Online Reservation
Contact

Hotel Landhaus St. Georg
Kulmweg 555
8962 Gröbming
Austria

Privacy Policy

Protecting your personal data is important to us. We process it only in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Telecommunications Act (TKG 2021). This page explains what data we process when you visit our website, send us an enquiry or book a stay with us.

1. Controller

LANDHAUS GB GmbH (Landhaus St. Georg)
Kulmweg 555, 8962 Gröbming, Austria
Phone: +43 3685 22740 · E-mail: info@st-georg.at
Company register: FN 492598 i · VAT: ATU73360114

Please send any data protection questions to info@st-georg.at.

2. Contact form, enquiries and e-mail

If you send us an enquiry through a form on the website or by e-mail, we process the data you provide: first and last name, e-mail address, phone number, travel dates and number of guests if given, and your message. We use this data only to handle your enquiry and prepare an offer.

  • Legal basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR).
  • Retention: enquiries that do not lead to a booking are deleted after 1 year at the latest.
  • Submitted forms are stored in our website’s admin area and also sent to us by e-mail.

3. Online booking

For online bookings we use the booking system of Casablanca Hotelsoftware. The booking form is loaded from their servers (casablanca.at). The data you enter there (name, contact details, dates, number of guests, requests and details needed for payment or booking guarantee) is processed by Casablanca on our behalf as a processor under a data processing agreement.

  • Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • The booking system is technically necessary for bookings and is therefore loaded without cookie consent.

4. Your stay

To handle your booking and stay, we process the data needed to perform the contract. We are also legally required to keep guest registration data (Austrian Registration Act) and accounting records (§ 132 BAO).

  • Legal basis: contract (Art. 6(1)(b) GDPR) and legal obligation (Art. 6(1)(c) GDPR).
  • Retention: booking data and accounting records are kept for 7 years, as required by tax law.

5. Hosting, e-mail and security

Our website and e-mail are hosted by WebSupport s.r.o., Karadžičova 12, 821 08 Bratislava, Slovakia, acting as our processor. On each visit the server automatically logs technical data (IP address, date and time, page requested, browser type). This is necessary for secure, stable operation and is deleted by the host after a short time.

  • To protect against attacks we use the security plugin Wordfence, which analyses IP addresses for this purpose.
  • The whole website is encrypted (HTTPS/SSL).
  • Fonts are served from our own server, so no connection to Google is made.
  • Legal basis: legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR).

6. Cookies and your consent

On your first visit we show a banner where you decide which cookies we may use.

  • Necessary cookies: e.g. remember your language and your cookie choice. They are required for the website to work (§ 165(3) TKG 2021).
  • Statistics and marketing tools: only activated after your consent (Art. 6(1)(a) GDPR).
  • Changing your consent: you can change or withdraw it at any time via “Cookie settings” or on the Cookie Policy page, which also lists all cookies.
  • We manage consent with the Complianz plugin, which runs on our own server.

7. Google Analytics 4 (only with consent)

If you accept statistics cookies, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us which pages are read and where our visitors come from, so we can improve the website.

  • Google mainly processes a shortened IP address, device and browser information and the pages visited.
  • Cookies: _ga, _ga_*.
  • Retention: in Google Analytics up to 14 months.
  • Legal basis: your consent (Art. 6(1)(a) GDPR).

8. Meta Pixel and Conversions API (only with consent)

If you accept marketing cookies, we use the Meta Pixel by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. It lets us measure the success of our ads on Facebook and Instagram and show our offers to people who may be interested.

  • Information about page visits and submitted enquiries is sent to Meta from your browser and also directly from our server (Conversions API). Both happen only after your consent.
  • Meta may link this data to your Facebook or Instagram account.
  • Cookies: _fbp, _fbc.
  • Legal basis: your consent (Art. 6(1)(a) GDPR).
  • Joint controllership: we and Meta are jointly responsible for the collection and transfer (Art. 26 GDPR). More information: https://www.facebook.com/privacy/policy.

9. Google Maps (only with consent)

Some pages contain a Google Maps map. It is only loaded once you accept marketing cookies; until then you see a placeholder. When the map loads, Google processes in particular your IP address.

10. Google reCAPTCHA

Some forms are protected against spam by Google reCAPTCHA (Google Ireland Limited). When a form is submitted, reCAPTCHA checks whether it was filled in by a human or an automated program. Google processes in particular the IP address and usage data.

  • Legal basis: legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

11. Social networks

Our website only contains plain links to our Facebook and Instagram pages, no embedded plugins. Data is only transferred if you click a link and visit the platform.

12. Transfers outside the EU

Google and Meta may also process data in the USA. Both companies are certified under the EU-U.S. Data Privacy Framework, for which the European Commission has issued an adequacy decision.

13. Your rights

You have the right to:

  • access,
  • rectification,
  • erasure,
  • restriction of processing,
  • data portability,
  • object,
  • withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before it.

Just e-mail info@st-georg.at.

If you believe the processing of your data breaches data protection law, you can lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, or the authority in your own country.

We do not use automated decision-making within the meaning of Art. 22 GDPR.

Last updated: November 2026