Privacy Policy

1. Controller

S.IN GmbH – Schitterhof CAMPING WEISS, Birkachweg 3, 8724 Spielberg, Austria.
E-mail: info@schitterhof.at · Tel. +43 670 50 90 460.

2. Which data we process

Booking data: name, address, e-mail, phone, chosen category, period, number of persons, options and payment status.
Guest registration data (§ 5 Meldegesetz): data of all accompanying persons as well as your digital signature for the legally required guest registration.
Payment data: the payment is handled via our payment service provider; complete card data is not stored by us.
Technical data: server logs (IP, time, page accessed) for secure provision.

3. Purposes & legal bases

Performance of the contract (booking, payment, confirmation) – Art. 6(1)(b) GDPR.
Legal registration obligation (guest registration) – Art. 6(1)(c) GDPR.
Secure operation of the website and fraud prevention – Art. 6(1)(f) GDPR.

4. Processors & recipients

We use carefully selected service providers (data processing pursuant to Art. 28 GDPR):

Supabase / AWS – database hosting in the EU (Frankfurt region, eu-central-1).
Vercel – hosting/delivery of the website.
Mollie – payment processing (EU).
Resend – sending of confirmation and service e-mails.
Authorities, where legally required (e.g. registration matters, local tax).

5. Retention period

Booking and invoice data are stored in accordance with the retention periods under tax and company law (as a rule 7 years). Registration data is retained in accordance with the requirements of the registration law. Beyond this, we store data only for as long as necessary for the stated purposes.

6. Cookies

We use exclusively technically necessary cookies for the booking process and the protected area. No tracking for advertising purposes takes place.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. For this, please contact info@schitterhof.at. You also have the right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

Note: This text is a carefully prepared draft and does not replace legal advice. Before going live, it will undergo a final data protection review.

8. Chat with Resi (digital receptionist)

On our website you can voluntarily chat with "Resi", our digital receptionist. Resi is an AI assistant (disclosure pursuant to Art. 50 of the EU AI Act) — you are not talking to a human unless our team takes over the conversation; team replies are labelled as such in the chat.

Data processed: your chat messages including time and language. Please only enter information that is necessary for your request.

Purpose & legal basis: answering enquiries about your stay and booking and handing over to our team — Art. 6(1)(b) GDPR (pre-contractual enquiry) or Art. 6(1)(f) GDPR (service quality).

Recipients: replies are generated via the Claude API of Anthropic PBC (USA); transfers are based on the EU-U.S. Data Privacy Framework. Anthropic does not use these inputs to train its AI models. Conversations are stored in our database (EU, Frankfurt region) so that our team can take over and assist.

Retention: chat conversations are deleted automatically no later than 12 months after the last message — earlier at any time on request (an e-mail to info@schitterhof.at is sufficient).

WhatsApp chat with Resi

You can also reach Resi via WhatsApp. This is voluntary — the chat on this website, email and phone are open to you for the same request.

Data processed: your mobile number, the profile name stored in WhatsApp, the content of your messages, plus time and language. Please do not send payment, ID or health data via WhatsApp.

Purpose & legal basis: answering your enquiry and handing it to our team — Art. 6(1)(b) GDPR (pre-contractual enquiry) and Art. 6(1)(f) GDPR (quality of service). You start the communication yourself by writing to us.

Recipients: delivery runs through WhatsApp Ireland Limited / Meta Platforms Ireland Limited; data may also be transferred to the USA (EU-U.S. Data Privacy Framework). Meta also receives metadata such as phone numbers and timestamps. We have no influence over that processing; WhatsApp's own terms apply in addition. Replies are generated via the Claude API of Anthropic PBC (USA); we store the conversations in our database in the EU.

AI disclosure & retention: on WhatsApp, too, Resi answers first — an AI assistant (Art. 50 of the EU AI Act); we say so in the chat on first contact. If our team takes over, we tell you. Conversations are deleted no later than 12 months after the last message, earlier on request (email info@schitterhof.at).

9. Language version

This privacy policy is provided in further languages as a pure service translation. Only the German version is authoritative; in the event of discrepancies, the German text applies.