General Data Protection Regulation – information obligation for guests and clients

Legal Basis: Consent

You have voluntarily provided us with personal data, which we are processing on the basis of your consent, for instance for the following purposes:

• Presentation of offers
• Our own direct marketing measures
• Confirmation and processing of your booking
• Handling of the payment process
• Preparation for your arrival

You may revoke your consent at any time. Upon revocation, we will no longer process your data for the above purposes unless there is a contractual or statutory requirement to do so. If you want to revoke your consent, please contact:

Condituz Hospitality gmbh
+43 1 235 03 18
office@condituz.com

Legal Basis: Performance of Contract

Some of the data which you have provided to us are also used to perform the contract and/or to take steps prior to entering into the contract. Without these data we are not able to perform the contract between us. Moreover, we are under a statutory obligation (Austrian Registration Act Implementing Regulation ["MeldeV"]) to collect the personal data listed in the guest directory and to forward them to the registration office (legal basis: statutory obligation). We will store your data in accordance with the provisions of the Austrian Registration Act ("Meldegesetz") as amended. For the data processing described above, we enlist the services of the following processor:

P2P booking tool.

We forward your data to the following recipients and/or categories of recipients: communal authority

Your rights

In principle, you have the right to request access to and rectification or erasure of your data, the right to restrict or object to its processing and the right to data portability. Please contact us should you intend to exercise any of these rights.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you believe that the processing of personal data relating to you infringes the General Data Protection Regulation.

The supervisory authority with which the complaint has been lodged, i.e. the Austrian Data Protection Authority, will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

Version, May 2018