Privacy
Protecting your data matters to us. Here you can find out which personal data we process when you visit our website, write to us or book an apartment, and what rights you have. This is based on the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). The German version is legally binding.
Who is responsible
Sissikuss GmbH, Frauengasse 15, 4820 Bad Ischl, Austria (hotel: Schulgasse 5), hotel@sissikuss.at, +43 6132 26677
Visiting the website
The website is hosted by Wix.com Ltd. (Tel Aviv, Israel). When you visit it, the server processes technically necessary data such as IP address, date and time, the page visited, browser and device. This is needed for the website to work and stay secure (legitimate interest, Art. 6(1)(f) GDPR). The EU Commission has issued an adequacy decision for Israel.
Cookies
We only use cookies that are needed to run the website, for example to save your cookie choice. Anything else, such as statistics or content from other services, is only added with your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). You can change or withdraw your choice at any time via “Cookies” in the footer.
Booking direct
We use Smoobu (Smoobu GmbH, Berlin) for availability and bookings. When you book, we process the data we need for it:
- name, address, email and phone number
- arrival, departure and number of guests
- chosen apartments and extras
- payment method and invoice details
The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). Card payments are handled by Stripe (Stripe Payments Europe Ltd., Dublin). We never see or store your card details.
Registration duty and retention
As an accommodation business, we are required by law to record guest data in the guest register (Austrian Registration Act) and to keep booking and invoice data (usually seven years under the Federal Fiscal Code). Beyond that, we only keep your data as long as we need it for your stay and your enquiries.
Contact by email or phone
If you write to us or call us, we only use your details to answer your enquiry (Art. 6(1)(b) or (f) GDPR).
Instagram and other services
On the home page we show pictures from our Instagram account. Our own server fetches them via the service Behold, so your browser does not connect to Instagram. Only when you click a picture does Instagram open in a new window, where Meta's privacy policy applies.
The weather in the menu comes from Open-Meteo and is only loaded with your consent. Links to Google Maps, Instagram and Facebook open those sites in a new window.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consent at any time. Just write to us at hotel@sissikuss.at.
If you feel we are not processing your data correctly, you can complain to the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).