Legal - Privacy policy

Controller

The controller responsible for processing your personal data is:

• Andrea Horáková, trading as YourKey Management
• Kühwegboden 21/2, 9620 Hermagor-Pressegger See, Austria
• VAT ID (UID): ATU78226439
• Phone / WhatsApp: +43 676 690 7297
• Email: [E-MAIL]

Hosting and server logs

This website is a static site hosted on Microsoft Azure Static Web Apps. The provider is Microsoft Ireland Operations Ltd., which processes data as our processor.

Each time a page is loaded, the server automatically records technical data: IP address, date and time of access, the requested page (URL) and browser identification (user agent). This is used to deliver the website and to keep it secure and stable. The legal basis is our legitimate interest in operating the website securely and reliably (Art. 6(1)(f) GDPR).

The hosting provider keeps these logs only as long as necessary for these purposes. A transfer of data outside the EU cannot be ruled out; Microsoft is certified under the EU-U.S. Data Privacy Framework.

Contact via WhatsApp, phone or email

This website has no contact form and does not itself process any data you enter. If you contact us via the “Message us on WhatsApp” button, by phone or by email, we process the data you provide (in particular your name, phone number or email address and the content of your message) in order to answer your enquiry and, where relevant, prepare an offer.

The legal basis is pre-contractual steps and the performance of a contract (Art. 6(1)(b) GDPR) and, for other enquiries, our legitimate interest in answering them (Art. 6(1)(f) GDPR). We keep this data as long as needed to handle your enquiry and, if a contract is concluded, for its duration and the statutory retention periods.

The WhatsApp button opens the WhatsApp app or website, operated by WhatsApp Ireland Limited. The operator is responsible for data processed within that service under its own privacy policy.

Booking

Bookings for the Frank 28 apartment are handled by the Intutto booking system, operated by GRASPEA s.r.o. as our processor. The booking system is loaded only after you click a booking button such as “Book your stay”; until then your browser makes no connection to it. Once it loads, your browser connects to its servers, which receive technical data such as your IP address.

The details you enter when booking are processed to conclude and carry out your booking contract (Art. 6(1)(b) GDPR). Without them we cannot take your booking. We keep booking data for as long as statutory retention obligations, in particular under tax and commercial law, require.

The other properties (The Old School House, Rattendorf Luxury Apartments) are booked on their own websites, where their own privacy policies apply.

Cookies and analytics

This website itself sets no cookies, uses no analytics or tracking, and loads no content from third-party servers (such as fonts, maps or videos) until you click a booking button. The font is hosted on our own website. Once you open the booking system, it may set cookies that are technically necessary for the booking to work.

Links to other websites

This website contains links to the websites of the properties we manage, to our clients’ websites and to WhatsApp. Only when you click a link do you go to a website run by another operator, who is responsible for the data processed there.

Your rights

With regard to the processing of your personal data, you have the right to:

• access your data (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interest (Art. 21 GDPR),
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal (Art. 7(3) GDPR).

Complaint to a supervisory authority

You can exercise your rights using the contact details above. If you believe that our processing infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at. You may also lodge a complaint with the authority in your country of residence or work.

Further information

Providing data is neither a statutory nor a contractual requirement; without it, however, we cannot respond to you. We do not carry out automated decision-making or profiling.