Privacy Policy | Terms & Conditions

Privacy Policy

Last updated: 8 December 2025
The protection of your personal data is very important to us, which is why we would like to provide you with all the information about the processing and storage of your data when you visit our website and our companies.

In order to use all the functions and services of our site, it is necessary to collect your personal data. However, processing and storage is carried out solely in accordance with the legal guidelines and requirements of the General Data Protection Regulation (GDPR), the Data Protection Act (DPA) and other data protection laws.

Responsible Body

Maria Jammernegg
Mitterfeldweg 6
A-8435 Wagna

Email: info@das-wagnach.at
Mobil: +49 176 4249 4824

Further information can be found in the legal notice.

General Terms & Conditions

We follow the 2006 General Terms and Conditions for the Hotel Industry (AGBH 2006) as of 15 November 2006

https://www.wko.at/oe/tourismus-freizeitwirtschaft/hotellerie/agbh-englisch.pdf

Additional and Special Agreements to the General Terms and Conditions (AGBs):

Non-Smoking Accommodation:

“Das Wagnach” is a non-smoking property. By signing the rental agreement, guests agree to observe the general smoking ban throughout the premises.

Noise Regulations:

By signing the rental agreement, guests agree to comply with the Noise Protection

Regulations of the Municipality of Wagna (dated 07.12.2022), which state:

When using musical instruments or audio playback devices, whether indoors or outdoors, the volume must be kept at a level that does not disturb others, particularly between 10:00 PM and 7:00 AM.
When using our terrace, these noise regulations must also be observed.

Full details of the regulations can be found here: Noise Regulations Wagna 2022

Check-in and Check-out Times:

Departing from the General Terms and Conditions for the Hotel Industry 2006 (AGBH 2006, version of 15.11.2006), check-in at “Das Wagnach” is available from 3:00 PM on the day of arrival. Check-out is required by 10:00 AM on the day of departure.

COLLECTION AND PROCESSING OF PERSONAL DATA ON THIS WEBSITE

Note: In order to protect your data as comprehensively as possible from unauthorised access, we take technical and organisational measures and use an encryption method on our website. Your data is transferred via the Internet from your computer to our computer and vice versa using TLS encryption. TLS stands for “Transport Layer Security” and is an encryption protocol for data transmission on the Internet. You can usually recognise “TLS” by the closed padlock symbol in the status bar of your browser and the address beginning with https://.

1. COLLECTION OF ACCESS AND LOG DATA

This website automatically collects and stores server log file information that your browser transmits to us.

This includes:

The user’s IP address
Date and time of access
Type of request
Customer information such as type and version
The user’s operating system (device, device OS version)
Referrer information (i.e. the source of access)

We have concluded a data processing agreement in accordance with Art. 28 GDPR with the provider of this website, Ledl.net GmbH & Co. KG in Straßwalchen, Austria. This is a contract required by data protection law, which ensures that Ledl.net GmbH & Co. KG processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

The data collected is stored for seven days in server log files, which your browser automatically transmits to us in encrypted form. We only store the server log files in the event of attacks on our server infrastructure or other legal violations. This longer storage period is based on our legitimate interest pursuant to Art. 6 (1) lit. f) GDPR and serves solely to preserve evidence.

2. ENQUIRIES VIA CONTACT FORM, E-MAIL AND TELEPHONE

Any personal information that you provide to us on a voluntary basis will, of course, be treated confidentially. We use the personal data you provide exclusively to process and respond to your enquiry. The legal basis for data processing is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. This arises from our interest in responding to enquiries from our customers, business partners and interested parties and in promoting and maintaining customer satisfaction. A further legal basis for natural persons is the initiation or fulfilment of a contract in accordance with Art. 6 (1) (b) GDPR.

All personal data that you send to us with your enquiry will be deleted or anonymised by us no later than 3 months after the final response has been sent to you, unless a contract is concluded. The retention period of 3 months is based on the fact that, in isolated cases, you may contact us again on the same matter after receiving a response and refer to the previous correspondence. Experience has shown that after 3 months, there are no further queries regarding our responses.

Enquiries via WhatsApp
For direct and uncomplicated contact, we offer a chat via WhatsApp Business. Data processing in this context is based on the legal basis of contract fulfilment or contract initiation in accordance with Art. 6 (1) lit. b) GDPR. The chat via WhatsApp is not intended for you to exchange sensitive data such as health data, data on religious affiliation or data on ethical origin.

When using WhatsApp, WhatsApp Ireland Limited is the recipient of your data and the processor in accordance with Art. 28 GDPR. WhatsApp is a product of Meta Companies (formerly Facebook Inc.). Within the framework of the messenger, data is also transferred to third countries outside the European Union for which no adequacy decision exists. WhatsApp LLC, based in Menlo Park, America, has valid certification under the Data Privacy Framework. You can view the certification under the Data Privacy Framework here.

Your data will be stored for the duration of the current contract and then deleted from WhatsApp. If no contract is concluded with you, we will delete the chat no later than 180 days after the final response has been given.

3. EMBEDDING EXTERNAL CONTENT

Google Maps
We embed map services on this website that are not stored on our servers. To ensure that visiting our websites with embedded videos and maps does not automatically lead to third-party content being reloaded, we initially only display locally stored preview images of the maps. This means that the third-party provider does not receive any information about visits to our website.

Only after clicking on the preview image is the third-party content reloaded. This provides the third-party provider with the information that you have accessed our site, as well as the technically necessary usage data. We have no influence on further data processing by the third-party provider.

By clicking on the preview image, you give us your consent to reload the third-party provider’s content. The embedding is based on your consent in accordance with Art. 6 (1) (a) GDPR, provided that you have previously given your consent by clicking on the preview image. An adequacy decision exists for the USA, meaning that data can be transferred without further measures. You can view Google LLC’s certification here.

Video service provider:
Google Ireland Limited/Google LLC (USA) (“Google Maps”)

Withdrawal of consent
When you click on a preview image, the third-party content is immediately reloaded. If you do not want this reloading to occur on other pages, please do not click on the preview images.

Polylang (language selection)
Our website uses the WordPress plugin Polylang, provided by WP SYNTEX, 28, rue Jean Sébastien Bach, 38090 Villefontaine, France. Polylang allows visitors to switch between different language versions of the website.

A functional cookie called pll_language is set for one year. This cookie stores the language selected by the visitor so that the website is automatically displayed in the preferred language the next time they visit. The purpose of this is to support the multilingual display of our website. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in a user-friendly and linguistically appropriate presentation of our content. WP SYNTEX does not process any personal data in this context. The cookie is stored locally in the browser. Further information can be found under Polylang’s privacy policy.

4. CONSENT MANAGEMENT VIA BORLABS

We use the cookie consent technology from Borlabs Cookies to obtain your consent under data protection law to store certain cookies on your device or to use certain technologies and to document this in accordance with data protection regulations. The provider of this technology is Borlabs – Benjamin A. Bornschein (“Borlabs”) based in Germany.
Borlabs uses a technically necessary cookie to store your data protection consent. The following information is stored in the Borlabs cookie:

Cookie duration
Cookie version
Domain and path of the website
Consents
UID (randomly generated ID that, according to Borlabs, cannot be traced back to a specific person)

No data is transferred to Borlabs. Borlabs is used to obtain the legally required consent for the use of cookies. The legal basis for this is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest lies in the legally compliant documentation and verifiability of consents (Art. 6(1)(c) GDPR) in order to fulfil our accountability obligation pursuant to Art. 5(2) GDPR.

5. MAKING BOOKINGS

We use the booking system of the company smoobu GmbH to make and process bookings. We collect the following data on the basis of contract fulfilment in accordance with Art. 6 (1) (b) GDPR: your first and last name, email address, telephone number, registered address including city, postcode and country. You also have the option of leaving us a message in a free text field.

We have concluded a data processing agreement with the provider Smoobu GmbH, Pappelallee 78/79, 10437 Berlin, which complies with the requirements of Art. 28 GDPR. Smoobu GmbH processes your data on our behalf and exclusively in accordance with our instructions.
Use of payment methods

When you make your booking, we offer you various payment methods, including PayPal, SEPA direct debit, credit card (Visa, Mastercard) and advance bank transfer. Please note that when you use these payment methods, your payment details will be processed in accordance with the data protection regulations of the respective payment service providers. We do not have access to your payment details and do not store them.

Special reporting requirements for accommodation providers

As an accommodation provider, we are required to keep a guest register. In order to comply with the Registration Act, you are obliged to provide us with the following information in the event of a stay: name, address, date of birth, ID, nationality and number of fellow travellers.
In order to fulfil our legal obligation, we offer to collect the data on site. The registration authority and the public security authorities must be granted access to the guest register at any time upon request (Section 10 (2) of the Registration Act). The legal basis for data collection and transmission is Art. 6 (2) lit. c) GDPR in conjunction with § 19 Registration Ordinance (including Annex A) and § 10 Registration Act. We are legally obliged to store the data in the guest registers for seven years (Section 10 (2) of the Registration Act), extended by the duration of any proceedings by the tax authorities, as well as Section 19 (5) of the Registration Act Implementation Ordinance.

Rights of data subjects

YOU HAVE THE RIGHT UNDER ART. 15 (1) GDPR TO REQUEST INFORMATION ABOUT THE PERSONAL DATA STORED ABOUT YOU FREE OF CHARGE. FURTHERMORE, IF THE LEGAL REQUIREMENTS ARE MET, YOU HAVE THE RIGHT TO CORRECT (ART. 16 GDPR), DELETE (ART. 17 GDPR) AND RESTRICT THE PROCESSING (ART. 18 GDPR) OF YOUR PERSONAL DATA. IF YOU HAVE PROVIDED THE PROCESSED DATA YOURSELF, YOU HAVE THE RIGHT TO DATA TRANSFER IN ACCORDANCE WITH ART. 20 GDPR. IF DATA PROCESSING IS BASED ON ART. 6(1)(e) OR (f) GDPR, YOU HAVE THE RIGHT TO OBJECT UNDER ART. 21 GDPR. IF YOU OBJECT TO DATA PROCESSING, IT WILL NOT TAKE PLACE IN THE FUTURE, UNLESS THE CONTROLLER CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE FURTHER PROCESSING WHICH OVERRIDE THE INTERESTS OF THE DATA SUBJECT IN OBJECTING. IF THE DATA PROCESSING IS BASED ON CONSENT PURSUANT TO ART. 6(1)(A), ART. 9(2)(A) OR ART. 49(1)(A) GDPR, YOU MAY WITHDRAW YOUR CONSENT AT ANY TIME WITH FUTURE EFFECT WITHOUT AFFECTING THE LAWFULNESS OF THE PROCESSING CARRIED OUT UNTIL THEN. YOU ALSO HAVE THE RIGHT TO LODGE A COMPLAINT WITH A DATA PROTECTION SUPERVISORY AUTHORITY. THE COMPLAINT CAN BE LODGED IN PARTICULAR WITH A SUPERVISORY AUTHORITY IN THE EU MEMBER STATE OF YOUR PLACE OF RESIDENCE, WORKPLACE OR THE PLACE OF THE ALLEGED INFRINGEMENT.

Contact details of the competent data protection authority

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Wien

No automated decision-making

We do not use automated decision-making or profiling.

Provision

Unless otherwise stated in the previous sections, the provision of personal data is neither required by law nor contractually required, nor is it necessary for the conclusion of a contract. Failure to provide your personal data may mean that we are unable to respond to your enquiries, for example.

This privacy policy was created in collaboration with the consulting firm SCALELINE. The legal texts are subject to copyright.