Data protection notice
The protection of your personal data is very important to BÖHLER Immobilien GmbH & Co KG, based in Kendlbachstraße 11a, 8605 Kapfenberg, Austria (hereinafter "we", "us"). We always comply with the applicable legal provisions for the protection, lawful handling and confidentiality of personal data and for data security, in particular the European General Data Protection Regulation ("GDPR") and the applicable national data protection regulations.
This data protection notice informs you about the type, scope and purpose of the collection and use of your personal data by us in connection with your visit to and use of our website.
In addition, you will find separate data protection notices for individual subject areas:
- General data protection notice for guests and customers
In this data protection notice, we inform you about the processing of your personal data if you are a guest in our company or a customer of one of our services. - Data protection notice for applicants
In this data protection notice, we inform you about the processing of your personal data when you apply for an open position with us. - Data protection notice for social media presences
In this data protection notice, we inform you about the processing of your personal data when you visit our social media sites on Facebook or Instagram.
1. Who is responsible for data processing?
The Controller for the operation of this website is
BÖHLER Immobilien GmbH & Co KG
Kendlbachstraße 11a, 8605 Kapfenberg, Österreich
2. What is personal data?
Personal data ("data") means any information relating to an identified or identifiable natural person ("data subject"). This includes, for example, the name, address, email address, date of birth, credit card number or IP address, but also information on health status and religious beliefs, among other things.
3. Processing of data in the context of using the website
3.1 Operation and protection of the website
Purpose: You can visit our website without actively providing any personal data. However, when you visit our website, your end device sends data to our web servers. This data is processed by our web servers and automatically stored in so-called "log files". The processing of your data is necessary in order to provide you with our website. Storage in log files is also necessary, among other things, to ensure the security and functionality of our website.
Data categories: IT log and detection data (IP address, domain names of computers used by users connecting to the website, URI (Uniform Resource Identifier) addresses of requested resources, time of request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (successful, error, etc.) and other parameters relating to the operating system and computer environment).
Legal basis: Art 6 (1) (f) GDPR - legitimate interests: Provision of a secure, functional and user-friendly website
Storage period: The aforementioned data will be deleted after a short period of time, unless this data is still required to subsequently clarify a security incident (e.g. hacking attack) on our website and for the purpose of preserving evidence.
Categories of recipients: Processor for the operation and maintenance of the website: Brandnamic GmbH, Satzlstraße 4, Pairdorf, 39042 Brixen, Italy. Processor for hosting the website: voestalpine group-IT GmbH, Stahlstraße 14, 4020 Linz, Austria. In the event of a security incident, your data may also be transmitted to the police, legal representatives, courts and administrative authorities.
3.2 Contact us
Purpose: You can contact us with enquiries about our offers and services via the contact form on this website, but also by e-mail, telephone or fax. In these cases, we process your data for the purpose of dealing with your enquiry.
Data categories: Basic data of the data subject (e.g. salutation, title, first name and surname); contact data (e.g. address, telephone number, e-mail address); correspondence data (e.g. free text field on website, e-mail correspondence); documentation of appointments and agreements (e.g. in the course of a telephone enquiry) as well as other information that you share in the course of contacting us.
Legal basis: Art 6 (1) (f) GDPR - legitimate interests: Contacting customers, guests and interested parties to process their enquiries.
Storage period: We store your data until the purpose has been fulfilled. After fulfilment of the purpose, your data will only be stored if there is a legal obligation to retain it or another significant reason for further storage can be cited. This may be the case, for example, if we need your data to assert, exercise or defend legal claims.
Categories of recipients: Processor (IT service provider)
3.3 Subscription to the Newsletter
Purpose: Information about our offers, services and events for our customers, guests and interested parties
Data category: Basic data of the data subject (name, title), contact data (e-mail address)
Legal basis: Art 6 (1) (a) GDPR - Consent: You are neither contractually nor legally obliged to provide us with your data required for subscribing to a newsletter. However, if you do not do so, we will not be able to send you a newsletter. You can revoke your consent at any time (e.g. by sending an email to the email address of the data protection organisation listed at the end of this data protection notice or by clicking on the unsubscribe link directly in the footer of the newsletter sent to you).
Storage period: We store your data for the purpose of sending the newsletter as long as you do not withdraw your consent to receive the newsletter.
Categories of recipients: Processor for the provision and operation of the "MailWorx" newsletter tool: eworx Network & Internet GmbH, Hanriederstraße 25, 4150 Rohrbach-Berg, Austria.
3.4 Reservations / Bookings
Purpose: If you make a reservation via our website, it is necessary to process your data in order to record the reservation and, if necessary, to be able to process your payment securely. Without the provision of your data, your reservation cannot be processed.
Data categories: Basic data of the data subject (first name, surname, title), contact data (address, e-mail address, telephone number), credit card data, contract and invoice data, booking data (type of room, extra services, travel period), data in free text fields
Legal basis: Art 6 (1) (b) GDPR - fulfilment of a contract or pre-contractual measures
Storage period: After expiry of the statutory retention period, your data will be deleted unless there is another reason for storage. This may be the case, for example, if we need your data to assert, exercise, defend or defend against legal claims (in particular guarantee and warranty claims).
Categories of recipients: Processor for the provision and operation of the online booking platform: HotelNetSolutions GmbH, Genthiner Straße 8, 10785 Berlin, Germany. Processor for the provision and operation of the hospitality system: Innconcepts IT GmbH, Europastraße 8, 6322 Kirchbichl, Austria.
3.5 Use of cookies and Google Analytics
Cookies are small text files that are stored on the hard drive of a client computer by a website and with the help of the browser in order to save small amounts of information from the website for a certain period of time. In general, there are different types of cookies. Some are essential for the functioning of the website, such as navigation or shopping basket cookies. There are also so-called analytical cookies, which collect information - e.g. about the number of website visitors and the path taken by visitors to the website. Function cookies enable the website to remember the choices you have made (e.g. selected filter settings or automatic language presetting of a website).
In addition, there are cookies, so-called profiling cookies, which record the user's preferences and actions. This information is used to create a user profile. This is used to combine advertising messages with the interests of the user and thus enables more targeted advertising. In many cases, third-party cookies are used by the website operator to broadcast personalised advertising. Website visitors must actively consent to the setting of cookies that are not essential for the functionality of the website and also have the right to withdraw their consent at any time.
Our website uses a technology called CMP (Consent Management Platform) to manage this right. When the website is accessed, a banner appears informing the website user about the use of cookies, offering various consent options (consent to all cookies, individual categories of cookies or each individual cookie separately) and providing detailed information about the various cookies (type, scope, purposes, processed data and recipient categories, legal basis and storage duration). The CMP remembers the settings made by the website user and reapplies them the next time they visit the website. The website visitor can exercise the right of cancellation or adjust the settings here.
4. Data transfer to third countries
Due to the complexity of today's data processing processes, we engage processors to process your data. As far as possible, we only use processors that are based within the European Union or the European Economic Area and are therefore subject to the GDPR.
In exceptional cases, however, we may transfer data to third countries (i.e. outside the European Union or the European Economic Area) and have it processed there. If we transfer data to third countries, the transfer takes place exclusively in compliance with the required conditions of admissibility (in particular the existence of an adequacy decision by the EU Commission, conclusion of standard data protection clauses including - if necessary - additional agreement of further technical and organisational as well as contractual measures). If your data is transferred to a third country, you can request a copy of the suitable or appropriate safeguards from our data protection organisation.
5. Rights of data subjects and the right to lodge a complaint
- In accordance with Art 15 GDPR, you have the right to obtain confirmation from us as the controller as to whether or not personal data concerning you are being processed, and, where that is the case, you have the right of access to your personal data.
- In accordance with Art 16 GDPR, you have the right to request the rectification of inaccurate data concerning you and/or the completion of incomplete personal data without undue delay.
- In accordance with Art 17 GDPR, you have the right to erasure of your personal data.
- In accordance with Art 18 GDPR, you have the right to restrict processing.
- In accordance with Art 20 GDPR, you have a right to data portability.
- In accordance with Art 21 GDPR, you have the right to object to data processing.
- If your data is processed on the basis of your consent, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
- Finally, you have the option of lodging a complaint with the supervisory authority responsible for you.
6. Contact details
For questions on the subject of data protection and to assert your aforementioned rights, please contact our data protection organisation by email at datenschutz@no-spam.boehlerstern.no-spam.com or by post at Hotel Böhlerstern, Friedrich-Böhler-Straße 13, 8605 Kapfenberg with the subject "Data protection".
Parts of this Data Protection Notice may be changed or updated by us for technical or legal reasons without prior notice to you. Please always check the current version of the Data Protection Notice to ensure that you are up to date with any changes or updates.