This privacy statement concerns all persons, which use the services of Grandhotel Niederösterreichischer Hof. We are hereby informing you of the type, extent and purpose of the capture and use of your personal data by our company. We respect your privacy and are committed to precisely following the legal requirements for the processing of your personal data (EU regulation no. 679/2016 (GDPR), DSG 2000, DSG 2018 and TKG 2003). All your personal data is processed on this basis.
is responsible for the processing of data.
By using our services and providing your consent in accordance with this declaration, you confirm that you are 14-years or above and are able to give valid consent, or you have provided us with a valid declaration of consent from your legal guardian or solicitors.
2. Information in accordance with Art 13 GDPR
Your personal data, particularly your
- Master data (last name, first name, place of residence, address, email address, telephone and fax numbers, date of birth, customer number) and language and license plate)
- the data contained in your travel documents (passport number, passport data, date of birth, issuing authority, expiration date) and ID data (personal IDs, driving licenses etc. including issuing authority and expiry date)
- data regarding payment type and pertaining to payments, in particular EC-cards, credit cards and bank cards,
- destinations, hotels, length of stay, contact persons, conditions, special services, medical data, frequent flyer number, personal preferences and
- special data categories such as medical data and data regarding special requirements or marital-/partnership,
are required for our services. In particular, these include bookings pertaining to travel, guides, hotels, restaurants, rental vehicles, transfers, registries, insurance, events, tours, accreditation, vouchers – including customer system, invoicing and checking thereof (B2B, B2C, FIT) – tickets, decoration incl. Flowers and light works, fireworks, cakes.
For these purposes, this data is saved, processed and, if needed, transferred to third parties – including service providers in other countries for the purpose of processing travel bookings, software and agency services.
We do not use profiling methods or make automated decisions.
The legal foundations for these data processing procedures are
- the fulfilment of our pre-contractual and contractual obligations to yourself,
- consent declarations obtained from yourself,
- statutory, contractual or other legal obligations (e.g. documentation rights and obligations as per finance and accounting, tax and customs regulations, contract administration, reporting regulations, legal disputes) as well as Art. 96 TKG and
- our legitimate interests (e.g. the betterment of our client services, also within the scope of direct advertising or the perception of our own legal interests).
The length for which the data is saved is calculated in accordance with the length of our business relationship, the declarations of consent, as provided by yourself, as well as the statutory requirements to preserve records and legal obligations, which apply to our business. In case of regular business and in the interest of optimum client services, we must stress that we are committed to knowing your previously submitted customer wishes so well, that we can provide lasting and on-going customer satisfaction.
3. Our internet presence
Your access data is automatically captured and saved when you access our webpage. This access data can include which webpage you accessed, any viewed documents, date and time of access, IP address of the user, data of the pc used for access, particularly the browser and operating system as well as data size and the successful access notification, in particular. We use this access data for internal statistical purposes to guarantee the reliability of our presence and improve it. The access data will be used for evidence preservation in case of suspicion of illegal activity.
By entering your personal data into one of our contact forms, you acknowledge that it is saved and processed by us for the duration of this concrete enquiry. This applies to the enquiries you submit via contact forms and emails in particular. We need this data to process your enquiry and also save your IP address, in these cases, for evidence preservation. The data is saved provided it is required to aid with potential supplementary or follow-up questions by you or us.
If you create an internet account with us, then we give you online access to your contract data. You keep your login data safe and ensure that no unauthorised persons are able to access your account. We accept no liability in cases of unauthorised access which can be attributed to your misconduct – if even in part.
Your account data is only transmitted via an encrypted internet connection (https). We are not liable for loss of data or in case of a third party accessing your data, if we adhere to the necessary security procedures in accordance with the latest technology developments.
The legal basis for this data processing is your declaration of consent, our pre-contractual and contractual obligations to you, our legitimate interests and legal requirements of any kind and Art. 96 TKG.
Use of the online booking tool DIRS21 from TourOnline AG
Our online presence uses the online booking tool DIRS21 (hereinafter “OBT”) from TourOnline AG, Borsigstrasse 26, 73249 Wernau, Germany (www.dirs21.de) to enable online booking of accommodation and other travel services, as well as to process inquiries and purchase vouchers (hereinafter “TOAG”).
As part of the OBT, TOAG processes the data as the person responsible. You will find the information and provisions on data protection in the TOAG data protection declaration on OBT, which you can access at any time from the OBT or at www.dirs21.de/datenschutz.
You are free to subscribe to our newsletter. Registration, which requires you to submit your email address and consent to receiving the newsletter, can only take place when you acknowledge a link for registration, which you receive per email. In order to supply you with targeted information within the scope of our newsletter, which will be of most interest to you, we give you the option to notify us of particular interests, appointed dates, locations and regions and the like upon registering. In every newsletter which you receive, you will find all information pertaining to unsubscribing from the newsletter. For more information on our newsletter, please contact us under firstname.lastname@example.org. We are happy to help.
5. Disclaimer of liability
The content of our website has been carefully curated and repeatedly checked, however we cannot be held accountable for the topicality, validity and scope of the supplied information. Damage claims pertaining to use or non-use of the information or by using false or incomplete information is excluded. All offers are subject to change and are considered non-binding. We reserve the right to change, supplement, delete or temporarily or entirely unpublish the website or parts thereof without prior notice.
The content and the coding of our website are protected by copyright and ancillary copyright laws. Every reproduction – even in part – and publication, in particular copying of texts, graphics and photos is forbidden, without obtaining our prior written approval.
5. Video surveillance
We have set up video surveillance in our company.
The video surveillance is carried out for the preventive protection of the property, the integrity and the security of our hotel guests and customers, but also of our company and our employees. The video surveillance affects all entrances to the hotel and partly company-owned areas outside the hotel as well as the outbuildings including terraces, parks, gardens, parking lots and the like.
These surveillance measures serve to secure evidence in the event of a criminal prosecution and to pursue and defend our claims, but also the claims of our hotel guests, employees and other injured third parties and to fulfill the legal interests and obligations of us and the aforementioned groups of people. For this purpose, we collect the following data from people who are in the video-monitored area: Image data of those affected and their vehicles, including the location and time of the recording.
If it is not just a real-time transmission, the data is stored for up to 72 hours. In exceptional cases, longer storage, transfer (e.g. to courts, security authorities, legal representatives) and other processing takes place, as long as this is necessary for the implementation of the related judicial or official procedures and disputes. If there is no occasion and there are no other legal retention requirements, the video recordings will be deleted after 72 hours.
In the event of an incident, we are entitled to transmit data to the competent authorities and courts as well as insurance companies and persons who derive claims from actions documented as part of video surveillance and their legal representatives. We would like to point out that in exceptional cases courts can order publications of the records.
We take appropriate technical and organizational security measures to ensure that your data is processed in accordance with the GDPR. The video recordings are encrypted and can only be viewed by authorized persons in a secure location with a computer that is not connected to our company’s IT network.
6. Transferring to third parties/ obligations of processors
In consideration of permissible purposes (e.g for our electronic advertisements in the form of newsletters),
- who have committed to complying with the valid data protection standards, or to third parties, who have been contacted to provide your requested services
Should it not be possible to comply with European data protection standards – for instance because in specific cases standard contractual clauses, arrangements or certifications can’t be guaranteed – then we will notify you in a timely manner, and will obtain the necessary permission from you. For more information please contact us under email@example.com.
7. Cookies and tracking services
The cookies will remain on your end device, following your visit to our site, provided this hasn’t been disallowed from the beginning or you haven’t actively deleted cookies. Actively deactivating cookies may impact the appearance of our webpage for you. You can also prevent cookies from being saved via the appropriate settings in your browser. However, if these settings are activated then we would like to make you aware that you may not be able to access all features of our website. Furthermore, you can stop the data, which has been created by the cookie with regard to your use of the webpage (incl. IP address), from being transferred to Google, by downloading and installing the browser plug-in, available on google.com. The plug-in is only available for certain browser programmes, however.
We also use third party content on our website, in order to curate the most informative and comfortable web experience for you. This includes e.g. Google Maps, RSS feeds or Youtube. Due to technical reasons, these third party providers will receive your IP address. We have no control over the use of this data by the third party providers. In these instances, we refer to the privacy statements of the relevant provider.
Google uses this information to evaluate the website, to create reports on website activity and provide other services to the website owner, regarding website use and internet use. The IP address, transferred from your browser within the scope of Google Analytics, is not combined with other google data. In this regard, please also take note of Google’s privacy statement, in particular the information which can be accessed via both of following links:
You can request access to your personal data, saved by us, at any time and free of charge. As the person concerned, you have a right to retraction, information, deletion, correction and restriction of your personal data, provided we are not bound by a statutory requirement to preserve these records.
Since we process the data based on our legitimate interests, you generally have a right to object if you have reasons that arise from your particular situation that speak against this processing. Since we process the data (also) for direct marketing, you can object to this processing for direct marketing purposes at any time.
The revocation does not affect the legality of the processing carried out up to that point. A revocation means that we will no longer process your data for the above-mentioned purposes from this point in time.
For a revocation and more information about your rights as a data subject, please contact us at
For more information regarding your rights as the person concerned, please contact us under firstname.lastname@example.org. We are happy to help. The Austrian Data Protection Authority (DSB) Wickenburggasse 8-10, 1080 Vienna is responsible for complaints, as the relevant regulatory authority.
We have implemented organisational and technical protective measures in places which we continually evaluate and adapt where necessary, to protect your personal data which is saved and processed by us.
We reserve the right to change this privacy statement at any time to adapt to new developments. The new version is valid from date of publication on our website. The current version of the privacy statement can be viewed on our website via https://noehof.at/en/privacy-policy our imprint via https://noehof.at/en/imprint.