Yes, I consent to the automatic capture and use of my data, in accordance with the linked declaration of consent.
General Information
This privacy policy applies to all persons who use the services of GrazRentals.
We inform you about the type, scope, and purpose of the collection and use of your personal data by our company.
We respect your privacy and strictly comply with the applicable legal provisions for the processing of personal data — in particular, the EU General Data Protection Regulation (EU Regulation No. 679/2016 – GDPR), the Austrian Data Protection Act (DSG), and the Telecommunications Act (TKG 2003).
All personal data is processed exclusively on this basis.
The controller responsible for data processing is GrazRentals, represented by Andreas Leitner (see legal notice / imprint), who also acts as the data protection officer.
Information Obligations (Articles 13 & 14 GDPR)
Your personal data — including but not limited to:
- Basic data (name, address, email address, telephone and fax number, date of birth, customer number), as well as language and vehicle registration number,
- Data from travel documents (passport number, date of birth, issuing authority, expiry date, nationality) and identification documents (ID card, driving licence, etc.),
- Payment data and related information (e.g. EC card, credit card, PayPal, or bank transfer),
- Requested length of stay, contact persons, conditions, special services, health data, and personal preferences you share with us,
- Special categories of personal data (e.g. health data, special requirements, marital or partnership status),
are required for the provision of our services. This also includes recommendations regarding sightseeing, gastronomy, and ticket bookings.
These data are stored and processed for the purposes stated above and — where necessary — shared with third parties with whom we cooperate to provide the most efficient and high-quality service possible.
This may include processors, software providers, or service partners located in third countries (outside the EU).
We do not use profiling or automated decision-making.
Legal Basis for Processing
The legal bases for processing your personal data are:
- Fulfilment of our pre-contractual and contractual obligations towards you,
- Your consent,
- Legal, contractual, or other obligations (e.g. accounting, tax, and reporting requirements),
- § 96 TKG, and
- Our legitimate interests (e.g. improving our customer service, direct marketing, safeguarding legal claims).
The retention period depends on the duration of our business relationship, your consent, and applicable statutory retention and documentation obligations.
In the case of recurring cooperation, we may retain your preferences to provide a consistent and personalized guest experience.
Data from External Sources
We also receive personal data from external booking platforms, including
Airbnb (www.airbnb.com / .at), Booking.com (www.booking.com), Expedia (www.expedia.at), and our channel manager Smoobu (www.smoobu.com).
Our Website
When visiting our website, access data are automatically collected and stored (e.g. pages visited, files accessed, date and time, IP address, browser type, operating system, data volume, and confirmation of successful access).
These data are used for statistical purposes, security monitoring, and improvement of our website. In case of suspected unlawful use, the data may be analysed for evidence purposes.
When you make a booking through our website (“Book Now”), your data is entered directly via our channel manager Smoobu.
Please refer to Smoobu’s privacy policy at:
https://www.smoobu.com/en/privacy-policy/
By entering your data in our contact form, you consent to its storage, processing, and use for the duration of handling your request.
This applies especially to enquiries sent via form, chat, or email.
Your IP address is stored for evidence purposes.
All data are transmitted over encrypted connections (HTTPS).
We take all reasonable technical and organizational measures to protect your data; liability for third-party access exists only in cases of proven negligence.
Legal basis: your consent, pre-contractual and contractual obligations, our legitimate interests, and § 96 TKG.
Newsletter
We do not send newsletters.
Disclosure to Third Parties / Processors
Your personal data may be transferred to processors (e.g. IT or marketing providers) and third parties involved in the provision of your booked services.
All recipients are contractually obliged to comply with the applicable data protection standards.
In cases where data is transferred to third countries without an adequate level of protection, we will inform you in advance and obtain your explicit consent.
Cookies and Tracking Services
We use cookies to make your visit to our website more user-friendly.
Cookies store information in your browser, allowing recognition and analysis of usage patterns.
Cookies remain stored on your device unless you delete them.
Disabling cookies may limit the functionality of our website.
You can manage or delete cookies via your browser settings at any time.
For analytical purposes, we use Google Analytics (see below).
Your cookie preferences are stored in a cookie (“cookiesjsr”).
A virtual tour of some apartments is embedded via 3D Swiss Media using an iFrame.
We also include third-party content (e.g. Google Maps, YouTube, RSS feeds) to make our website more informative.
These providers may receive your IP address for technical reasons.
Please refer to the respective privacy statements of these providers for further details.
We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Your IP address is anonymised within the EU; only in exceptional cases is it transmitted to a Google server in the USA and shortened there.
For more information, please visit:
http://www.google.com/analytics/terms/en.html and
https://www.google.com/intl/en/policies/.
Data Subject Rights / Objection / Contact
You have the right to obtain information, free of charge, about your stored personal data at any time.
You also have the right to rectification, deletion, restriction of processing, data portability, and to object to the processing of your data.
You may object to the use of your data for direct marketing purposes at any time.
You may revoke any consent given at any time; the legality of processing before the revocation remains unaffected.
For revocation or inquiries, please contact us at:
📧 office@grazrentals.com
📞 +43 316 346223
Supervisory authority:
Austrian Data Protection Authority (DSB), Barichgasse 40–42, 1030 Vienna, Austria.
Miscellaneous
We have implemented organizational and technical security measures to protect your personal data and review these measures regularly.
This privacy policy may be updated in line with legal or technical changes.
The current version is always available on our website at
https://www.grazrentals.com/en/privacy-policy.