Websline

ABM

1. Controller

Pepper Collection
Tannberg 130
Phone: +43 (0) 664 140 70 74
Email: office@peppercollection.com

2. Description and Scope of Data Processing

On our website you can book rooms and offers or send an enquiry.
If you use this option, the data entered in the booking form will be transmitted to us and stored. This includes:

  • Title, first name, surname
  • Email address, telephone number, postal address
  • Number of accompanying guests, special requests
  • Booking details (date, time, room selection, offers, price)

For processing online bookings, we use the reservation system of our technical service provider:

Websline GmbH
Sägewerkstraße 24
83395 Freilassing
T: +49 8654 – 77 066 0
systems@websline.com

The processing of booking data by Websline GmbH is carried out solely on our behalf and in accordance with our instructions under a Data Processing Agreement pursuant to Art. 28 GDPR. All booking data you enter will be transmitted in encrypted form and protected by appropriate technical and organisational measures.

No further transfer of your data to other third parties takes place. The data is used exclusively for processing your booking, fulfilling the accommodation contract and communicating with you.

3. Legal Basis for Data Processing

The legal basis for the processing of data is the conclusion of an accommodation contract with the user.

4. Legal Bases for Processing

  • Art. 6 (1) (b) GDPR: Performance of an accommodation contract or steps prior to entering into a contract
  • Art. 6 (1) (c) GDPR: Compliance with legal obligations (e.g. statutory retention obligations under tax and commercial law)
  • Art. 6 (1) (a) GDPR: Where you have given explicit consent (e.g. for newsletters or marketing purposes)

5. Duration of Storage

We store your data only for as long as necessary to fulfil the contract and statutory requirements. Statutory retention periods under commercial and tax law may be up to 10 years. After these periods expire, your data will be deleted.

6. Transfer to Third Countries

Your data will not be transferred to countries outside the EU or EEA.

7. Right to Object and to Request Deletion

You may object to the processing of your personal data at any time.
Please note: In the event of an objection, the booking cannot be carried out or continued.

8. Your Rights

Under the GDPR you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7 (3) GDPR)

To exercise these rights, please contact us using the contact details provided above.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is that of your place of residence or of our company’s registered office.

Last updated: 2025