Data protection declaration

Company name: Harry’s Home Holding AG
Address of the company: Kaiserjägerstraße 2, 6020 Innsbruck
Trade group: Hotel Business
Regulating authority: Landesgericht Innsbruck, Member of the Tyrolean Chamber of Commerce
Commercial Register Number: FN 352074 g
Commercial Register Court: Innsbruck
Trade group: Hotel Business – VAT 73165326
Supervisory board: MMag. Christoph Pircher – Chair / Sonja-Sophie Ultsch – Deputy Chair/ Dipl. – Ing. Dietmar Ploberger – Audit Committee
Authorized signatory: Valentina Ultsch – authorized signatory / Marc Schönfeld – authorized signatory
Managing director (CEO): Harald Ultsch

Our data protection officer is heyData GmbH, Schützenstraße 5, 10117 Berlin, Germany

Processing of your data within the GauVendi booking solution

We use a booking solution from GauVendi GmbH (Feuerwehrstr. 10, Frankfurt, Germany) on our website, which enables you to make a room booking according to your personal requirements and allows us to view and manage the necessary information about your booking.

The following data is processed:

• Number of persons
• Arrival and departure date
• Booked room features and rooms
• Additional services booked
• Booking country
• Other data relevant for reservations and cancelations

The legal basis for the processing is Article 6, paragraph 1(a). b) the GDPR, the performance of the booking contract entered into with you, and Art. 6( 1(a). f) GDPR, our interest in providing the best possible additional options during the booking process, and maintaining our business relationships.
In addition, we use a feature that allows us to show you additional offers tailored to your region right when you make your reservation. To do this, we use your IP address—which we collect when you visit our website—in a shortened, anonymized form to obtain a rough estimate of your geographic location and offer you relevant regional add-on options. Apart from the brief processing of your IP address for this purpose, no other personal data is processed in this context. The legal basis for the processing is Article 6, paragraph 1(a). f) GDPR, our legitimate interest in showing you relevant additional services.
The data will be processed for as long as is necessary to complete the booking. Subsequently, relevant data will be retained in accordance with statutory retention periods and deleted thereafter.

Furthermore, GauVendi supports us in the evaluation of website visitor data and further analysis. If you have given your consent via the cookie banner, Google Analytics is used for this purpose and this data is then shared with GauVendi. You can find more detailed information on processing by Google Analytics in the relevant section of this statement.

We have entered into a data processing agreement with GauVendi in accordance with Article 28 of the GDPR, in which we require the provider to ensure the protection of your data.
As part of the processing, your data may be transferred to third countries. For potential transfers to third countries outside the EU and the EEA for which no adequacy decision has been issued by the European Commission, standard data protection clauses in accordance with Article 46( 2 lit. c GDPR. These require the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
For more information about GauVendi, please see the service provider’s privacy policy: https://www.gauvendi.com/data-protection

Billing addresses of our hotels:

HH Hotel Ost GmbH

Location: Harry’s Home Vienna Millennium Tower
2 Kaiserjägerstraße
6020 Innsbruck
VAT ID: ATU67133906
FN: 372167f

HH Hotel Süd GmbH

Location: Harry’s Home, Hart near Graz
2 Kaiserjägerstraße
6020 Innsbruck
VAT ID: ATU61901357
FB: FN 265713f

Location: Harry’s Home Villach
2 Kaiserjägerstraße
6020 Innsbruck
VAT ID: ATU61901357
FN: 265713f

Location: Harry’s Home Graz Smart City
2 Kaiserjägerstraße
6020 Innsbruck
VAT ID: ATU61901357
FN: 265713f

HH Hotel Mitte GmbH

Location: Harry’s Home Steyr
2 Kaiserjägerstraße
6020 Innsbruck
VAT ID: ATU64910966
FN: 326567x

Location: Harry’s Home Linz Urfahr
2 Kaiserjägerstraße
6020 Innsbruck
VAT ID: ATU64910966
FN: 326567x

Location: Harry’s Home, Bischofshofen
2 Kaiserjägerstraße
6020 Innsbruck
VAT ID: ATU64910966
FN: 326567x

HH Hotel Nord GmbH

Location: Harry’s XL Hotel
2 Kaiserjägerstraße
6020 Innsbruck
UID:ATU79604304
Ref. No.: 605722v

HH Hotel West GmbH

Location: Harry’s Home, Dornbirn
2 Kaiserjägerstraße
6020 Innsbruck
VAT ID: ATU65305877
FN: 334624w

Location: Harry’s Home, Telfs
2 Kaiserjägerstraße
6020 Innsbruck
VAT ID: ATU65305877
FN: 334624w

Location: Harry’s Home Lienz
2 Kaiserjägerstraße
6020 Innsbruck
VAT ID: ATU65305877
FN: 334624w

HH Hotel Deutschland GmbH

Location: Harry’s Home, Munich-Moosach
5 Bunzlauer Platz
80992 Munich
VAT ID: DE294808671
HRB: 210061

Location: Harry’s Home Berlin-Moabit
5 Bunzlauer Platz
80992 Munich
VAT ID: DE294808671
HRB: 210061

Harry’s Home Switzerland AG

Location: Harry’s Home Zurich-Wallisellen
160 Industriestraße
8957 Spreitenbach
VAT ID: CHE-302.828.603

Location: Harry’s Home Bern-Ostermundigen
160 Industriestraße
8957 Spreitenbach
VAT ID: CHE-302.828.603

Location: Harry’s Home Zurich-Limmattal
160 Industriestraße
8957 Spreitenbach
VAT ID: CHE-302.828.603

DialogShift chat application and other communication services on our website

Our website uses the communication services of DialogShift GmbH, Torstr. 201,

10115 Berlin. These include a chat application, e-mail communication and telephone communication. The applications process and store data for the purpose of web analysis, operating the communication services and responding to inquiries.

To operate the chat function, the chat texts are saved and a cookie with a unique ID is set – this is used to recognize you as a customer. In the case of e-mail and telephone communication, the communication content is also stored temporarily in order to ensure efficient processing of your inquiries.

A cookie is a small text file that is stored locally in the cache on your device.

is saved. With the help of this cookie, our application recognizes the device and can call up past chat logs. This cookie is stored for 90 days since the last

usage, stored. You can deactivate the storage of cookies in your

Deactivate browser settings. However, without the use of cookies, the

Chat function cannot be executed.

The possible disclosure of e.g. name, e-mail address or telephone number

is voluntary and with the consent to temporarily use and store this data for the purpose of establishing contact until the end of the contact. This personal data will be deleted after 90 days. When using the Journey Messaging Service, your contact details may also be used for the transmission of travel-related information (such as check-in information), provided you have consented to this.

The legal basis for data processing is Art. 6 para. 1 lit. a GDPR, § 25

Para. 1 TTDSG on the basis of your consent.

DialogShift offers further information on the collection and use of data as well as your rights and options for protecting your privacy.

Data Processing with dailypoint™ (Centralized Guest Data Management)

We use the dailypoint™ software from Toedt, Dr. Selk & Coll. to centrally manage guest profiles and process your personal data in compliance with data protection regulations. GmbH, Augustenstr. 79, 80333 Munich (hereinafter “dailypoint”). We have a contract with this service provider for data processing in accordance with Article 28 of the GDPR.

1. Purpose and Nature of Data Processing
dailypoint serves as a central data management system (“single point of truth”): It consolidates your personal data collected at the time of booking, during your stay, and through our online services (e.g., name, address, email address, phone number, booking details, and stay details) is consolidated, stored in a central guest profile, and continuously cleaned via dailypoint Data Laundry. The purpose is to fulfill the contract, maintain the business relationship, and—provided consent has been given—to engage in personalized communication and direct marketing.
The legal basis is Art. 6, para. 1(a). Article 6(b) of the GDPR (performance of a contract), Art. 6, para. 1(a). Article 6 of the GDPR (legitimate interest in efficient guest data management) and Art. 6, para. 1(a). a GDPR (consent), to the extent that such consent has been obtained.

2. Website Connect – Online Booking
When you use our online booking system (Website Connect, operated by dailypoint™), the information you enter is processed for booking purposes and stored in your guest profile. The data will not be used for any purpose other than processing your reservation, unless you have given your consent for other uses.

3. Email Communication and Tracking
If you have consented to receiving email communications (e.g., newsletters, offers), these are sent via the mailing service provider mailingwork GmbH, with whom we also have a data processing agreement in place.
If you have expressly consented to email tracking, email opens, link clicks, and bounces will be analyzed at the recipient level so that we can send you communications tailored to your interests. You may revoke this consent at any time with future effect (e.g., by clicking the unsubscribe link in the newsletter or by sending an email to info@harrys-home.com).

4. Your Rights – Access, Data Portability, and Deletion
To exercise your data protection rights (right of access, rectification, erasure, restriction, data portability, and objection), a data protection form is available on our website, provided through dailypoint™. The process works as follows:
• Fill out the form and select whether you would like to submit a request for information (regarding stored data) or a request for deletion. Required information includes first name, last name, and email address.
• dailypoint™ automatically sends a confirmation email to the specified address. The request will not be processed until you have actively confirmed it (identity verification).
• Once confirmed, the person in charge will be notified and will process your request in the dailypoint Privacy Dashboard.
• When you request deletion, all personal information fields in your guest profile will be anonymized (set to zero). For record-keeping purposes, a log entry without profile data is retained.

Alternatively, you can send your inquiry by email at any time to [info@harrys-home.com].

5. Consent Management and Withdrawal
The consents you have granted are stored centrally in dailypoint™ in a traceable manner, along with a complete history. You may revoke your consent to data processing at any time, effective for the future. The withdrawal does not affect the lawfulness of the processing carried out up to that point.

6. Data Security
dailypoint™ maintains a high technical security standard, which is regularly verified through penetration tests. Data is transferred in encrypted form. As a data processor, dailypoint™ is contractually bound to comply with all data protection requirements under Article 28 of the GDPR.
For more information, please see the dailypoint™ Privacy Policy at: www.dailypoint.com