EU Online Dispute Resolution
In accordance with the Regulation on online dispute resolution in consumer matters (ODR Regulation), we inform you about the European Commission’s online dispute resolution platform.
Consumers have the option of submitting complaints to the European Commission’s online dispute resolution platform at http://ec.europa.eu/odr?tid=121779069. The necessary contact details can be found above in our Imprint.
We point out that we are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.
Liability for Website Content
We continuously develop the content of this website and make every effort to provide correct and up-to-date information. However, we cannot assume liability for the correctness of all content on this website, especially content provided by third parties. As a service provider, we are not obliged to monitor transmitted or stored information or to investigate circumstances indicating unlawful activity.
Our obligations to remove information or block the use of information under general laws, based on court or official orders, remain unaffected even where we are not responsible.
If you notice problematic or unlawful content, please contact us immediately so that we can remove the unlawful content. You can find our contact details in the Imprint.
Liability for Links on this Website
Our website contains links to other websites for whose content we are not responsible. We are not liable for linked websites, as we had and have no knowledge of unlawful activities, such unlawful activities have not been apparent to us, and we would remove links immediately if we became aware of any unlawful activity.
If you notice unlawful links on our website, please contact us. You can find our contact details in the Imprint.
Copyright Notice
All content on this website, including images, photos, texts and videos, is protected by copyright. Please ask us before distributing, reproducing or exploiting the content of this website, for example by republishing it on other websites. If necessary, we will legally pursue unauthorised use of parts of our website content.
If you find content on this website that infringes copyright, please contact us.
Image Credits
The images, photos and graphics on this website are protected by copyright.
The image rights are held by the following photographers and companies:
Introduction and Overview
We have prepared this privacy policy (version 11 July 2021-121779069) to explain, in accordance with the requirements of Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and applicable national laws, which personal data (data for short) we as controller, and the processors commissioned by us, process or will process in the future, and which lawful options are available to you. The terms used are gender-neutral.
In short: We provide comprehensive information about the data we process about you.
Privacy policies usually sound technical and contain legal terminology. This privacy policy is intended to describe the most important matters as simply and transparently as possible. Where useful for transparency, technical terms are explained in a reader-friendly way, links to further information are provided, and examples are used. We inform you in clear and simple language that we process personal data in the course of our business activities only where a corresponding legal basis exists.
If questions remain, please contact the responsible body named below or in the Imprint, follow the links provided, or consult further information on third-party pages. Our contact details are also available in the Imprint.
Scope of Application
This privacy policy applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (processors). By personal data we mean information within the meaning of Article 4(1) GDPR, such as a person’s name, email address and postal address. Processing personal data enables us to offer and invoice our services and products, online and offline.
The scope of this privacy policy includes all online presences that we operate, social media presences and email communication, and mobile apps for smartphones and other devices.
In short: This privacy policy applies to all areas in which personal data is processed by the company in a structured way through the channels mentioned. If we enter into legal relationships with you outside these channels, we will inform you separately where appropriate.
Legal Bases
In this privacy policy we provide transparent information about the legal principles and provisions of the GDPR that allow us to process personal data.
Where EU law is concerned, we refer to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. You can read the GDPR online via EUR-Lex at https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=celex%3A32016R0679.
We process your data only if at least one of the following conditions applies:
Consent (Article 6(1)(a) GDPR): You have given us consent to process data for a specific purpose, for example storing data entered in a contact form.
Contract (Article 6(1)(b) GDPR): We process your data to fulfil a contract or pre-contractual obligations. For example, if we conclude a purchase contract with you, we require personal information in advance.
Legal obligation (Article 6(1)(c) GDPR): We process your data if we are subject to a legal obligation, for example statutory retention of invoices for accounting purposes.
Legitimate interests (Article 6(1)(f) GDPR): We reserve the right to process personal data where legitimate interests exist and your fundamental rights are not restricted. For example, certain data must be processed in order to operate our website securely and efficiently.
Additional regional or national laws may also apply. In Austria this is the Federal Act concerning the Protection of Personal Data (Data Protection Act, DSG). In Germany, the Federal Data Protection Act (BDSG) applies. Where further regional or national laws apply, we inform you in the relevant sections.
Contact Details of the Controller
If you have questions about data protection, you will find the contact details of the responsible person or body below:
Intelligence Lucrative Cooperation ILC GmbH
Schuppengasse 19-21,
1230 Vienna, Austria
Email: info@florum-hotels.com
Phone: +43 01 2126569
Imprint: https://florum-hotels.com/imprint/
Storage Period
As a general principle, we store personal data only as long as absolutely necessary to provide our services and products. This means that we delete personal data as soon as the reason for the data processing no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose no longer applies, for example for accounting purposes.
If you request deletion of your data or withdraw consent to data processing, the data will be deleted as quickly as possible, provided there is no obligation to store it.
Rights under the GDPR
Under Article 13 GDPR, you have the following rights to ensure fair and transparent data processing:
You have a right of access under Article 15 GDPR to know whether we process data about you and, if so, to receive a copy of that data and information about the purpose of processing, the categories of data, recipients, transfers to third countries, storage duration, rights to rectification, erasure, restriction and objection, complaint options, the origin of the data if not collected from you, and whether automated decision-making or profiling takes place.
You have the right to rectification under Article 16 GDPR.
You have the right to erasure under Article 17 GDPR (“right to be forgotten”).
You have the right to restriction of processing under Article 18 GDPR.
You have the right to data portability under Article 20 GDPR.
You have the right to object under Article 21 GDPR.
If processing is based on Article 6(1)(e) or Article 6(1)(f) GDPR, you may object to processing. We will then examine whether we can legally comply with the objection.
If data is used for direct marketing, you may object to this processing at any time. We will then no longer use your data for direct marketing.
If data is used for profiling, you may object at any time. We will then no longer use your data for profiling.
Under Article 22 GDPR, you may have the right not to be subject to a decision based solely on automated processing, including profiling.
If you believe that the processing of your data violates data protection law, you may lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority, whose website is https://www.dsb.gv.at/.
Data Transfers to Third Countries
We transfer or process data in countries outside the EU only if you consent to such processing, if it is legally required, if it is contractually necessary, and only to the extent generally permitted. Your consent is usually the most important reason why we have data processed in third countries. Processing personal data in third countries such as the United States may mean that personal data is processed and stored in unexpected ways.
We expressly point out that, in the opinion of the Court of Justice of the European Union, there is currently no adequate level of protection for data transfers to the United States. Processing by US services may mean that data is not processed and stored anonymously. US authorities may also have access to individual data. Where possible, we try to use server locations within the EU if offered.
Security of Data Processing
We have implemented technical and organisational measures to protect personal data. Where possible, we encrypt or pseudonymise personal data. This makes it as difficult as possible for third parties to infer personal information from our data.
Communication
If you contact us by telephone, email or online form, personal data may be processed. This may include telephone number, name, email address and form data. The data is processed for handling and responding to your inquiry and the related business transaction. The data is stored for the duration of the business case and in accordance with statutory retention obligations.
Telephone
If you call us, call data may be stored pseudonymously on the respective device and by the telecommunications provider used. Data such as name and telephone number may then be sent by email and stored for responding to the inquiry. The data is deleted once the business case has ended and legal requirements allow deletion.
If you communicate with us by email, data may be stored on the relevant device and on the email server. The data is deleted once the business case has ended and legal requirements allow deletion.
Online Forms
If you communicate with us using an online form, data is stored on our web server and may be forwarded to an email address of ours. The data is deleted once the business case has ended and legal requirements allow deletion.
Web Hosting
When you visit websites, certain information, including personal data, is automatically created and stored. This website is hosted by a professional provider in order to operate the website securely and reliably.
When your browser connects to the web server, data may be processed. This may include the full URL of the page accessed, browser and browser version, operating system, referrer URL, hostname and IP address of the accessing device, and date and time. Such data is usually stored in server log files.
As a rule, these log data are stored for approximately two weeks and then deleted automatically. We do not pass on these data, but cannot exclude that they may be inspected by authorities in the event of unlawful conduct. The legal basis is Article 6(1)(f) GDPR, as professional hosting is necessary to present the company securely and user-friendly online and to pursue attacks or claims where necessary.
Cookies
Our website uses HTTP cookies to store user-specific data. Cookies are small text files stored by the browser. Some cookies are essential to the technical operation of the website; others support convenience functions, statistics or advertising.
Cookies may be first-party cookies set by our website or third-party cookies set by external providers. They may remain stored for different periods, from the duration of a session to several years.
You can delete, disable or manage cookies in your browser. Depending on the browser, these settings can usually be found in the privacy or security area. If you deactivate cookies completely, some website functions may no longer be available.
Where cookies are technically necessary, processing is based on legitimate interests pursuant to Article 6(1)(f) GDPR. For all other cookies, processing takes place on the basis of your consent pursuant to Article 6(1)(a) GDPR where required.
Web Analytics
We may use web analytics tools to evaluate visitor behaviour and improve our website. Data may include pages visited, duration of visit, browser information, device information and approximate location information. The exact storage period depends on the tool used.
You may object to processing by analytics tools or prevent it using browser settings, cookie settings or provider opt-out tools. Where consent is required, analytics tools are used only on the basis of your consent. Otherwise, the legal basis may be legitimate interests in improving and economically operating the website.
Google Analytics
This website may use Google Analytics, a web analytics service provided by Google. Google Analytics uses cookies to analyse how visitors use the website. Data such as pages visited, technical device information and approximate location may be processed. Google may store cookies such as _ga, _gid, _gat_gtag_UA_, AMP_TOKEN, __utma, __utmt, __utmb, __utmc, __utmz and __utmv for different periods.
We use Google Analytics with IP anonymisation where configured. This means your IP address is shortened within the EU or EEA before transfer to the United States where possible. Google uses the information to evaluate website use, compile reports and provide related services.
You can prevent the storage of cookies by changing browser settings, and you can prevent Google from collecting and processing data by using the Google browser add-on at https://tools.google.com/dlpage/gaoptout. Further information is available in Google’s privacy policy at https://policies.google.com/privacy.
Google Optimize
We may use Google Optimize to test and improve website content. Google Optimize can use Google Analytics cookies to determine which version of a page is shown and how users interact with it. The legal basis is consent where required, or legitimate interest in improving the website.
Google Site Kit
We may use Google Site Kit to integrate Google services such as Analytics, Search Console, AdSense or PageSpeed Insights into WordPress. Depending on the connected services, cookies such as _ga, _gid and _gat_gtag_UA_ may be used. Details are available in Google’s privacy policy at https://policies.google.com/privacy.
Google Tag Manager
We may use Google Tag Manager to manage website tags. Google Tag Manager itself does not create user profiles or store cookies for analytics; it helps load and organise other tools. If other tools are activated through Google Tag Manager, those tools may process data according to their own privacy rules.
Google Ads Conversion Tracking
We may use Google Ads conversion tracking to measure the effectiveness of advertising. If you reach our website through a Google ad, Google Ads may set cookies such as Conversion or _gac. These cookies usually expire after three months and are not intended for personal identification by us. Further information is available at https://policies.google.com/privacy.
Cookie Consent Management Platform
We may use a consent management platform to obtain, document and manage cookie and privacy choices. Data may include consent status, time of consent, browser information and anonymised identifiers. Processing is necessary to comply with legal obligations and to document consent.
Google Maps
This website may use Google Maps to display maps and improve our service. When Google Maps is used, Google may process your IP address, location data where enabled, search terms and technical device data. Google may set cookies such as NID. Further information is available at https://policies.google.com/privacy.
Google Fonts and Local Fonts
We use fonts to present our website clearly and consistently. Where fonts are loaded locally from our server, no data is transmitted to Google for font loading. If Google Fonts are loaded externally, Google may process data such as IP address and CSS/font requests. The legal basis is our legitimate interest in an attractive and efficient website, and consent where required.
Font Awesome
We use Font Awesome to display icons on the website. If Font Awesome files are loaded from external servers, Font Awesome or its provider may process technical data such as IP address and loaded icon files. The legal basis is our legitimate interest in optimising our online service, and consent where required. Further information is available at https://fontawesome.com/privacy and https://fontawesome.com/help.
All texts are protected by copyright.