Privacy policy

Who is responsible

The controller for personal data processed when you browse this website is its operator, MMag. Dr. Kazim Yilmaz Rechtsanwalts GmbH, Volksgartenstraße 3, 1010 Wien, Austria. You can contact us about data protection at office@host-it.at.

The controller for the data of your booking is the operator of the property you book, who concludes the accommodation contract with you and issues your invoice. The property operator is named on the property page and at checkout; where no separate operator is named, it is MMag. Dr. Kazim Yilmaz Rechtsanwalts GmbH.

OkupAI provides and hosts the booking platform behind this website and processes personal data on our behalf as a processor under a data processing agreement.

Data we collect

When you browse the website, our servers process technical data such as your IP address, browser and device type, the pages requested, and the time of the request. This data is kept in server logs to keep the service secure and stable.

When you request a quote or make a booking, we process the details you enter: first and last name, email address, phone number, the property, stay dates and number of guests, the payment method you choose, the booking reference, and any messages you exchange with us.

Card details are entered only on the hosted payment page of Stripe and never reach this website.

Where local law requires guest registration, identity details are collected separately through online check-in before your arrival. That service has its own privacy notice.

Why we process your data

We process booking data to prepare quotes and to conclude and perform the accommodation contract with you (Art. 6(1)(b) GDPR).

We process data to meet legal obligations, in particular guest registration, tax and accounting rules (Art. 6(1)(c) GDPR).

We process technical data on the basis of our legitimate interest in keeping the website secure, preventing fraud, and improving the service (Art. 6(1)(f) GDPR).

We do not use your data for advertising, profiling, or automated decision-making.

Who receives your data

Your data is shared only where necessary to provide the service:

• OkupAI, which operates the booking platform and its hosting and email infrastructure on our behalf.
• Stripe, which processes card payments as an independent controller under its own privacy policy.
• Public authorities, where we are legally required to share data, for example for guest registration or tax purposes.

Transfers outside the EU/EEA

Where a service provider processes data outside the European Economic Area, we rely on appropriate safeguards such as an adequacy decision of the European Commission or the EU standard contractual clauses.

How long we keep your data

Booking and invoicing records are kept for the retention periods required by applicable tax and commercial law. Enquiries and quotes that do not lead to a booking are kept only as long as needed to handle them. Server logs are kept for a short period for security purposes and then deleted.

Cookies and browser storage

This website sets one functional cookie to remember your light or dark theme and uses your browser's local storage to remember saved stays and to keep your place during checkout. It does not use analytics, advertising, or tracking cookies. Details are in our cookie policy.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict its processing, to receive it in a portable format, and to object to processing based on legitimate interests.

To exercise these rights, contact us by email at office@host-it.at. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or where the operator is established.

Security

Data is transmitted over encrypted connections (TLS). Access to booking data is restricted to people who need it to handle your stay, and payments are processed exclusively by a PCI DSS-compliant payment provider.

Changes to this policy

We may update this policy when the service or the law changes. The date at the top of the page shows the current version.