General terms and conditions of business

Wexlzeit Privacy Policy (GDPR)

The protection of your personal data is very important to us. In this privacy policy, we inform you about how Wexlzeit processes personal data that is collected when you visit our website www.wexlzeit.at or when you contact us or make a booking.

This privacy policy applies to all visitors to our website as well as to persons who provide us with personal data in other ways.

Legal basis for data processing

Your personal data (that is, all information that can be used to identify you directly or indirectly) will be processed exclusively on the basis of applicable legal provisions, in particular the General Data Protection Regulation (GDPR).

We process your personal data on the following legal bases:

  • Article 6 paragraph 1 letter b GDPR – insofar as the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures (e.g. in the case of a booking request or reservation).
  • Article 6 paragraph 1 letter c GDPR – insofar as we are legally obliged to process personal data (e.g. due to tax or company law retention obligations).
  • Article 6 paragraph 1 letter f GDPR – insofar as the processing is necessary to protect our legitimate interests, for example to ensure the security of our website, to improve our services or to defend and assert legal claims.
  • Article 6 paragraph 1 letter a GDPR – provided you have given us your explicit consent to the processing of your personal data (e.g., for receiving a newsletter or the use of certain cookies). You can withdraw your consent at any time with effect for the future.

By using our website, you agree to the collection, processing and use of your personal data within the framework of this privacy policy, insofar as consent is required for this.

We recommend that you read this privacy policy carefully so that you can understand how and for what purposes we process your personal data.

What data we collect

We collect personal and non-personal data when you use our website.

1. Non-personal data

When you visit our website, technical information is automatically collected that does not allow any direct conclusions to be drawn about you personally. This may include, in particular, the following data:

  • browser and browser version used,
  • operating system,
  • Language settings,
  • Date and time of access,
  • pages visited,
  • Time spent on individual pages,
  • Click behavior as well as
  • further technical information required to ensure the security and functionality of our website.

This data is evaluated exclusively in anonymized or aggregated form to improve the stability, security and user-friendliness of our website.

2. Personal data

Personal data is information that can be used to identify you personally or that makes you identifiable.

Depending on how you use our website, we may process the following personal data:

  • First and Last Name
  • Email Address
  • Telephone number (if provided)
  • Billing or contact address (if required)
  • Details of your booking request (e.g., arrival and departure dates, number of guests, special requests)
  • Content of your messages via the contact form or by email
  • IP Address
  • Location data (to the extent technically transmitted and permissible)
  • Device information (e.g. browser type, operating system and device identifier)

Booking and contact requests

When you submit a booking request via our website or contact us via the contact form, we process the data you provide exclusively for processing your request, carrying out a booking and communicating with you.

Bookings via external platforms

  • If you make your booking through external booking platforms such as Airbnb, Booking.com, or our booking system Smoobu, we receive the personal data required to process your booking directly from the respective platform. The data processing on these platforms is also governed by their respective privacy policies.

How do we obtain your data?

We obtain your personal data from various sources:

  • Directly from you, if you voluntarily provide them to us, for example as part of a booking request, via our contact form, by email or by telephone.
  • By using our website, certain technical information (e.g. IP address, browser type or access time) is automatically collected to the extent necessary for the operation and security of the website.
  • Via external booking platforms and service providers if you make a booking through platforms such as Airbnb, Booking.com, or our booking system Smoobu. In this case, we receive the personal data necessary for processing and fulfilling your booking from the respective platform.
  • From technical service providers, for example in the context of web hosting, analytics or security services, insofar as this is necessary for the operation of our website and permissible under data protection law.

How do we use your data?

We do not sell, rent or transfer your personal data to third parties unless described in this privacy policy or required to do so by law.

We use your personal data in particular for the following purposes:

  • Processing and responding to booking and contact requests.
  • Processing and managing bookings.
  • Communication with you before, during and after your stay.
  • Sending you important information about your booking or our offer.
  • Provision and improvement of our website and its functions.
  • Ensuring the security and stability of our website.
  • Fulfillment of legal obligations (e.g. tax or corporate law retention requirements).
  • Creation of anonymized statistical analyses to improve our services.

Disclosure of personal data

To provide our services, it may be necessary to share personal data with carefully selected service providers. These providers process your data exclusively on our behalf or based on a legal or contractual obligation.

Data may be shared, in particular, with the following recipients:

  • Smoobu, for managing and processing bookings.
  • Airbnb and Booking.com, if your booking is made through these platforms.
  • our web hosting provider, for the operation and technical provision of the website.
  • IT and maintenance service providers, insofar as this is necessary for the secure operation of the website.
  • Payment service providers, provided that payments are processed via such services.
  • Tax advisors, accounting service providers or authorities, insofar as we are legally obliged to do so.

Insofar as service providers process personal data on our behalf, this is done exclusively on the basis of a data processing agreement in accordance with Art. 28 GDPR.

Legal disclosure obligations

We reserve the right to disclose personal data to the extent required by law or necessary to protect our legitimate interests. This may be the case, in particular, if:

  • we are legally or officially obligated to disclose it,
  • this is necessary to enforce our general terms and conditions or other contractual agreements,
  • where there is suspicion of unlawful acts, fraud or abuse,
  • this is necessary to protect our rights, our property, or the safety of our guests, visitors, or third parties.
  • or this is necessary for the establishment, exercise or defense of legal claims.

Your personal data will not be shared beyond this.

Your rights as a data subject

According to the provisions of the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR): You have the right to request information about whether and which personal data we process about you.
  • Right to rectification (Art. 16 GDPR): You can request the rectification of inaccurate or the completion of incomplete personal data.
  • Right to erasure (Art. 17 GDPR): Under the legal conditions, you have the right to request the erasure of your personal data.
  • Right to restriction of processing (Art. 18 GDPR): Under certain conditions, you can request the restriction of the processing of your personal data.
  • Right to data portability (Art. 20 GDPR): You have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format or to request its transmission to another controller.
  • Right to object (Art. 21 GDPR): You can object to the processing of your personal data if it is based on our legitimate interests.
  • Withdrawal of consent (Art. 7 para. 3 GDPR): You can withdraw your consent at any time with effect for the future.
  • Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law. In Austria, this is the Austrian Data Protection Authority.

Please note that these rights may be subject to legal restrictions and that we may be required to retain certain data due to legal retention obligations.

Contact

If you wish to exercise any of your data protection rights or have any questions about data protection, you can contact us at any time:

Data controller: Wexlzeit

Storage duration

We only store your personal data for as long as is necessary for the respective purposes of processing or as required by law.

In particular, we store your data:

  • as long as they are necessary for processing your request or carrying out your booking,
  • as long as statutory retention periods exist (e.g. according to tax and company law regulations),
  • as long as this is necessary for the establishment, exercise or defense of legal claims.

After the respective processing purpose ceases to exist and the statutory retention periods expire, your personal data will be deleted or anonymized, unless there is a further legal obligation to store it.

Should personal data be incomplete or incorrect, we will correct it immediately or – if legally permissible and necessary – supplement or delete it.

Cookies

Our website uses cookies. These are small text files that are stored on your device and contain certain information. Cookies do not cause any harm and do not contain viruses.

Cookies are used to make our website more user-friendly, effective, and secure. Some cookies are technically necessary for the website to function properly. Other cookies help us analyze the use of our website or provide certain features.

We use the following types of cookies:

Technically necessary cookies

These cookies are essential for the operation of the website. They enable basic functions such as page navigation, security features, and the provision of the booking system. Without these cookies, the website cannot function properly.

Functional cookies

These cookies store your settings, such as language or display preferences, to make your next visit more convenient.

Analytics and statistics cookies (only with your consent)

If analytics or statistics services are used, these cookies will only be set after you have given your explicit consent via our cookie banner. They help us understand how visitors use our website so that we can continuously improve our services.

Cookie settings

On your first visit to our website, you can use our cookie banner to decide which cookies you wish to allow. You can change or withdraw your consent at any time with effect for the future.

You can also delete or block cookies at any time via your browser settings. Please note, however, that this may prevent some features of our website from being fully available.

Data processing by third parties

Our privacy policy relates exclusively to the processing of personal data by Wexlzeit in connection with this website.

If you are redirected via our website to external websites, booking platforms or other third-party services, or if you provide personal data there, the data protection regulations of the respective providers apply exclusively.

This applies in particular to external services and platforms such as Airbnb, Booking.com, Smoobu, or other linked websites. We have no influence over their data processing and assume no responsibility for it.

We therefore recommend that you carefully read the respective privacy policies of the relevant providers before submitting personal data there.

This privacy policy does not apply to companies or individuals that we neither own, control, nor manage, even if we collaborate with them to provide our services.

Data security

The protection of your personal data is very important to us. We take appropriate technical and organizational measures to protect your data from loss, manipulation, unauthorized access, unauthorized disclosure or other unlawful processing.

This includes in particular:

  • the encrypted transmission of data using SSL/TLS encryption,
  • the use of current security standards on our servers,
  • regular security and software updates as well as
  • the restriction of access to personal data to authorized persons.

If we engage external service providers to process personal data, we ensure that they also comply with appropriate technical and organizational measures to protect your data in accordance with applicable data protection regulations.

Despite all security measures taken, data transmission on the internet or the electronic storage of data can never be completely protected from unauthorized access. Therefore, we cannot guarantee absolute security of data transmission or storage. However, we strive to continuously adapt our security measures to the latest technological standards.

Data transfer to third countries

We generally process your personal data within the European Economic Area (EEA).

Insofar as personal data is transferred to countries outside the European Economic Area in connection with the use of certain service providers (e.g. Smoobu, Google services, Airbnb or Booking.com), this is done exclusively in accordance with the provisions of the General Data Protection Regulation (GDPR).

A transfer will only take place if

  • an adequacy decision of the European Commission exists for the third country in question or
  • suitable safeguards pursuant to Art. 46 GDPR (e.g. EU standard contractual clauses) have been agreed or
  • a legal exception exists according to Art. 49 GDPR.

We ensure that an appropriate level of data protection is guaranteed in all data transfers.

Advertising

We currently do not use personalized advertisements or advertising networks on our website.

We do not use any advertising services that process personal data for the purpose of displaying interest-based advertising.

Should we use advertising services in the future that require the processing of personal data, we will update this privacy policy accordingly and – where legally required – obtain your prior consent.

Marketing

Provided you have given us your express consent, we will use your personal data (e.g. your name or email address) to send you information about our holiday home, special offers or news.

Marketing information will only be sent on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR or – where legally permissible – on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR.

You can withdraw your consent to receive marketing communications at any time with effect for the future. To do so, you can use the unsubscribe link included in the respective email or contact us via the "Contact me" option.

Even if you unsubscribe from receiving marketing information, we may still send you emails that are necessary for processing your booking or to fulfill legal or contractual obligations. These include, for example, booking confirmations, information about your stay, or important organizational notifications.

Business transfers

Should our company or parts thereof be sold, transferred, restructured or merged with another company in the future, personal data may be transferred to the legal successor as part of such a transfer.

The transfer of your data will only take place in accordance with applicable data protection regulations. The respective legal successor is obligated to continue processing your personal data in accordance with this privacy policy and applicable data protection laws.

Minors

The protection of the personal data of children and young people is very important to us.

Our website and services are generally intended for adults. Bookings can only be made by individuals who are at least 18 years old or who are acting with the consent of their parents or legal guardians.

We do not knowingly collect personal data from children under 16 years of age without the necessary consent of their parents or guardians.

Should we become aware that a child's personal data has been processed without the required consent, we will delete this data immediately, unless there is a legal obligation to retain it.

If you believe that a minor has provided us with personal data without the necessary consent, please contact us at: Contact me

Changes to this privacy policy

We reserve the right to amend or update this privacy policy as needed, particularly if legal requirements change or we offer new features or services on our website.

The current version of the privacy policy is always available on this website. The date of the last update can be found at the end of this privacy policy.

Where legally required, we will inform you of any significant changes in an appropriate manner. By continuing to use our website after the changes take effect, you agree to the current version of the privacy policy, to the extent permitted by law.

Contact

If you have any questions about this privacy policy or the processing of your personal data, you can contact us at any time.

Controller within the meaning of the General Data Protection Regulation (GDPR):

WexlzeitFabian HampSt. Corona am Wechsel

Contact: Contact me. Last edited on: July 28, 2026