Privacy Notice

PRIVACY POLICY

The responsible body within the meaning of the data protection laws (in particular the basic EU data protection regulation DSGVO) is:

Lanserhof GmbH

Kochholzweg 153

6072 Lans

Österreich

+43 512 38 666 503

Questions to the data protection officer If you have any questions about data protection, please write us an e-mail or contact the person responsible for data protection in our organisation directly:

Katharina Ditz
datenschutz@lanserhof.com

Your rights as a party concerned
- You can exercise the following rights at any time using the contact details provided by our data protection officer: Information about your data stored with us and their processing,
- Correction of incorrect personal data,
- Deletion of your data stored with us,
- Restriction of data processing if we are not yet allowed to delete your data due to legal obligations,
- objection to the processing of your data with us and Data transferability, provided that you have consented to the data processing or have concluded a contract with us.

If you have given us your consent, you can revoke it at any time with effect for the future. You can contact your local supervisory authority at any time with a complaint. Your competent supervisory authority depends on your state of residence, your work or the alleged infringement. A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/addresses_links-node.html.

Purposes of data processing by the responsible body and third parties We process your personal data only for the purposes stated in this data protection declaration. Your personal data will not be passed on to third parties for purposes other than those mentioned. We will only pass on your personal data to third parties if:
- you have given your express consent, processing is required to process a contract with you,
- the processing is necessary to fulfil a legal obligation,
- the processing is necessary to protect legitimate interests and there is no reason to believe that you have an overriding interest worthy of protection in not disclosing your data. Collection of general information when you visit our website When you access our website, information of a general nature is automatically collected by means of a cookie.

This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider and similar information. This is exclusively information which does not allow any conclusions to be drawn about your person. This information is technically necessary in order to correctly deliver the content you have requested from websites and is mandatory when using the Internet. They are processed in particular for the following purposes: Ensuring a trouble-free connection of the website, Ensuring a smooth use of our website, evaluation of system security and stability as well as for other administrative purposes.

The processing of your personal data is based on our legitimate interest from the aforementioned purposes for data collection. We do not use your data to draw conclusions about you personally. The recipients of the data are only the responsible body and, if applicable, the contract processor. Anonymous information of this kind may be statistically evaluated by us in order to optimize our Internet presence and the technology behind it.

cookies
Like many other websites, we also use so-called "cookies". Cookies are small text files that are transferred from a website server to your hard drive. This automatically provides us with certain data such as IP address, browser used, operating system and your connection to the Internet. Cookies cannot be used to start programs or to transmit viruses to a computer. Based on the information contained in cookies, we can make navigation easier for you and enable the correct display of our web pages. Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent. Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via the settings of your browser. Please use the help functions of your Internet browser to find out how you can change these settings. Please note that some features of our website may not work if you have disabled the use of cookies.

Registration on our website / Lanserhof Online Shop
When registering to use our personalised services, some personal data is collected, such as name, address, contact and communication data such as telephone number and e-mail address. If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time if required. Of course, we will also provide you with information about the personal data we have stored about you at any time. We will be happy to correct or delete them at your request, provided that there are no legal storage obligations to the contrary. To contact us in this context, please use the contact details given at the end of this data protection declaration.

Payment services Lanserhof Online Shop

Payment via credit card
On our website https://shop.lanserhof.com you can pay by credit card. Payment data is transferred to mPay24 in order to process the payment. The legal basis for the processing of your data is Art. 6 para. 1 lit. f DS-GMO. mPay24 collects information about the transaction, as well as other information in connection with the transaction such as information about goods/services, financial information, information about the interaction between you and mPay24, merchant information, including Information on payment instruments, device-related information and location data. mPay24 uses the data, among other things, for payment processing, for credit checks and for monitoring and improving its services. Details on data processing and processing purposes can be found in the data protection conditions of https://www.mpay24.com/web/privacy/ : mPay24 https://www.mpay24.com/web/privacy/

Payment via Paypal
On our website https://shop.lanserhof.com you can pay via the payment service Paypal. Payment data is transferred to Paypal in order to process the payment. The legal basis for the processing of your data is Art. 6 para. 1 lit. f DS-GMO. You have the following payment option: Payment via PayPal. Paypal collects transaction information and other information related to the transaction, such as the amount sent or requested, the amount paid for products or services, merchant information, including information about payment instruments used for the transaction, device information, technical usage data and location data. Paypal collects this data regardless of whether you have a Paypal account or not. If you have a Paypal account, the data will be linked to your account. Paypal uses the data for payment processing, credit checks and for monitoring and improving its services, among other things. Details on data processing and processing purposes can be found in Paypal's data protection conditions: https://www.paypal.com/de/webapps/mpp/ua/privacy-prev#6 You can find a list of companies to which Paypal may send your data here: https://www.paypal.com/ie/webapps/mpp/ua/third-parties-list More information about Paypal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

SSL encoding
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

newsletter
On the basis of your explicit consent, we will regularly send you our newsletter or comparable information by e-mail to your specified e-mail address. To receive the newsletter, it is sufficient to provide your e-mail address. When registering to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be notified by e-mail of circumstances relevant to the service or registration (e.g. changes to the newsletter offer or technical circumstances). For an effective registration we need a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the "double opt-in" procedure. For this purpose we log the order of the newsletter, the sending of a confirmation e-mail and the receipt of the requested answer. Further data will not be collected. The data will only be used for sending the newsletter. The dispatch takes place with a third party provider "Mailingwork". You can revoke your consent to the storage of your personal data and their use for the newsletter dispatch at any time. In addition, you can unsubscribe at any time via the unsubscribe element in the newsletter or inform us of your corresponding request via the contact option indicated at the end of this data protection information. contact form If you contact us regarding any questions by e-mail or contact form, please give us your voluntary consent for the purpose of contacting us. A valid e-mail address is required for this purpose. The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions. After your request has been processed, your personal data will be automatically deleted.

room request
If you make an inquiry to us, we collect and process the following data, which are necessary for mutual, proper contract fulfilment. These include: form of address Name and surname Address, street and town date of birth telephone number email nationality nation telephone number Data processing for the purpose of booking is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO on the basis of your voluntary consent and in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO for the fulfilment of the contract. information disclosure Your personal data will not be transmitted to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if: you have given your express consent pursuant to Art. 6 para. 1 sentence 1 lit. a DSGVO, the disclosure pursuant to Art. 6 para. 1 sentence 1 f DSGVO is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data, in the event that a legal obligation exists for the transfer pursuant to Art. 6 para. 1 sentence 1 lit. c DSGVO, and this is legally permissible and is necessary for the processing of contractual relationships with you pursuant to Art. 6 para. 1 sentence 1 lit. b DSGVO. storage time We process and store your data only as long as it is necessary for processing or to comply with legal obligations. Your data will be blocked or deleted once the processing purpose has ceased. If, in addition, there are legal obligations to store your data, we will block or delete your data upon expiry of the legal storage periods.

Use of Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. (following: Google). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will previously be reduced by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services associated with website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Other related services will then be provided based on the use of the website and the Internet. The processing is based on the legitimate interest of the website operator. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Browser Add On to disable Google Analytics. In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. An opt-out cookie is installed on your device. This will prevent Google Analytics from collecting data for this website and for this browser in future as long as the cookie remains installed in your browser.

Use of Adobe Analytics (Omniture)
This website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited ("Adobe"). Adobe Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. If a tracking record is transmitted from a website visitor's browser to Adobe Datacenter, the server setting we have made ensures that the IP address is anonymized before geolocalization, i.e. that the last octet of the IP address is replaced by zeros. Before the tracking package is saved, the IP address is replaced by individual generic IP addresses. On behalf of the operator of this website, Adobe will use this information to evaluate users' use of the website, to compile reports on website activity and to provide other services relating to website use and internet use to the website operator. The IP address transmitted by your browser as part of Adobe Analytics is not merged with other Adobe data. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, this offer points out to users that in this case you may not be able to use all functions of this website in full. Users may also prevent Adobe from collecting the data generated by the cookie and relating to their use of the website (including their IP address) and from processing such data by downloading and installing the browser plug-in available at the following link: http://www.adobe.com/de/privacy/opt-out.html

Use of script libraries (Google Web Fonts)
In order to present our contents correctly and graphically appealing across all browsers, we use script libraries and font libraries such as Google Web Fonts (https://www.google.com/webfonts/) on this website. Google Web Fonts are transferred to your browser's cache to avoid multiple loading. If your browser does not support Google Web Fonts or does not allow access, content will be displayed in a default font. Calling script libraries or font libraries automatically triggers a connection to the library operator. In theory, it is possible - but currently also unclear whether and, if so, for what purposes - that operators of corresponding libraries collect data. The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Using Adobe Typekit
We use Adobe Typekit for the visual design of our website. Typekit is a service of Adobe Systems Software Ireland Ltd. which gives us access to a font library. To include the fonts we use, your browser must connect to an Adobe server in the United States and download the font required for our website. Adobe receives the information that our website has been accessed from your IP address. For more information about Adobe Typekit, please see Adobe's privacy policy, which you can access here: www.adobe.com/privacy/typekit.html social plugins We currently use the following social media plug-ins: Facebook, Twitter, Instagram. With the help of a button, personal data is transmitted to the respective plug-in provider and stored there. The respective plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation takes place in particular (also for not logged in users) for the representation of demand-fair advertisement and in order to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 lit. f DS-GMO. The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected with us will be directly assigned to your existing account with the plug-in provider. For US providers, a transmission takes place in the USA; these have submitted themselves to the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the data protection declarations of these providers as notified below. It also provides you with more information about your rights and privacy settings:
Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA www.facebook.com/policy.php Twitter, Inc. 1355 Market St, Suite 900, San Francisco, California 94103, USA twitter.com/privacy Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA www.google.com/policies/privacy/partners/?hl=en Instagram, Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA www.instagram.com/

Use of Google Maps
We use Google Maps on our website. This enables us to display interactive maps directly on our website and enables you to conveniently use the map function. By using Google Maps, data is transmitted to Google in the USA, including your IP address. You can prevent the transmission of data to Google by deactivating JavaScript in your browser settings. In this case, however, you cannot use Google Maps on our website. The legal basis for the processing of your data is Art. 6 para. 1 lit. f DS-GMO. Google participates in the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework Information about Google: Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA More information about Google's terms of use: www.google.com/analytics/terms/de.html More information about Google's privacy policy: www.google.com/intl/de/analytics/privacyoverview.html For more information on the Google Maps Terms of Use: www.google.com/intl/de_US/help/terms_maps.html

Embedded YouTube videos
On some of our websites we embed YouTube videos. YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA is the operator of the corresponding plug-ins. When you visit a page with the YouTube plugin, a connection to Youtube servers is established. Youtube will be informed which pages you visit. If you are logged into your Youtube account, Youtube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand. If a YouTube video is started, the provider uses cookies that collect information about user behavior. If you have deactivated the storage of cookies for the Google Ad program, you will not have to reckon with such cookies when viewing YouTube videos. Youtube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the saving of cookies in your browser. Further information on data protection at "Youtube" can be found in the provider's data protection declaration at: https://www.google.de/intl/de/policies/privacy/

Google AdWords
Our website uses Google Conversion Tracking. If you have reached our website via an ad placed by Google, Google Adwords sets a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad served by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can see that the user has clicked on the ad and has been redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be traced through the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that personally identifies users. If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this - for example via browser settings that generally deactivate the automatic setting of cookies or set your browser so that cookies are blocked by the "googleleadservices.com" domain. Please note that you may not delete the opt-out cookies as long as you do not wish measurement data to be recorded. If you have deleted all your cookies in your browser, you must set the respective opt-out cookie again.

Use of Google Remarketing
This website uses the remarketing function of Google Inc. to present interest-based advertisements to website visitors within the Google advertising network. A "cookie" is stored in the visitor's browser, which makes it possible to recognize the visitor when he or she visits websites that belong to Google's advertising network. These pages may contain advertisements that refer to content that the visitor has previously viewed on websites that use Google's remarketing feature. According to its own statements, Google does not collect any personal data in this process. However, if you do not wish to use Google's remarketing function, you can always deactivate it by making the appropriate settings at http://www.google.com/settings/ads Alternatively, you can disable the use of cookies for interest-based advertising through the Advertising Network Initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

Changes to our data protection regulations
We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply for your next visit. Up-to-dateness and amendment of this data protection declaration This data protection declaration is currently valid and has the status as of May 2018. Due to the further development of our website and offers above or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on the website at https://www.lanserhof.com/datenschutz

The data protection declaration was created with the data protection declaration generator of activeMind AG.