dataprotectoin

Privacy Policy of Doverys Hospitality GmbH and its Subsidiaries

1. Data Controller

The data controller responsible for data processing is
Doverys Hospitality GmbH and all affiliated companies (hereinafter referred to as “we”), based in Vienna.

2. Processing of Personal Data

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.

Categories of Data Processed:

  • Personal master data (name, address, contact details, etc.)
  • Identification document data
  • Booking and stay-related data
  • Payment data
  • Preferences, requests, and feedback
  • Communication data
  • Image and video recordings (e.g. CCTV, marketing material)

3. Purposes of Data Processing

Contract Performance

  • Reservation and booking of accommodations
  • Customer service and communication
  • Billing and payment processing

Operations and Services

  • Organization of additional services (transport, events, etc.)
  • Operation of facilities (e.g. wellness, fitness)

Marketing and Customer Retention

  • Sending offers, promotions, and newsletters
  • Personalization of offers
  • Analysis of user behavior

Data Sharing for Commercial Purposes

Subject to your explicit consent, your data may be shared with:

  • affiliated companies
  • cooperation partners (e.g. tourism, mobility, service providers)
  • selected third parties for marketing and sales purposes

Such sharing may also include paid data transfers (sale of data), but only on the basis of your explicit consent.

4. Legal Basis

Data processing is based on:

  • Art. 6(1)(b) GDPR (contract performance)
  • Art. 6(1)(c) GDPR (legal obligations)
  • Art. 6(1)(f) GDPR (legitimate interests)
  • Art. 6(1)(a) GDPR (consent, especially for marketing and data sharing)

5. Data Retention

Your data will be stored:

  • for the duration of the business relationship
  • beyond that according to legal retention obligations
  • up to 3 years thereafter, unless longer retention is required by law or based on consent

6. Cookies and Tracking (e.g. Google Analytics)

This website uses analytics and tracking tools from providers such as Google.

Data (including IP address) may be transferred to servers outside the EU.

Processing takes place only:

  • based on your consent (via cookie banner)
  • in accordance with GDPR

You can disable cookies at any time in your browser settings.

7. Social Media Plugins

Our website uses plugins from social networks such as Facebook.

When visiting our pages, data may be transmitted to these providers, including:

  • IP address
  • usage behavior
  • interactions

Further information can be found in the respective providers’ privacy policies.

8. Data Transfer to Third Countries

Data may be transferred to countries outside the EU if:

  • an adequacy decision exists, or
  • appropriate safeguards (e.g. standard contractual clauses) are in place

9. Your Rights

You have the right to:

  • access
  • rectification
  • erasure
  • restriction of processing
  • data portability
  • objection

You also have the right to withdraw your consent at any time.

10. Withdrawal and Contact

You may withdraw your consent at any time by contacting:
[insert email, e.g. privacy@doverys.com]

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11. Consent Declaration

By providing your consent, you agree that:

  • your data may be used for marketing purposes
  • your data may be shared with partners and third parties
  • such sharing may also occur for commercial purposes (including data sale)

Your consent is voluntary and can be withdrawn at any time.

Recommended Clause

In case of discrepancies between language versions:

In case of discrepancies between the German and English version, the German version shall prevail.