Privacy

This privacy notice outlines in general terms how personal data is processed when you visit this website and when you submit an enquiry. The following details are a placeholder and must be reviewed and completed by a lawyer in accordance with the GDPR before publication.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Hotel Sacher Baden, Helenenstrasse 55, 2500 Baden near Vienna, Austria.

Email: info@hotelsacherbaden.at

What data we collect

When you send us a message via our contact or enquiry form, we process the data you provide: your name, email address and the content of your message, as well as — if you choose to provide them — your phone number, your interest (e.g. a programme) and preferred dates.

Your details are transmitted by email to info@hotelsacherbaden.at and handled solely there. They are not stored or logged on the web server itself.

We ask that your message contain only the information that is genuinely necessary to handle your request.

Purposes and legal basis

We process your data solely to respond to your enquiry and to advise you on your request.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request) and Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries). Where you give your explicit consent, the legal basis is Art. 6(1)(a) GDPR.

Health-related information (Art. 9 GDPR)

An enquiry about our longevity, detox or consultation offerings may contain health-related information. Such data belongs to the special categories of personal data under Art. 9 GDPR and is specially protected.

We process health-related information only if you have given us your explicit consent to do so (Art. 9(2)(a) GDPR). You may withdraw this consent at any time with effect for the future.

We expressly ask that you do not enter any health data in the form that is not required for an initial contact. The principle of data minimisation applies. We do not use any tracking or analytics tools without your prior consent.

Storage period

We store your data only for as long as is necessary for the stated purposes or as required by statutory retention periods. The specific storage period is a placeholder and is to be defined during the final legal review.

Disclosure of data

Your data is not passed on to third parties without an appropriate legal basis. Any processors engaged (for example for hosting) will be named during the final legal review. This section is a placeholder.

Your rights

You have the right to access, rectification, erasure and restriction of processing, as well as the right to data portability and the right to object to processing.

Where you have consented to processing, you may withdraw that consent at any time. The lawfulness of processing carried out before the withdrawal remains unaffected.

Without prejudice to other remedies, you have the right to lodge a complaint with the data protection authority (in Austria: the Austrian Data Protection Authority).