Table of contents

Privacy policy

• Data controller details
• Legal background, legal basis, purpose, scope of processed personal data, and duration of data processing on the website
• Data processing
• Data security measures
• Rights of the data subject
• Legal remedies

Name and contact details of the data controller

Name of the data controller: Jägerhotel OG (hereinafter: Data Controller)

Mailing address of the data controller: Panoramaweg 30, AT-9520 Treffen am Ossiacher See, Austria

Email address of the data controller: info@jaegerhotel.at

Phone number of the data controller: +43 681 20201951

Website https://www.jaegerhotel.com/

Legal background, legal basis, purpose, scope of processed personal data, and duration of data processing on the website

Information about the use of cookies

What is a cookie?

The Data Controller uses so-called cookies during visits to the website. A cookie is an information package consisting of letters and numbers that our website sends to your browser in order to save certain settings, facilitate the use of our website, and help collect some relevant statistical information about our visitors. Cookies do not contain personal data and are not suitable for identifying individual users. Cookies often contain a unique identifier – a secret, randomly generated sequence of numbers – which is stored on your device. Some cookies are deleted after closing the website, while others are stored for a longer period of time.

Legal background and legal basis of cookies

The legal background of the data processing is provided by Act CXII of 2011 on the right to informational self-determination and freedom of information, as well as Act CVIII of 2001 on electronic commerce services. The legal basis for data processing is your consent.

Main characteristics of the cookies used by the website

Google Ads cookie:

When someone visits our website, the visitor’s cookie ID is added to the remarketing list. Google uses cookies to personalize ads and analyze user behavior.

Google Analytics cookie:

Google Analytics is a tool used to analyze website traffic. The service uses cookies to collect statistical data without identifying visitors individually.

Cookies necessary for operation:

They are necessary for the basic operation of the website; without them, the site does not function properly.

Cookies improving user experience:

They collect general, anonymous information about the use of the website.

Session cookies:

They store data during the visit and are deleted when the browser is closed.

Cookie for storing cookie consent:

Records the acceptance of cookie usage, with a lifetime of 365 days.

Facebook Pixel (Facebook cookie):

Collects statistical and marketing data about website visitors in order to display personalized advertisements.

If you do not accept the use of cookies, certain features will not be available.

Data processing related to orders and invoicing

Legal background and legal basis of data processing

The legal background of the data processing is provided by the provisions of the Infotv. and Act C of 2000 on accounting. The legal basis for data processing is your consent and the fulfillment of a legal obligation.

Purpose of data processing

Issuing invoices in accordance with legal requirements and fulfilling accounting obligations.

Scope of processed data

Name / company name, address, email address, phone number.

Duration of data processing

The Data Controller retains invoices for 8 years from the date of issue.

Further data processing

If the Data Controller intends to carry out further data processing, prior information about its circumstances will be provided.

The Data Controller keeps a record of data transfers to authorities.

Use of data processors and their activities related to data processing

Data processing for the storage of personal data

Name of the data processor: M.BIT Számítástechnikai Kft.

Registered office: 1193 Budapest, Áram utca 21.

Company registration number: cg.01-09-301597

Tax number: 26095233-2-43

EU VAT number: HU26095233

The Data Processor stores personal data based on a contract concluded with the Data Controller and does not use them for its own purposes.

Data security measures

The Data Controller declares that, in order to protect personal data, it applies appropriate technical and organizational measures to ensure that they are protected against unauthorized access, alteration, transfer, disclosure, deletion or destruction, as well as against accidental destruction, damage, and loss of accessibility due to changes in technology.

Your rights in relation to data processing

During the period of data processing, you have the following rights:

• Right to information,
• Right to rectification of data,
• Right to erasure of data,
• Right to restriction of data processing,
• Right to object.

You are entitled, during the period of data processing, to request information from the Data Controller about the processing of your personal data. Upon receipt of the request, the Data Controller shall provide written information in a clear and understandable form as soon as possible, but no later than within 25 days, regarding the processed data, the purpose, legal basis and duration of the data processing, and – if data has been transferred – also about who has received or will receive the data and for what purpose.

You may request the rectification of your personal data, and the Data Controller will comply with this request within 15 days at the latest.

You are entitled to request the deletion of your personal data, and the Data Controller will also comply with such a request within a maximum of 15 days. The right to erasure does not apply if the Data Controller is legally required to retain the data or if, pursuant to Section 6 (5) of the Infotv., the Data Controller is entitled to further process the data, for example to fulfill invoicing obligations.

You may request the restriction (blocking) of your personal data if their permanent deletion would violate your legitimate interests. Blocked personal data may only be processed for as long as the purpose exists that excludes deletion.

You are entitled to object to the processing of your personal data,

if the data processing or data transfer is necessary exclusively for compliance with a legal obligation applicable to the Data Controller, or for the enforcement of a legitimate interest of the Data Controller, the data recipient, or a third party, except in cases of mandatory data processing and the cases specified in Section 6 (5) of the Infotv.;

if the use or transfer of personal data without your consent takes place for the purpose of direct marketing, public opinion surveys, or scientific research.

The Data Controller shall examine the objection as soon as possible after receipt of the request, but within no more than 15 days, decide on its validity, and inform you in writing of its decision. If the Data Controller does not comply with a request for rectification, restriction, or deletion, it shall communicate the factual and legal reasons for the rejection in writing – or electronically with the data subject’s consent – within 25 days of receiving the request.

Legal remedies

If you believe that the Data Controller has violated data protection regulations or has not fulfilled one of your requests, you are entitled to initiate an investigation procedure with the National Authority for Data Protection and Freedom of Information (NAIH) in order to terminate the presumed unlawful data processing (mailing address: 1530 Budapest, P.O. Box 5, email: ugyfelszolgalat@naih.hu ).

We further inform you that, in the event of a violation of data protection regulations or if the Data Controller fails to comply with one of your requests, you are entitled to initiate legal proceedings against the Data Controller.

Registration in the data protection register

According to the provisions of the Infotv., the Data Controller is required to register certain data processing activities in the data protection register.

Amendment of the privacy policy

The Data Controller is entitled to unilaterally amend this privacy policy. By continuing to use the website after the amendment enters into force, you accept the provisions of the amended privacy policy.