OEZWALD Hospitaliy
Privacy Policy
General Information
Protecting your personal data is important to us. We process your personal data exclusively on the basis of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
This Privacy Policy explains what data we collect when you visit this website, for what purposes we process it, on what legal basis, how long it is stored, and what rights you have.
Controller
OEZWALD Hospitality Consulting FlexCo
Doktor-Schober-Straße 61
1130 Vienna
Austria
Contact:
Email: office@oezwald.com
Website: www.oezwald.com
Represented by:
Mustafa Özdemir, Managing Director
Collection and Processing of Personal Data
We process personal data only to the extent necessary to provide a functional website, respond to enquiries, and offer our services.
Personal data may include in particular:
Name
Email address
Telephone number
Company name
IP address
Browser and device information
Date and time of access
Website usage data
Any information you provide voluntarily via contact forms or email
Purposes of Processing
We process your personal data for the following purposes:
to provide and maintain the website
to ensure website security and technical stability
to respond to enquiries submitted via contact form, email, or telephone
to process business communications
to analyse and improve our website and services
to comply with legal obligations
Legal Bases for Processing
We process personal data on the basis of the following legal grounds under Article 6 GDPR:
Art. 6(1)(a) GDPR – consent
Art. 6(1)(b) GDPR – performance of a contract or steps prior to entering into a contract
Art. 6(1)(c) GDPR – compliance with a legal obligation
Art. 6(1)(f) GDPR – legitimate interests
Where processing is based on our legitimate interests, these interests include in particular website security, technical administration, business communication, and the improvement of our online presence and services.
Contacting Us
If you contact us by email, telephone, or contact form, the data you provide will be processed for the purpose of handling your enquiry and any follow-up communication.
The legal basis for this processing is Art. 6(1)(b) GDPR where your request relates to pre-contractual or contractual matters, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.
We store such data only for as long as necessary to process your request and, where applicable, for the duration of statutory retention periods.
Server Log Files
When you visit this website, certain information is automatically collected by the hosting provider in server log files. This may include:
IP address
browser type and version
operating system
referrer URL
hostname of the accessing device
date and time of the server request
This data is processed to ensure the technical operation, stability, and security of the website.
The legal basis is Art. 6(1)(f) GDPR.
Cookies
This website may use cookies and similar technologies. Cookies are small text files stored on your device that help make the website functional and user-friendly.
We distinguish between:
technically necessary cookies
optional cookies for analytics, marketing, or embedded third-party services
Technically necessary cookies are processed on the basis of our legitimate interest under Art. 6(1)(f) GDPR.
Any non-essential cookies are only used on the basis of your consent under Art. 6(1)(a) GDPR, provided through the cookie banner or consent management tool.
You can change or withdraw your cookie consent at any time via [insert cookie settings link or consent tool].
Website Analytics
If web analytics tools are used on this website, personal data may be processed in order to analyse website traffic and improve our online offering.
This may include, for example:
pages visited
duration of visit
interactions on the website
approximate location
technical device information
Such processing will only take place if and to the extent that you have given your consent, where required.
Legal basis:
Art. 6(1)(a) GDPR
Analytics provider:
[Insert provider name, e.g. Google Analytics / Plausible / Matomo]
[Insert provider address]
Further information:
[Insert link to provider privacy policy]
Contact Form
If a contact form is provided on this website, the information entered there will be processed for the purpose of handling your enquiry.
The data entered may include:
name
email address
phone number
company
message content
Legal basis:
Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR
Newsletter
If you subscribe to our newsletter, we process your email address and any other data you voluntarily provide for the purpose of sending the newsletter.
Subscription takes place on the basis of your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect, for example by clicking the unsubscribe link in the newsletter or contacting us directly.
Newsletter provider:
[Insert provider name]
[Insert provider address]
Embedded Content and Third-Party Services
This website may include third-party content or services, such as:
maps
videos
fonts
social media plugins
booking tools
scheduling tools
CRM or marketing integrations
When such services are activated, personal data such as your IP address or browser data may be transmitted to the respective third-party provider.
Where required, such services are only loaded after your consent.
Legal basis:
Art. 6(1)(a) GDPR and/or Art. 6(1)(f) GDPR, depending on the service
Third-party providers used:
[Insert providers actually used on the site]
Recipients of Data
Your personal data may be disclosed to:
IT and hosting providers
website and technical service providers
analytics or consent tool providers
newsletter or CRM providers
legal, tax, or administrative advisors
public authorities where legally required
Data is only shared to the extent necessary and on a valid legal basis.
Data Transfers to Third Countries
If we use service providers located outside the European Economic Area, or if data is transferred to such countries, this will only take place in accordance with the applicable legal requirements.
Where required, appropriate safeguards such as adequacy decisions or Standard Contractual Clauses are used.
Retention Period
We store personal data only for as long as necessary for the respective purpose and as required by statutory retention obligations.
In particular:
enquiry data: for as long as needed to process the enquiry and any follow-up
contract-related data: for the duration of the contractual relationship and statutory retention periods
server log data: for [insert period]
consent data: for as long as necessary to document consent and comply with legal obligations
Your Rights
Under the GDPR, you have the following rights:
right of access
right to rectification
right to erasure
right to restriction of processing
right to data portability
right to object
right to withdraw consent at any time with future effect
If you believe that the processing of your personal data violates data protection law, you also have the right to lodge a complaint with the competent supervisory authority.
Supervisory Authority
In Austria, the competent supervisory authority is:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
Website: https://www.dsb.gv.at/
Data Security
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.
Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy where necessary to reflect legal, technical, or business developments. The version published on this website shall apply.