PRIVACY POLICY

General

NOVOMATIC AG attaches great importance to the protection of your personal data. In accordance with Articles 13 and 14 of the General Data Protection Regulation, we hereby inform you in our privacy policy about the processing of your personal data and your rights under data protection law.

All processing operations are carried out in accordance with the Austrian Data Protection Act (DSG), including the European General Data Protection Regulation (GDPR) and all other European and national laws to which we are subject (BAO, ABGB, UGB, etc.).

Data controller

NOVOMATIC AG
Wiener Strasse 158
2352 Gumpoldskirchen
Tel: +43 2252 606 -0
Email: info@novomatic.com

Data protection contact:

Email: dataprotection@novomatic.com'
 

Personal data

We process personal data that we receive from you when you visit our website or in the course of our business relationship (or the initiation thereof). Personal data is any information relating to an identified or identifiable natural person. Below you will find an overview of the personal data that we collect and process within the scope of our services, provided that there is a legal basis for doing so:

• Name
• Gender
• Date of birth
• Citizenship
• Contact address(es)
• Electronic contact details (telephone number, fax number, email address)
• IP address & technical log data (date, time, browser, system)
• Residence
• Identification data from official photo IDs (e.g., ID card number, passport number, driver's license number, personal master data, ID scan)

Collection and processing of personal data

We use the personal data collected from you only to the extent that the data is necessary to fulfill the respective purpose (e.g., to initiate and process a contractual relationship, to answer a question you ask us, or to enable access to certain other information on our website, etc.).
 

Data processing on behalf of others

If we engage a processor, we remain responsible for the protection of your personal data. Your personal data will not be sold to third parties or otherwise marketed.
 

For what purposes and on what legal basis is your data processed?

NOVOMATIC AG processes your personal data in accordance with data protection regulations.

- To fulfill a contract (Art. 6 (1) (b) GDPR)

The processing of your personal data is necessary for the initiation or fulfillment of a contract (to make the booking and administer your stay at the hotel).

- To fulfill legal obligations (Art. 6 (1) (c) GDPR)

Your personal data is processed for the purpose of fulfilling various legal obligations (e.g. ABGB, BAO or other data processing obligations associated with accommodation) to which NOVOMATIC AG is subject.

- To safeguard legitimate interests (Art. 6 (1) (f) GDPR)

Where necessary, data processing may be carried out beyond the actual fulfillment of the contract in order to protect the legitimate interests of NOVOMATIC AG or a third party, based on a balancing of interests. In the following cases, data processing is carried out to protect legitimate interests:

• Video surveillance for the collection of evidence in the event of criminal offenses; this serves in particular to protect customers and employees;
• To protect the integrity and error-free functioning of our website;
• In the context of legal proceedings.
   

How long will your personal data be stored?

If you enter into an accommodation contract with NOVOMATIC AG, your data will be stored until the expiry of the limitation periods and statutory retention periods applicable to us after the contract has been fully processed. In addition, your data will be stored until the conclusion of any legal disputes in which the data is required as evidence. Technical log data (including IP addresses) relating to visitors to the website is anonymized at the web server level so that it is no longer possible to establish a personal reference after collection.
 

Recipients of personal data

Your personal data will only be passed on with your consent. This does not apply to transfers that are necessary due to a legal obligation or within the scope of contract fulfillment. The transfer of personal data to processors (service providers) is generally only carried out to companies that offer sufficient guarantees that appropriate technical and organizational measures are implemented in such a way that the processing of personal data is carried out in accordance with the requirements of the GDPR and the protection of the rights of the data subject is guaranteed. No transfer outside the EEA takes place.
 

Your rights

You have the right to information, correction, deletion, restriction, data portability, revocation, and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at) at any time.
 

Asserting your rights

If you wish to assert any of the above rights, you can contact the controller at the following email address: dataprotection@novomatic.com

When asserting your rights, additional information may be requested to confirm your identity (e.g., presentation of official photo ID). This serves to protect your rights and privacy so that no third party receives information about your data. NOVOMATIC AG will respond to all reasonable requests free of charge and as quickly as possible in accordance with applicable law.
 

Links to other websites

Our websites contain links to other websites. Compliance with the relevant data protection regulations for these websites is the responsibility of the operators of the respective websites and is therefore beyond our control. We are therefore not responsible for the data protection strategies or the content of these other websites.
 

Google Maps

This site uses the Google Maps map service via an API. If you use the functions of Google Maps or call up the corresponding page, it may be necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. We ourselves have no influence on this data transfer. Google Maps is used in the interest of making it easy to find our business premises. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f. GDPR.

For more information on the handling of user data, please refer to Google's privacy policy at: https://www.google.de/intl/de/policies/privacy/
 

Cookie policy

We use cookies on our website to improve our web offering and make it as user-friendly as possible for you. Cookies are small text files that are stored on your electronic device (e.g., computer, smartphone, game console) when you visit our website. Cookies store information such as your language settings. This prevents you from having to re-enter all the necessary data each time you use the website. 

Please note that certain functions are only available if cookies are enabled in your browser. If you do not allow the use of cookies, compatibility issues may arise with the functionality of our websites.
 

Overview of cookies used

Cookie activation/deactivation

Users can choose which cookies may be activated on a website at any time using their browser settings:

• Google Chrome
  Settings › Advanced settings › Content settings › Cookies
• Mozilla Firefox
  Settings › Privacy & Security › History
• Microsoft Internet Explorer
  Internet Options › Privacy › Settings
• Microsoft Edge
  Settings › Advanced settings › Cookies
• Apple Safari
  Settings › Privacy

For further information, please contact the support team for the browser you are using. Further assistance is also available at http://www.aboutcookies.org.
 

Changes to the privacy policy

As we continue to develop our services, we will continually update this privacy policy.

Version: September 2025