Data Protection & Privacy Policy - Apartments Scheffau

Apartments Scheffau, Oberau 28, 6351 Scheffau, Tirol, Austria

For the purposes of this Privacy Policy Apartments Scheffau refers to Apartments Scheffau, Apartments Earp, Crossley Earp Ferienwohnngen.

Master data:
First and last name, full address, all contact information (eg e-mail address, phone number), information about the nature and content of our contractual relationship. 

Other personal information:
which you or third parties give us with your consent or are otherwise necessary to the contract (for example, for issuing a guest card) or to meet legal obligations:
Date of birth or age, gender, occupation, ID card or passport data, Bank card details, other members of your group or more information about yourself which you provide to us.

Data Processing:
The protection of your data is important to us and we make sure that our data processing is in line with European Union legislation. 

Data Protection:
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
If you use our website, various personal data will be collected. Personal information is information that personally identifies you. This Privacy Policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that the data transmission in the Internet (eg in the communication by E-Mail) can exhibit security gaps. A complete protection of the data from access by third parties is not possible.


The following notes provide an overview of what happens to your personal information when you visit our website. Personal data is all data that personally identifies you. Detailed information on the subject of data protection can be found in our privacy policy listed under this text.


Who is responsible for the data collection on this website?
The data processing on this website is carried out by the website operator. Its contact details can be found in the imprint of this website.

How do we collect your data?
Your data will be collected on the one hand, from that which you tell us. For example, this may be data that you enter in a contact form.  Other data is collected automatically when visiting the website through our IT systems. These are above all technical data (eg Internet browser, operating system or time of the page request). The collection of this data is automatic as soon as you enter our website.

What do we use your data for?
Part of the data is collected to ensure a flawless provision of the website. Other data can be used to analyse your user behaviour.

What rights do you have regarding your data?
At any time, you have the right to obtain free information about the origin, recipient and purpose of your stored personal data. You also have a right to request the correction, blocking or deletion of this data. For this purpose and for further questions about data protection, you can contact us at any time at the address given in the imprint. Furthermore, you have a right of appeal to the competent supervisory authority

Registration data

Compulsory registration
You are obliged under the Austrian Reporting Act in § 5 and § 10 to provide us with registration data. This concerns the following:
Name, date of birth, gender, nationality, country of origin, address and postal code and - for foreign guests - the type, number and issuing authority of a travel document and the date of arrival and departure.

Guest directory
We will keep this data in a guest directory based on the legal obligation imposed on us in accordance with § 19 of the Reporting Act Implementation Orders and store it for a period of seven years, unless otherwise processed for other purposes stated in this privacy policy. 

The guest invoices register is kept electronically by us. This data is stored locally. A transfer to a third country does not take place.

Disclosure of data
The data regarding "arrival" and "departure" are reported in accordance with § 6 Tourism Statistics Regulation to the municipality in which our accommodation facility is located. The respective tourist association TVB (Wilder Kaiser) to which we belong and/or the municipality compiles data on the number of total overnight stays and persons obliged to pay the residence tax. This is done on the basis of § 9 Tyrolean residence tax-law.

Legal basis of processing
The processes according to the above items 1.1 to 1.3 are based on Art. 6 para. 1 lit. c DSGVO (Fulfilment of legal obligation).

Additional data transmission to TVB/Gemeinde
In addition, postal code and year of birth (in pseudonymised or anonymised form) are used for statistical purposes for the compilation and evaluation of and age statistics by the tourism association. This transfer is based on Art. 6 (1) lit e (task in the public interest) and lit f (predominant legitimate interests) GDPR. You may appeal this at any time for reasons arising from your particular situation (Article 21 (1) GDPR).

Guest card

You have the opportunity to use a guest card. The guest card grants you benefits and/or benefits at various companies in the region (eg discounted admission). The guest card is valid for the period of your stay with us.

Issue of the guest card
The guest card will be issued by the accommodation provider at your request. Depending on the guest card system used by the TVB and/or the accommodation provider, it will either be in the form of:

  • an electronically generated guest card,
  • a manually created guest card or
  • the punch of the registration form

Processed personal data
For both the electronically generated and the manually created guest card, the following personal data is processed from the registration data (see point 1 above):
First name, last name, date of birth and length of stay (arrival/departure), country of origin, postcode.

If the guest card is issued in the form of the "registration form", this contains the content according to § 5 iVm § 9 Reporting Act (see above point "Reporting Data" 1.1). In this case, no electronic processing for purposes of the guest card.

When using the guest card, the following personal data is also processed: data on the usage cycle of the respective card, use of services, bookings, transaction logging, billing data, reference to the registration data and the accommodation provider.

The data is required to determine identity detection, the validity of the guest card by the user and to enable the billing of reductions between service providers, the TVB and possibly the accommodation facilities.

Legal basis of processing
The processing of the data for purposes of the guest card is carried out either on the basis of your consent (Art. 6 para 1 lit a DSGVO) or, if the guest card is part of the provision of services within the scope of the accommodation contract, for the purpose of fulfilling the contract (Art. 6 para 1 lit b DSGVO).  You can request removal of your consent at any time by emailing the accommodation provider (

Operation of the guest card system
The guest card system is operated by the local tourist board ("TVB"). Also involved are local tourist accommodation and local businesses ("service providers").  The data, which is processed for the guest card, is deleted after forty-eight months.

Recipient of the data
The data processed for the purposes of the guest card is provided to the local TVB for billing purposes to the service providers and/accommodation establishments.  The individual service providers, who grant reduced benefits on the basis of the guest card, will also receive the data as far as they use these guest card services.  You must show the respective guest card on which the data is displayed to the service provider to claim benefits and thereby identify yourself. The service provider then checks, usually by reading the barcode on the guest card and by transmitting the barcode data to our IT processor if it is (still) valid. Personal data is also transmitted to the service provider, especially your identity data (to verify the identity and date of birth).

Other processing of your data

We collect, process and use personal data only insofar as they are necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b DSGVO, which allows the processing of data to fulfil a contract or pre-contractual measures. We collect, process and use personal data on the use of our website (usage data) only insofar as this is necessary in order to enable or charge the user for the use of the service.  The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected. 

We only transfer personal data to third parties if this is necessary within the scope of the contract, for example to the bank responsible for processing the payment.  A further transmission of the data does not take place or only if you have expressly consented to the transmission. A transfer of your data to third parties without explicit consent, such as for advertising purposes, does not occur.

The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which allows the processing of data to fulfil contract or pre-contractual measures.

Your master data and other personal data will be deleted if they are no longer required for the purpose of the storage - generally after seven years - or if the storage becomes inadmissible for legal reasons.

When you visit our website, your surfing behaviour can be statistically evaluated. This happens mainly with cookies and with so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy.

The internet pages partly use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, the acceptance of cookies for certain cases or generally exclude and enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you wish to use (eg shopping cart function) are processed on the basis of Art. 6 para. 1 lit. f DSGVO saved. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. If other cookies (eg cookies for the analysis of your surfing behaviour) are stored, they will be treated separately in this privacy policy.

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • used operating system
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP-Address

A merge of this data with other data sources will not be done.

The basis for data processing is Art. 6 para. 1 lit. f DSGVO, which allows the processing of data for the performance of a contract or pre-contractual measures.

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored in order to process the request and in case of follow-up questions. We will not share this information without your consent.

The processing of the data entered into the contact form is therefore exclusively based on your consent (Art. 6 (1) lit. DSGVO). You can revoke this consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data entered by you in the contact form remain with us until you ask us for deletion, revoke your consent to the storage or the purpose for the data storage is omitted (eg after completion of your request). Mandatory statutory provisions - especially retention periods - remain unaffected.

This website uses functions of the web analytics service Google Analytics. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimize both its website and its advertising.

IP anonymization
We have activated the function IP anonymization on this website. As a result, your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.

Browser Plugin
You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading the browser plug-in available under the following link and install: . 

Opposition to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to this website: disable Google Analytics .

For more information on how to handle user data on Google Analytics, please refer to the Google Privacy Policy: .

Demographics in Google Analytics
This website uses the demographics feature of Google Analytics. As a result, reports can be produced that contain statements on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This data cannot be assigned to a specific person. You can disable this feature at any time through the ad settings in your Google Account, or generally prohibit the collection of your data by Google Analytics as outlined in the section "Opposition to Data Collection".

On our pages plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated. The Facebook plugins can be recognized by the Facebook logo or the "Like-Button" ("Like") on our site. An overview of the Facebook plugins can be found here: .

When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. If you click on the Facebook "Like-Button" while you are logged into your Facebook account, you can link the contents of our pages to your Facebook profile. As a result, Facebook can assign the visit to our pages to your user account. We point out that we as the provider of the pages are not aware of the content of the data transmitted and their use by Facebook. For more information, please refer to the Facebook Privacy Policy at .

If you do not wish Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

This website uses the open source web analytics service Matomo. Matomo uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized before saving.

Matomo cookies remain on your device until you delete them.

Matomo cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the anonymized analysis of user behaviour in order to optimize both its website and its advertising.

The information generated by the cookie about the use of this website will not be disclosed to third parties. You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible.

If you do not agree with the storage and use of your data, you can disable the storage and use here. In this case, an opt-out cookie will be deposited in your browser that prevents Matomo from saving usage data. Deleting your cookies will result in deletion of the Matomo opt-out cookie as well. The opt-out must be reactivated when visiting our site again.

Plugins and Tools

This site uses the mapping service Google Maps via an API. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

To use the features of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored on a Google server in the United States. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an attractive presentation of our online offers and an easy findability of the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

You can exercise the following rights with regard to the processing of your data:
Right of information: You have the right to know from us whether and to what extent we process your data.

Contact / Responsible Body:
Suzanne Earp,
Oberau 28,
6351 Scheffau
Tel: 0043 660 666 4585

Responsible body is the natural or legal person who, alone or together with others, decides on the purposes and means of processing personal data (eg names, e-mail addresses, etc.).

Your rights:
In principle, the rights to information, correction, deletion, restriction, data portability, revocation and objection apply. If you believe that the processing of your data violates data protection law or if your data protection claims have otherwise been violated in a way, you can complain to the supervisory authority. In Austria, this is the Data Protection Authority.

Right to complain:
In your opinion, if the processing of your personal data violates Austrian law or European privacy law please contact us to clarify any questions. Of course, you have the right to contact the Austrian Data Protection Authority or a supervisory authority within the EU to complain.

More detailed information on these rights can be found in the German version of the GDPR at the following link:

Confirmation of identity:
To protect your rights and your privacy we have the right to request proof of identity in cases of doubt. 

Rights claim over fee:
If you demand one of the above we will provide our response to you within 1 month of receipt of your request.  I certain circumstances we are not required to provide the information requested.  Where requests are unfounded or excessive, we may demand a reasonable processing fee or refuse to process the application.

This privacy policy applies from 25 May 2018 and replaces the existing Privacy Policy.