Privacy Policy

Privacy Policy Holiday Homes Eulenhorst & EulenNest


1. Basics

This privacy policy informs all persons who use the services of the Eulenhorst & EulenNest holiday homes about the type, scope, and purpose of the collection and use of their personal data. We, Doris & Franz Ohlenforst, respect your privacy and process your data exclusively in accordance with legal requirements, in particular the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) in its current version, and the Telecommunications Act (TKG 2021). By using our services and granting consent within the meaning of this declaration, you confirm that you are at least 14 years old and are authorized to grant consent, or that you have valid consent from your legal guardian or legal guardian.

Data protection officer: Doris & Franz Ohlenforst Unterhauserweg 3–5, 9871 Seeboden, Austria Email: urlaub@lieblingsfleck.at Website: www.lieblingsfleck.at Phone: 49 16098352015


2. Collection and processing of personal data in accordance with Articles 13 and 14 GDPR

2.1. What data we collect

We collect and process the following personal data necessary to provide our services:

  • Master data: last name, first name, address, email address, telephone number, date of birth, language.
  • Data in travel documents and identity cards: passport number, passport details, identity card number, driving license details, issuing authority, validity period, nationality.
  • Booking and stay data: Requested length of stay, destinations, contact persons, personal preferences that you communicate to us.
  • Health data: Only if it is necessary to provide our services and you expressly provide it to us.

2.2. Purposes of data processing

Your data will be processed for the following purposes:

  • Processing bookings and fulfilling our contractual obligations.
  • Fulfillment of legal obligations (e.g. reporting, accounting, tax and customs law).
  • Improving our customer service, including remembering your preferences for future stays.
  • Direct advertising, provided you have given your consent.
  • Protecting our legitimate interests, e.g., securing evidence in legal disputes or optimizing our offering.

2.3. Legal basis

Your data is processed on the basis of the following legal bases:

  • Art. 6 (1) (b) GDPR: Performance of the contract and pre-contractual measures (e.g. booking processing).
  • Art. 6 (1) (a) GDPR: Your consent (e.g. for direct advertising or social media plug-ins).
  • Art. 6 (1) (c) GDPR: Fulfillment of legal obligations (e.g. reporting obligations).
  • Art. 6 (1) (f) GDPR: Legitimate interests (e.g. improvement of the service, IT security).

2.4. Storage period

Your data will be stored for the duration of our business relationship and in accordance with statutory retention periods (e.g., 7 years under Austrian tax law). We also store data if necessary to assert or defend against legal claims. With your consent, we will store your preferences to optimize our service until you revoke your consent.


3. Data processing via our website

3.1. Access data (log files)

When you visit our website (www.lieblingsfleck.at), access data is automatically collected, e.g.:

  • IP address (anonymized).
  • Date and time of the train call.
  • Page accessed and files viewed.
  • Browser and operating system data.
  • Data volume and message of successful call.

This data is used for statistical purposes, to ensure IT security (e.g., protection against DDoS attacks), and to optimize our offering. It is stored for a maximum of 7 days, unless longer storage is necessary to preserve evidence in the event of illegal activities. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest).

3.2. Contact form, email and chat

If you contact us via a contact form, email, or chat, we will save the data you provide (e.g., name, email address, message) to process your request. Your IP address will be saved for evidentiary purposes. This data will be stored for 6 months unless longer storage is necessary for processing. Data will only be shared with other parties with your consent or to fulfill the contract (e.g., to shipping service providers). The legal basis is Art. 6 (1) (b) GDPR (contractual fulfillment) or Art. 6 (1) (a) GDPR (consent).

3.3. Cookies

Our website uses cookies to improve user experience. Cookies are small text files stored on your device. We use the following types of cookies:

  • Session cookies: Deleted when you close your browser and do not contain any personal data. They are used to recognize you during a visit.
  • Persistent cookies (if applicable): Remain stored on your device until deleted and allow recognition on subsequent visits.

Cookies that are not technically necessary are only set with your express consent (Section 165 of the Telecommunications Act 2021, Article 6 (1) (a) of the GDPR). You can set your browser to block cookies or to be notified when they are set. Deactivation may limit the functionality of the website.

3.4. Google Analytics (if used)

If our website uses Google Analytics, this is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use IP anonymization, so your IP address is shortened within the EU/EEA. Google Analytics uses cookies to analyze the use of our website (e.g., access time, pages viewed). The data is used to compile reports on website activity and to optimize our offering.

Data is transferred to the USA (Google LLC) on the basis of standard contractual clauses in accordance with Art. 46 GDPR. The data is deleted after 14 months. You can deactivate Google Analytics by installing the browser plug-in at https://tools.google.com/dlpage/gaoptout or by refusing your cookie consent. The legal basis is Art. 6 (1) (a) GDPR (consent). Further information can be found in Google's privacy policy.

3.5. Google Ads Conversion Tracking (if used)

If Google Ads Conversion Tracking is used, our website uses cookies to measure the effectiveness of ads. When you click on a Google ad, a cookie (valid for a maximum of 90 days) is set that contains no personal data. This cookie allows us to track the number of users who reach our website via ads.

Data transfer is based on standard contractual clauses (Art. 46 GDPR). You can prevent tracking by deactivating cookies in your browser. The legal basis is Art. 6 (1) (a) GDPR (consent). Further information can be found at https://policies.google.com/privacy.

3.6. Social media plugins (Meta/Facebook, if used)

If our website uses Meta plugins (e.g., "Like" or "Share" buttons), these are operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The plugins are deactivated until you actively activate them by clicking on them. Only then will a connection to Meta's servers be established, and your IP address and information about your website visit can be transmitted. If you are logged in to Meta, this data will be assigned to your account.

Data transfer to the USA is based on standard contractual clauses (Art. 46 GDPR). The legal basis is Art. 6 (1) (a) GDPR (consent). Further information can be found in Meta's privacy policy. You can block plugins using browser settings or add-ons.


4. Webshop (if applicable)

If our website offers an online shop, we collect the following data for contract processing: title, name, address, telephone number, email address, company name, VAT number, order date, order number, payment method, shipping method, product range, and costs. Session cookies may be used to simplify the purchasing process.

Data will only be shared with third parties (e.g., payment service providers, shipping companies, tax advisors) to fulfill the contract or to comply with legal obligations. After a purchase is canceled, the data will be stored for four weeks. Upon conclusion of the contract, the data will be stored for the duration of the contract and in accordance with statutory retention periods (e.g., seven years). The legal basis is Art. 6 (1) (b) GDPR (contract fulfillment).


5. Registration (if applicable)

When you register a user account, we save your email address and a password. When you make purchases, the email address is linked to the purchase data. The data is stored for the duration of the account and deleted after the account is deleted. The legal basis is Art. 6 (1) (b) GDPR (performance of contract).


6. Your rights

As a data subject, you have the following rights:

  • Information: You can request information about your stored data at any time (Art. 15 GDPR).
  • Correction: You can request the correction of incorrect data (Art. 16 GDPR).
  • Deletion: You can request the deletion of your data, provided there are no legal retention obligations (Art. 17 GDPR).
  • Restriction: You can request the restriction of processing (Art. 18 GDPR).
  • Data portability: You can request the transfer of your data in a structured format (Art. 20 GDPR).
  • Objection: You can object to processing based on legitimate interests (Art. 21 GDPR).
  • Revocation: You can revoke your consent at any time without affecting the legality of the processing carried out so far (Art. 7 GDPR).


To exercise your rights, please contact us at: Doris & Franz Ohlenforst Email: urlaub@lieblingsfleck.at Phone: 49 16098352015

If you have any complaints, please contact the Austrian Data Protection Authority: Austrian Data Protection Authority Barichgasse 40–42, 1030 Vienna Telephone: 43 1 52 152-0 Email: dsb@dsb.gv.at Website: www.dsb.gv.at


7. Security measures

We implement technical and organizational measures to protect your data from loss, unauthorized access, or misuse. Data transmissions are encrypted (https). However, we assume no liability for data loss if we have implemented the necessary state-of-the-art measures.

8. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy to legal or technical developments. The current version will be published on our website (www.lieblingsfleck.at) and will be effective upon publication.



Stand: 18. May 2025