Privacy Policy for the Hospitality Industry

1. General Information

This Privacy Policy applies to all individuals who use the services (hotel and restaurant) of Amrai Suites GmbH, hereinafter referred to as Amrai Suites. We hereby inform you about the nature, scope, and purpose of our company’s collection and use of your personal data. We respect your privacy and strive to strictly comply with the legal requirements for the processing of your personal data (EU Regulation No. 679/2016 (GDPR), DSG, and TKG 2003). All of your personal data is processed on this basis.

The data controller is Amrai Suites (Ausserlitzstr. 25, 6780 Schruns); its representative is Stefan Carstens - info@amrai-suites.at.
Our data protection coordinator is Stefan Carstens info@amrai-suites.at.

 

2. Information Obligations (Articles 13 and 14 of the GDPR)

Your personal data includes

  • your master data (last name, first name, address, email address, phone and fax numbers, date of birth, customer number) as well as language and vehicle registration number,
  • the data contained in submitted travel documents (passport number, passport details, date of birth, issuing authority, validity period, nationality) and identification documents (ID card, driver’s license, etc., including the issuing authority and validity period),
  • data regarding payment methods and in connection with payments, in particular involving debit cards, credit cards, and bank cards,
  • the length of stay you have requested, as well as destinations, hotels, contact persons, conditions, special services, health data, frequent flyer numbers, and personal preferences related to your stay that you disclose to us, and
  • specific categories of data such as health information, as well as information regarding special needs and marital status or partnership,

are required for our services. This also includes bookings for travel, tour guides, dining, rental vehicles, transfers, check-in procedures, insurance, events, tours, accreditations, and vouchers—including customer accounts, billing, and verification thereof (B2B, B2C, FIT), ticket reservations, and anything else that may be related to a reservation at our hotel.

We therefore store and process this data for these purposes and, where necessary, transfer it to third parties with whom we collaborate to provide the most effective and best possible service to our customers—this may also include service providers in third countries acting as data processors, software providers, and agencies.

We do not use profiling or automated decision-making.

The legal bases for these data processing activities are

  • the fulfillment of our pre-contractual and contractual obligations toward you,
  • your consent,
  • statutory, contractual, or other legal obligations on our part (e.g., documentation rights and obligations under accounting, tax, and customs law; contract management; reporting requirements; legal disputes; and other matters)
  • Section 96 of the German Telecommunications Act (TKG) and
  • our legitimate interests (e.g., improving our customer service, including in the area of direct marketing, or safeguarding our own legal interests).

The duration of storage is determined by the duration of our business relationship, the consents you have provided, and, in addition, the statutory retention requirements and legal obligations applicable to us. We emphasize that, in the case of ongoing collaboration, we strive to provide the best possible customer service by being thoroughly familiar with the customer requests you have already submitted to us, so that we can satisfy you consistently and over the long term.

NOTE: If personal data is processed that is not collected directly from customers as data subjects, the following information should be provided: We also obtain personal data from sources other than directly from the data subject, namely from social media and other parties.

(See also Section 1 of the Explanations and Notes (“Placement and Content of the Privacy Policy”) regarding this policy).

3. Our Websites

When you visit our website, your access data is automatically collected and stored. This access data may include, in particular, the page accessed, the files viewed, the date and time of the visit, the user’s IP address, information about the accessing computer—specifically the browser and operating system—as well as the data volume, a notification of a successful visit, and any other relevant data. We use this access data for internal statistical purposes, to ensure the security of our website, and to optimize it. If an illegal act is suspected, the access data will be analyzed to preserve evidence.

By entering your personal data into one of our contact forms, you consent to its transmission to us, as well as its storage and processing by us, for the duration of handling this specific inquiry. This applies in particular to your inquiries submitted via contact forms, chat, and emails that you send to us. We require this data to process your inquiry and, in such cases, also store your IP address for the purpose of preserving evidence. The data will be stored for as long as necessary to handle any additional or follow-up questions raised by you or us.

If you create a web account with us, we will make your contract data available to you online. You must safeguard your login credentials carefully and ensure that no unauthorized persons access the account. We assume no liability whatsoever for unauthorized access that is attributable—even if only in part—to misconduct on your part.

Your account data is transmitted only via an encrypted Internet connection (https). We assume no liability for the loss of data or third-party access to your data if we have complied with the state-of-the-art security measures required.

The legal bases for this data processing are your consent, our pre-contractual and contractual obligations toward you, our legitimate interests, legal obligations of all kinds, and Section 96 of the German Telecommunications Act (TKG).

The content of our website has been carefully prepared and reviewed multiple times; however, we assume no liability for the timeliness, accuracy, or completeness of the information provided. Claims for damages arising from the use or non-use of the information, or from the use of incorrect or incomplete information, are excluded. All offers are subject to change and non-binding. We reserve the right to modify, supplement, or delete the offer or parts thereof without prior notice, or to suspend publication of the website temporarily or permanently.

The content and programming of our website are protected by copyright and related rights. Any reproduction—even in part—and public dissemination, in particular the copying of texts, graphics, and photos, is prohibited without our prior written consent.

 

4. Newsletter

You have the option to subscribe to our newsletter via our website. To do so, we need your email address and your confirmation that you agree to receive the Hotel Newsletter via ADDITIVE GmbH, our provider in the field of Email Marketing for Hotels. In order to provide you with targeted information, we collect and process—using our newsletter system, information you voluntarily provide regarding your areas of interest, name, date of birth, and region/country of origin. As soon as you have subscribed to the newsletter, we will send you a confirmation email with a link to confirm your subscription. You can cancel your newsletter subscription at any time via the unsubscribe link in the respective newsletter. To process your subscription and deliver the newsletter to your email address, we use software from ADDITIVE OHG, 39011 Lana (BZ), Italy (“ADDITIVE”). Through these services and systems, your data is processed and stored, at least in part, outside the EU or the EEA. The appropriate level of data protection is ensured by the data processing agreement that has been concluded.

 

5. Disclosure to Third Parties / Obligations of Data Processors

We may disclose your personal data

  • within the corporate group or to partners, taking into account the permitted purposes of use,
  • to data processors (e.g., for our electronic advertising in the form of newsletters) as well as to third parties who must be engaged to provide the services you have requested, all of whom have committed to us to comply with applicable data protection standards,

and may also be transferred outside the EU under certain circumstances. If compliance with European data protection standards is not possible—for example, because standard contractual clauses, adequacy decisions, or certifications are not guaranteed in a specific case—we will inform you in a timely manner and also obtain the necessary consents from you. For further information, please contact us at info@amrai-suites.at

 

6. ADDITIVE+ MARKETING AUTOMATION - Direct Marketing

To increase customer loyalty and to sell services and add-ons, we use Hotel Marketing Automation Software from ADDITIVE GmbH, 39011 Lana (BZ), Italy (“ADDITIVE”) in the area of marketing and sales automation for hotels. In this context, data that we collect in connection with your inquiry, booking, order, activation, registration, or other submission of a form on the website, and used to automatically provide you with offers for services and additional services via ADDITIVE+ MARKETING AUTOMATION. The appropriate level of data protection is ensured by the data processing agreement that has been concluded. You may object to the use of your data for this purpose at any time by clicking the unsubscribe link in the respective message. Data processing is based on the legal provisions of Article 6(1)(f) (legitimate interest) of the GDPR. Our objective, in accordance with the GDPR (legitimate interest), is to avoid being at a disadvantage compared to our competitors, to improve our brand awareness, and to maximize our economic success through the best possible sales utilization of the contacts we have acquired.

 

7. ADDITIVE+ COUPONS

You have the option to purchase vouchers via our website through a <a href="https://www.additive.eu/marketing-software/additive-gutscheine-hotel" target="_blank">online voucher system</a>. To process your purchase and to store and retain your data, we use the <a href="https://www.additive.eu/marketing-software/additive-gutscheine-hotel" target="_blank">Voucher Marketing Tourism</a> the voucher software provided by ADDITIVE GmbH, 39011 Lana (BZ), Italy (“ADDITIVE”). Your data is processed and stored within the EU or the EEA.

The data you provide is necessary for the performance of the contract or for the implementation of pre-contractual measures. Without this data, we cannot conclude the contract with you. Data is not transferred to third parties, with the exception of the transfer of credit card data to the payment service providers handling the transaction for the purpose of charging the purchase price, as well as to our tax advisor to fulfill our tax obligations.

Data processing is based on the legal provisions of Article 6(1)(b) (necessary for the performance of a contract) of the GDPR.

 

8. Cookies and Tracking Services

We use cookies, which are small text files used to store information in web browsers. Cookies are recognized the next time you visit our website and play a significant role in speeding up loading times and making your use of our services more convenient. The information recognized and stored by cookies is used to identify you and to analyze your user behavior. It is stored on the server of the respective provider, who, as our data processor, has committed to complying with applicable data protection standards.

After you visit our website, cookies remain stored on your device unless you refuse them from the outset or actively delete them. Actively disabling cookies may impair the functionality of our websites for you. You can also prevent cookies from being stored by adjusting your browser settings accordingly. However, please note that in this case, you may not be able to use all features of our website.

You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) from being transmitted to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available on the website google.com. However, the plug-in is only available for certain browsers.

We also use third-party content on our website to make our site as informative and user-friendly as possible for you. This includes, for example, Google Maps, RSS feeds, and YouTube. For technical reasons, these third-party providers receive your IP address. We have no control over how these third-party providers use this data. In this regard, we refer you to the privacy policies of the respective providers of all major portals and social media companies.

We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies. The information generated by the cookie regarding your user behavior is generally transmitted to a Google server in the United States and stored there. Your IP address is first truncated within the European Union and is thus anonymized or, at the very least, pseudonymized. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there.

Google uses this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. In this context, please also refer to Google’s Privacy Policy, in particular the information available at the following two links:

We use Facebook Social Plugins from the social network Facebook, operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, and Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94303, USA. These plug-ins are buttons that Facebook uses to track who visits our website. If the visitor is also a registered Facebook user and is logged in, additional information is stored by Facebook. For technical reasons, Facebook receives your IP address. We have no control over Facebook’s use of this data. In this regard, we refer you to Facebook’s privacy policies, in particular the information available at the following link:

There you will also find information on how to block Facebook social plugins using your browser.

 

9. ADDITIVE+ LANDINGPAGE - Online Marketing and Landing Pages

In addition to our website, we operate optimized sales landing pages in the field of online hotel marketing. To process your inquiry, booking, order, activation, registration, or other submission of a form on such a landing page, as well as to store and retain your data, we use standard cloud services and CRM systems, as well as software from ADDITIVE GmbH, 39011 Lana (BZ), Italy (“ADDITIVE”), our managing hotel marketing agency. The appropriate level of data protection is ensured by the data processing agreements concluded with the respective companies. Our landing pages use features of the web analytics service Google Analytics provided by Google Inc. (“Google”). Google Analytics enables the analysis of how users interact with the website. The information generated about your user behavior is transmitted to the provider’s server and stored there. Your IP address is recorded but immediately anonymized (e.g., by deleting the last 8 bits). As a result, only a rough geolocation is possible. You can prevent the transmission of data related to your use of the online service to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://chrome.google.com/webstore/detail/google-analytics-opt-out/fllaojicojecljbmefodhfapmkghcbnh ADDITIVE has access to the data collected via Google Analytics. This data is not used for any purpose other than analyzing the use of our websites and evaluating our marketing and sales activities. Our websites and landing pages also use ADDITIVE features to track usage across channels, including our websites and marketing and sales activities such as landing pages, newsletters, and social media presence. In this process, information about your visits and submitted forms on our websites is also transmitted to ADDITIVE to evaluate and optimize our marketing and sales activities. Data processing is based on the legal provisions of Article 6(1)(f) (legitimate interest) of the GDPR. Our purpose within the meaning of the GDPR (legitimate interest) is to improve our offerings and our website by analyzing the use of our website as well as our sales and marketing activities. In addition, our landing pages and our website use remarketing features provided by Google Inc. (“Google”) and Meta Platforms Inc. (“Meta”). This involves transmitting information to Meta and Google indicating that you have visited this website. These features are used to present visitors to the landing pages with interest-based advertisements on Google’s advertising network or on the social networks Facebook and Instagram. Data processing in connection with these remarketing features is based on the legal provisions of Article 6(1)(a) (consent) of the GDPR. A banner will notify you of the use of cookies for these remarketing features when you visit our landing pages. By continuing to use the site or by clicking the corresponding button, you consent to their use. You can withdraw your consent at any time by visiting the cookie information page on the respective landing page and declining the use of cookies in the banner that appears.

 

10. DialogShift Communication Services on Our Website

Our website uses the communication services provided by DialogShift GmbH, Torstr. 201, 10115 Berlin. These include a chat application as well as other communication channels such as email and telephone communication. The applications process and store data to operate the communication services and to respond to inquiries. Artificial intelligence is used to respond to inquiries; processing takes place exclusively on servers within the EU. No guest or user profiles are created. To operate the chat function, chat texts are stored and a cookie with a unique ID is set—this is used to recognize you as a customer. A cookie is a small text file that is stored locally on your device. This cookie is stored for 90 days from the last time it was used. You can disable the storage of cookies in your browser settings. The disclosure of information such as your name, email address, or phone number in the chat, over the phone, or via email is voluntary. This personal data is deleted after 90 days.

The legal basis for setting the cookie is Art. 6(1)(a) GDPR and § 25(1) TTDSG, based on your consent. The legal basis for the use of the communication services is our legitimate interest in efficient customer communication pursuant to Article 6(1)(f) of the GDPR.

DialogShift provides further information on the collection and use of data, as well as your rights and options for protecting your privacy, at dialogshift.com/Privacy Policy

 

11. Data Subject Rights / Objection / Contact

You may request information about your personal data stored by us at any time, free of charge. As a data subject, you also have the right to object, to access, to erasure, to rectification, to restriction of processing, and to data portability. Since we process the data based on our legitimate interests, you generally have the right to object if you have reasons arising from your particular situation that speak against this processing. Since we (also) process the data for direct marketing purposes, you may object to this processing for direct marketing purposes at any time.

You may withdraw any consent you have given us under data protection law at any time. Withdrawal does not affect the lawfulness of the processing carried out up to that point. Withdrawal means that we will no longer process your data for the purposes mentioned above as of that point in time. To withdraw your consent or for more information about your rights as a data subject, please contact us at info@amrai-suites.at or at our mailing address: Amrai Suites GmbH, Ausserlitzstr. 25, 6780 Schruns. We’re happy to assist you.

The Austrian Data Protection Authority (DSB), Barichgasse 40-42, 1030 Vienna, is the competent supervisory authority for complaints.

 

12. Miscellaneous

We have implemented organizational and technical safeguards—which we continuously evaluate and adjust as needed—to protect your personal data that we store and process.

We reserve the right to amend this Privacy Policy at any time and to adapt it to new developments. The new version is effective as of its publication on our website. The current version of the Privacy Policy is available at any time on the website at amrai-suites.at; our legal notice is also available at amrai-suites.at.