Data protection declaration or information according to Art. 13 and 14 DSGVO

Data protection law responsible:

Appartement-Pension Gaber
Breitenfelder Gasse 2
1080 Wien
+43 699 14083308

Data processing purposes:

contact form

If you contact us by means of a form on the website or by e-mail, your data will be stored for six months to process the request and in case of follow-up questions. We will not share this information without your consent. If you fill out the contact form, HEROLD Business Data GmbH, as a processor, processes the data on the basis of the General Terms and Conditions (in particular the regulations for order data processing contained therein). HEROLD Business Data GmbH uses a subcontractor (SurveyMonkey Europe UC, 2 Shelbourne Buildings, 2nd Floor, Shelbourne Road, Ballsbridge, Dublin 4, Ireland), who gains access to the data contained in the contact form and stores the data in the USA. Any provision of data to the subcontractor is based on an adequacy decision by the European Commission (Self-Certification Privacy Shield).

analysis purposes

In addition, data is collected and used for analysis purposes. This data processing is not personal (see below for information about cookies).


Upon registration, the user's e-mail address and password are stored. If a purchase is subsequently made, the e-mail address will be linked to the data determined during the purchase process. The data you provide is required to set up the user account. The data processing takes place for the duration of the existence of the user account. When deleting the user account is a
Deletion of the e-mail address and the password as well as the link to the data of the purchase process.

IT security

When visiting this website, log files are also stored which contain the IP address and other data for accessing the website (eg date, time, user agent, referer). The data processing is limited in time (maximum 30 days) and only to protect against DDOS attacks or other interference with the functionality of the website and any underlying database systems.

Information about cookies

This website uses so-called cookies. These are small text files that are stored on your device using the browser. They do no harm.
On this page so-called session cookies are used. These are generated when the website is called up and automatically deleted. They are used for recognition if you call up the same website again within a short time, in order to take into account already made presettings again. No personal data will be stored or processed.

Cookies have the purpose of making the website offer user-friendly. Some cookies remain stored on your device until you delete them. They allow the website operator to recognize your browser the next time you visit. If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you allow this only in individual cases. However, disabling cookies may limit the functionality of the site.

Web analytics service Google (Google Analytics)

This website uses functions of the web analytics service Google Analytics. Provider is Google Inc., 1600 Amphitheater Parkway Mountain View, CA
94043, USA. We use the function "activation of IP anonymization" on this website. As a result, your IP address will be truncated by Google within Member States of the European Union or other parties to the Agreement on the European Economic Area prior to processing / storage. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to measure the performance of online advertising for analysis and optimization purposes.

The processed data includes in particular online markings (including cookie identifiers), internet protocol addresses, device identifiers, location data, customer-assigned markings as well as user data (in particular time and duration of access, selection of specific offers, etc.). For more information on how to handle user data on Google Analytics, please refer to the Google Privacy Policy available at

You may prevent the collection by Google of the data generated by the cookie and related to your use of the website as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link:

For instructions on how to stop Google storing data, see the following link:

The relationship with the web analytics provider is based on order data processing when using Google Analytics. The transmission of data to the processor is based on an adequacy decision of the European Commission (Self-certification Privacy Shield). The data is deleted regularly (currently every 26 months).

Using Google Adwords Conversion Tracking

This website uses the Google AdWords online advertising program and Google AdWords AdWords conversion tracking. Google Conversion Tracking is an analytics service provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). When you click on an ad served by Google, a conversion tracking cookie will be placed on your machine. These cookies lose their validity after a maximum of 90 days. If you visit certain web pages on our web site and the cookie has not expired, Google and the web site operator may recognize that you clicked on the ad and were redirected to this page. The information obtained using the conversion cookie is used to generate conversion statistics. Here, the website operator learns the total number of users who clicked on an ad and were redirected to a page that had a conversion tracking tag
and / or have performed various actions on the site. However, the website operator does not receive information that personally identifies users. If you do not want to participate in the tracking, you can object to this use by preventing the installation of cookies by a corresponding setting of your browser software (deactivation option). You will not be included in the conversion tracking statistics. For more information and Google's privacy policy, please visit:,

The relationship with the web analytics provider is based on order data processing when using Google Adwords Conversion Tracking. The transmission of data to the processor is based on an adequacy decision by the European Commission (Self-certification Privacy Shield). Google is also required to delete the data on a regular basis (currently every 39 months)

Social Media

If Facebook social plugins are used on this website, they will be operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). Recognizable are the incorporations on the Facebook logo or on the terms "Like", "Like", "Share" in the colors Facebook (blue and white). Information on all Facebook plug-ins can be found in the following link:

The plugins are not activated until you click on the corresponding buttons. If these are greyed out, the plugins are inactive. You have the option to activate the plugins each time you visit.

The plugins create a direct connection between your browser and the Facebook servers. This only happens after activating the plugin. The website operator has no influence whatsoever on the nature and extent of the data transmitted by the plugin to the Facebook Inc. servers. Information can be found here:

The plugin informs Facebook Inc. that you have visited this website as a user. There is the possibility that your IP address will be saved. If you are logged into your Facebook account while visiting this website, the information will be linked to it.

Legal basis for data processing:

On the website data are processed exclusively on the basis of the legal regulations (DSGVO, TKG 2003).
The data processing (webshop, product reviews, booking tool and user account) is based on Art. 6 para. 1 lit. b) (contract performance) DSGVO.

In the case of the use of analysis tools, the data is used on the basis of Art. 6 para. 1 lit. f) (legitimate interest) GDPR. The legitimate interest in the use of data is the improvement of the website and the success of online advertising.

The use of IT data security measures is also based on Art. 6 para. 1 lit. f) (legitimate interest) GDPR. The legitimate interest in the use of data is the protection of one's own IT systems.

The use of social media plugins is only after consent. The legal basis is therefore Article 6 (1) (a) GDPR. The consent must be given again with each website call.

Your rights

You have the rights to information, correction, deletion, limitation of processing, data portability, revocation and opposition. If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in a way, you can complain to the supervisory authority. In Austria this is the Data Protection Authority.