Privacy policy

This privacy policy informs you about the nature, scope and purpose of the processing of personal data when you visit this website, as well as when you contact us or make booking or reservation enquiries.

Data processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). In the following we inform you about the most important aspects of data processing within the scope of our website.

Data Controller

Hotel Hubertushof – HUBMANN GmbH
nawu apartments & Restaurant

Managing Director: Heimo Hubmann
Kameritsch 1
9620 Hermagor
Austria

Telephone: +43 4285 280
Email: office@nawu-apartments.at

Visiting the website

When you visit this website, technical data is processed automatically, in particular:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL
• Pages accessed

This processing is necessary to provide the website from a technical perspective and to ensure its security and stability. Legal basis: Article 6(1)(f) of the GDPR

Contacting us

If you contact us via the contact form, by email or by telephone, we process the data you provide, in particular:

• Name
• Email address
• Telephone number, if provided
• Content of your message

The data is processed to deal with your enquiry and to communicate with you. Legal basis: Article 6(1)(b) of the GDPR or Article 6(1)(f) of the GDPR

Booking and reservation enquiries

When you make a booking or reservation enquiry, we process the data required to handle and complete the booking. This may include, in particular:

• Name
• Address and contact details
• Duration of stay
• Number and, where applicable, ages of travelling companions
• Preferred accommodation or service
• Booking details
• Any requests or comments provided voluntarily

Data is processed to handle your enquiry and to initiate and fulfil the accommodation or reservation contract. Legal basis: Article 6(1)(b) of the GDPR
Where statutory reporting, recording or retention obligations apply, processing is also carried out on the basis of Article 6(1)(c) of the GDPR.

Cookies

Our website uses cookies to provide technically necessary functions and – subject to your consent – to analyse website usage and optimise marketing activities. In particular, the following types of cookies may be used:

• Technically necessary cookies
• Analytics cookies
• Marketing cookies

Non-essential cookies are only set once you have given your consent. You may withdraw your consent at any time with future effect via the cookie settings.

Legal basis for technically necessary cookies: Article 6(1)(f) of the GDPR
Legal basis for analytics and marketing cookies: Article 6(1)(a) of the GDPR

Google Tag Manager

This website uses Google Tag Manager to manage website tags and integrate additional services.

Analytics and marketing services integrated via Google Tag Manager are only activated in accordance with your selection in the cookie banner.

Google Analytics

This website uses Google Analytics to analyse the use of our website. In particular, information regarding page views, usage behaviour, device information and technical access data may be processed.

Google Analytics is activated only with your consent. Legal basis: Article 6(1)(a) of the GDPR
You may withdraw your consent at any time via the cookie settings.

Meta Pixel

This website may use Meta Pixel to analyse user interactions and to optimise advertising campaigns on Meta’s platforms. The service is activated only with your consent. Legal basis: Article 6(1)(a) of the GDPR
You may withdraw your consent at any time via the cookie settings.

When using Google and Meta services, personal data may be processed outside the European Economic Area, in particular in the USA. Where necessary, such data transfers are carried out on the basis of the transfer mechanisms provided for under the GDPR.

Hosting

This website is hosted via Cloudways. In particular, IP addresses and server log files are processed to the extent necessary for the secure and stable operation of the website.

Where necessary, a data processing agreement in accordance with Article 28 of the GDPR has been entered into with the service provider. Server location: EU

Retention period

Personal data is stored only for as long as is necessary for the respective processing purpose or where statutory retention obligations apply.

Contact and booking enquiries are generally stored only for as long as is necessary to process them or to fulfil the contractual relationship. Statutory retention and documentation obligations remain unaffected.
Server log files are usually deleted after 14 days.

Disclosure of personal data

Personal data is only disclosed if:

• this is necessary to fulfil a contract,
• there is a legal obligation to do so,
• technical or other data processors act on our behalf,
• or you have consented to the disclosure.

Data processors are contractually bound in accordance with Article 28 of the GDPR.

Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and any other unauthorised processing.

These include, in particular, encrypted data transmission, access restrictions and technical security measures.

Your Rights

In accordance with the GDPR, you have the following rights in particular:

• Access to your personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent (Art. 7 GDPR)

You may withdraw any consent you have given at any time with effect for the future. To exercise your rights, please contact us using the contact details provided above.

Right to lodge a complaint

You have the right to lodge a complaint with the competent data protection supervisory authority:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
https://www.dsb.gv.at

Changes to this Privacy Policy

This Privacy Policy will be updated whenever technical, legal or organisational changes make this necessary.

Last updated: August 2026