Kärnten Apartments Book direct
ApartmentsBook direct
← Back to home

Privacy Policy

Last updated: February 2026

1. Data controller

Florian Mori IT Solutions
Owner: Florian Mori
Quellweg 8, 9122 Sankt Kanzian am Klopeiner See, Austria
VAT ID: ATU70000713
Email: info@kaernten.apartments
Phone: +43 676 3939570
Web: kärnten-apartments.at

2. Principles of data processing

The protection of your personal data is especially important to us. We process your data exclusively on the basis of applicable law (GDPR, Austrian DSG, TKG 2021). In this privacy policy we inform you about the most important aspects of data processing.

3. Hosting & server log files

This website is hosted by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). When you visit, the following data is automatically stored in server log files:

  • IP address (anonymised)
  • Date and time of the request
  • Page / file accessed
  • Browser type and version
  • Referrer URL

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — security and stability of the website.
Retention period: 7 days, then automatically deleted.

4. Contact & bookings

If you contact us by email, booking form or telephone, your data will be processed to handle your enquiry:

  • Name, email address, telephone number
  • Booking details (arrival/departure, number of people, apartment choice)
  • Payment information (for bank transfer/PayPal)

Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) or pre-contractual steps.
Retention period: For the duration of the contractual relationship + statutory retention periods (7 years under the Austrian BAO/UGB).

5. Channel Manager (booking management)

To manage bookings, availability and guest data we use our own Channel Manager. The following data is processed:

  • Guest data: name, email, phone, booking period
  • Booking data: apartment, price, status, payment information
  • Communication: email exchange between host and guest

Storage location: Own server in Germany (IONOS, EU).
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
Encryption: Passwords and sensitive data are stored with AES encryption. Transmission is SSL-encrypted (HTTPS).

6. Telegram Bot (@RezeptionsManagerBot)

For hosts we offer a Telegram bot to manage their accommodation. When using it, the following data is processed:

  • Telegram user ID (numeric, no real name)
  • Link with the host account (email address)
  • Chat history of the bot interaction

Legal basis: Consent (Art. 6(1)(a) GDPR) — the link is actively created by the host via /connect.
Withdrawal: at any time via /disconnect — the link is deleted immediately.
Note: Telegram is a service of Telegram FZ-LLC (Dubai, UAE). There is no EU adequacy decision. Use of the bot is voluntary. Guest data is only briefly shown as text and is not stored on Telegram servers.

7. AI-supported assistance

The Channel Manager includes an optional AI assistant that helps hosts with management (e.g. booking queries, price changes).

  • Inputs are sent to an AI service (Anthropic Claude or a local LLM)
  • No personal guest data is passed to external AI services — guest names are pseudonymised
  • Chat history is only stored locally within the session

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — improving administrative efficiency.
Opt-out: The AI assistant can be deactivated at any time.

8. Cookies

This website only uses technically necessary cookies (session management, CSRF protection). No tracking or marketing cookies are used.

You can set your browser to notify you about cookies or to block them.

9. Web analytics

This website uses no external analytics services (no Google Analytics, no Facebook Pixel, etc.). No tracking takes place.

10. External services

ServicePurposeProviderPrivacy
Google FontsFontsGoogle LLC, USALink
IONOS HostingWeb hostingIONOS SE, DELink
Telegram Bot APIHost botTelegram FZ-LLC, UAELink

11. Your rights (Art. 15–21 GDPR)

You have the right to:

  • Access — find out what data we have about you
  • Rectification — have incorrect data corrected
  • Erasure — have data deleted ("right to be forgotten")
  • Restriction — restrict processing
  • Data portability — receive your data in a machine-readable format
  • Objection — object to processing
  • Withdrawal — withdraw consent at any time

Please send requests to: info@kaernten.apartments

12. Supervisory authority

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at

13. Online dispute resolution

In accordance with Art. 14(1) of the ODR Regulation (EU 524/2013):
https://ec.europa.eu/consumers/odr/

We are neither obliged nor willing to take part in a dispute resolution procedure before a consumer arbitration board.