Privacy Policy

1. Controller

S.IN GmbH – Schitterhof CAMPING WEISS, Birkachweg 3, 8724 Spielberg, Austria.
E-mail: info@schitterhof.at · Phone +43 670 50 90 460.

2. What data we process

Booking data: name, address, e-mail, phone, selected category, period, number of persons, options and payment status.
Guest registration data (§ 5 Austrian Registration Act): data of all accompanying persons as well as your digital signature for the legally required guest registration.
Payment data: payment is processed via our payment service provider; we do not store full card details.
Technical data: server logs (IP, time, page accessed) for secure provision.

3. Purposes & legal bases

Performance of contract (booking, payment, confirmation) – Art. 6(1)(b) GDPR.
Statutory reporting obligation (guest registration) – Art. 6(1)(c) GDPR.
Secure operation of the website and fraud prevention – Art. 6(1)(f) GDPR.

4. Processors & recipients

We use carefully selected service providers (processing under Art. 28 GDPR):

Supabase / AWS – database hosting in the EU (Frankfurt region, eu-central-1).
Vercel – website hosting/delivery.
Mollie – payment processing (EU).
Resend – sending of confirmation and service e-mails.
Authorities, where legally required (e.g. registration, tourist tax).

5. Storage period

Booking and invoice data are stored in accordance with tax and company-law retention periods (usually 7 years). Registration data is kept in accordance with the requirements of the Registration Act. Beyond that, we store data only as long as necessary for the stated purposes.

6. Cookies

We use only technically necessary cookies for the booking process and the protected area. No tracking for advertising purposes takes place.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. To exercise these, contact info@schitterhof.at. You also have the right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

Note: This text is a carefully prepared draft and does not constitute legal advice. It will undergo a final data-protection review before going live.