Privacy policy

As of October 2026. This is a translation for your convenience; the German version is legally binding.

Protecting your personal data is important to us. We process your data exclusively on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), the Austrian Telecommunications Act 2021 (TKG 2021) and the Austrian Registration Act (MeldeG).

1. Controller

Steinershausen.OG, Mandorfer Straße 23, 4541 Adlwang, Austria. Phone: +43 660 2193253, email: office@steinershausen.com. Partners: Manuel Steiner, Romana Blümel.

2. Visiting the website

Our website is operated and hosted via the booking and website system of Smoobu GmbH, Pappelallee 78/79, 10437 Berlin, Germany. When you visit it, technical data is processed automatically: IP address, date and time, page visited, referring page, browser and operating system. We need this data to provide the website securely and without errors. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Smoobu processes the data as a processor under Art. 28 GDPR.

3. Cookies

We use technically necessary cookies so that the website and booking work (§ 165(3) TKG 2021, Art. 6(1)(f) GDPR). We currently do not use cookies for statistics or marketing. Should we use such services in the future, we will ask for your consent beforehand via a cookie banner (§ 165(3) TKG 2021, Art. 6(1)(a) GDPR).

4. Contact form and email

If you contact us via the form or by email, we process your name, email address, phone number and message in order to answer your enquiry. The legal basis is the initiation of a contract (Art. 6(1)(b) GDPR) or our legitimate interest in replying (Art. 6(1)(f) GDPR). Enquiries without a booking are deleted after 6 months.

5. Booking and stay

For bookings we process your name, address, email, phone number, travel dates, number and names of fellow travellers and payment data, in order to handle the reservation, payment and your stay. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR). We manage bookings with Smoobu software (processor). If you book via a portal such as Booking.com or Airbnb, we receive your data from that portal.

6. Registration obligation

As an accommodation provider we are required by the Austrian Registration Act to record guests in a guest register: name, date of birth, sex, nationality, home address, arrival and departure dates and, for foreign guests, type and number of travel document. The data is transmitted to the municipality of the accommodation (Adlwang or Wolfern) and the responsible tourism association, also for tourist tax purposes. The legal basis is a legal obligation (Art. 6(1)(c) GDPR). For electronic registration we use the registration system of a service provider acting as processor.

7. Payment

Bank transfers are processed by our bank. Payments made via a booking portal are processed by that portal.

8. Guest Wi-Fi

When you use our Wi-Fi, technical data of your device (e.g. IP and MAC address, connection times) is processed to provide access and ensure network security (Art. 6(1)(f) GDPR).

To display the website, a code library is also loaded via the content delivery network “cdnjs” of Cloudflare, Inc. (USA). In the process, your IP address is transmitted to Cloudflare, including to the USA. The transfer is based on an adequacy decision of the European Commission or EU standard contractual clauses; the legal basis is our legitimate interest in a fast and secure website (Art. 6(1)(f) GDPR).

9. Map service

Our website displays a map so you can see where our accommodation is located. The map is provided by Mapbox Inc. (USA) based on OpenStreetMap data. When the map loads, your IP address is transmitted to Mapbox, including to the USA. The transfer is based on an adequacy decision of the European Commission or EU standard contractual clauses. We load the map on the basis of our legitimate interest in making our accommodation easy to find (Art. 6(1)(f) GDPR).

10. Recipients and transfers to third countries

Your data is only shared where necessary with: Smoobu GmbH (website, booking system), the municipality and tourism association (registration, tourist tax), banks and payment providers, booking portals you booked through, and our tax advisor and the tax office. Some technical service providers of our processors may process data outside the EU, e.g. in the USA. This only takes place on the basis of an adequacy decision (e.g. EU-US Data Privacy Framework) or EU standard contractual clauses.

11. Retention

• Guest register: 7 years under the Registration Act
• Booking and invoice data: 7 years (§ 132 Austrian Federal Fiscal Code)
• Enquiries without booking: 6 months

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw any consent at any time (Art. 7(3)). Please write to office@steinershausen.com.

If you believe that we are not processing your data lawfully, you can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, phone +43 1 52 152-0, email dsb@dsb.gv.at, www.dsb.gv.at.