Privacy policy

This English version is provided for your convenience. Only the German version is legally binding.

This policy applies to the Hotel Bramosen gift voucher shop. For the website bramosen.at, the privacy policy on bramosen.at applies.

Controller

Peter Ecker, Hotel Bramosen
Alexenau 8, 4852 Weyregg am Attersee, Austria
Email: office@bramosen.at · Telephone: +43 7664 2291

Which data we process when you buy a voucher

• Order: your name and email address, amount, delivery method, any promo code, date of order and the version of the terms you accepted.
• Voucher: name of the recipient, your name as sender, your dedication and the voucher code.
• Delivery on a chosen date: the recipient’s email address, if we are to send the voucher directly to them.
• Delivery by post: the delivery address.
• Payment: payment method and the payment reference at Stripe. You enter card details directly with Stripe; they never reach the hotel.
• Redemption: date, amount and area of each redemption and the team member who booked it.
• Withdrawal: name, email address, voucher code or order number and your message, if you withdraw via “Withdraw from contract”.

Purposes and legal basis

• Contract (Art. 6 (1) (b) GDPR): processing the order, creating and delivering the voucher, booking redemptions, showing the remaining balance, handling withdrawals.
• Legal obligations (Art. 6 (1) (c) GDPR): accounting and retention under tax law.
• Legitimate interests (Art. 6 (1) (f) GDPR): security of the shop and protection against misuse and payment fraud. For this we count requests per device. We only store the IP address as a non-reversible hash.

Without the mandatory details in the order form, we cannot issue the voucher.

Who else receives the data

We work with service providers who process data only on our behalf:

• Stripe Payments Europe Ltd., Dublin, Ireland: payment processing by card, Apple Pay, Google Pay and the other payment methods shown. Stripe checks payments for fraud and sets its own cookies in the payment field for this purpose. Stripe may also process data in the USA.
• Vercel Inc., USA: hosting of the shop, data centre in Frankfurt am Main.
• Neon Inc., USA: database for orders and vouchers.
• Microsoft Ireland Operations Ltd., Dublin, Ireland: sending emails via the mailbox reservierung@bramosen.at.
• Österreichische Post AG: delivery, if you choose delivery by post. We print the voucher at the hotel and write the delivery address on the envelope.

For transfers to the USA, the providers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework and on standard contractual clauses.

Cookies and tracking

The gift voucher shop does not set any cookies for advertising or statistics and does not use any tracking services. Fonts and images are hosted on our own server. The only technically necessary cookies are Stripe’s cookies in the payment field and, for the reception team, a login cookie in the internal area.

How long we keep data

We keep order and voucher data as long as the voucher can be redeemed, and thereafter as long as required by the statutory retention obligation under tax law (seven years under § 132 BAO). We delete the counters used to protect against misuse after two days.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Please write to office@bramosen.at. So that no third party receives your data, we ask for proof before providing information, such as the email address you used to order.

If you believe that we are not processing your data lawfully, you can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, Austria, dsb@dsb.gv.at, dsb.gv.at.

More information

How purchase, withdrawal and redemption work is described in the terms and conditions and the voucher terms.

Last updated: November 2026