Privacy Policy
The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act.
Below, we provide information about which personal data is processed when you visit our website, for what purposes it is processed and what rights you have.
1. Data Controller
The controller responsible for data processing on this website is:
KOCH Betriebs GmbH
Hotel zum Weissensee
Gatschach 3
9762 Weissensee
Austria
Tel.: +43 4713 2214-0
E-mail: info@zumweissensee.at
2. Accessing Our Website and Server Log Files
When you visit our website, certain technical information is automatically processed by the web server. This may include, in particular:
- IP address
- Date and time of access
- Page or file accessed
- Referrer URL
- Browser and browser version used
- Operating system used
- Amount of data transferred
This processing is technically necessary to provide our website securely, reliably and correctly.
The processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in providing a secure and functional website.
The data is stored only for as long as necessary for the respective purpose or for as long as statutory retention obligations apply.
3. SSL/TLS Encryption
For security reasons, our website uses SSL or TLS encryption. This protects data that you transmit to us from unauthorised access by third parties.
You can recognise an encrypted connection in particular by “https://” in the address bar of your browser.
4. Cookies and Consent Management
Our website uses cookies and similar technologies.
Technically necessary cookies are required for our website to function properly. In addition, other cookies or technologies may be used for statistical, analytical, convenience or marketing purposes, provided that you have given your consent.
Where consent is required, the relevant processing will only take place after you have given your consent. The legal basis for such processing is Art. 6(1)(a) GDPR.
Where applicable, technically necessary processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.
You can change or withdraw your consent at any time with effect for the future via the cookie settings on our website.
5. Contact and Holiday Enquiries
If you contact us via our enquiry form, by e-mail or by telephone, we process the data you provide in order to respond to and process your enquiry.
In connection with a holiday enquiry, this may include in particular:
- First and last name
- E-mail address
- Telephone number
- Address
- Requested travel dates
- Requested room category
- Number of adults and children
- Ages of children
- Personal comments and requests
The processing is carried out in order to take steps prior to entering into a contract or to process your enquiry pursuant to Art. 6(1)(b) GDPR.
Where processing is not directly related to steps prior to entering into a contract, it may be based on our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR.
The data provided will only be stored for as long as necessary to process your enquiry or for as long as statutory retention obligations apply.
6. Bookings and Accommodation Contracts
If you book a stay with us, we process the personal data required to manage your reservation, provide your accommodation and related services, process payments and comply with our statutory obligations.
Processing is carried out in particular pursuant to Art. 6(1)(b) GDPR for the performance of the accommodation contract and Art. 6(1)(c) GDPR for compliance with legal obligations.
Data subject to statutory retention requirements will be stored for the respective legally prescribed periods.
7. Newsletter
If you subscribe to our newsletter, we process your e-mail address and, where applicable, any additional information you provide voluntarily in order to send you news, information and offers from Hotel zum Weissensee.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future. In particular, you can use the unsubscribe link included in every newsletter.
MailerLite
We use MailerLite to send and manage our newsletters.
In connection with the newsletter service, personal data may be processed, in particular your e-mail address, information relating to your subscription and – where permitted on the basis of your consent or other applicable data protection requirements – information about your use of our newsletters.
MailerLite processes this data for the purpose of providing the newsletter service.
Further information about the processing of personal data can be found in MailerLite's privacy information.
8. Analytics and Marketing Services
Our website may use analytics or marketing technologies to evaluate the use of our online services and to improve our website and advertising activities.
Where consent is required, the relevant services are only activated after you have given your consent. The legal basis for such processing is Art. 6(1)(a) GDPR.
You can change or withdraw your consent at any time with effect for the future via the cookie settings on our website.
The services and cookies currently used are displayed in the cookie settings on our website.
9. Google Maps
Our website may incorporate maps provided by Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Maps enables us to display our location and geographical information clearly and to make it easier for you to plan your journey to the hotel.
When Google Maps is loaded, your IP address and other technical information may be transmitted to Google. It cannot be ruled out that personal data may also be transferred to servers outside the European Union or the European Economic Area.
Where consent is required, Google Maps will only be loaded after you have given your consent. The legal basis for this processing is Art. 6(1)(a) GDPR.
Further information about the processing of personal data can be found in Google's privacy information.
10. Google Fonts
Google Fonts may be used on our website to ensure the consistent display of fonts.
If the fonts used are hosted locally on our own server, no connection to Google's servers is established when the fonts are loaded.
If Google Fonts are loaded from Google's servers, the website visitor's IP address in particular may be transmitted to Google. Where consent is required, processing will only take place on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
11. Interactive Hotel Tour
An interactive hotel tour is integrated into our website. Content from an external provider (Moving Pictures) is used for this purpose.
When the interactive tour is loaded or used, a connection to the provider's servers may be established. Technical information such as your IP address, browser information and information about your use of the embedded content may be processed.
Where consent is required, the external content will only be loaded after you have given your consent. The legal basis for such processing is Art. 6(1)(a) GDPR.
12. Social Media
We maintain profiles on social networks and may provide links on our website to these platforms, in particular Facebook and Instagram.
If these are simply links to our social media profiles, no personal data is generally transmitted to the respective platform as a result of merely visiting our website. Only when you click on the relevant link will you leave our website and the privacy policies of the respective provider will apply.
If content from social networks is embedded directly into our website, personal data may be transmitted to the respective provider when such content is loaded. Where consent is required, such content will only be loaded after you have given your consent.
13. External Links and Content
Our website may contain links to websites and services provided by third parties.
If you follow an external link, you leave our website. The respective third-party provider is generally responsible for the processing of personal data on the external website.
Our website may also contain embedded content from external providers. Where loading such content involves the transfer of personal data to the respective provider and consent is required, the content will only be activated after you have given your consent.
14. Recipients of Personal Data
In the course of our business activities, we may transfer personal data to service providers used by us where this is necessary for the respective purposes.
These may include, in particular, IT and hosting providers, newsletter providers, booking and reservation systems and other technical service providers.
Where these service providers process personal data on our behalf, this is carried out on the basis of appropriate data protection agreements.
15. Storage Period
As a general rule, we store personal data only for as long as necessary for the respective purpose of processing.
In addition, we retain data where statutory retention obligations apply or where storage is necessary for the establishment, exercise or defence of legal claims.
Once the purpose of processing no longer applies and any statutory retention periods have expired, the relevant data will be deleted or anonymised.
16. Your Rights
Subject to the applicable legal requirements, you have the following rights in particular:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to object pursuant to Art. 21 GDPR
- Right to withdraw consent pursuant to Art. 7(3) GDPR
You may withdraw any consent you have given at any time with effect for the future. The lawfulness of processing carried out on the basis of your consent prior to its withdrawal remains unaffected.
To exercise your rights, please contact:
KOCH Betriebs GmbH
Gatschach 3
9762 Weissensee
Austria
E-mail: info@zumweissensee.at
17. Right to Object
Where we process your personal data on the basis of a legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right, subject to the requirements of Art. 21 GDPR, to object to such processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to such processing at any time.
18. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.
In Austria, the competent supervisory authority is:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria
19. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if legal requirements, our website or the services we use change.
The current version published on this website applies.
Last updated: September 2026