Privacy policy of the 4-star Superior Hotel Rösslhof in Ramsau am Dachstein

We are pleased about your interest in our company. Data protection is of particular importance to the 4-star superior Hotel Rösslhof – ROYER Thomas. The use of the Hotel Rösslhof – ROYER Thomas website is generally possible without providing any personal data. However, if a data subject wishes to use special services via our website, the processing of personal data may become necessary. If such processing is required and there is no legal basis, we will generally obtain the consent of the data subject.

The processing of personal data, such as name, address, email address or telephone number, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to Hotel Rösslhof – ROYER Thomas.

With this privacy policy, our company aims to inform the public about the type, scope and purpose of the personal data we collect, use and process. Data subjects are also informed of their rights.

As the controller, Hotel Rösslhof – ROYER Thomas has implemented numerous technical and organisational measures to ensure the most complete protection possible of personal data processed via this website. Nevertheless, internet-based data transmissions may have security gaps, so absolute protection cannot be guaranteed. For this reason, it is always possible for data subjects to transmit personal data to us via alternative means, for example by telephone.

1. Definitions

The privacy policy of Hotel Rösslhof – ROYER Thomas is based on the terminology used by the European legislator in the adoption of the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easy to read and understand for the public, as well as for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.

We use, among others, the following terms:

a) Personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to identifiers such as a name, an identification number, location data, an online identifier or one or more specific characteristics expressing the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.

c) Processing
Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d) Restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting its processing in the future.

e) Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

f) Pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and subject to technical and organisational measures ensuring that the personal data is not attributed to an identified or identifiable natural person.

g) Controller
Controller means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

h) Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

i) Recipient
Recipient means a natural or legal person, public authority, agency or another body to which personal data are disclosed, whether a third party or not.

j) Third party
Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons authorised to process personal data under the direct authority of the controller or processor.

k) Consent
Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they signify agreement to the processing of personal data relating to them.

2. Name and address of the controller

Controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:

Hotel Rösslhof – ROYER Thomas
Ramsau 214
8972 Ramsau am Dachstein
Austria

Phone: +43 (0) 3687 / 81 444-0
Email: hotel@roesslhof.at
Website: www.roesslhof.at