Privacy, clearly explained.
Privacy policy of Wolfgangsee Appartements in Strobl am Wolfgangsee
Which data we process when you visit our website, send an enquiry or book – for what purpose, on what legal basis and for how long. And which rights you have.
This is a courtesy translation. The German version of the privacy policy is legally binding.
1. Controller
The controller responsible for data processing on this website and for bookings is:
FIRST NAME LAST NAME
, Wolfgangsee Appartements
Seethurnstraße 41, 5350 Strobl am Wolfgangsee, Austria
Email: EMAIL ADDRESS
· Phone: +43 PHONE NUMBER
You can reach us at this address with any questions about data protection and to exercise your rights. Our business is not legally required to appoint a data protection officer.
2. Principles
We only process personal data to the extent necessary for the website, your enquiry, your booking and your stay, or where you have given your consent. The legal framework is the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021), in particular:
- Art. 6(1)(a) GDPR – your consent,
- Art. 6(1)(b) GDPR – a contract or pre-contractual enquiry,
- Art. 6(1)(c) GDPR – legal obligations (e.g. registration and tax law),
- Art. 6(1)(f) GDPR – legitimate interests, such as operating the website securely.
3. Website, hosting and server logs
Our website is provided via the booking and property management system Guesty (Guesty, Inc., USA; EU representative in Lisbon, Portugal). It is technically based on the website builder Duda (Duda, Inc., USA). Both process data on our behalf.
When you visit the website, technically necessary data is processed: IP address, date and time, the page requested, browser and operating system, and the previously visited page. This serves to deliver the website and keep it stable and secure (Art. 6(1)(f) GDPR). These logs are stored only briefly by the provider and are not combined with other data.
Where data is transferred to the USA, we rely on the EU-US Data Privacy Framework if the provider is certified, and otherwise on the European Commission’s standard contractual clauses.
Cookies and consent
We use strictly necessary cookies without consent, because the website would not work otherwise (§ 165(3) TKG 2021). We only use other cookies and similar technologies – for example for audience measurement – if you agree in the cookie banner (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). You can withdraw your consent at any time with effect for the future by opening the cookie settings via the link in the footer or by deleting the cookies in your browser.
Google Analytics
With your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us which pages are visited, how often and where visitors come from – so we can improve the website. According to Google, Google Analytics 4 does not store IP addresses. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. The data is deleted after 14 MONTHS. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Fonts
For a consistent appearance, the website loads the fonts Fraunces and Archivo from Google servers (Google Fonts; Google Ireland Limited, Ireland, or Google LLC, USA). In doing so, your IP address is transmitted to Google. The legal basis is our legitimate interest in a consistent, legible presentation (Art. 6(1)(f) GDPR).
The fonts used on this website are loaded locally from our website provider’s server. No connection to Google or any other font provider is established.
Links to other websites and maps
We link to Google Maps, the Wolfgangsee tourist board and transport companies, among others. This content is not embedded: data is only transmitted when you click a link. The privacy policy of the respective provider then applies.
4. Enquiries, contact and booking
Enquiry form and email
If you contact us via the form, by email or by phone, we process your details (name, email, phone if provided, travel dates, number of guests, message) to answer your enquiry (Art. 6(1)(b) GDPR). If no booking results, we delete the enquiry after 6 MONTHS at the latest.
The form is sent technically via PROVIDER, REGISTERED OFFICE , which processes the data on our behalf.
Direct booking on our website
For a booking we process the data you enter in the booking process: name, address, email, phone, travel dates, number of guests, apartment booked, price and payment status. This is necessary to conclude and perform the accommodation contract (Art. 6(1)(b) GDPR). The booking is managed in Guesty.
Payment is handled by a specialised payment service provider. Your card details are entered and processed directly by that provider; we do not see or store full card numbers.
The payment service provider is GuestyPay, a payment service of Guesty.
The payment service provider is Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe processes some payment data under its own responsibility, for example to prevent fraud.
Bookings via platforms
If you book via Booking.com, Airbnb, Vrbo, Trip.com or fewo.de, we receive the data required for the booking from the platform. The platform operator is responsible for processing on the platform itself. The data is transferred to us via Guesty as our channel manager.
5. Before and during your stay
Guest communication
Before you arrive we send you information about check-in and key handover, and during your stay we answer your questions. For this we use the contact details from your booking (Art. 6(1)(b) GDPR).
Guest register and local tourist tax
As an accommodation provider we are legally required to keep a guest register (§ 10 Austrian Registration Act, Meldegesetz). For this we record the data required by law for all guests, in particular name, date of birth, nationality, address, type and number of travel document, and dates of arrival and departure. The registration authority and public security officers may inspect it. We also use the data to settle the local tourist tax (Ortstaxe) with the municipality or tourist board. The legal basis is Art. 6(1)(c) GDPR.
6. Storage periods
- Guest register: seven years from entry (§ 10 Meldegesetz).
- Booking and invoice data: seven years (§ 132 Austrian Federal Fiscal Code, BAO), longer if proceedings are pending.
- Enquiries without a booking: no longer than 6 MONTHS.
- Analytics data: see the Google Analytics section.
7. Recipients
Your data is only shared with those who need it for the purposes described: our processors (Guesty, Duda, the payment service provider, Google if you have consented), our tax adviser where applicable, authorities under legal obligations (registration authority, municipality, tax office) and the booking platform you booked through. We do not sell data.
8. Your rights
You have the right to access, rectification, erasure and restriction of processing, to data portability and to object to processing based on legitimate interests. You can withdraw consent at any time with effect for the future. Just write to us at the address above.
If you believe we are not processing your data lawfully, you can lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
Last updated: October 2026