privacy policy

1. Controller

The controller within the meaning of the GDPR is:

2. Legal bases for processing

We only process personal data where there is a legal basis for doing so. Depending on the processing, we rely in particular on:

• Art. 6(1)(a) GDPR – your consent, where such consent is required;
• Art. 6(1)(b) GDPR – for taking steps prior to entering into a contract or for the performance of a contract, in particular for enquiries, reservations, bookings, service packages and the handling of a stay;
• Art. 6(1)(c) GDPR – for compliance with legal obligations, in particular tax, company-law or registration obligations;
• Art. 6(1)(f) GDPR – to protect our legitimate interests, in particular in the secure, stable and functional operation of our website, the efficient organisation of our services and the protection of legal claims.

3. Contacting us

If you contact us by email, we process the data you send us, in particular your name, email address, telephone number if applicable, the content of your message and details of an accommodation, enquiry, booking or service package, for the purpose of handling your request.

For enquiries relating to a potential or existing contractual relationship, processing is based on Art. 6(1)(b) GDPR. For general enquiries, processing is based on our legitimate interest in handling and answering the enquiry pursuant to Art. 6(1)(f) GDPR.

This website does not currently use its own contact form. Contact is made via the communication channels stated, in particular by email.

4. Hosting & server log files

This website is operated by an external service provider (host) who makes the website available on its servers. Where the host processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

When the website is accessed, technically necessary information may be processed in server log files. This includes in particular:

• IP address or an IP address processed by the hosting provider in accordance with its technical configuration,
• date and time of access,
• name and URL of the file accessed,
• browser and operating system used,
• referrer URL.

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of the website.

Our hosting provider is:

5. Cookies & audience measurement

Our website uses technically necessary cookies and similar technologies where these are required for operating the site and using certain functions. Where consent is required for the use of a technology, it is obtained before processing via the consent banner used.

You can change or withdraw any consent you have given at any time via the function for managing your consent offered on the website. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Audience measurement with Burst Statistics

To analyse the use of our website statistically, we use Burst Statistics. Burst Statistics is operated locally within our WordPress installation. The statistical data collected is stored on our own web server; IP addresses are anonymised.

Where audience measurement takes place without cookies requiring consent or similar access to the end device, we base the processing on our legitimate interest pursuant to Art. 6(1)(f) GDPR in improving our website and designing it in line with demand. Where consent is required, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR.

Further information can be found in the provider's privacy policy: burst.ai/privacy-statement .

6. Web fonts

For a consistent appearance, this website uses fonts, including Cormorant Garamond, Montserrat and Allura. These fonts are hosted locally on our server and are loaded directly from there. Loading these fonts therefore does not establish a connection to external font provider servers such as Google Fonts.

7. Bookings, Webplanner, service packages, Stripe & Feratel

Booking platforms

We may offer, market or manage holiday accommodation via external booking platforms such as Airbnb, Booking.com and comparable portals. In the context of enquiries and bookings, we receive and process the personal data required to handle the respective enquiry, reservation or booking.

Processing is carried out in particular pursuant to Art. 6(1)(b) GDPR and, where legal obligations exist, pursuant to Art. 6(1)(c) GDPR. The respective booking platform also processes personal data as a separate controller. The privacy policies of the platform used therefore also apply.

Webplanner – booking, channel management and guest management system

To display availability, handle booking enquiries and bookings, and manage and look after holiday accommodation, we use the software Webplanner. Webplanner is used both for Ländlefee 's own booking processes and for holiday apartments and holiday homes marketed or managed by Ländlefee .

Webplanner can be used in particular to manage availability and occupancy, synchronise booking portals, handle enquiries and reservations, process direct bookings, manage guest data, send guest correspondence and process price, payment and stay information.

All personal data you provide in connection with a booking enquiry or booking via our website or the booking channels used is processed by us in order to handle the enquiry or booking and to provide you with all information relevant to the booking and the stay.

In particular, the following personal data may be processed:

• first and last name,
• address,
• email address and telephone number,
• arrival and departure date,
• number of and, where applicable, details of fellow travellers,
• booking, reservation and stay data,
• booked accommodation,
• prices, invoice data and payment status,
• information voluntarily provided in connection with an enquiry, booking or stay,
• technically necessary connection data.

Processing is carried out for taking steps prior to entering into a contract and for the performance of contracts pursuant to Art. 6(1)(b) GDPR and, where legal obligations exist, pursuant to Art. 6(1)(c) GDPR. Where technically necessary connection data is processed in connection with the embedded booking area, this is additionally based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in the secure and functional provision of the booking system.

Where Webplanner processes personal data on our behalf, it does so as a processor. We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR.

Payment processing via Stripe

For direct bookings, directly bookable service packages and other online payments, we use the payment service Stripe. The Stripe account is operated by Ländlefee / Andrea Keri e.U.

If you choose a payment method offered via Stripe or pay for a service package via a Stripe payment link, the data required for payment processing is transmitted to Stripe or processed directly by Stripe.

This may include in particular the following data:

• name and contact details,
• email address,
• billing or company details,
• booking or package information,
• payment amount and currency,
• payment method,
• transaction data,
• technical data such as IP address and device information,
• depending on the payment method, card or account information.

For directly bookable service packages, an internal reference number may also be transmitted to Stripe so that the payment can be matched to the previously documented booking.

Where technically provided for, the email address entered beforehand may also be passed to Stripe to pre-fill the payment form.

Ländlefee in principle only receives the payment information required for allocation, contract processing and invoicing. Full card details are not stored by us.

Processing is carried out for the performance of the contract and for payment processing pursuant to Art. 6(1)(b) GDPR.

Depending on the specific processing, Stripe processes personal data partly as a processor and partly as an independent controller, in particular where this is necessary for payment processing, security, fraud prevention or compliance with its own legal obligations.

According to Stripe, for Stripe accounts outside North and South America the contracting party to the data processing agreement is in particular Stripe Payments Europe, Limited in Ireland.

Stripe services may involve cross-border data processing. For this, Stripe uses the transfer mechanisms provided for under the GDPR.

Further information on data protection at Stripe can be found at stripe.com/at/privacy .

Directly bookable service packages – booking status and legal declarations

For directly bookable service packages, certain details and declarations are documented before you are forwarded to Stripe. This serves the correct processing of the contract and as evidence of the declarations made during the booking process.

In particular, the following data may be processed and stored:

• email address,
• service package booked and price,
• whether the booking is made as a business or as a consumer,
• confirmation of the terms and conditions for service packages,
• for consumers: acknowledgement of the withdrawal information,
• where applicable, express request for the service to begin before the end of the withdrawal period,
• where applicable, confirmation of awareness of the legal consequences of full performance of the contract,
• date and time of the declaration,
• internal booking or reference number,
• technical information about the browser or device used.

To prevent misuse and for evidence purposes, the IP address used when accessing the page may be processed in hashed form. The raw IP address is not stored in the booking consent record; instead a technically generated check value is stored.

Where processing is necessary for the initiation and performance of the contract, it is carried out on the basis of Art. 6(1)(b) GDPR.

Where data must be processed or retained to comply with legal obligations, processing is carried out on the basis of Art. 6(1)(c) GDPR.

Where the documentation is necessary to establish, exercise or defend legal claims, processing is carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Digital guest registration via Feratel

Where statutory guest registration is required for a booked holiday accommodation, the guest may receive a link to digital guest registration or pre-check-in via the system Feratel . The link may be sent directly by email or automatically via Webplanner.

Digital guest registration involves processing the personal data required for the respective statutory registration. This may include in particular first and last name, address, date of birth, travel document data, stay details and other legally required registration data.

Processing is carried out to comply with statutory registration obligations pursuant to Art. 6(1)(c) GDPR.

Data is entered in the environment provided by Feratel; for processing operations there, the respective privacy information of the system or of the responsible municipality or tourism organisation also applies.

Further information on Feratel can be found at www.feratel.at .

8. Recipients & disclosure of data

Personal data is only disclosed where this is necessary to handle an enquiry, booking, stay or booked service package, where there is a legal obligation, or where another legal basis under data protection law applies.

Depending on the specific accommodation, booking or service, recipients may in particular include:

• IT, hosting, booking and payment service providers we use, including Stripe,
• operators of external booking platforms,
• owners or other service partners of an accommodation managed or marketed by Ländlefee , where necessary for the booking, stay or invoicing,
• responsible municipalities, tourism organisations or authorities, where there is a statutory obligation to transmit data.

Where service providers process personal data on our behalf, data processing agreements pursuant to Art. 28 GDPR are concluded where required by law.

9. Storage period

We only store personal data for as long as necessary for the respective purpose of processing or as required by statutory retention obligations.

Data from contractual and business relationships, including data from service package bookings required for contract processing and as evidence, is generally retained for up to seven years in accordance with statutory commercial and tax retention obligations, unless other statutory periods or legitimate reasons require longer or shorter storage.

Data from enquiries that do not lead to a contractual relationship is deleted as soon as it is no longer needed for processing and there are no legal or legitimate reasons for further storage.

10. Your rights

Subject to the statutory requirements, you have in particular the following rights:

• Access pursuant to Art. 15 GDPR,
• Rectification pursuant to Art. 16 GDPR,
• Erasure pursuant to Art. 17 GDPR,
• Restriction of processing pursuant to Art. 18 GDPR,
• Data portability pursuant to Art. 20 GDPR,
• Objection pursuant to Art. 21 GDPR,
• Withdrawal of consent given pursuant to Art. 7(3) GDPR with effect for the future.

To exercise your rights, simply send a message to hallo@laendlefee.com .

11. Right to lodge a complaint with the supervisory authority

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority.

In Austria, this is the:

Version: September 2026. This privacy policy will be updated as needed to reflect changes in the law, the systems used or our processing procedures.