Privacy Policy

Information

This page explains how we process your personal data. If you want to change your privacy settings (grant consent or revoke your previously granted consent), you can change your settings.

Controller

The controller of your personal data on our website is:

Laschenskyhof GmbH
Josef-Hauthaler-Straße 2
5071 Wals/Viehhausen
Austria
Tel.: +43 (0)662 852361
E-Mail: info@laschensky.at

Consent Management Tool

LEGALWEB.IO

This website uses the Consent Management Tool of LEGALWEB.IO, legalweb GmbH, Bayerhamerstraße 14, 5020 Salzburg, Austria, a tool which sets a cookie on your device in order to save the services you have selected or not selected. That cookie does not involve a user-specific ID and does not save any other personal data. It is saved for a maximum of 1095 days and is then deleted automatically. The legal basis of processing is your consent according to § 165 Abs. 3 TKG 2021.

Data processing on your end device

The processing operations described in the following text use technologies such as scripts, cookies, WebSQL, LocalStorage, session storage, … . These technologies store or read data on your end device these out.

Webhost

1&1 IONOS

Personal data is processed when you visit this website. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information). Purpose of processing: Monitoring of the technical function and to increase the operational security of our web server, Delivery and provision of the website and Anonymization and creation of statistics. The legal basis for processing: a legitimate interest that overrides the rights and freedoms of the data subject (Art. 6 (1) f GDPR). Legitimate interests: strong economic interest in safe and functioning operation of the technical systems. Data is transmitted: to the data processor 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

Web analysis

Meta Pixel

When accessing some sub-services of our website, additional personal services are processed. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data about the use of the website and the logging of clicks on individual elements. Purpose of processing: Anonymization and creation of statistics, analysis of user behavior and content optimization. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The legal basis for the data transfer to Meta Platforms Ireland Ltd. is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission’s adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).

Google Analytics

Personal data is processed when you visit this website. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data about the use of the website and the logging of clicks on individual elements. Purpose of processing: Anonymization and creation of statistics, analysis of user behavior and content optimization. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA. The legal basis for the data transfer to Google LLC is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission’s adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).

Embeddings

Google Maps

When accessing some sub-services of our website, additional personal services are processed. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data for creating usage statistics. Purpose of processing: Delivery of content provided by third parties and display interactive maps. The legal basis for processing: a legitimate interest that overrides the rights and freedoms of the data subject (Art. 6 (1) f GDPR). Legitimate interests: Interest in a user-friendly presentation. Data is transmitted: to the data processor Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission’s adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).

Incert (Traumgutscheine)

When accessing some sub-services of our website, additional personal services are processed. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data about your inquiry or contact. Purpose of processing: display and booking of offers. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller INCERT eTourismus GmbH & Co KG, Wirtschaftspark Lederfabrik, Leonfelderstraße 328, 4040 Linz, Austria. The legal basis for the data transfer to INCERT eTourismus GmbH & Co KG is Your consent according to Art. 6 (1) a GDPR. To contact the data protection officer by email INCERT eTourismus GmbH & Co KG: privacy@incert.at. The privacy policy of INCERT eTourismus GmbH & Co KG: https://www.incert.at/datenschutz/.

Vimeo

When accessing some sub-services of our website, additional personal services are processed. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data for creating usage statistics. Purpose of processing: Delivery of content provided by third parties, Selection of online advertising on other platforms, which are automatically selected using real-time bidding based on user behavior and transmission and display of video content. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: as joint controllers for Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA. This may also mean a transfer of personal data to a country outside the European Union. The data is transmitted on the basis of your consent in accordance with Art. 6 Para. 1 lit a in conjunction with Art. 49 Para. 1 lit a GDPR. You were informed before you gave your consent that the USA does not have a level of data protection that corresponds to the standards of the EU. In particular, US secret services can access your data without you being informed and without you being able to take legal action against it.

YouTube

When accessing some sub-services of our website, additional personal services are processed. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data for creating usage statistics. Purpose of processing: Delivery of content provided by third parties, Selection of online advertising on other platforms, which are automatically selected using real-time bidding based on user behavior and transmission and display of video content. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: as joint controllers for Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission’s adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).

Webshop

You can buy products directly via our webshop. If you do so, the data you provide and the data of the products you have selected will be processed by the controller in order to provide you with an offer, for the conclusion of the contract, for the performance of the contract and for the fulfillment of post-contractual obligations prior to the conclusion of the contract based on the pre-contractual relationship initiated by you, after conclusion of the contract, based on the contract according to Art. 6 (1) (b) GDPR. If you use an already existing customer account to buy our products or have created a customer account to buy the products, your personal data will be processed until you delete your customer account. Your data are processed for the purpose of direct marketing in a manner compatible with the purpose of performing the contract in forms not requiring consent, such as addressed advertising materials sent by post, until you object. You have no legal or contractual obligation to provide personal data. However, the provision of data is necessary for the conclusion of the contract. If you do not provide such data, a contract cannot be concluded. Shopping carts of non-registered users will be deleted after 14 days, at the latest. User accounts of registered users are active until the account is deleted by the user. Contract data are processed until the limitation period of potential post-contractual obligations has expired.

Contact Form

You can contact us by using a contact form provided on our website. After submission of the contact form, the controller will process the personal data you have provided for the purpose of handling your request on the basis of your consent which you have given by submitting the form according to Art. 6 (1) (a) GDPR, until revocation.You have no legal or contractual obligation to provide personal data. If you do not provide such data, you are simply not able to submit and we are not able to process your request.

Application Form

You can also apply for a job on our website. We will process the personal data provided in the application form in order to manage your application based on a pre-contractual relationship according to Art. 6 (1) (b) GDPR until further notice, and for a duration of not more than 6 months after completion of the application procedure. If you explicitly want us to retain the application documents you have submitted, we will keep your records for not more than 18 months based on your consent according to Art. 6 Abs. 1 lit. a GDPR. You have no legal or contractual obligation to provide personal data. If you do not provide such data, we are simply not able to manage your application. >We do not transfer your job application data to third parties.

Right to object

You have the right to object to processing if your personal data are processed based on legitimate interests. We will then cease the processing carried out on this basis, unless there are compelling and legitimate reasons for us to do so. You have the right to object to the processing of your personal data for the purpose of direct marketing. In this case, we will cease the processing of your personal data for the purpose of direct mail. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to withdraw

You have the right to withdraw your consent at any time by changing the settings at Privacy settings. If you have given your consent to receipt of advertising by email, you may withdraw your consent by clicking the unsubscribe link. In this case, we will cease the processing operations, unless there is any other legal basis. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Other rights

You have the right to access to, rectification, erasure and restriction of processing of personal data. You have also the right to data portability if the processing of your personal data is based on your consent or on a contract concluded with you. You have also the right to lodge a complaint with the supervisory authority. If you need more information on the supervisory authorities in the European Union, click here.

Purchasing vouchers via our website

1. Description and scope of data processing
On our website there is the option to purchase vouchers. If a user uses this option, the data entered in the input mask will be transmitted to us and saved. This data is: title, first name, surname, address, email address, telephone number, voucher amount, personalisation of the voucher, shipping options/alternative shipping address, method of payment.

Voucher purchases on our website go through the online ordering system of websLINE Internet- & Marketing GmbH, Sägewerkstrasse 24, 83395 Freilassing, Germany. All order data you enter shall be encrypted. websLINE commits to the data privacy-appropriate handling of your personal data. The company takes all organisational and technical measures to protect your data.

In this context, no further transfer of your data to third parties takes place. The data is used exclusively for processing your booking and for communication purposes.

2. Legal basis for the processing of data
The legal basis for the processing of the data is the conclusion of a contract of sale with the user.

3. Purpose of data processing
The processing of personal data from the input mask serves solely to process your voucher purchase and to process payment transactions.

4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of a contractual relationship, we will delete the data received as soon as national, commercial, statutory or contractual retention requirements have been met.

5. Means of objection and removal
The user has the option to object to the processing of their personal data at any time.

Online booking on our website

1. Description and scope of data processing
On our website you have the possibility to book and/or inquire rooms and offers. If a user uses this option, the data entered in the input mask will be transmitted to us and saved. This data is: title, first name, surname, email address, telephone number, address, number of guests, requests, date, time.

Online bookings via our website are completed using the online reservation system of websLINE Internet- & Marketing GmbH, Sägewerkstrasse 24, 83395 Freilassing, Germany. All booking data you enter shall be encrypted. websLINE commits to the data privacy-appropriate handling of your personal data. The company takes all organisational
and technical measures to protect your data.

In this context, no further transfer of your data to third parties takes place. The data is used exclusively for processing your booking and for communication purposes.

2. Legal basis for the processing of date
The legal basis for the processing of the data is the conclusion of an accommodation contract with the user.

3. Purpose of processing data
The processing of personal data from the input mask serves solely to process your booking request and to process payment transactions.

5. Means of objection and removal
The user has the option to object to the processing of their personal data at any time. We would like to point out that in the case of objection, the booking cannot be completed or the communication cannot be continued.