Data privacy
Hosting with HostProfis
Our website is hosted by HostProfis ISP Telekom GmbH (Rennweg 9, 9587 Riegersdorf, Austria). We have concluded a data processing agreement (Art. 28 GDPR) with HostProfis to ensure that your personal data is processed there according to legal requirements. More information on data protection at HostProfis can be found at: https://www.hostprofis.com/web/data-protection
Server Logfiles & IP Anonymization
- Automatic Collection: Each time our website is accessed, information is automatically stored in server log files (e.g., Apache Access Log, Error Log, FTP Access Log, E-Mail Logs). This includes, among other things, the date and time of access, name and URL of the accessed file, referrer URL, browser and system information, and an IP address.
- Retention Period: According to HostProfis, these log files are stored for 31 days retrospectively and then automatically deleted. Authentication log files (e.g., login attempts) are kept for 90 days.
- IP Anonymization: We have enabled the option for IP address anonymization with HostProfis.
Used Systems & Plugins
Use of WordPress
This website is based on the content management system (CMS) WordPress, developed by the WordPress Foundation (660 4th Street, San Francisco, CA 94107, USA).
Cookies: WordPress uses technically necessary cookies to enable logins or store user preferences.
WP Emojis: External resources from wordpress.org may be loaded, during which the IP address can be transmitted to servers in the USA.
Borlabs Cookie
This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents. Borlabs Cookie does not process any personal data. Your consents given upon entering the website are stored in the borlabs-cookie. If you wish to revoke these consents, simply delete the cookie in your browser. When you revisit/reload the website, you will be asked for your cookie consent again.
Web Analytics
Our website uses functions of the web analytics service at HostProfis ISP Telekom GmbH (headquarters Austria). Cookies are used to analyze website usage by users. The generated information is transferred to the provider’s server and stored there. You can prevent this by configuring your browser not to store cookies. Your IP address is recorded but immediately pseudonymized by deleting the last 8 bits. Only an approximate localization is possible. No data is transferred outside the EU.
Data processing is based on the legal provisions of § 96 para. 3 TKG as well as Art 6 para. 1 lit a (consent) and/or f (legitimate interest) GDPR. Our concern under GDPR (legitimate interest) is to improve our offer and web presence. Since user privacy is important to us, user data is pseudonymized.
User data is retained for 1 year.
Google Fonts Privacy Statement
We use Google Fonts from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. The use of Google Fonts occurs without authentication, and no cookies are sent to the Google Fonts API. If you have a Google account, none of your Google account data is transmitted to Google during the use of Google Fonts. Google only records the usage of CSS and the fonts used and stores this data securely. More information can be found at https://developers.google.com/fonts/faq.
Which data Google collects and how it is used can be read at https://www.google.com/intl/de/policies/privacy/
.
Smash Balloon Plugin
We use the Smash Balloon plugin on our website to display social media content, especially from Facebook. The plugin is operated by Smash Balloon LLC.
Data Processing:
- Automatic Collection: When loading social media content, your browser connects to the servers of the respective social media platforms (e.g., Facebook), transmitting your IP address to these platforms.
- External Scripts: The plugin may load external scripts to display social media content correctly. These scripts can capture data such as your IP address.
- Cookies: The plugin itself does not set cookies to store personal data. However, embedded social media content (e.g., Facebook Like buttons) may use cookies to analyze user behavior.
Legal Basis: Consent (Art. 6 para. 1 lit. a GDPR): Embedding social media content occurs only with your explicit consent, which you can give via our cookie banner.
Further Information: Smash Balloon Privacy Policy: https://smashballoon.com/gdpr-and-our-plugins/
Facebook Privacy Policy: https://www.facebook.com/about/privacy/
Google Maps Privacy Statement
We use Google Maps from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. By using the features of this map, data is transmitted to Google. Which data is collected by Google and how it is used can be read at https://www.google.com/intl/de/policies/privacy/.
WPForms – Contact Form
We use the WPForms plugin on our website to manage contact requests. The provider of this plugin is WPForms LLC, 7732 Maywood Crest Dr, West Palm Beach, FL 33412, USA. If you send us a request via the contact form, the data you enter (e.g., name, email address, phone number, message text) will be stored for processing your request and in case of follow-up questions. Processing of this data is based on Art. 6 para. 1 lit. b GDPR (performance of contract or pre-contractual measures) or our legitimate interest in efficient communication with website visitors according to Art. 6 para. 1 lit. f GDPR.
The transmitted data will not be shared without your consent. Unless required by law, your data will be deleted once your request has been fully processed.
Data Transmission and Storage
WPForms usually stores form data locally in the WordPress database on our server. Data is not automatically forwarded to WPForms LLC or third parties unless you have explicitly consented to additional services (e.g., email marketing, CRM integration). Data transmission is encrypted (SSL/TLS).
More information on data processing by WPForms can be found at https://wpforms.com/privacy-policy/
WPML
We use WPML on our website to display content in multiple languages. No personal data is processed except possibly through cookies storing your language choice. These cookies do not contain personal data.
Use is based on our legitimate interest under Art. 6 para. 1 lit. f GDPR. No personal data is shared with third parties. Data transmitted to WPML servers for automatic translation is processed in compliance with GDPR.
You can prevent or revoke the storage of cookies at any time via your browser settings.
Booking System Casablanca
For bookings via Casablanca, we process the data you enter (e.g., name, email, date) exclusively to handle your booking request. Processing is based on Art. 6 para. 1 lit. b GDPR.
Your data will only be shared with third parties to complete the booking via Casablanca. You can request information about your stored data or request its deletion at any time.
Your Rights as a Data Subject
Under GDPR, you have the following rights:
- Access (Art. 15 GDPR) – What data we process about you
- Rectification (Art. 16 GDPR) – Correction of inaccurate data
- Deletion (Art. 17 GDPR) – Right to be forgotten
- Restriction of Processing (Art. 18 GDPR)
- Data Portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdrawal of Consent (Art. 7 para. 3 GDPR)
To exercise these rights, please contact us at
VINOQ Hotelbetriebs GmbH
Laaerstraße 30
2170 Poysdorf
Tel. +43 (0) 670 4099 190
Email mistelbach@vinoq.at
Right to Complain to the Data Protection Authority
If you believe that the processing of your data violates GDPR, you can contact the Austrian Data Protection Authority:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at
Website: https://www.dsb.gv.at
Currency and Changes to this Privacy Policy
This privacy policy is current as of February 2026