Privacy Notice for Booking Inquiries and Reservations

Person in Charge

The entity responsible for processing your personal data in connection with booking inquiries and reservations is:

F-Media Consulting GmbH
21 Babenbergerstraße
3180 Lilienfeld
Austria

E-Mail: office@ferienwohnungen-gutenbrunn.at
Phone: +43 664 88241438

Data Protection Officer

Herbert Eder
E-Mail: h.eder@slc-institut.com

Personal Data Processed

In connection with a booking request or booking, the following personal data, in particular, may be processed:

  • First and Last Name
  • mailing address
  • Email address
  • Phone number
  • Desired vacation rental
  • Check-in and Check-out Dates
  • Number and ages of traveling companions
  • Booking and Pricing Information
  • Billing and Payment Information
  • Voluntary Information and Disclosures
  • IP address and technically necessary connection data

Purpose of Data Processing

Your personal data will be processed for the following purposes:

  • Processing Your Reservation Request
  • Checking Availability
  • Preparation and Conclusion of the Lodging Agreement
  • Processing and Handling of Your Reservation
  • Communication Before, During, and After Your Stay
  • Preparation and Submission of Booking Confirmations and Invoices
  • Payment Processing
  • Compliance with statutory retention, tax, and reporting requirements
  • Asserting, exercising, or defending legal claims

Legal Basis

The processing of your personal data for the purpose of handling a booking request, as well as for the preparation, performance, and fulfillment of the lodging contract, is carried out in accordance with Article 6(1)(b) of the GDPR.

To the extent that processing is necessary to comply with statutory retention, tax, or reporting obligations, it is carried out in accordance with Article 6(1)(c) of the GDPR.

Technically necessary data may be processed based on our legitimate interest in providing our booking services in a secure, stable, and user-friendly manner, in accordance with Article 6(1)(f) of the GDPR.

We will process your data for advertising purposes only if you have expressly consented to it or if there is another legal basis for doing so.

Requirement to Provide Data

The information marked as required fields in the booking and inquiry forms is necessary for processing your inquiry or for completing and fulfilling the booking.

Without this information, we may not be able to process your booking request or enter into an accommodation agreement with you.

Recipients of Personal Data

To the extent necessary for processing reservations or payments, personal data may be disclosed to the following recipients in particular:

  • Providers of the reservation and booking systems used
  • Payment Service Provider
  • IT and Hosting Service Providers
  • Tax consulting and bookkeeping, as needed
  • authorities and public agencies authorized by law

Data will only be disclosed if it is necessary for the performance of the contract, required by law, or permitted on another legal basis.

Using the WebPlanner Availability Calendar

To show the available and already booked dates for our vacation rentals, we use the booking calendar in the Webplanner software.

Provider:

Web Planner
Prinzipalmarkt/Drubbel 3
48143 Münster
Germany

When the embedded availability calendar is accessed, technically necessary connection data may be transmitted to Webplanner. This may include, in particular, the following data:

  • IP address
  • Date and time of access
  • Browser used
  • Operating system used
  • page accessed
  • log data required for technical purposes

This data is processed to clearly display the availability of our vacation rentals and to provide a user-friendly booking option.

For more information on data protection at Webplanner:

Privacy Policy

Using the Webplanner Booking Tool

We use Webplanner's booking tool to receive and process booking requests and reservations.

When you submit an inquiry or reservation through this booking tool, the personal data you provide will be processed for the purpose of handling and completing your reservation.

We have entered into a data processing agreement with Webplanner in accordance with Article 28 of the GDPR. Webplanner processes the data exclusively in accordance with our instructions and to the extent necessary for the technical provision and operation of the booking system.

Provider:

Web Planner
Prinzipalmarkt/Drubbel 3
48143 Münster
Germany

Privacy Notice:

Privacy Policy

Using TBooking/Toubiz – Holidu Smart Destination

We also use the TBooking/Toubiz booking system to check availability and process booking requests and direct bookings. The booking system is offered under the brand name „Holidu Smart Destination.“.

When you visit our external booking page or submit a booking request or make a booking through it, the personal data you enter will be processed by the booking system.

In particular, the following data may be processed:

  • First and Last Name
  • mailing address
  • Email address
  • Phone number
  • Preferred Accommodation
  • Check-in and Check-out Dates
  • Number and details of traveling companions
  • Booking, Pricing, and Billing Information
  • Payment and Billing Information
  • voluntary disclosures
  • IP Address and Technical Log Data

Your data is processed to display available vacation rentals, to process and fulfill your reservation, to process payments, and to transmit the reservation information to us as the accommodation provider.

Technical provider of the Toubiz system:

land in sight, Inc.
5 Wiesentalstraße
79115 Freiburg
Germany

E-Mail: info@land-in-sicht.de
Data Protection Contact: datenschutz@land-in-sicht.de

Additional information about data processing by Toubiz:

https://mein.toubiz.de/datenschutz

The direct booking page for our vacation rentals:

https://tbooking.toubiz.de/AUT00020100515644705/tbooking/?globalReset=1&lang=de

Using PayPal

We offer PayPal as a payment option for processing online payments.

Service providers for customers within the European Union:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

If you select PayPal as your payment method, the personal data required to process the payment will be transmitted to PayPal.

This may include, in particular, the following data:

  • First and Last Name
  • Email address
  • Billing Address
  • Booking and Invoice Number
  • Payment Amount and Currency
  • Transaction and Payment Information
  • IP Address and Technical Device Data

This information is transmitted to process and complete the payment you have selected, to confirm receipt of payment, and to prevent fraud and misuse.

The legal basis for the transfer of data required for payment processing is Article 6(1)(b) of the GDPR. To the extent that statutory retention, security, or documentation requirements apply, processing is also carried out in accordance with Article 6(1)(c) or (f) of the GDPR.

PayPal processes the transmitted data as an independent data controller in accordance with its own privacy policy. PayPal may disclose personal data to affiliated companies, payment networks, financial institutions, service providers, or authorized authorities to the extent necessary for payment processing, fraud prevention, or compliance with legal obligations.

As a general rule, PayPal only provides us with the transaction information necessary to identify and confirm the payment. Full bank account or credit card details are not transmitted to us.

Additional information about data processing by PayPal:

https://www.paypal.com/at/legalhub/paypal/privacy-full?country.x=AT&locale.x=de_AT

Cookies and External Booking Features

To the extent that the integrated calendar, booking, or payment services use technically necessary cookies or similar storage technologies, these are used to provide the desired functions.

Cookies or similar technologies that are not strictly necessary will only be set with your prior consent. You may revoke your consent at any time through the cookie settings on our website, effective for the future.

Data Transfer Outside the European Economic Area

Certain service providers, particularly PayPal, may process personal data outside the European Economic Area as part of their global corporate and service provider structures.

According to the respective provider, such transfers are made only in compliance with legal requirements and using appropriate data protection safeguards. For more information, please refer to the respective provider’s privacy policy.

Retention period

We store your personal data only for as long as is necessary to process your inquiry, carry out and complete your booking, or in accordance with statutory retention periods.

Once the purpose of processing no longer applies and the statutory retention periods have expired, the data will be deleted or anonymized, provided there are no legitimate grounds for further retention.

Automated Decisions

In connection with your booking, we do not make any decisions based solely on automated processing that have legal effects on you or that significantly affect you in a comparable manner.

Payment service providers such as PayPal may use automated processes for fraud prevention, identity verification, and risk assessment. For more information, please refer to the privacy policy of the respective payment service provider.

Your Privacy Rights

If the legal requirements are met, you have the following rights:

  • Right to Information
  • Right to Rectification
  • Right to Erasure
  • Right to Restriction of Processing
  • Right to Data Portability
  • Right to Object to Certain Forms of Processing
  • Right to Withdraw Previously Given Consent with Future Effect

To exercise your rights, you may contact our Data Protection Officer:

Herbert Eder
E-Mail: h.eder@slc-institut.com

Right to File a Complaint

You have the right to file a complaint with the competent data protection supervisory authority.

Austrian Data Protection Authority
40–42 Barichgasse
1030 Vienna
Austria

E-Mail: dsb@dsb.gv.at
Website: https://www.dsb.gv.at

Text for the checkbox in the booking form

I have read and acknowledge the privacy policy.

As of August 1, 2026

Comments are closed, but trackbacks and pingbacks are open.