Skip to content

Privacy policy

The protection of your personal data is a particular concern for us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2021). In this privacy policy we inform you about the most important aspects of data processing on our website.

1. Contacting us

If you contact us via the form on the website or by email, the data you provide will be processed for the purpose of handling your enquiry and in case of follow-up questions.

  • Data: name, email address, telephone number, company, selected plan and your message.
  • Storage: The submission is stored in our website's database and forwarded to us by email.
  • Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual measures) or lit. f GDPR (legitimate interest in answering enquiries).
  • Disclosure: We do not pass this data on without your consent.

Transmission is encrypted and handled via our own SMTP server.

2. Online booking, customer account and payment

For bookings of the coworking desk and meeting room we use the booking system Amelia, which is operated on our own website.

  • Data: first name, last name, email address, telephone number, service booked, date and time, and payment status.
  • Customer account: In the booking area you can view your bookings. For this, a login token is stored in your browser.
  • Emails: We send booking confirmations and reminders via our own SMTP server.
  • Legal basis: Art. 6 (1) lit. b GDPR (performance of a contract).
  • Retention: We retain booking and invoice data in accordance with the statutory retention periods (e.g. 7 years under Section 132 BAO).

Online payment is processed via Stripe. You enter your payment data (e.g. card number) directly with Stripe; we do not receive it. We only receive the information whether the payment was successful.

Provider: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (group: Stripe, Inc., USA)
Privacy policy: https://stripe.com/at/privacy

3. Hosting, Cloudflare and server log files

Our website is operated by a hosting provider. When the site is accessed, technically necessary data is processed in server log files (IP address, date and time, page accessed, browser and operating system).

For faster delivery and protection against attacks, our website runs via the network of Cloudflare. In this process your IP address is transmitted to Cloudflare.

  • Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in secure and fast operation).
  • Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA
  • Privacy policy: https://www.cloudflare.com/privacypolicy/

4. Cookies and local storage

We only store information in your browser that is technically necessary for the operation of the website. No consent is required for this (Section 165 (3) TKG 2021).

  • Colour scheme: Your choice between light and dark mode is stored locally in your browser.
  • Booking and customer account: session and login information of the booking system.
  • Payment: For fraud prevention, Stripe sets technically necessary identifiers.

You can delete cookies and local data at any time in your browser settings.

5. Audience measurement

We use the statistics solution AnalyticsWP, which runs on our own website. The data remains on our server and is not passed on to third parties.

  • Data: pages accessed, origin of the visit, device and browser, IP address and an anonymous visitor identifier in the browser.
  • Purpose: We want to understand which content is used and improve the website.
  • Legal basis: Your consent (Art. 6 (1) lit. a GDPR, Section 165 (3) TKG 2021). You can withdraw it at any time.

6. Spam protection with Cloudflare Turnstile

To protect our forms from spam and abuse we use Cloudflare Turnstile. This checks whether the input comes from a human. For this purpose, technical data such as the IP address and browser information are transmitted to Cloudflare.

  • Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in protection against abuse).
  • Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA

7. Map (Google Maps)

On our website we display a map from Google Maps. The map is only loaded when you click "Load map". Only then is your IP address transmitted to Google.

  • Legal basis: Art. 6 (1) lit. a GDPR (your consent by clicking).
  • Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  • Privacy policy: https://policies.google.com/privacy

8. Fonts

All fonts on this website are hosted on our own server. No fonts are loaded from Google or other providers when the site is accessed.

9. Link to Instagram

We link to our Instagram profile. No content from Instagram is embedded. Data is only transmitted to Meta Platforms Ireland Limited once you click the link.

10. Your rights

You have the right at any time to access, rectification, erasure, restriction of processing, data portability and to object to the processing of your personal data.

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can lodge a complaint with the Austrian Data Protection Authority.

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
www.dsb.gv.at

11. Controller

Tourismusgenossenschaft Ramsau am Dachstein eGen
Ramsau 372
8972 Ramsau am Dachstein
Austria