Privacy Policy

Controller:
Wechner Hans Peter
Grubegg 626
6555 Kappl, Austria
Phone: +43 664 32 111 44
Email: info@stella-bianca.at

1. General Information

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the legal provisions (GDPR, TKG). In this privacy information, we inform you about the most important aspects of data processing within the scope of our website and our services.

2. Contact with us

If you contact us by form, email or telephone, your data will be stored for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

Legal basis: Art. 6 para. 1 lit. b GDPR (contract initiation), Art. 6 para. 1 lit. f GDPR (legitimate interests)

3. Booking Process

For processing bookings, we use the external service provider \"bookingandmore.com\". The necessary data for booking processing is transferred. You can find more information in the privacy policy of bookingandmore.com.

Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment)

4. Hosting

Our website is hosted by Mynet. The provider automatically collects log files with information about your browser, IP address, date and time of access. This data is required for the technical provision and security of the website.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interests)

5. Email Sending

For sending emails (contact form, booking confirmations), we use Gmail/Google Workspace. Emails are transmitted encrypted and stored on Google servers located in the EU or with adequate data protection guarantees.

Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment), Art. 6 para. 1 lit. f GDPR (legitimate interests)

6. Cookies

Our website uses a GDPR-compliant cookie management system. We distinguish between technically necessary cookies and optional cookies for which we require your consent.

Cookie categories:

  • Technically necessary cookies: These are required for the basic functions of the website (session management, security). These cannot be deactivated.
  • Preference cookies: Store your language selection (duration: 30 days). Only with your consent.
  • Cookie consent: Stores your cookie preferences (duration: 1 year).

You can change your cookie settings at any time via our cookie banner or via the \"Cookie Settings\" link in the privacy policy. Withdrawal of your consent does not affect the lawfulness of processing carried out before the withdrawal.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interests) for technically necessary cookies / Art. 6 para. 1 lit. a GDPR (consent) for optional cookies / § 165 para. 3 TKG

7. Google Fonts

This website uses Google Fonts for uniform display of fonts. Google Fonts are integrated locally to ensure data protection. No connection to Google servers takes place.

8. Guest Registration (Registration Act)

As an accommodation business, we are obliged to collect certain guest data according to § 5 and § 10 Registration Act:

  • Name, date of birth, gender, nationality
  • Country of origin, address
  • For foreign guests: travel document data
  • Arrival and departure date

This data is stored for 7 years and transmitted to authorities when required.

Legal basis: Art. 6 para. 1 lit. c GDPR (legal obligation)

9. Storage Duration

We store your data only as long as necessary for the respective purpose:

  • Contact inquiries: 3 years after completion of communication
  • Booking data: 7 years (legal retention obligation)
  • Guest registration: 7 years (Registration Act)
  • Cookies: As specified above

10. Your Rights

You have the following rights regarding the personal data concerning you:

  • Right to information (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7 para. 3 GDPR)

11. Right to Complain

You have the right to complain to a data protection supervisory authority about our processing of personal data.

Competent authority in Austria:
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at

12. Data Security

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in accordance with technological development.

13. Changes to the Privacy Policy

We reserve the right to adapt this privacy policy so that it always corresponds to current legal requirements or to implement changes to our services in the privacy policy.

Last updated: September 2025