Privacy policy of the IMLAUER Hotel & Restaurant GmbH

We have a great interest in the careful handling of personal data and procedures. The protection of the personal rights of customers and business partners is our express goal.

Here you can find out how we ensure the confidentiality of your personal data and respect your right to informational self-determination.

Confidentiality of personal data

All our employees who handle personal data in the course of their work are obliged to maintain confidentiality and to handle data processing systems properly.

PRIVACY POLICY of the IMLAUER Hotel & Restaurant GmbH:

1. basics

This privacy policy applies to all persons who use the services of IMLAUER Hotel & Restaurant GmbH, hereinafter referred to as IMLAUER. We hereby inform you about the type, scope and purpose of the collection and use of your personal data by our company. We respect your privacy and endeavor to strictly comply with the legal requirements for the processing of your personal data (EU Regulation No. 679/2016 (GDPR), DSG 2000, DSG 2018 and TKG 2003). All your personal data will be processed on this basis.
IMLAUER Hotel & Restaurant GmbH is responsible for data processing,
including the following companies:

Hotel am Mirabellplatz Salzburg (Paris-Lodron-Str. 1, 5020 Salzburg, Austria)
Hotel IMLAUER & Bräu Salzburg (Rainerstr. 12-14, 5020 Salzburg, Austria)
IMLAUER HOTEL PITTER Salzburg (Rainerstr. 6, 5020 Salzburg, Austria)

Hotel IMLAUER & Nestroy Vienna (Rotensterngasse 7a, 10-12, 1020 Vienna, Austria)

IMLAUER Hotel Schloss Pichlarn (Zur Linde 1, 8943 Aigen im Ennstal, Austria)

You can also find our data in the imprint of our website.
Our data protection coordinators are:

Ms. Julia FRANZ, available at datenschutz@imlauer.com and Tel: +43 662 88 978 808

Ms. Bernadette Leitner, available at datenschutz@schlosspichlarn.at and Tel: +43 3682 244 40 260

By using our services and granting consent in accordance with this declaration, you confirm that you have reached the age of 14 and are in a position to give valid consent, or that you already have effective consent from your parent or guardian.

2. information according to Art 13 GDPR

Your personal data, in particular
– Your master data (surname, first name, address, e-mail address, telephone and fax number, date of birth, customer number) as well as language and vehicle registration number,
– the data in travel documents (passport number, passport data, date of birth, issuing authority, duration, nationality) and identity documents (identity card, driving license, etc. including issuing authority and duration),
– the data on payment type and in connection with payments, in particular with EC cards, credit cards and bank cards,
– the length of stay requested by you and the destinations, hotels, contact persons, conditions, special services, health data, frequent flyer number, personal preferences associated with the stay, which you disclose to us, and
– special categories of data such as health data and data on special needs and marriage/partnership,
are required for our services and are processed for the following purposes:
– Reservation of rooms and tables as well as other services, booking of rooms and services in our hotels and our gastronomy as well as their implementation, processing and invoicing and other hotel services and services (B2B, B2C, FIT).

– Customer service including all necessary correspondence,
Processing of customer requests, invoicing of services.
-Acquisition, booking and planning of events and functions of all kinds
-Procurement and provision of transportation services and rental vehicles
-Video surveillance of all entrances to our hotels and generally accessible areas within the hotel buildings for security purposes, e.g. for the protection of persons and property, in particular the property of hotel guests and IMLAUER Hotels & Restaurants.
This also includes bookings for tourist guides, gastronomy, rental vehicles, transfers, events, tours, vouchers including customer creation, billing and their verification (B2B, B2C, FIT), ticket bookings. This data is therefore stored and processed by us for these purposes and, if necessary, transferred to third parties with whom we work to provide the most effective and best possible service for our customers – this may also include service providers in third countries as processors, software and agency service providers.
We do not use profiling or automated decision-making.

The legal bases for these data processing processes are
– the fulfillment of our pre-contractual and contractual obligations towards you,
– Consents obtained from you,
– statutory, contractual or other legal obligations on our part (e.g. documentation rights and obligations under accounting, tax and customs law, contracts, reporting, legal disputes) as well as § 96 TKG and
– our legitimate interests (e.g. the improvement of our customer service, also in the area of direct advertising / our sales department or the protection of our own legal interests).
The duration of storage is determined by the duration of our business relationship, the consent you have given and, in addition, by the statutory retention obligations and legal obligations applicable to us. We emphasize that in the case of regular cooperation for our best possible customer service, we strive to know your customer wishes already communicated to us so well that we can satisfy you continuously and permanently.

3. our websites

When you visit our website, your access data is automatically collected and stored. This access data may include, in particular, the page accessed, the files viewed, the date and time of access, the user’s IP address, data of the accessing computer, in particular the browser and operating system, as well as the data volume and the notification of successful access. This access data is used by us for internal statistical purposes to ensure the security of our offer and to optimize the offer. If an illegal act is suspected, the access data is analyzed to preserve evidence.

The legal bases for this data processing are your consent, our pre-contractual and contractual obligations towards you, our legitimate interests and legal obligations of all kinds and § 96 TKG.

The content of our website has been carefully prepared and checked several times, but we accept no liability for the topicality, accuracy and completeness of the information provided. Claims for damages due to the use or non-use of the information or due to the use of incorrect or incomplete information are excluded. All offers are subject to change and non-binding. We reserve the right to change, supplement or delete the offer or parts thereof without prior notice or to temporarily or permanently cease publication of the website.
The content and programming of our websites are protected by copyright and ancillary copyright. Any duplication – including excerpts – and public reproduction, in particular the copying of texts, graphics and photos, is prohibited without our prior written consent.

4th Newsletter

You are free to subscribe to our newsletter. The registration, for which you must provide your e-mail address and give us your consent to receive the newsletter, can only become effective if you confirm this to us using the “double opt-in procedure”. In order to be able to provide you with targeted information in the newsletter that is of particular interest to you, we allow you to provide information on specific interests, locations (IMLAUER Hotels Vienna or Salzburg, IMLAUER Restaurants) and the like when you register.
In every newsletter you receive, you will find all the information you need to unsubscribe from the newsletter. For more information about our newsletters, please contact us at datenschutz@imlauer.com. We will be happy to help you.

5. transfer to third parties / obligations of processors

We may process your personal data under certain circumstances
– within IMLAUER Hotel & Restaurant GmbH, taking into account the permitted purposes of use,
– to processors (e.g. for our electronic advertising in the form of newsletters) and to third parties who need to be involved in the provision of the services you have requested, all of whom have undertaken to comply with the applicable data protection standards,
transmitted. If compliance with European data protection standards is not possible – for example because standard contractual clauses, adequacy decisions or certifications are not guaranteed in a specific case – we will inform you in good time and also obtain the necessary consent from you. For further information, please contact us at datenschutz@imlauer.com.

In addition, your data (e-mail address) will be stored once via Revinate Inc. for the submission of the evaluation of your stay in one of our hotels. We treat your information confidentially in accordance with the applicable data protection regulations. You can object to this use of personal data at any time.
In this regard, we refer to Revinate’s privacy policy, in particular the information available at the following link: https://www.revinate.com/privacy/
Your personal data will not be passed on to uninvolved third parties unless there is a legal obligation to do so or you have given your prior consent.

6. cookies and tracking services

We use cookies, which are small text elements that are used to store information in web browsers. Cookies are recognized the next time you visit our website and make a significant contribution to speeding up loading processes and making the use of our services more convenient for you. The information recognized and stored by cookies is used to recognize you, but also to analyze your user behavior. They are stored on the server of the respective provider, who as the processor undertakes to comply with the applicable data protection standards.
has committed to, stored.

After you have visited our website, cookies remain stored on your end device unless you refuse this from the outset or actively delete cookies. Actively deactivating cookies may impair the functionality of our websites for you. You can also prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of our website.
You can also prevent the transmission of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available on the google.com website. It is available at the following link: Download and install the browser plugin.
However, the plug-in is only available for certain browser programs.

We also use third-party content on our website in order to make our Internet presence as informative and convenient as possible for you. These include Google Maps, RSS feeds and YouTube. These third-party providers receive your IP address for technical reasons. We have no influence on the use of this data by the third-party provider. In this regard, we refer to the data protection declarations of the respective providers.
We endeavor to only use content whose respective providers only use the IP address to deliver the content. However, we have no influence if the third-party providers store the IP address, e.g. for statistical purposes. As far as we are aware, we will inform users of this.
We use Google Analytics, a web analytics service provided by Google Inc. 1600, Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies. The information generated by the cookie about your user behavior is usually transferred to a Google server in the USA and stored there. Your IP address will be shortened beforehand within the European Union and thus anonymized or at least pseudonymized. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Google uses this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. In this context, please also note Google’s privacy policy, in particular the information available under the following two links:
https://twitter.com/de/privacy

On our website, Google Analytics has been expanded to include the code for anonymized collection of IP addresses (so-called IP masking). Therefore, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand; only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
We also use Google Analytics to analyze data from AdWords and the double-click cookie for statistical purposes. If you do not agree to this, you can deactivate it via the Ads Preferences Manager
We use plugins from the Google+ social network on our website. This is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043.
We have integrated the plugins into our website in such a way that no automatic connection to the Google+ servers is established. You can recognize the Google+ button by the white “+1” on a different coloured background. If you want to use the social plugins, click on the respective button. Only then will a connection to the Google+ servers be established.
As soon as you activate the button by clicking on it, a connection to the Google+ servers is established. This tells Google that you have visited our site. In addition to your IP address, data about the web browser used may also be collected. You can find out the exact scope in Google’s privacy policy.

If you want to prevent Google from assigning this information to your account, you must log out of Google+ before visiting our website
We have no influence on the use of this data by Google+. In this regard, we refer to the Google+ privacy policy, in particular the information available at the following link: https://policies.google.com/privacy?hl=de

We use Facebook social plug-ins from the social network Facebook, operated by the companies Facebook Ireland Limited, 4 Grand Canal Square Dublin 2, Ireland, and Facebook Inc, 1601 S. California Avenue, Palo Alto, CA 94303, USA. These plug-ins are buttons that Facebook uses to measure who visits our website. If the visitor is also registered with Facebook as a user and logged in, further information is also stored by Facebook. Facebook receives your IP address for technical reasons. We have no influence on the use of this data by Facebook. In this regard, we refer you to Facebook’s privacy policy, in particular the information available at the following link:
https://www.facebook.com/help/568137493302217.

You will also find information on how to block Facebook social plug-ins with your browser.
The Facebook “Like” plugin is not used on our website.
We have integrated the plugins into our website in such a way that no automatic connection to the Facebook servers is established. You can recognize the Facebook button by the white “f” on a blue background. If you want to use the social plugins, click on the respective button. Only then will a connection to Facebook be activated.

We use plugins from the social network twitter.com on our website. This is operated by Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. A list of the current plugins can be found at http://twitter.com/de/privacy.
We have integrated the Twitter plugins into our website in such a way that no automatic connection to the Twitter servers is established. You can recognize the Twitter button by the “flying blue bird” on a light blue background. If you want to use the social plugins, click on the respective button. Only then will a connection to Twitter be activated.
As soon as you activate the button by clicking on it, a connection to the Twitter servers is established. This tells Twitter that you have visited our site. In addition to your IP address, data about the web browser used may also be collected. If you are logged in as a member of Twitter and visit our website, Twitter will assign the above information to your account.
If you want to prevent Twitter from assigning this information to your account, you must log out of Twitter before visiting our website. We would like to point out that, as the provider of the pages, we have no precise knowledge of the content of the transmitted data or its use by Twitter. Further information on this can be found in Twitter’s privacy policy at http://twitter.com/privacy

7. contact

You can request information about your personal data stored by us free of charge at any time. As the data subject, you also have the right to revocation, information, deletion, correction, restriction and transfer of your personal data, provided that we are not subject to a statutory retention obligation.
The consequences of revocation are the deletion, correction or restriction of your data, if permitted by law.
For further information on your rights as a data subject, please contact us at datenschutz@imlauer.com or Tel: +43 662 88 978 808, Rainerstr. 6 5020 Salzburg. We will be happy to help you. Furthermore, you have the right to lodge a complaint with the supervisory authority – Austrian Data Protection Authority (DSB), Wickenburggasse 8-10, 1080 Vienna, dsb@dsb.gv.at.

8. other

We have implemented organizational and technical protective measures, which we evaluate on an ongoing basis and adapt as necessary, in order to protect your personal data stored and processed by us.
We reserve the right to amend this privacy policy at any time and to adapt it to new developments. The new version applies from the time it is made available on our website. The current version of the privacy policy is available at any time on the website at https://imlauer.com/datenschutz/,
our imprint at https://imlauer.com/impressum/

9. management of the cookies used

We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.

The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.