{"id":15510,"date":"2026-07-02T08:59:16","date_gmt":"2026-07-02T06:59:16","guid":{"rendered":"https:\/\/mesnerhaus.at\/privacy-policy\/"},"modified":"2026-08-30T13:42:00","modified_gmt":"2026-08-30T11:42:00","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/mesnerhaus.at\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<h3 class=\"wp-block-heading\">1. Controller<\/h3>\n\n<p class=\"wp-block-paragraph\">Mesnerhaus GmbH<br\/>Markt 56, A-5570 Mauterndorf, Austria<br\/>Telephone: <a href=\"tel:+4364727595\">+43 (0)6472 7595<\/a><br\/>Email: <a href=\"mailto:office@mesnerhaus.at\">office@mesnerhaus.at<\/a><\/p>\n\n<h3 class=\"wp-block-heading\">2. Your rights at a glance<\/h3>\n\n<ul class=\"wp-block-list\">\n<li>Access to the personal data we store about you (Article 15 GDPR)<\/li>\n\n\n\n<li>Rectification of inaccurate data (Article 16 GDPR)<\/li>\n\n\n\n<li>Erasure of your data, provided no statutory retention obligation prevents this (Article 17 GDPR)<\/li>\n\n\n\n<li>Restriction of processing (Article 18 GDPR)<\/li>\n\n\n\n<li>Data portability (Article 20 GDPR)<\/li>\n\n\n\n<li>Objection to processing (Article 21 GDPR)<\/li>\n\n\n\n<li>Withdrawal of consent with effect for the future (Article 7(3) GDPR)<\/li>\n\n\n\n<li>Lodging a complaint with the Austrian Data Protection Authority (Barichgasse 40\u201342, 1030 Vienna, dsb@dsb.gv.at)<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">To exercise these rights, an informal message to the contact details above is sufficient.<\/p>\n\n<h3 class=\"wp-block-heading\">3. Hosting and server log files<\/h3>\n\n<p class=\"wp-block-paragraph\">This website is hosted by HOSTINGER, UAB, \u0160vitrigailos Str. 34, LT-03230 Vilnius, Lithuania. The server location for this website is Frankfurt am Main, Germany (EU). <\/p>\n\n<p class=\"wp-block-paragraph\">When you access the website, our hosting provider automatically records technical access data (so-called server log files): IP address, date and time of access, page accessed, browser and operating system used, and referrer URL. This processing is carried out to provide and secure the website technically (Article 6(1)(f) GDPR). A data processing agreement pursuant to Article 28 GDPR is in place with the hosting provider.  <\/p>\n\n<h3 class=\"wp-block-heading\">4. Cookies and consent management<\/h3>\n\n<p class=\"wp-block-paragraph\">This website uses cookies. We use the Complianz cookie consent tool to manage your consent. When you first visit our website, you are informed about the cookie categories used and can decide which categories you consent to. Technically necessary cookies and comparable storage access are used where required for a function you have expressly requested (Section 165(3) TKG 2021); depending on the processing activity, the associated processing of personal data is based on Article 6(1)(b) or (f) GDPR. All other cookies are used exclusively on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw or adjust your consent at any time via the cookie settings in the footer of this website.       <\/p>\n\n<h3 class=\"wp-block-heading\">5. Contact and reservation enquiries<\/h3>\n\n<p class=\"wp-block-paragraph\">If you contact us via the contact form, email or telephone, or request a table or room reservation, we process the data you provide (name, contact details, enquiry, requested period and number of people) to handle your enquiry and take steps prior to entering into a contract (Article 6(1)(b) GDPR). We store this data for the duration of the business relationship plus statutory retention periods (generally seven years, Section 132 BAO); where an enquiry does not result in a booking, for no longer than six months. <\/p>\n\n<p class=\"wp-block-paragraph\"><strong>Special categories of personal data (dietary requirements, allergies and intolerances):<\/strong> If, as part of your reservation, you voluntarily provide us with information about health-related dietary restrictions (e.g. allergies, coeliac disease or diabetes), this constitutes special categories of personal data pursuant to Article 9 GDPR. We process this information exclusively with your explicit consent (Article 9(2)(a) GDPR) and solely for the purpose of providing safe culinary service tailored to you during your stay. This data is deleted after your stay unless you consent to longer storage for future stays. Pure taste preferences without a health-related aspect (e.g. vegetarian or vegan) do not fall under Article 9 GDPR and are processed on the basis of Article 6(1)(b) GDPR.     <\/p>\n\n<h3 class=\"wp-block-heading\">6. Table reservations (aleno)<\/h3>\n\n<p class=\"wp-block-paragraph\">We use the aleno service, provided by aleno AG, Technoparkstrasse 1, 8005 Zurich, Switzerland, to manage table reservations. Your reservation data (name, contact details, date, number of people and, where applicable, dietary information pursuant to Section 5) is processed in this context. A data processing agreement pursuant to Article 28 GDPR is in place with aleno. Further information: <a href=\"https:\/\/www.aleno.me\/de\/ppw\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">aleno.me\/de\/ppw<\/a>   <\/p>\n\n<h3 class=\"wp-block-heading\">7. Hotel software, channel manager and booking platform (HUGO)<\/h3>\n\n<p class=\"wp-block-paragraph\">We use software from HUGO Hotelsoftware GmbH, Murtalstra\u00dfe 641, 5582 Sankt Michael im Lungau, Austria, to manage room availability, prices and online bookings (property management system, channel manager and booking engine). Your booking and guest data (name, contact details, period of stay, room category and, where applicable, comments regarding your stay) is processed through this system. A data processing agreement pursuant to Article 28 GDPR is in place with HUGO. Further information: <a href=\"https:\/\/hugo-hotelsoftware.com\/impressum-datenschutz.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">hugo-hotelsoftware.com\/impressum-datenschutz.html<\/a>   <\/p>\n\n<h3 class=\"wp-block-heading\">8. Payment processing and point-of-sale system (hobex)<\/h3>\n\n<p class=\"wp-block-paragraph\">We use the payment service provider hobex AG, Josef-Brandst\u00e4tter-Str. 2b, 5020 Salzburg, Austria, to process all card payments (point-of-sale system, room bookings, restaurant, vouchers and tickets). The payment data required for this purpose is transferred to hobex exclusively for payment processing (Article 6(1)(b) GDPR). Further information: <a href=\"https:\/\/www.hobex.at\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">hobex.at<\/a>   <\/p>\n\n<h3 class=\"wp-block-heading\">9. Voucher sales<\/h3>\n\n<p class=\"wp-block-paragraph\">We use the e-guma service, an offering of e-guma Gutschein- &amp; Ticketsystem | Idea Creation GmbH, Switzerland, for voucher sales. The data required for this purpose (name, contact details and payment data) is transferred to e-guma to process the voucher purchase (Article 6(1)(b) GDPR). Switzerland is covered by an adequacy decision of the European Commission pursuant to Article 45 GDPR; data may therefore be transferred to Switzerland without additional safeguards.  <\/p>\n\n<h3 class=\"wp-block-heading\">10. Newsletter delivery with rapidmail<\/h3>\n\n<p class=\"wp-block-paragraph\">We use rapidmail, a service of Positive Group Deutschland GmbH, Ingeborg-Krummer-Schroth-Stra\u00dfe 18a, 79106 Freiburg im Breisgau, Germany, to send our newsletter.<\/p>\n\n<p class=\"wp-block-paragraph\">If you subscribe to our newsletter, we process your email address, any other data you provide voluntarily and the log data required to document your registration. Registration uses a double opt-in process. The legal basis for sending the newsletter is your consent pursuant to Article 6(1)(a) GDPR.    <\/p>\n\n<p class=\"wp-block-paragraph\">You may withdraw your consent at any time with effect for the future via the unsubscribe link in every newsletter or by sending a message to <a href=\"mailto:office@mesnerhaus.at\">office@mesnerhaus.at<\/a>. We use personalised open or click tracking only where valid consent has been given. Further information on data processing by rapidmail is available at <a href=\"https:\/\/www.rapidmail.de\/datenschutz\" rel=\"nofollow noopener\" target=\"_blank\">www.rapidmail.de\/datenschutz<\/a>.  <\/p>\n\n<h3 class=\"wp-block-heading\">11. Social media profiles<\/h3>\n\n<p class=\"wp-block-paragraph\">Our website contains links to our profiles on Facebook and Instagram. When you click these links, you leave our website; no data is automatically transferred to these platforms unless you actively click the link. The respective platform operator is responsible for data processing after you click the link.  <\/p>\n\n<h3 class=\"wp-block-heading\">12. Storage period<\/h3>\n\n<p class=\"wp-block-paragraph\">Unless a more specific storage period is stated in this Privacy Policy, we retain your personal data until the purpose of the processing no longer applies or you submit a legitimate request for erasure, provided no statutory retention obligations prevent deletion (in particular tax and commercial retention periods under the BAO\/UGB, generally seven years).<\/p>\n\n<h3 class=\"wp-block-heading\">13. Data security<\/h3>\n\n<p class=\"wp-block-paragraph\">For security reasons, this website uses SSL\/TLS encryption to transmit confidential content. You can recognise an encrypted connection by the padlock symbol in your browser bar and by the address changing from &#8220;http:\/\/&#8221; to &#8220;https:\/\/&#8221;. <\/p>\n\n<h3 class=\"wp-block-heading\">14. Amendments to this Privacy Policy<\/h3>\n\n<p class=\"wp-block-paragraph\">We reserve the right to amend this Privacy Policy to reflect changes in the legal situation or in our data processing. The current version published on this page applies. <\/p>\n\n<p class=\"wp-block-paragraph\"><em>Last updated: 29 August 2026<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":13,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-15510","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/mesnerhaus.at\/en\/wp-json\/wp\/v2\/pages\/15510","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mesnerhaus.at\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/mesnerhaus.at\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/mesnerhaus.at\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mesnerhaus.at\/en\/wp-json\/wp\/v2\/comments?post=15510"}],"version-history":[{"count":1,"href":"https:\/\/mesnerhaus.at\/en\/wp-json\/wp\/v2\/pages\/15510\/revisions"}],"predecessor-version":[{"id":15511,"href":"https:\/\/mesnerhaus.at\/en\/wp-json\/wp\/v2\/pages\/15510\/revisions\/15511"}],"wp:attachment":[{"href":"https:\/\/mesnerhaus.at\/en\/wp-json\/wp\/v2\/media?parent=15510"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}