Privacy policy

General information
Palle Hotel GmbH has drawn up these Internet data protection guidelines with the intention of approaching visitors to the website as their trustworthy partner, who respects and guarantees your personal right to confidentiality.
Within the meaning of GDPR 2016/679 Erland Palle is the holder of the right to administration and processing of the personal data, which may be collected on this website. The rights holder administrates or processes these personal data, which may be collected on the website (www.brennseehof.com), under the conditions set out below.

Type of data collection and purpose of processing
Palle Hotel GmbH processes solely those data, which the visitor to the website has provided of his own free will. It is not possible to navigate on the website without providing personal data and information. Each visitor is free to make personal data available to Palle Hotel GmbH on a restricted basis, in order to benefit from only specified services. We collect and store personal data solely for the services described in the information we provide.
Visitors to the website may transfer their data to:

PRIVACY STATEMENT OF PALLE HOTEL GMBH

1. General 
This Privacy Policy applies to all persons who avail themselves of the services offered by Palle Hotel GmbH, hereinafter referred to as Brennseehof. In it, we inform you of the type, scope and purpose of the collection and use of your personal data by our company. We respect your privacy and make every effort to comply with the legal requirements governing the processing of your personal data (EU regulation 2016/679 [GDPR], Austrian Data Protection Act 2000, Austrian Data Protection Act 2018 and Austrian Telecommunications Act [TKG] 2003) in every respect. This legislation forms the foundation for processing all your personal data. 
Responsibility for processing your data rests with Palle Hotel GmbH. 
Our data protection coordinator is Erland Palle (erland.palle@brennseehof.com) 

By using our services and consenting to the terms of this Policy, you confirm that you are at least 14 years of age and are legally able to give consent or that valid consent has already been given by your legal guardian. 

2. Information in accordance with Art. 13 GDPR 
Your personal data, consisting especially of 

• your core data (family name, first name, address, e-mail address, telephone and fax number, date of birth, customer number) as well as language and vehicle registration number, 
• information contained in travel documents (passport number, passport details, date of birth, issuing office, expiry date, nationality) and ID cards (identity card, driving license etc. including issuing office and expiry date), 
• data relating to the method of payment and payments made, in particular by EC cards, credit cards and cash cards, 
• the desired length of your stay and destinations in connection with your stay, hotels, contacts, terms and rates, special services, health-related information, frequent flyer number, personal preferences that you share with us, and 
• special data categories such as health-related information and data relating to special needs and your civil status, 

are required for performance of our services. This also includes the booking of trips, hiring of tourist guides, restaurants, catering services and vehicles as well as transfers, registration processing, insurance, events, tours, accreditations, vouchers including entries in the customer database, billing and verification thereof (B2B, B2C, FIT), ticket bookings, etc. 

These data are stored, processed and, where necessary, transferred to third parties for the purposes listed. Such third parties are those we cooperate with to provide you, as our customer, with a service that is as efficient and good as possible, and may include service providers in third countries acting as processors and software and agency service providers. 

We do not use profiling or automated decisions. 

The legal basis of these data processing activities is 

• the fulfilment of our obligations towards you for the purposes of entering into a contract or arising from a contract, 
• any consent obtained from you or given by you, 
• legal, contractual or other obligations by which we are legally bound (e.g. statutory rights and obligations to keep records in accordance with accounting principles, tax and customs law, contract law, registration law, legal disputes as well as § 96 TKG and 
• our legitimate interests (e.g. the improvement of our customer service also with regard to direct marketing or pursuance of our own legal interests) 

The duration of data storage is calculated according to the length of our business relationship, the consent you have given and beyond that the legal periods of retention and legal obligations by which we are bound. We stress that in the case of regular cooperation with a view to providing the best possible customer service it is our aim to know the wishes you have already submitted to us as our customer so well that we can satisfy you constantly and in the long term. 

3. Our websites 
When you access our website, your access data is automatically collected and stored. This access data may include, in particular, the page accessed, the files viewed, the date and time of the access, the IP address of the user, data of the accessing computer, in particular the browser and the operating system, as well as the amount of data and the message of the successful access. This access data is used by us for internal statistical purposes to ensure the security of our offer and to optimise the offer. In the event of suspicion of an illegal act, the access data will be evaluated to preserve evidence. 

When you enter your personal data in one of our contact forms, you consent to the transfer of these data to us and their storage by us for the duration of the processing of that particular inquiry. This applies particularly to inquiries sent to us via a contact form, internet chat and e-mail. We require these data to process your inquiry and in such cases also store your IP address for the purposes of preservation of evidence. Data are stored for as long as this is necessary to deal with any additional or subsequent questions that either you or we may have. 
If you open a web account with us, we will make your contractual information available to you online. Please keep your access data safe and make sure that no unauthorised persons gain access to your account. We accept no liability for instances of unauthorised access which are attributable – even only partly – to an error on your part.

Your data will be transferred via an encrypted internet connection (https). We accept no liability in the event that your data are lost or accessed by a third party provided that we have met the security standards required by current technology. 
The legal basis of this data processing is your consent, fulfilment of our obligations towards you for the purposes of entering into a contract or arising from a contract, our legitimate interests and legal obligations of all kinds, and § 96 TKG. 

4. Regular Guests‘ Club (Guest Club) 
This website uses KunLeiSys Guest Club software (for the regular guest area). The provider is GASTROpoint GmbH, Pommernstrasse 17, 83395 Freilassing, Germany. KunLeiSys Guest Club software is a service that organises and manages the Guest Club, offers, loyalty points, e-mails for events and newsletter despatch. You can register for the Guest Club on our website. We will use the data entered for this purpose exclusively to allow you to use the product or service in question. The mandatory information requested during registration must be provided in full. Otherwise, we will refuse registration. The data entered during registration will be processed on the basis of your consent (Art. 6 (1)(a) GDPR), which you may revoke at any time free of charge. You can do this via the unsubscribe link in the e-mail or by unsubscribing in the Guest Club 

The data you enter for the purpose of the Guest Club will be stored by us until you have unsubscribed and then, once you have unsubscribed from the Guest Club and your account has been deleted, deleted from our servers and those of GASTROpoint GmbH. 

For important changes, regarding, for instance, the scope of our offer or technically necessary changes, we will use the e-mail address provided/stored in your profile to inform you by this means. Statutory retention periods are unaffected. We have concluded a contract with GASTROpoint GmbH for contract data processing and fully implement the strict requirements of the data protection authorities when using KunLeiSys Guest Club software.

5. Newsletter 
You are free to subscribe to our newsletter. The registration for which you have to provide your e-mail address and give your consent to receive the newsletter can not take effect until you confirm a link to the registration you receive by e-mail. In order to be able to provide you with information that might be of particular interest to you, you can give us information on specific interests, key dates, location details and regions and the like upon registration. 
In every newsletter you receive, you will find all the information you need to unsubscribe from the newsletter. For more information about our newsletters, please contact us at hotel@brennseehof.com. We’re here to help. 

The content of our website has been carefully prepared and checked several times, but we assume no liability for the topicality, correctness and completeness of the information provided. Claims for damages for the use or non-use of the information or for the use of incorrect or incomplete information are excluded. All offers are non-binding. We reserve the right to change, supplement or delete the offer or parts thereof without prior notice or to cease publication of the website temporarily or permanently. 
The content and programming of our website are protected by copyright and ancillary copyright. Any duplication – also in extracts – and public reproduction, especially the copying of texts, graphics and photos, is prohibited without our prior written consent. 

6. Transfer to third parties / Obligations of processor 
We may process your personal data 

• within the company, taking into account the permitted uses, 
• to processors (e.g. for our electronic advertising in the form of newsletters) and to third parties who

must be involved in providing the services you require, all of whom have committed to us to comply with the applicable data protection standards, 
transmitted. If compliance with European data protection standards is not possible - for example because standard contractual clauses, adequacy decisions or certifications are not guaranteed in the specific case - we will inform you in good time and also obtain the necessary consent from you. For more information please contact us at erland.palle@brennseehof.com. 

7. Cookies and Tracking Services 
We use cookies, small pieces of data used to store information in web browsers. Cookies are placed the first time you visit our website. The next time you visit, the cookies that were placed are recognised and are extremely useful for speeding up page loading and making it easier and more convenient for you to use our services. The information about you that the cookies recognise helps to identify you and to analyse your user behaviour. It is stored on the server of the provider concerned who, as a processor, has pledged to comply with the relevant privacy standards. 
Once you have visited our website, cookies are stored on your terminal unless you elected not to accept them before or actively delete them. Actively deactivating cookies can reduce our website’s functionality for you. You can also prevent the storage of cookies by adjusting your browser settings accordingly. Please note that by doing so you may not be able to use all the functions of our website. 
In addition, you can block the transfer of the information generated by the cookie and relating to your use of the website (incl. your IP address) to Google and the processing of this information by Google by downloading and installing the browser plug-in available at google.com. Please note that this plug-in is only available for certain browser programs. 
In order to make our web presence as informative and convenient for you as possible we also use content on the website that has been provided by third parties. This includes Google Maps, RSS Feeds and YouTube. For technical reasons, these providers receive your IP address. We have no influence over the way these third parties use your data and refer you to the privacy policies of the providers concerned. 


We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies. The information generated by the cookie about your user behaviour is generally sent to a Google server in the USA and stored there. Within the European Union, your IP address is abbreviated beforehand and therefore anonymised or at least pseudonymised. Only in exceptional circumstances is the full IP address transmitted to a Google server in the USA and abbreviated there. 
Google uses this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted from your browser for Google Analytics will not be combined with other data at Google. In this connection, please also take note of Google’s privacy policy and in particular the information available via the two links below: 

- http://www.google.com/analytics/terms/de.html and 
- https://www.google.de/intl/de/policies/ 

We use Facebook social plug-ins from the Facebook social network operated by the firm of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, and Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94303, USA. These plug-ins are buttons with which Facebook keeps track of visitors to our website. If the visitor is also registered as a user on Facebook and has logged in, more information is stored by Facebook. For technical reasons, Facebook also receives your IP address. We have no influence over the way Facebook uses your data and refer you to Facebook’s privacy policy, in particular the information available via this link: 
- https://www.facebook.com/help/568137493302217. 

This also gives you information about how to block Facebook social plug-ins with your browser. 


8. Contact 
You can ask for information about the personal data we have stored concerning you at any time and free of charge. As a data subject you also have the right to demand rectification or erasure of your personal data or the limitation of the processing of these data and to request data transfer and to object to the processing of your data, unless this contravenes a legal period of retention by which we are bound. 
The consequence of revocation would be the DELETION of your data. 
 
For more information on your rights as a data subject, please get in touch with us at erland.palle@brennseehof.com We are happy to help. Complaints relating to how your personal data is dealt with should be addressed to the Austrian Data Protection Agency, Wickenburggasse 8, 1080 Vienna. 

9. Miscellaneous 
We have implemented organisational and technical safeguards which we evaluate continuously and adapt if necessary to protect the personal data that we store and process. 
We reserve the right to modify this Privacy Policy at any time and adapt it to new developments. The revised version comes into effect as soon as it is placed on our website. The currently valid version of the Privacy Policy can be consulted at any time on our website at: https://www.brennseehof.com/de/info/datenschutz 

Our legal notice at: https://www.brennseehof.com/de/info/impressum

Transfer to third parties
Personal data are not transferred to other companies, unless this is required under statutory provisions or by the Courts or other corporate bodies and institutes.
It is not the intention of Palle Hotel GmbH to collect sensitive or judicially relevant personal data on its website.
Sensitive data within the meaning of Article 4 GDPR 2016/679 are personal details concerning sex, ethnic origin, religious, philosophical or other views, political opinions, membership of political parties, unions, associations or organisations with a religious, philosophical or trade union background and details on health or sexual orientation. Within the meaning of Article 4 GDPR 2016/679 judicially relevant data are those personal details, which may lead to inferences that the data subject is subject to measures based on Article 3 (1) from a) to o) and from r) to u) of the D.P.R. No. 313 of 14 November 2002 on the criminal record, the register of Administrative Offences in consequence of criminal offences or associated legal proceedings or to the data subject being the accused or suspect within the meaning of Articles 60 and 61 of the Code of Criminal Procedure. We recommend that you do not supply such information to our website. Should this be unavoidable (for example in the case of classification of groups of protected persons, in the provision of a curriculum vitae for employment purposes, in response to an offer of employment or as an expression of interest in an appointment with our company), we request that you send to us by post the specific declaration available in the “Despatch of Curriculum Vitae” section of this website. In this we request you to give your written consent to the processing of the aforementioned sensitive personal data.

Involvement of third party services and contents and data transfer to non EU-countries
 

• Google Analytics, Google-IP-Locator, Google Maps, Google Maps Distance Api, Google reCAPTCHA
  Proprietor: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• YouTube contents
  Proprietor: Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA
• Facebook social network
  Proprietor: Facebook Inc., Menlo Park, California, USA
• Google Plus social network
  Proprietor: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Instagram social network
  Proprietor: Facebook Inc., Menlo Park, California, USA
• Twitter social network
  Proprietor: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Irland
• Vimeo
  Proprietor: Vimeo Inc., 555 West 18th Street, New York, New York 10011
• Hotjar
  Proprietor: Hotjar Ltd, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta

Other external contents via widgets and iframes may be loaded. For insight into this list, please send an e-mail to erland.palle@brennseehof.com.

Links to third-party websites
The website www.brennseehof.com contains links to other third-party websites which are not governed by this privacy policy.

Retention and erasure of data
The information and personal data collected on this website, including those provided voluntarily by the visitor for the receipt of information material or other consignments when he writes to the addresses given in the Contact Inquiry, Newsletter, Jobs and Inquiry/Online booking sections, are retained solely for the purposes of providing the desired service and only for the period of time absolutely necessary to fulfil this purpose. Once the service has been provided, in accordance with the data protection guidelines of Palle Hotel GmbH the data are erased, subject to requirements from governmental agencies or legal retention requirements.

Exercise of your rights
In accordance with Article 15 GDPR 2016/679 the data subject has the right at any time to receive information on his personal data collected on this website; he may have them rectified, updated or erased or he may assert other rights accorded to him by law. For this purpose it is necessary to contact the controller of the data processing or the processor by e-mail at erland.palle@brennseehof.com.

Data security
All the technical and organisational security measures required to protect the personal data from loss and abuse are taken by Palle Hotel GmbH. Palle Hotel GmbH protects your personal data by means of internationally recognised standards, which make the following impossible:

• unauthorised access;
• unauthorised use and dissemination;
• unauthorised amendment;
• loss and inadvertent or unlawful destruction of data.
  
  Cookies/advertisements
  Cookies are small text files, which are deposited in your computer, if you visit certain websites. This website, including its sub-domains, uses cookies; the consent of the user is always requested, where this is expressly required by law or other applicable provisions. The use of cookies facilitates navigation on the website and allows the information transmitted to the user to be personalised. In addition, systems are used for security and statistical purposes to collect information on the user, such as his IP address, the browser and operating system used and/or the websites visited by a user.
  Cookies will not damage your computer, tablet or Smartphone. The cookies generated by www.brennseehof.com contain no personal data, which could be used to identify the user; they contain only encrypted data.
  
  Specific use of personal data
  In the following you will find specific notes on how specified sections of this website function::
   
  • Contact Request section
    The Contact Request section on this website offers the opportunity to enquire about rooms, offers, availability and participation in events and courses. If you decide to send us your personal data, these data shall be processed exclusively for the purposes referred to above by persons specifically authorised so to do and in accordance with the routine in-house management procedures.
  • Enquiry/Online booking area
    The Enquiry/Online booking area on this website offers the opportunity to obtain information on offers and availability of stays and holidays and to book or purchase holidays/stays or other services from us (e.g. wellness). If you decide to send us your personal data, these data shall be processed exclusively for the purposes referred to above by persons specifically authorised so to do and in accordance with the routine in-house management procedures.
  • Section: Newsletter
    If the visitor to our website would like to receive our newsletter, he must enter his personal data in the appropriate form in the Register for Newsletter section. The data collected serve for the despatch of the newsletter within the meaning of the declaration in the footnote to the form.
  • Jobs section
    The Jobs section on this website offers the opportunity to express interest in employment in our company and/or to respond to a job advertisement for vacant or newly-created posts. If you decide to send us your personal data, these data shall be processed exclusively for the purposes referred to above by persons specifically authorised so to do and in accordance with the routine in-house management procedures.

  
  Under-age visitors (16 years)
  The Palle Hotel GmbH website, which is regulated by the foregoing data protection provisions, is not intended for the use of minors. We are aware of the necessity for protecting data, which concern minors, in particular in the online environment. Therefore we do not collect and store, except inadvertently, any data from under-age visitors.