Booking data: at least 7 years (statutory retention period for tax purposes under § 132 BAO, the Austrian Federal Fiscal Code); longer in individual cases where proceedings are ongoing or taxes remain outstanding — Registration data (guest registration form): 7 years under § 5(5) of the Registration Act 1991 — Website access data: maximum 14 months (Google Analytics) or 30 days (server logs) Once the relevant period expires, data is deleted as a matter of routine, unless a statutory retention obligation prevents this.

7. Data security We take technical and organisational measures to protect your data against accidental or deliberate manipulation, loss, destruction or unauthorised access. Our website is secured with TLS encryption (https). Within our business, access to personal data is limited to authorised persons. Our security measures are kept under continuous review in line with technological developments.

8. No automated decision-making Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

9. Your rights as a data subject Under the GDPR you have the following rights: — Right of access (Art. 15 GDPR): information about the data processed about you — Right to rectification (Art. 16 GDPR): correction of inaccurate or incomplete data — Right to erasure (Art. 17 GDPR): deletion of your data in certain circumstances — Right to restriction of processing (Art. 18 GDPR) — Right to data portability (Art. 20 GDPR): receipt of your data in a common, machine-readable format — Right to object (Art. 21 GDPR): objection to processing based on legitimate interests — Right to withdraw consent: you may withdraw consent at any time with effect for the future To exercise your rights, please email us at info@apartments-anneliese.com.

10. Right to complain to a supervisory authority You have the right to lodge a complaint with the competent data protection supervisory authority. In Austria this is: Austrian Data Protection Authority (Österreichische Datenschutzbehörde) Barichgasse 40–42, 1030 Vienna Telephone: +43 1 52 152-0 · Email: dsb@dsb.gv.at · Website: www.dsb.gv.at

11. External links Our website may contain links to external websites, in particular to booking platforms (Airbnb, Booking.com). We accept no responsibility for the data protection practices of these external providers. Please read the privacy policies of the providers concerned.

12. Updates to this privacy policy We reserve the right to amend this privacy policy in the event of changes to the law or to our services. The current version is always published on our website.