Data Protection
Controller
Parkview Boutique Apartments
CPRE Holding GmbH
Am Heumarkt 3
1030 Vienna, Austria
Phone: +4368184249866
Email: [email protected]
Website: https://www.parkview-residences.com
The above-mentioned company is the controller in the sense of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
Legal Basis for Data Processing
The processing of personal data is based on:
- Art. 6 para. 1 lit. a GDPR (Consent)
- Art. 6 para. 1 lit. b GDPR (Contract fulfillment / pre-contractual measures)
- Art. 6 para. 1 lit. c GDPR (Legal obligation, in particular according to the Austrian Registration Act 1991 and the Federal Tax Code)
- Art. 6 para. 1 lit. f GDPR (Legitimate interest)
- Austrian Data Protection Act (DSG)
Processing of Personal Data
Reservation and Accommodation
When making a room reservation or booking, we process the following data:
- First and last name
- Date of birth
- Nationality
- Residential address
- Contact details (phone, email)
- Payment information
- Stay data (arrival and departure, room category)
- Vehicle license plate (if required)
Purpose:
Fulfillment of the accommodation contract, guest management, billing, fulfillment of legal registration obligations.
Legal Basis:
Art. 6 para. 1 lit. b and c GDPR
Registration Act 1991
Federal Tax Code (BAO)
Registration Data (Registration Obligation in Austria)
According to the Austrian Registration Act 1991, we are required to collect certain data from our guests and keep it for the legally prescribed duration. This data is processed exclusively to fulfill legal obligations.
Website
When visiting our website, the following data is automatically processed:
- IP address
- Date and time of access
- Browser type and version
- Operating system
- Referrer URL
Purpose:
Ensuring secure and stable operation of the website.
Legal Basis:
Art. 6 para. 1 lit. f GDPR (Legitimate interest)
Contact
If you contact us by email or contact form, we store your information to process your inquiry.
Legal Basis:
- Art. 6 para. 1 lit. b GDPR (Pre-contractual measures)
- Art. 6 para. 1 lit. f GDPR
Storage Duration
Personal data is stored only as long as necessary for the respective purposes or as long as legal retention periods exist.
- Tax retention obligation according to BAO: generally 7 years
- Registration data according to Registration Act: according to legal requirements
Data Sharing
Data is only shared when:
- This is necessary for contract fulfillment (e.g. payment service providers, IT service providers),
- A legal obligation exists,
- You have given your consent.
Appropriate agreements exist with all data processors according to Art. 28 GDPR.
Cookies
Our website uses cookies. Technically necessary cookies are required for the operation of the website. Analytics or marketing cookies are only set with your explicit consent.
Your Rights
Under GDPR and Austrian DSG, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restrict processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the competent supervisory authority:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Website: https://www.dsb.gv.at
Data Security
We implement technical and organizational measures to protect your data against loss, manipulation, and unauthorized access.
Social Media Pages
We operate publicly accessible profiles in social networks, particularly on Facebook and Instagram. Both platforms are provided by Meta Platforms, Inc. In connection with our social media presence, there is joint responsibility according to Art. 26 GDPR between us and the respective platform operator. For detailed information on the processing of personal data by Facebook and Instagram, please refer to the respective privacy policies of the platforms. Rights of data subjects can be asserted both against us and directly against the platform operator. According to Facebook, cookies and comparable technologies are used, which also apply in connection with our social media pages. We have no technical influence over the type, scope, and specific functionality of these technologies and cannot prevent their use. The information provided by Facebook is received by us exclusively in aggregated form within the framework of "Facebook Insights". These statistical evaluations do not allow us to draw conclusions about individual persons. It is therefore not possible for us to identify specific users. We also have no influence over how Facebook or Instagram further process the data collected using cookies. According to Facebook's information, cookies are used in particular for the purposes of advertising, recommendations, analysis ("Insights"), and performance measurement. Facebook uses these technologies, among other things, to display relevant products, services, or events to users and to support companies in evaluating their advertising measures. The processing of data via our social media presence is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. This exists in particular in the presentation of our services, public relations, and communication with interested parties, customers, and other users. Please note that despite joint responsibility, we do not have comprehensive influence over the data processing operations of the respective platform. Our scope of action is significantly determined by the requirements and corporate policies of the provider.
Currency of This Data Protection Policy
Last updated: 29.5.2026
We reserve the right to amend this data protection policy as needed.