The binding version is the German privacy policy.
Controller
Maria Ebner OG, Zeil 176, 8223 Stubenberg am See, Austria. E-mail: office@das-ebner.at, phone: +43 664 5427419. An informal message to this address is sufficient for data protection enquiries.
Principle
We process personal data only where necessary to operate the website and provide our services. Depending on the purpose, the legal bases are contract performance (Art. 6(1)(b) GDPR), legal obligations (c), your consent (a) and our legitimate interest in a secure, functioning service (f).
Recipients and services used
Hosting & e-mail — helloly.com: the website and mailbox run on helloly.com; technically necessary server log data (e.g. IP address, time, resource requested) are processed for operation and security (legitimate interest). A data processing agreement is to be concluded.
Booking — feratel Deskline: for availability, booking, guest data and the registration/visitor-tax process. When you book, the necessary data are processed (contract performance and legal obligation). The booking widget loads only after your consent.
When the booking window loads, connections are made to feratel servers and to the services involved: deskline.net (booking system), feratel.com, resc.deskline.net (images), datatrans.com (payment), trustyou.com (reviews) and maps.feratel.com (maps). Your IP address is transmitted to these providers. The booking window stores four browser entries (deskline/web/…) and entries in local storage; they hold your search and basket together and are required for the booking window to work. None of this loads until you have consented to non-essential services; without your consent the booking window is not loaded.
Google Analytics 4 (reach measurement) and Google Ads (campaign measurement) are used only after your consent; your consent signals are passed to Google via Google Consent Mode v2. A transfer to third countries is possible.
Google Maps is embedded on the contact page. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map loads only after your consent; without it you see a note, our address and a link to a free map application at that spot — no request goes to Google. Loading the map opens connections to google.com, maps.googleapis.com, maps.gstatic.com, places.googleapis.com and the font services fonts.googleapis.com and fonts.gstatic.com, transmits your IP address to Google, and Google may store entries in your browser and transfer data to the USA. A consent tool stores your decision so we can honour and document it; you may withdraw it at any time via the footer link, after which the map is no longer loaded. Legal basis: consent (Art. 6(1)(a) GDPR).
Fonts
All fonts on our website are served locally from our server; our pages open no connection to Google Fonts or any other external provider. The Google map embedded on the contact page is a separate matter: after your consent it loads fonts from fonts.googleapis.com and fonts.gstatic.com within its own frame. Without consent that does not happen either.
Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent at any time. Please contact the details above. You may also lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at). Retention periods follow the respective purpose and statutory obligations.