Privacy Policy
Datenschutzerklärung

TKB Hotels GmbH takes the protection of your personal data very seriously. We process your data exclusively in accordance with applicable data protection law, in particular the EU General Data Protection Regulation (GDPR / DSGVO) and the Austrian Data Protection Act (DSG 2018).

1. Data Controller

TKB Hotels GmbH
Garnisongasse 4/11, 1090 Wien, Austria
Email: office@hotel-herzoghof.at
Phone: +43 2252 87297

2. Data We Collect and Why

Contact Form & Email Enquiries

When you use our contact form or write to us by email, we collect the information you provide (name, email address, telephone number, message content, and any optional details such as travel dates). This data is used solely to respond to your enquiry and to provide the services you have requested. Legal basis: Art. 6(1)(b) GDPR (contract performance / pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

Booking & Guest Data

When you make a reservation, we collect personal data necessary for the booking (name, contact details, payment information, travel dates, number of guests). This data is required to fulfil the accommodation contract and to comply with legal obligations (e.g. guest registration pursuant to Meldegesetz). Legal basis: Art. 6(1)(b) and Art. 6(1)(c) GDPR.

Website Access Logs

Our web server automatically records technical data when you visit our website (IP address, browser type, operating system, referring URL, date and time of access). This data is used solely for security and statistical purposes and is deleted after 30 days. Legal basis: Art. 6(1)(f) GDPR.

3. Google Maps

Our website uses Google Maps to display our location. Google Maps is provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), a company based in the United States. The map is only loaded after you have given your explicit consent via our cookie notice. When loaded, Google may collect and process data including your IP address and usage behaviour. Data is transferred to the USA; Google participates in the EU–US Data Privacy Framework (DPF). For details, see Google's Privacy Policy at policies.google.com/privacy. Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time (see Section 7 below).

4. Contact Form (Formspree)

Our contact forms are processed by Formspree Inc. (462 1st Ave, New York, NY 10016, USA). When you submit a form, your data (name, email, message, and any other fields completed) is transmitted to Formspree's servers and forwarded to us by email. Formspree participates in the EU–US Data Privacy Framework and processes data solely on our behalf. Legal basis: Art. 6(1)(b) GDPR. For details, see Formspree's Privacy Policy at formspree.io/legal/privacy-policy.

5. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by statutory retention obligations. Booking and invoice data is retained for 7 years pursuant to Austrian tax law (BAO). Contact enquiry data is deleted after 3 years if no contractual relationship has arisen.

6. Data Sharing

We do not sell or rent your personal data to third parties. Data may be shared with:

• Payment service providers (for processing reservations)
• Formspree Inc. (USA) — contact form processing, under DPF safeguards
• Google LLC (USA) — map display upon consent, under DPF safeguards
• IT service providers (hosting, email) under data processing agreements (Art. 28 GDPR)
• Competent authorities if legally required (e.g. guest registration pursuant to Meldegesetz)

7. Your Rights

Under the GDPR, you have the following rights with respect to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure ("right to be forgotten", Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time for consent-based processing (Art. 7(3) GDPR) — withdrawal does not affect the lawfulness of processing prior to withdrawal
• Right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at)

To exercise any of these rights, please contact us at office@hotel-herzoghof.at.

8. Cookies & Consent Management

This website does not use tracking, analytics, or advertising cookies. The only external service requiring consent is Google Maps (see Section 3). A cookie notice is displayed on your first visit. Your choice is saved in your browser's local storage (not a cookie) under the key herzoghof_cookie_consent.

You may withdraw or reset your consent at any time:

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction, in accordance with Art. 32 GDPR.

10. Changes to This Policy

We may update this privacy policy from time to time. The current version is always available at this URL. Last updated: April 2026.