Privacy policy

I. General information

We, STS Tourismus Betriebe GmbH (Anton-Schneider-Straße 28, 6900 Bregenz, Austria), take the protection of your personal data seriously. This privacy policy explains how we process your data in connection with our services and our website www.supremetourismus.com process your data.

Responsible person
STS Tourismus Betriebe GmbH
Anton-Schneider-Straße 28, 6900 Bregenz
Company register number: FN553775a
UID number: ATU 768 07 207
E-mail: office@supremetourismus.com

Legal bases of the processing
We process your data on the basis of the following legal bases of the GDPR:

  • Art. 6 para. 1 lit. a (consent)
  • Art. 6 para. 1 lit. b (fulfillment of contract and pre-contractual measures)
  • Art. 6 para. 1 lit. c (fulfillment of legal obligations)
  • Art. 6 para. 1 lit. f (legitimate interest)

 

Storage period and deletion
We only store your personal data for as long as is necessary for the respective purposes. Statutory retention periods remain unaffected. As soon as these periods expire, your data will be deleted within three months. Data for marketing purposes will be stored until you withdraw your consent.

Recipients of personal data

  • Internal departments that require personal data to fulfill their tasks
  • External service providers (e.g. IT service providers, banks, tax consultants, authorities, marketing agencies)
  • Disclosure to third-party providers only takes place if contractually necessary or with consent
  • We do not pass on any personal data to unauthorized third parties. If a transfer outside the EU/EEA is necessary, we ensure that an adequate level of data protection is guaranteed.

 

Data processing in third countries
If personal data is transferred to third countries, we ensure that this only takes place in compliance with the GDPR. This is done either through an adequacy decision by the EU Commission or through suitable guarantees such as EU standard contractual clauses.

Rights of data subjects
You have the following rights:

  • Information about your stored data
  • Correction of incorrect or incomplete data
  • Deletion of your data, provided there are no statutory retention obligations
  • Restriction of processing under certain conditions
  • Data portability in a commonly used format
  • Objection to processing on the basis of legitimate interests
  • Revocation of consent already given
  • Complaint to the competent data protection authority

 

To exercise your rights, you can contact us at any time at office@supremetourismus.com.

II Data protection on the website

Google Fonts
Our website uses Google Fonts for the uniform display of fonts. Google Fonts are integrated locally, so there is no connection to Google servers. Should a connection to Google be established in exceptional cases, Google's privacy policy applies (https://policies.google.com/privacy).

Provision of the website and log files
When you visit our website, technical data is automatically collected (e.g. IP address, time of access). This is necessary for the stability and security of the website (legal basis: Art. 6 para. 1 lit. f GDPR). The data is stored for a maximum of 30 days.

Cookies and Consent Manager
Our website uses cookies to provide functions and analyze usage. You can manage your consent at any time via our Consent Manager.

Google Analytics
We use Google Analytics to analyze user behavior. Your IP address is shortened and anonymized. You can object to this use by installing a browser add-on to deactivate it.

Payment service providers and map services
We use Stripe for payment transactions and Google Maps/OpenStreetMaps for map services. The processing is based on your consent (Art. 6 para. 1 lit. a GDPR). Further information:

  • Stripe privacy policy
  • Google privacy policy

III. Data protection for customers and guest cards

Customer data
If you are our customer, we process your data for the performance of the contract (Art. 6 para. 1 lit. b GDPR) and for legal obligations (Art. 6 para. 1 lit. c GDPR).

Data recorded:

  • Name, address, e-mail, telephone number
  • Booking data, payment information
  • IP address of the booking

 

Forwarding to Feratel
We pass on personal data (name, address, contact details) to Feratel in the respective federal states in order to fulfill the legally required guest tax and registration forms (Art. 6 para. 1 lit. c GDPR).

Digital guest card
When using the digital guest card, we store data to provide the services (Art. 6 para. 1 lit. b GDPR) and to fulfill the registration obligation (Art. 6 para. 1 lit. c GDPR). The data will be deleted after three months.

Data recorded:

  • Name, date of birth, nationality, address
  • Arrival and departure date
  • Number of fellow travelers
    The processing is carried out by vOffice GmbH as a processor.

IV. Making contact

Telephone & e-mail
When you contact us, we process your data to process your request (Art. 6 para. 1 lit. b or f GDPR). Your data will be used exclusively for communication with you and will be deleted after one year at the latest.

This privacy policy is updated regularly. Last change: March 2025.