Privacy policy.

1. General Information

At Glassy Lodging GmbH, we respect your privacy and are committed to protecting your personal data.
This Privacy and Cookie Policy explains how we collect, process, and safeguard your data when you visit our website, make a booking, or communicate with us.

We comply with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Telecommunications Act (TKG 2021).

2. Controller

Glassy Lodging GmbH
Hauptstraße, 2114 Großrußbach, Austria
Email: office@glassylodging.com

Responsible for data protection: Data Protection Officer (DPO)
Email: office@glassylodging.com

3. Purposes and Legal Bases of Data Processing

We only process personal data when necessary and in accordance with the following legal bases:

PurposeLegal Basis (Art. 6 GDPR)Managing and processing accommodation bookingsPerformance of a contract (Art. 6(1)(b))Responding to guest inquiries and communicationLegitimate interest / pre-contractual steps (Art. 6(1)(f)/(b))Sending newsletters or marketing messagesConsent (Art. 6(1)(a))Maintaining guest history and loyalty programsLegitimate interest / contract (Art. 6(1)(f)/(b))Website analytics, performance, and securityLegitimate interest (Art. 6(1)(f))Compliance with legal obligationsLegal obligation (Art. 6(1)(c))

We do not engage in automated decision-making or profiling beyond anonymized analytics.

4. Data We Collect

We may collect and process the following categories of data:

  • Identification and contact data (name, address, email, phone)

  • Booking and payment data (arrival/departure, preferences, payment provider details)

  • Communication data (emails, messages, feedback)

  • Technical and usage data (IP address, browser type, access time, device info, cookies)

  • Marketing consent and analytics data (newsletter sign-ups, social media interaction)

5. Recipients of Data

We share data only when necessary and under strict data processing agreements (Art. 28 GDPR) with:

  • Technical and booking partners: Lodgify (booking engine), Stripe (payment provider)

  • Hosting and IT services: Squarespace (website hosting)

  • Analytics services: Google Analytics (anonymized IP tracking)

  • Marketing and communication tools: Mailchimp or equivalent

  • Public authorities: Only when legally required

All processors are GDPR-compliant and located within the EU or protected under EU Standard Contractual Clauses (SCCs).

6. Data Transfers Outside the EU

Some partners (e.g., Google, Meta) may process data in the United States.
These transfers are secured through Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Retention Periods

Your data will be stored only as long as necessary:

  • Booking and billing data: 7 years (under Austrian accounting law)

  • Guest inquiries and correspondence: 12 months

  • Marketing and consent data: until withdrawal of consent

  • Technical logs: typically 14 days

8. Cookies and Tracking Technologies

a) What Are Cookies?

Cookies are small text files stored on your device when you visit our site. They help us provide essential features, measure performance, and personalize your experience.

b) Types of Cookies We Use

CategoryPurposeRetentionEssential cookiesEnable website functionality (booking engine, security)Session durationAnalytics cookiesMeasure usage and improve performance (Google Analytics)Up to 24 monthsMarketing cookiesPersonalize ads and track engagementUp to 6 monthsPreference cookiesStore language or cookie consent settings12 months

c) Cookie Consent

When visiting our site for the first time, you will see a cookie banner allowing you to:

  • Accept all cookies

  • Reject non-essential cookies

  • Customize preferences

Your consent is recorded and can be withdrawn anytime via the “Cookie Settings” link or by emailing office@glassylodging.com.

d) Google Analytics

We use Google Analytics 4 by Google Ireland Ltd. to analyze website usage.
IP addresses are anonymized. Data is processed based on your consent (Art. 6(1)(a) GDPR).
You can revoke consent anytime or install the Google Analytics Opt-Out Browser Add-on.

9. Social Media

We maintain profiles on Instagram and Facebook to communicate with guests and share updates.
When interacting with us on these platforms, the privacy policies of the respective providers apply.
We do not control data collection or processing by those platforms.

10. Data Security

We use SSL/TLS encryption, secure servers, and access controls to protect your data from loss or unauthorized access.
Despite these safeguards, no online data transmission can be guaranteed 100% secure.

11. Your Rights under GDPR

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR)

  • Right to withdraw consent (Art. 7(3) GDPR)

To exercise your rights, contact office@glassylodging.com.
You may also file a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) – www.dsb.gv.at.

12. Children’s Privacy

Our services are not directed to persons under 18 years old. We do not knowingly collect data from minors.
If we learn that a minor’s information has been provided, it will be deleted immediately.

13. External Links

Our website may contain links to external sites (e.g., activity partners, tourism boards).
We are not responsible for their content or data protection practices. Please review their privacy policies before submitting personal data.

14. Changes to This Policy

We may update this Privacy and Cookie Policy from time to time to reflect new legal or business developments.
The current version is always available at:
www.glassylodging.com/privacy
Last updated: October 2025

15. Contact

Glassy Lodging GmbH
Hauptstraße, 2114 Großrußbach, Austria
Email: office@glassylodging.com
Website: www.glassylodging.com