How to find us

Roland Schwarz
Appartementhaus
Ober-Alpendorf 23
5600 St. Johann/Pg.

Contact:

Corporate purpose: Rental of holiday apartments
VAT number: ATU70421929
Member of the Salzburg Chamber of Commerce, Tourism and Leisure Industry Division

Disclaimer

Liability for Content

As a service provider, we are responsible for our own content on these pages in accordance with § 7 (1) TMG and under general laws. However, according to §§ 8 to 10 TMG, we as a service provider are not obligated to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information under general laws remain unaffected. Liability in this respect is only possible from the time we become aware of a specific legal violation. Upon becoming aware of such infringements, we will remove the content in question immediately.

Liability for Links

Our website contains links to external third-party websites, the content of which we have no control over. Therefore, we cannot assume any responsibility for this external content. The respective provider or operator of the linked pages is always responsible for their content. The linked pages were checked for possible legal violations at the time of linking. No unlawful content was identifiable at that time. Permanent monitoring of the linked pages without concrete evidence of a legal violation is not reasonable. Upon becoming aware of legal violations, we will remove such links immediately.

Copyright

The content and works created by the website operators on these pages are subject to German copyright law. Reproduction, editing, distribution, and any kind of use outside the limits of copyright law require the written consent of the respective author or creator. Downloads and copies of this site are permitted only for private, non-commercial use. Insofar as the content on this site was not created by the operator, the copyrights of third parties are respected. In particular, third-party content is identified as such. Should you nevertheless become aware of a copyright infringement, we kindly ask you to notify us. Upon becoming aware of any legal violations, we will remove such content immediately.

Liability for Content

All content on this website has been created with the utmost care. However, we cannot guarantee the accuracy, completeness, or timeliness of the content. As a service provider, we are responsible for our own content on these pages under general laws, but we are not obliged to monitor transmitted or stored third-party information or to investigate circumstances indicating unlawful activity (§ 16 ECG). Obligations to remove or block the use of information remain unaffected. Liability in this respect is, however, only possible from the time we become aware of a specific legal violation.

Liability for Links

This website contains links to external third-party websites, the content of which we have no influence over. Therefore, we cannot assume any responsibility for this external content. At the time of linking, no unlawful content was identifiable. Permanent monitoring of the content of linked pages is, however, not reasonable without concrete evidence of a legal violation. Upon becoming aware of legal violations, we will remove such links immediately.

Privacy Policy

Status: July 6, 2025

Table of Contents

• Controller

• Overview of Processing

• Relevant Legal Bases

• Security Measures

• Transmission of Personal Data

• International Data Transfers

• General Information on Data Storage and Deletion

• Rights of Data Subjects

• Provision of the Online Offer and Web Hosting

• Use of Cookies

• Contact and Inquiry Management

• Web Analytics, Monitoring and Optimization

• Social Media Presence

• Plug-ins and Embedded Functions and Content

Controller

Roland Schwarz
Apartment House
Ober-Alpendorf 23
5600 St. Johann/Pg.

Authorized representative: Roland Schwarz

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Telephone: +43 6412/ 21 2 62

Overview of Processing

The following overview summarizes the types of data processed and the purposes of processing, and refers to the categories of data subjects.

Types of Data Processed

• Inventory data

• Location data

• Contact data

• Content data

• Usage data

• Meta, communication and procedural data

• Log data

Categories of Data Subjects

• Communication partners

• Users

Purposes of Processing

• Communication

• Security measures

• Reach measurement

• Organizational and administrative procedures

• Feedback

• Profiles with user-related information

• Provision of our online offer and user-friendliness

• Information technology infrastructure

• Public relations

Relevant Legal Bases

Legal bases under the GDPR: The following provides an overview of the legal bases of the GDPR on which we process personal data. Please note that in addition to the GDPR, national data protection regulations in your or our country of residence may apply. If more specific legal bases are relevant in individual cases, we will inform you in the privacy notice.

• Consent (Art. 6 (1) (a) GDPR): The data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes.

• Performance of a contract and pre-contractual inquiries (Art. 6 (1) (b) GDPR): Processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps prior to entering into a contract at the request of the data subject.

• Legitimate interests (Art. 6 (1) (f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

National data protection law in Austria: In addition to the GDPR, Austrian law applies, in particular the Data Protection Act (DSG). This contains specific provisions on the right of access, correction or deletion, on processing of special categories of data, processing for other purposes, transmission and automated decision-making.

Reference to the applicability of the GDPR and the Swiss DPA: These privacy notices also serve to provide information under the Swiss Data Protection Act (DSG). For clarity, the terminology of the GDPR is used. The legal meaning of the terms under Swiss law remains unaffected.

Security Measures

We take appropriate technical and organizational measures in accordance with the law, considering the state of the art, implementation costs, and the nature, scope, context and purposes of processing, as well as the likelihood and severity of risk, to ensure a level of security appropriate to the risk.

These include safeguarding confidentiality, integrity and availability of data, access controls, separation of data, deletion routines, and privacy by design/default measures.

Transmission of Personal Data

In the course of processing, data may be transferred to other entities, companies, legally independent organizational units or persons. Recipients include IT service providers and providers of content embedded in our website. Contracts and agreements are concluded with such recipients to ensure data protection.

International Data Transfers

Transfers to third countries (outside EU/EEA) are carried out in compliance with legal requirements.

Transfers to the USA: We primarily rely on the EU–US Data Privacy Framework (DPF), recognized by the EU Commission as of 10 July 2023. Additionally, we use Standard Contractual Clauses (SCCs) to ensure data protection.

If the DPF ceases to apply, SCCs provide fallback protection.

For other third countries, SCCs, explicit consent or statutory obligations apply. More details: EU Commission – International Data Protection.

General Information on Data Storage and Deletion

We delete personal data as soon as consent is withdrawn or no legal basis exists. Exceptions include statutory retention periods or overriding interests (e.g., legal defense).

Retention periods (Austria):

• 10 years: Accounting documents, invoices, balance sheets, etc. (§132 BAO, §§190–212 UGB)

• 6 years: Business letters and other relevant records (§132 BAO, §§190–212 UGB)

• 3 years: Warranty and compensation claims, general limitation period (§§1478, 1480 ABGB)

Rights of Data Subjects (GDPR, Arts. 15–21)

• Right to object (including profiling and direct marketing)

• Right to withdraw consent at any time

• Right of access to processed data

• Right to rectification of inaccurate data

• Right to erasure or restriction of processing

• Right to data portability

• Right to lodge a complaint with a supervisory authority

Provision of the Online Offer and Web Hosting

We process user data to provide online services. This includes IP addresses, logfiles, and metadata.
Legal basis: Legitimate interests (Art. 6 (1) (f) GDPR).
Retention: Logfiles stored for up to 30 days, unless needed longer for evidence.

Use of Cookies

Cookies store or access information on user devices. We use them only with consent unless strictly necessary.

• Session cookies: deleted when browser is closed

• Persistent cookies: remain up to 2 years

Legal bases: Consent (Art. 6 (1) (a) GDPR), Legitimate interests (Art. 6 (1) (f) GDPR).

A consent management system is used to record and manage cookie preferences.

Contact and Inquiry Management

When contacting us, personal data is processed to respond.
Legal bases: Contract performance (Art. 6 (1) (b) GDPR), Legitimate interests (Art. 6 (1) (f) GDPR).

Web Analytics, Monitoring and Optimization

We use tools such as Google Analytics for reach measurement.

• Pseudonymized profiles are created.

• IP addresses are anonymized (IP masking).

• Cookies may be stored up to 2 years.

Legal bases: Consent (Art. 6 (1) (a) GDPR), Legitimate interests (Art. 6 (1) (f) GDPR).

Social Media Presence

We maintain presences on Instagram and Facebook. Data may be processed outside the EU. User profiles may be created for advertising.

Legal basis: Legitimate interests (Art. 6 (1) (f) GDPR).

• Instagram: Meta Platforms Ireland Ltd., Privacy Policy: Instagram Privacy

• Facebook (Fanpage): Joint controller with Meta Platforms Ireland Ltd. Pages Insights Agreement applies. Privacy Policy: Facebook Privacy

Plug-ins and Embedded Content

Third-party content such as Google Maps, Google Fonts, or videos may be embedded. This requires processing of the user’s IP address.

• Google Fonts: Provided via Google servers; no IP logging. Privacy Policy: Google Privacy.

• Google Maps: Provides map content. Privacy Policy: Google Privacy.

Created with the free Privacy Policy Generator by Dr. Thomas Schwenke.