Select Page

Privacy Policy

Effective Date: April 2026
The protection of your personal data is very important to us. We therefore process your data exclusively in accordance with the applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Telecommunications Act (TKG 2021).

With this Privacy Policy, we inform you in accordance with Art. 13 and 14 GDPR about the processing of your personal data on our website and in the context of booking apartments in the Wachau region, Austria.

1. Controller

The controller responsible for data processing is:

[Danube Atelier / Anne Ristorcelli]

Address: [Herbststrasse 59/32, 1160 Wien]

Phone: [+43 68017050606]

Email: [welcome@danube-atelier.com]

2. What data we process and for what purposes

a) Website Visit (Server Logs)
When you visit our website, our web server automatically collects the following data (server log files):

  • IP address (anonymised where possible)
  • Date and time of the request
  • Requested page or file
  • Browser type and version
  • Operating system
  • Referrer URL (previously visited page)

These data are processed to ensure the security, stability, and functionality of the website and to prevent misuse.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
The data are deleted after a few days unless further retention is required for security reasons.
b) Bookings via the Website
When you book an apartment in the Wachau through our website, we collect the following personal data:

  • First and last name
  • Address (street, postcode, city, country)
  • Email address
  • Telephone number
  • Booking details (desired period, number of persons, selected apartment)
  • Payment information (depending on the payment method – we do not store full credit card details ourselves; processing is done via secure payment providers)
  • Any special requests or notes

Purposes of processing:

Processing and handling of your booking (contract initiation and fulfilment)
Issuing booking confirmations, invoices, and payment processing
Compliance with legal registration obligations (Austrian Meldegesetz – registration of guests)
Communication with you (e.g. in case of changes or queries)
Fulfilment of tax and retention obligations

Legal bases:

Art. 6(1)(b) GDPR (performance of a contract)
Art. 6(1)(c) GDPR (legal obligation, e.g. registration law, tax law)
Art. 6(1)(f) GDPR (legitimate interest, e.g. customer service)

c) Contact Form / Inquiries
When you use our contact form or contact us by email, we process the data you provide (name, email, message) solely for the purpose of handling your request.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(b) GDPR for pre-contractual measures.

d) Newsletter (if offered)
If you subscribe to our newsletter, we process your email address for sending it. You can withdraw your consent at any time.
Legal basis: Art. 6(1)(a) GDPR (consent).

3. Disclosure of data to third parties

We only share your data where necessary for the purposes mentioned above:

With processors (e.g. web hosting provider, booking system software, payment service providers, email service providers) – these are contractually bound to comply with the GDPR.
With public authorities (e.g. registration authorities according to the Meldegesetz, tax office).
With external accounting or tax advisory firms (where required).

Data transfers to third countries (outside the EU/EEA) only occur if appropriate safeguards (e.g. Standard Contractual Clauses) are in place or an exception under the GDPR applies.

4. Data retention period

We store your data only for as long as necessary to fulfil the purposes or legal retention obligations:

Booking and contract data: generally 7 years (tax retention obligations)
Registration data: in accordance with the Meldegesetz
Server logs: a few days up to a maximum of 6 months

After expiry of these periods, the data will be deleted or anonymised.

5. Your rights

Under the GDPR you have the following rights:

Right of access to your stored data (Art. 15)
Right to rectification of inaccurate data (Art. 16)
Right to erasure (“right to be forgotten”, Art. 17)
Right to restriction of processing (Art. 18)
Right to data portability (Art. 20)
Right to object to processing (Art. 21)
Right to withdraw consent at any time (Art. 7) – this does not affect the lawfulness of processing based on consent before its withdrawal

To exercise your rights, please contact us at the email address provided above.

If you have any complaints, you may contact the Austrian supervisory authority:
Austrian Data Protection Authority (DSB)
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at

Website: https://www.dsb.gv.at

6. Cookies and similar technologies

Our website uses cookies (small text files stored on your device).

Technically necessary cookies: These are required for the operation of the website (e.g. booking function). Legal basis: Art. 6(1)(f) GDPR or § 165 TKG.
Analytics / Marketing cookies (if used, e.g. Google Analytics): Only with your consent (Art. 6(1)(a) GDPR).

You can delete cookies in your browser at any time or refuse their use. Please note that this may limit the functionality of the website.
[Detailed cookie list and consent management tool – insert here if you use one.]

7. Data security

We implement appropriate technical and organisational measures to protect your data (e.g. SSL encryption during transmission, secure servers, access restrictions).

8. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy if necessary (e.g. due to legal changes or new features). The current version is always available on our website.