ZWEITWOHNSITZ · BAD ISCHL
PRIVACY POLICY
- CONTROLLER
Alexandra Margarethe Pesendorfer, Zweitwohnsitz Café Boutique
Kreuzplatz 25, 4820 Bad Ischl, Austria
Phone: +43 664 5281641
- PRINCIPLE
We take the protection of your personal data seriously. We process data solely in accordance with the law (GDPR, Austrian Data Protection Act – DSG, Telecommunications Act 2021 – TKG 2021). This website uses no advertising or social media services and no social media plugins. To improve the website, its usage is counted in anonymous form; see the section “Visit counting”.
- HOSTING & TECHNICAL DELIVERY
The website is provided through Lovable. When the site, images, videos and music are requested, technically necessary connection data, particularly your IP address, is transmitted to the hosting and delivery services involved. The purpose is website delivery and security, based on our legitimate interest (Art. 6(1)(f) GDPR).
The website database is located in the EU region France (Paris). An automatic backup of the database is created once a day; these backups are kept for up to approximately 14 days and contain only the database, not the uploaded image and video files.
Data processing with Lovable is governed by Lovable's Terms of Service including the data processing agreement (https://lovable.dev/data-processing-agreement) and the public list of sub-processors (https://trust.lovable.dev/subprocessors).
- VISIT COUNTING
This website counts visits using Lovable's counting service. The service sets no cookies and stores nothing on your device. It does not keep IP addresses and cannot recognise you; each visit counts separately.
Recorded: which pages you visit, where you came from, your country, browser, operating system and device type, how long you stay, how fast pages load, and whether errors occur. In addition, which buttons and links you click, including their labels, is recorded.
Counting happens for every visit, without requiring your consent and without identifying anyone. Individual visits are kept for 90 days, daily summaries for one year. Lovable collects this data for us; Lovable's privacy policy (https://lovable.dev/privacy) explains how Lovable handles it.
This website offers no switch to opt out of the counting. If you do not want any recording at all, you can use the website with a browser extension that blocks this request, or call us directly.
- COOKIES & LOCAL STORAGE
The website uses an entry in your browser's sessionStorage to restore scroll positions. It supports navigation and is not intended for analytics or advertising. The music setting is held only in memory for the current page visit. Acknowledgement of the cookie/privacy notice is stored under zw-privacy-notice-v1 in localStorage until you clear website data. It only prevents repeated display of the notice and is not consent to tracking.
No cookies are set. Lovable's visit counting works without cookies and without storage on your device. Where, beyond these checks, further device access would require consent under § 165(3) TKG 2021, it will not be used before you consent.
- FONTS, IMAGES, VIDEOS & MUSIC
Fonts are hosted locally; no connection to Google or other font providers is made. Images and videos are delivered as website files, not embedded social media players. Background music is off at the start and is loaded and played only through “Music on”. You can stop it at any time with “Music off”.
- CONTACT BY PHONE OR EMAIL
When you call or email, we process your details (e.g. name, contact information, message and reservation request) to handle your enquiry or reservation. For contractual or pre-contractual enquiries, the legal basis is Art. 6(1)(b) GDPR; for other enquiries, our legitimate interest in responding (Art. 6(1)(f) GDPR). Data is deleted once no longer needed, unless statutory retention obligations apply.
The email mailbox is operated by ALL-INKL.COM (Neue Medien Münnich) in Germany; a data processing agreement with this provider is in place.
- EXTERNAL LINKS
Google Maps, weather information, the city's parking information and the tourist board's events calendar are external links, not embedded maps or search tools. Opening a link takes you to that provider, which receives connection data such as your IP address; its privacy information then applies. Phone and email links open the corresponding app on your device.
- YOUR RIGHTS
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Please use the contact details above.
- RIGHT TO COMPLAIN
You can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at
- PROTECTED EDITING AREA
Website administration processes email addresses, authentication and session information through Lovable Cloud. The session is stored in browser local storage for protected access only. Authorized people can save website texts and images. The purpose and legal basis are secure website administration (Art. 6(1)(f) GDPR).
Account data is retained for the duration of access authorization; in addition, daily database backups apply with a retention of up to approximately 14 days.
- AUTOMATIC TRANSLATION IN THE EDITING AREA
Saved German website texts are automatically translated into English in the editing area so that both language versions stay current. Only the relevant text fields are transmitted; no visitor data is involved. The legal basis and retention period of this process are currently being clarified with the provider; we are happy to answer questions at the contact address above.
- LAST UPDATED
12 November 2026