Privacy Policy

This privacy policy explains how we process personal data when you visit this website or book accommodation through it.

1. Controller

Gasthof Rechenhof – Werner Speckbacher
Rechenhofweg 100, 6020 Innsbruck, Austria
VAT ID: ATU43407103
Phone: 0043/(0)512 26 25 13
Email: info@rechenhof.at

We have not appointed a data protection officer, as the legal conditions requiring one do not apply to us.

2. What data we process

2.1 Booking data

When you complete a booking we process the details you enter in the booking form:

• First and last name
• Email address and phone number
• Address: street, address line 2, postcode, city, state/region, country
• Estimated arrival time
• Special requests (free-text field)

For the booking itself we also store:

• Reservation number, check-in and check-out dates
• Selected rooms, number of guests and total price
• Booking status and any cancellation details (time, reason, cancellation deadline)

Note on special requests: the "special requests" field is free text. Please do not enter health data or other special categories of personal data within the meaning of Article 9 GDPR unless it is strictly necessary for your stay.

2.2 Payment data

Payments are processed by Stripe. Your card details are transmitted directly to Stripe and are never stored on our servers. We only store the identifiers issued by Stripe (customer, payment method, payment intent and, where applicable, refund ID) so that we can match a payment to your booking and issue refunds.

2.3 Administrator accounts

Staff of the guesthouse have user accounts containing a username, name, email address and language preference. If someone selects "Remember me" when signing in, we additionally store their IP address and browser identifier (user agent) for 31 days, in order to restore the session and detect misuse.

2.4 Server and cookie data

Strictly necessary cookies are set when you visit the website. Our cookie policy explains exactly which ones. Beyond those, cookies are only set if you consent to the Google Maps map being displayed (see section 2.5).

We do not use any analytics, tracking or advertising services. On our own initiative we set only strictly necessary cookies. Services such as Google Analytics, Google Fonts, Meta/Facebook, Instagram, YouTube, Vimeo, Klarna or PayPal are not embedded. Fonts and icons are served exclusively from our own server. The one exception is the Google Maps map on the "Contact" page: it is loaded only if you explicitly consent.

2.5 Google Maps (only with your consent)

On the "Contact" page you can choose to display a Google Maps map. The map is not loaded automatically. Until you click "Load map" you only see a placeholder, and no data is sent to Google.

When you click "Load map", your browser opens a direct connection to Google's servers. Google receives:

• your IP address;
• information about your browser and device, such as browser type and settings, device type, operating system and language setting;
• the address of the page the map was loaded from (referrer), together with the date and time of the request.

Google may also store cookies and similar identifiers on your device and read Google cookies that are already there. Our cookie policy lists which ones.

If you are signed in to a Google account at that moment, Google can link the request to your account. If you would rather it did not, sign out of Google before clicking.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the United States (see section 5). We have no influence over the scope or purpose of Google's processing. Google does not give us any personal data about you, and we do not analyse how the map is used.

The legal basis is your consent under Art. 6(1)(a) GDPR; for storing information on your device and accessing it, section 165(3) of the Austrian Telecommunications Act 2021 applies.

Withdrawal: you can withdraw your consent at any time with effect for the future. Withdrawing is just as easy as giving consent (Art. 7(3) GDPR): click "Withdraw consent" below the map. The map is then replaced by the placeholder again and will not be loaded automatically on future visits either. The lawfulness of processing carried out before withdrawal is unaffected. Google cookies already set can be deleted in your browser settings.

Google's privacy information: policies.google.com/privacy

3. Purposes and legal bases

Providing the booking data is necessary to perform the contract; without it we cannot accept a booking.

4. Recipients and processors

• Stripe Payments Europe, Ltd. (Ireland) and affiliated companies – payment processing and fraud prevention. Privacy information: stripe.com/privacy
• netcup GmbH (Germany) – hosting of the server that runs the website and database, and delivery of our emails (booking confirmations, cancellation and system messages).
• Google Ireland Limited (Ireland) and Google LLC (USA) – display of the map on the contact page, only with your explicit consent. Google acts as an independent controller here, not as our processor. Privacy information: policies.google.com/privacy

We do not share your data for advertising purposes. Beyond the above, we only disclose data where we are legally obliged to do so.

5. Transfers to third countries

As part of payment processing, Stripe may transfer personal data to the United States. Stripe relies on the European Commission's standard contractual clauses for such transfers. Please see Stripe's privacy information for details.

If you load the Google Maps map, your data may also be transferred to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission issued an adequacy decision on 10 July 2023 (Implementing Decision (EU) 2023/1795). In addition, Google relies on the European Commission's standard contractual clauses. The validity of that adequacy decision is currently under review before the Court of Justice of the European Union; should it fall away, the standard contractual clauses remain the basis. We point out that access to this data by US authorities cannot be ruled out with absolute certainty. If you would rather avoid that, simply do not load the map — the address and all directions are also available as text on the contact page.

6. Retention

We keep booking data for as long as it is required to handle your stay and to comply with statutory retention obligations. In Austria, records are generally subject to a seven-year retention period (section 132 BAO), counted from the end of the calendar year in which the stay took place.

Once that period has elapsed the booking data is deleted automatically: a nightly process removes the affected bookings together with the guest details (name, address, email, phone number, special requests) and room assignments entirely from our database. The "remember me" identifier expires and is removed after 31 days at the latest.

7. Your rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)

To exercise them, simply email info@rechenhof.at. You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.

8. No automated decision-making

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. Stripe's fraud prevention serves solely to secure the payment process.

9. Changes to this privacy policy

We update this privacy policy when our processing changes – for example when new features or service providers are added. The version published on this page applies.