Privacy policy

1. Controller

Phone: +43 664 2077566
Email: info@villa-ambach.at

2. General information on data processing

We only process personal data to the extent necessary to provide this website, respond to your enquiries and process bookings. The legal bases are Art. 6(1)(b) GDPR (contract or pre-contractual measures), Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website), Art. 6(1)(c) GDPR (statutory retention obligations) and Art. 6(1)(a) GDPR (consent, e.g. for loading the booking widget).

3. Booking and enquiries (Casablanca)

For online bookings and enquiries we use the booking and enquiry widget provided by Casablanca hotelsoftware GmbH, which acts as our processor under Art. 28 GDPR. When you load the widget, technical data (in particular your IP address, browser and device information) is transmitted to Casablanca's servers. The data you enter — such as your name, contact details, travel dates, number of guests and your messages — is processed to handle your enquiry or booking.

The widget is only loaded after you have given your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal. Alternatively, you can contact us by phone or email at any time without loading the widget.

4. Cookies, consent and local storage

We do not use cookies for analytics or marketing purposes. You give consent separately for each category: "Online booking (Casablanca)" for the booking system and "Map (OpenStreetMap)" for the directions map. For technical reasons, we store your choice in your browser's local storage (localStorage) so we do not have to ask you again on every visit; this information never leaves your device. You can change your choice at any time via the "Cookie settings" link in the footer or the button in section 3. Once you have consented, Casablanca's booking system may set its own technically necessary cookies.

5. Hosting and server log files

Our website is operated by an external hosting provider. Personal data generated when you visit this website (e.g. IP address, date and time of access, pages accessed) is processed on its servers. This processing serves the reliable provision of the website (Art. 6(1)(f) GDPR). We have entered into a data processing agreement with our hosting provider in accordance with Art. 28 GDPR.

6. Map display (OpenStreetMap)

On the contact page we embed a map from OpenStreetMap. The map is only loaded after you have consented to the "Map (OpenStreetMap)" category or clicked "Load map" (Art. 6(1)(a) GDPR). Loading the map transmits your IP address to the OpenStreetMap Foundation so that the map tiles can be delivered. We do not use Google Maps or Google Fonts.

7. Contacting us by phone or email

If you call or write to us, we process the data you provide in order to handle your request. We delete this data once it is no longer required, unless statutory retention periods apply.

8. Retention period

We retain booking and invoicing data in accordance with tax and commercial law requirements (in Austria generally seven years). All other data is deleted once the purpose of processing no longer applies.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw any consent given at any time. Simply contact us using the details given above.

10. Right to lodge a complaint

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority: