Privacy Policy

Privacy

The following information provides a simple overview of what happens to your personal data when you visit our website.

As a social business, we take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws (GDPR, TKG) as well as this Privacy Policy.

When you use this website, various types of personal data are collected. Personal data is data that can be used to personally identify you. This Privacy Policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator:

Data processing on this website is carried out by the website operator.

MAGDAS Social Business Hotel GmbH

FN 674345i

VAT ID: ATU83103534

Address:
Laufbergergasse 12
1020 Vienna
Email: office@magdashotel.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

How do we collect your data?

Your data is collected, on the one hand, when you provide it to us. This may include, for example, data you enter into a contact form or a booking form. Other data is collected automatically by our IT systems when you visit the website. This primarily consists of technical data (e.g., internet browser, operating system, or time the page was accessed). This data is collected automatically as soon as you access our website.

What rights do you have regarding your data?

You have the right at any time to receive, free of charge, information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction, restriction, or deletion of this data. You can contact us at any time at the address provided regarding this matter or any other questions about data protection. Furthermore, you have the right to file a complaint with the competent supervisory authority (in Austria, the Data Protection Authority, DSB).

Data Protection Officer

We have appointed an external Data Protection Officer who advises us on all matters: Jank Weiler Operenyi || Deloitte Legal, Contact: office@magdas.at

Analytics Tools and Third-Party Tools

When you visit our website, your browsing behavior may be statistically analyzed. This is primarily done using cookies and so-called analytics programs.

Cookies & Your Consent (CCM19)

When you visit our site for the first time, we’ll ask you via a cookie banner if we may store certain cookies (small text files). To ensure we can record your decision in a legally compliant manner, we use the CCM19 tool (TECUP GmbH, Germany). CCM19 only stores whether you selected “Yes” or “No.” You can change your mind at any time and adjust your cookie settings using the small button on our website.

Direct Bookings & External Interfaces

To protect your data as effectively as possible and keep our website’s loading times to a minimum, we only load the booking interfaces of our partners MEWS (room booking), Tablex (restaurant table reservations), and Incert (gift certificates) only after you actively click the respective booking button.

By clicking, you grant us one-time consent to load the provider’s interface and transfer the data necessary for the booking to that partner.

Server-Side Google Tag Manager (sGTM)

We use Google Tag Manager on this website in a server-side deployment (Server-Side Google Tag Manager). Unlike the conventional Tag Manager, data is not transmitted directly from your browser to Google. Instead, we have a dedicated server acting as an intermediary.

Your data (such as the truncated IP address and technical usage data) first passes through this server, which we control. Here, it is filtered and anonymized, and only then forwarded in a completely anonymized form to recipients (such as Google Analytics). This prevents unfiltered personal data or full IP addresses from being transferred to the U.S. or other third countries.

This service is controlled and blocked directly through our consent management tool (CCM19). You can enable or disable cookieless audience measurement there at any time.

Server-Side Web Analytics (Matomo)

We are committed to continuously improving our website. To do so, we use the open-source analytics tool Matomo.

Cookie-Free Basic Tracking: Matomo runs in cookie-free mode by default on our site. No cookies are stored on your device, and no cross-device identifiers are set. Your IP address is immediately anonymized. This basic tracking is active at all times.

Hosting and Delivery: We use Matomo Cloud as our analytics system, operated by InnoCraft Ltd., with hosting located in the European Union (Frankfurt). Data is delivered via our own subdomain (first-party) through TAGGRS’s European server infrastructure. Both providers act as data processors on our behalf; no data is transferred to third countries.

Legal basis: Processing is based on our legitimate interest in measuring statistical reach (Art. 6(1)(f) GDPR, § 165(3) TKG 2021). The IP address is anonymized before being stored, so we cannot link it to you personally.

Opt-out: You can opt out of basic tracking at any time. Click the button below to opt out, which will prevent Matomo from collecting data on your device:

Your opt-out preference is stored in a cookie on your device. If you clear your cookies or switch to a different device or browser, you will need to set your opt-out preference again.

Spam Protection (Captcha.eu)

To protect our contact, reservation, and booking forms from spam and automated bots, we use captcha.eu (captcha.eu GmbH, Austria). Unlike other systems, captcha.eu does not store cookies, does not track you on other websites, and does not send data to the U.S. It uses a purely mathematical algorithm running in the background to verify that you are a real person. This processing is based on our legitimate interest in maintaining a spam-free website.

Bookings, Reservations & Communication

Whether it’s a hotel room, an event venue, or a table at our restaurant—we handle your data with the utmost care.

Room Bookings (MEWS)

When you book a room or an event space through our website, your data is processed via the cloud-based booking system MEWS (Mews Systems B.V., Netherlands). The legal basis for this is the performance of a contract or pre-contractual measures. Data transmission is encrypted throughout the process. We have entered into a data processing agreement (DPA) with MEWS. In exceptional cases where data is processed by MEWS subcontractors in third countries outside the EU, MEWS guarantees compliance with European data protection standards through EU Standard Contractual Clauses. For more information, please see the MEWS Privacy Policy: https://www.mews.com/en/legal/privacy-policy.

Restaurant Table Reservations (Tablex)

Our restaurant is open to hotel guests and locals alike. When you reserve a table with us online, we use the Tablex system. The data you enter will be processed exclusively for the purpose of processing your reservation.

Contact and Seminar Inquiries

If you submit inquiries to us via the contact or seminar request form, we will store your information—including your contact details—for the purpose of processing the inquiry and in case of follow-up questions. We will not share this data without your consent. The processing is carried out to implement pre-contractual measures.

Newsletter & Guest Marketing (Smart Host)

By subscribing to our newsletter or as part of your booking, you consent to your data being processed for the purpose of sending the newsletter and for promotional purposes.

We use the email marketing and CRM software Smart Host (Smart Host GmbH, Germany) for this purpose. Data processing serves the following purposes:

• To facilitate, optimize, and carry out your reservation and your stay at the hotel or restaurant.
• Tailoring your stay to your personal preferences and interests.
• To enable us to continue offering you personalized offers and marketing information related to MAGDAS’s services in the future.

Tracking Notice: Smart Host tracks opening and click behavior. Data tracked includes: time of delivery/opening, duration of opening, links clicked, IP address, and the email client used. This data is processed exclusively within the EU.

Withdrawal: You can withdraw this consent at any time and without providing a reason by clicking the “Unsubscribe” link in every newsletter. You can update your data via the “Update Data” link.

Objection to Promotional Emails

We hereby object to the use of contact information published in compliance with legal disclosure requirements for the purpose of sending unsolicited advertising. The website operator expressly reserves the right to take legal action in the event of the unsolicited transmission of promotional information.