The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on the subject of data protection can be found in our privacy policy set out below this text.
Data processing on this website is carried out by the website operator. The operator's contact details can be found in the section “Information on the controller” in this privacy policy.
On the one hand, your data is collected when you provide it to us. This may, for example, be data you enter in a contact form. Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page request). This data is collected automatically as soon as you enter this website.
Some of the data is collected to ensure that the website is provided without errors. Other data is used to process your enquiries and to prepare bookings and initial consultations.
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have given consent to data processing, you can withdraw this consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time regarding this and any other questions on the subject of data protection.
With your consent, we statistically analyse your browsing behaviour when you visit this website (Google Analytics) and measure the success of our advertising (Meta Pixel). Without your consent in the cookie banner, these services are not triggered. You can change or withdraw your choice at any time via “Cookie settings” in the footer. Details can be found in section 5 of this privacy policy.
We host the content of our website with the following provider:
The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter Webflow). When you visit our website, Webflow collects various log files including your IP addresses. For details, please refer to Webflow's privacy policy: https://webflow.com/legal/privacy.
Webflow is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021), insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting). Consent can be withdrawn at any time.
Data transfers to the USA are based on the standard contractual clauses of the EU Commission. Webflow is also certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information: https://www.dataprivacyframework.gov/.
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
For a consistent appearance, this website uses the typeface “Alegreya Sans”. The font files are stored locally with our website provider Webflow (see section “Hosting”) and are loaded from there when you open a page. No connection to servers of Google or any other font provider is established.
The fonts are embedded on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in a consistent and easily readable presentation of our website. If your browser does not load the font, a standard font from your device is used.
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the internet (e.g. when communicating by e-mail) may have security gaps. Complete protection of data against access by third parties is not possible.
The controller responsible for data processing on this website is:
woerthwhile GmbH
Paradeisergasse 12, 3rd floor
9020 Klagenfurt am Wörthersee
Austria
Phone: +43 677 621 808 29
E-mail: info@woerthwhile.at
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons cease to apply.
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, if special categories of data pursuant to Art. 9(1) GDPR are processed. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your device (e.g. via device fingerprinting), data processing is additionally carried out on the basis of Section 165(3) TKG 2021. Consent can be withdrawn at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data if this is necessary to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. The legal bases applicable in each individual case are explained in the following paragraphs of this privacy policy.
We are not obliged to appoint a data protection officer. For any questions regarding data protection, please contact us at:
woerthwhile GmbH
Paradeisergasse 12, 3rd floor
9020 Klagenfurt am Wörthersee
Phone: +43 677 621 808 29
E-mail: info@woerthwhile.at
In the course of our business activities we work with various external parties. In some cases this also requires the transfer of personal data to these external parties. We only pass on personal data to external parties if this is necessary for the performance of a contract, if we are legally obliged to do so (e.g. passing data on to tax authorities or guest registration with the municipality), if we have a legitimate interest in the transfer pursuant to Art. 6(1)(f) GDPR, or if another legal basis permits the transfer of data. When using processors, we only pass on our customers' personal data on the basis of a valid data processing agreement. In the case of joint processing, a joint controller agreement is concluded.
Our processors include in particular myNests GmbH, Kunagrünbergstraße 137, 8965 Michaelerberg-Pruggern, Austria, whose booking, accounting and owner-portal systems we use to manage bookings and properties.
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out up to the withdrawal remains unaffected by the withdrawal.
If data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21(1) GDPR).
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21(2) GDPR).
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, e-mail: dsb@dsb.gv.at, www.dsb.gv.at.
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent technically feasible.
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to rectification or erasure of this data. You can contact us at any time regarding this and any other questions on the subject of personal data.
You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:
If you have restricted the processing of your personal data, this data may – apart from being stored – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
For security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
We hereby object to the use of contact data published in the context of the legal notice obligation for the purpose of sending unsolicited advertising and information materials. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam e-mails.
Our websites use so-called “cookies”. Cookies are small data packets and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.
Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services of third-party companies within websites.
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. protecting forms against misuse or displaying videos). Other cookies may be used to evaluate user behaviour or for advertising purposes.
Cookies that are required to carry out the electronic communication process, to provide certain functions you have requested or to optimise the website (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and Section 165(3) TKG 2021); consent can be withdrawn at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
Which cookies and services are used on this website can be found in this privacy policy.
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
This data is not merged with other data sources.
This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – the server log files must be collected for this purpose.
If you send us enquiries via the contact form or the booking enquiry form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent. The forms are technically provided by our hosting provider Webflow (see section “Hosting”); the entries are stored there and delivered to us by e-mail.
This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent can be withdrawn at any time.
The data you enter in the form will remain with us until you request its erasure, withdraw your consent to storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
To protect against automated requests (spam), the Cloudflare Turnstile service is integrated into our forms via our website provider Webflow. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page with a form, Turnstile checks whether the input comes from a human. For this purpose, in particular your IP address and browser and device information are transmitted to Cloudflare. The data is not used for advertising purposes.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our forms against misuse and spam. Insofar as information on your device is read in the process, this is strictly necessary for sending the enquiry you requested (Section 165(3) TKG 2021). Cloudflare is certified under the EU-US Data Privacy Framework; in addition, data transfers to the USA are based on the standard contractual clauses of the EU Commission. Further information: cloudflare.com/privacypolicy
If you contact us by e-mail, telephone or WhatsApp, your enquiry including all resulting personal data (name, telephone number, enquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent can be withdrawn at any time.
The data you send to us via contact enquiries will remain with us until you request its erasure, withdraw your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
When communicating via WhatsApp, your messages are transmitted via the servers of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. In doing so, WhatsApp processes in particular your telephone number and communication metadata and may transfer these to Meta Platforms, Inc. in the USA; the transfer is based on the standard contractual clauses of the EU Commission and Meta's certification under the “EU-US Data Privacy Framework”. The contents of the messages are end-to-end encrypted. For details, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea.
As part of check-in at accommodation managed by us, we collect the data required for guest registration and, where applicable, a copy of an official photo ID (e.g. passport or identity card) of our guests. This is done for the following purposes:
The ID copy is deleted 30 days after the guest's departure, unless specific damage cases require longer retention. Guest registration forms are retained in accordance with the statutory retention periods.
On your first visit, we use a cookie banner to ask whether we may use statistics services (Google Analytics) and marketing services (Meta Pixel). As long as you do not consent, these services are not triggered and do not set any cookies. Technically necessary functions are always active.
We store your choice in our own cookie (“ww_consent”) on your device so that the banner does not reappear on every page view. This cookie contains only your choice and when you made it, is not transmitted to third parties and is deleted automatically after 6 months. The legal basis is Section 165(3) TKG 2021 (strictly necessary cookie) in conjunction with Art. 6(1)(c) GDPR (proof of consent).
You can change or withdraw your consent at any time with effect for the future by clicking “Cookie settings” in the footer. The lawfulness of the processing carried out until withdrawal remains unaffected.
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager is a tool with which we integrate and control statistics and marketing services on our website. It does not itself create user profiles, set cookies or carry out any independent analyses. Among other things, it ensures that Google Analytics and the Meta Pixel are only triggered after you have given your consent. When Tag Manager loads, your IP address is transmitted to Google; a transfer to the USA cannot be ruled out.
It is used on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the simple and consent-compliant integration and management of the services on our website. Google is certified under the EU-US Data Privacy Framework (DPF); in addition, data transfers to the USA are based on the standard contractual clauses of the EU Commission.
With your consent, this website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It allows us to evaluate how our website is used, e.g. pages viewed, time spent, devices used, approximate origin (country, region) and enquiries submitted. For this purpose, cookies are set and usage data is transmitted to Google. IP addresses are not stored in Google Analytics 4. We use the data to improve our website and our services.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 165(3) TKG 2021, which you can withdraw at any time. Usage data is deleted automatically after 14 months. We have concluded a data processing agreement with Google. Google is certified under the EU-US Data Privacy Framework; the standard contractual clauses of the EU Commission also apply. Further information: policies.google.com/privacy
With your consent, we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. It allows us to measure whether visitors reach our website after clicking on one of our ads on Facebook or Instagram and, for example, send an enquiry (conversion measurement). It also enables us to show our ads more specifically to interested people. For this purpose, cookies are set and data such as pages viewed, device and browser information, IP address and events (e.g. submitting a form) are transmitted to Meta. We do not transmit the content of your enquiry, such as your name, e-mail address or telephone number, to Meta. Meta may link the data to your Facebook or Instagram account and, in accordance with Meta's data policy, also use it for its own purposes: facebook.com/privacy/policy
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 165(3) TKG 2021, which you can withdraw at any time. We and Meta are joint controllers for the collection of data on our website and its transmission to Meta (Art. 26 GDPR); the corresponding agreement can be found at facebook.com/legal/controller_addendum. Meta alone is responsible for any further processing. You can also assert your rights directly against Meta. Meta is certified under the EU-US Data Privacy Framework; in addition, data transfers to the USA are based on the standard contractual clauses of the EU Commission.
If you reach our website via a tagged link, e.g. from one of our ads, the address contains campaign information (so-called UTM parameters and, where applicable, a Meta click ID, “fbclid”). If you send us an enquiry via a form, this information is transmitted to us together with your enquiry and the page on which you filled in the form. This shows us which campaign brought you to us. No cookies are set and no data is stored on your device for this purpose.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in evaluating and improving the success of our advertising. The information is stored and deleted together with your enquiry.
We collect, process and use personal customer and contract data of owners and guests for the establishment, content and amendment of our contractual relationships. We collect, process and use personal data on the use of this website (usage data) only to the extent necessary to enable the user to use the service or to invoice it. The legal basis for this is Art. 6(1)(b) GDPR.
The collected customer data is deleted after completion of the order or termination of the business relationship and expiry of any statutory retention periods. Statutory retention periods remain unaffected.
We only transfer personal data to third parties if this is necessary in the course of contract processing, for example to booking platforms through which accommodation was booked, to the local partners commissioned with cleaning, laundry or maintenance, to the competent municipality (guest registration, accommodation levy or, until 31 October 2026, local and overnight-stay tax) or to the bank commissioned with payment processing.
No further transfer of data takes place, or only if you have expressly consented to the transfer. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.
The legal basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.
