top of page

Data protection

Data protection


We use the following data when you enter into a contract with us


Base data:

Apartments Diana

Leharstrasse 3

9546 Bad Kleinkirchheim (Carinthia)

+43 664 360 7016



Other personal data that you or third parties provide to us with your consent or otherwise permissible when initiating a contract, during the contractual relationship (e.g. to issue a guest card) or to fulfill legal obligations:

Date of birth or age, marital status, gender, occupation, ID data, bank details, authority to sign or represent, contractual commitment, notice/cancellation deadlines or other personal information that you have given us.



Use of processors

The protection of your data is important to us. Even if we use an order processor, e.g. and the company Feratel - guest directory according to Section 19 Registration Ordinance), we make sure that the order processing takes place within the European Union.


  1. registration data


  • obligation to report


According to the Austrian Registration Act, you are obliged to register with us using the data specified in § 5 and § 10 of the Registration Act. This concerns the following data:

Name, date of birth, gender, nationality, country of origin, address including postal code and - for foreign guests - type, number, issuance room and issuing authority of a travel document as well as the date of arrival and departure.


1.2. guest directory

We will keep this data in a guest directory due to the legal obligation imposed on us in accordance with Section 19 of the Registration Act Implementation Ordinance and store it for a period of 7 (seven) years, unless it is processed longer for other purposes specified in this data protection declaration will.


1.3. Sharing of Data

The data categories "Arrival", "Departure" linked to the country of origin are forwarded to the municipality in which our accommodation is located in accordance with § 6 Tourism Statistics Ordinance. Aggregated data on the total number of overnight stays and the persons who are obliged to pay the residence tax must also be sent to the respective Tiroler Zugspitz Arena tourism association to which we belong and/or the municipality. This is based on Section 9 of the Tyrolean Residence Tax Act.


1.4. Legal basis of the processing


The processing in accordance with points 1.1 to 1.3 above is based on Article 6 (1) (c) GDPR (fulfilment of a legal obligation).


1.5. Additional data transmission to the municipality of Bad Kleinkirchheim


In addition, we forward your postal code and year of birth (in pseudonymised or anonymous form) for statistical purposes to the tourism association to create and evaluate origin and age statistics to our municipality and our TVB. This forwarding is based on Art. 6 Para. 1 lit e (task in the public interest) and lit f (overriding legitimate interests) GDPR. You can object to this at any time for reasons that arise from your particular situation (Article 21 (1) GDPR).


  1. guest card


  • General


You have the option of using a guest card. The guest card grants you discounts and/or services at various companies in the region (e.g. discounted entrance fees). The guest card is valid for the period of your stay with us.


  • Issuing the guest card


The guest card will only be issued and handed out by Apartments Diana at your request. Depending on the guest card system used by the TVB and/or the accommodation provider, it is either in the form of


  • an electronically generated guest card,




2.3. Processed personal data


The following personal data, which are determined from the registration data (see point 1 above), are processed for both the electronically generated and the manually generated guest card :

First name, last name, date of birth and length of stay (arrival/departure), country of origin, postal code.

If the guest card is issued in the form of a "Meldezettel", this contains the content according to Section 5 in conjunction with Section 9 of the Registration Act (see point "Registration data" 1.1 above). In this case, there is no electronic processing for the purposes of the guest card.

When using the guest card, the following personal data is also processed: data on the usage cycle of the respective card, use of services, bookings, transaction logging, billing data, reference to the registration data and the accommodation company.

The data is required in order to establish an identity on the one hand and to determine the period of validity of the guest card with the respective service provider on the other hand, and to enable the discounts to be billed between service providers, the TVB and, if applicable, the accommodation providers.



2.4. Legal basis of the processing


The processing of the data for the purposes of the guest card takes place either on the basis of your consent (Art. 6 Para. 1 lit a DSGVO) or, if the guest card is part of the provision of services within the framework of the accommodation contract, for the purposes of fulfilling the contract (Art. 6 Para. 1 lit b DSGVO ).

You can revoke your consent at any time verbally to the accommodation provider or in writing to the e-mail address



2.5. Operation of the guest card system


The guest card system is operated by the local tourism association ("TVB"). Local accommodation providers and local companies (“service providers”) are also involved.

The data processed for the guest card will be deleted after 48 (forty-eight) months.


2.6. recipient of the data


The local TVB receives the data processed for the purposes of the guest card for the purpose of billing the service providers and/or accommodation providers.

The individual service providers who grant discounted services based on the guest card also receive the data if you make use of the guest card services from these companies.

In order to claim discounts, you must show the respective guest card, on which the data is shown, to the service provider and thus disclose it yourself. The entrepreneur then checks, usually by reading the barcode on the guest card and by sending the barcode data to our IT processor, whether it is (still) valid. Personal data is also transmitted to the entrepreneur, in particular your identity data (to verify identity and date of birth).

If the guest card is issued in the form of a "registration slip", he will check its validity using a carbon copy of the "registration slip".


  1. Other processing of your data


In principle, we only process the data that is absolutely necessary for the conclusion of the contract or for the fulfillment of the contract. If you have also given us your consent, we will process your data in such a way that we will send you information about our services until you revoke it. We use the following communication channels, if you have given us these:

Telephone, email, SMS, post or social media channels.



  1. data erasure


Your master data and other personal data will be deleted when they are no longer required to fulfill the purpose for which they were stored - usually after 7 (seven) years - or if the storage is inadmissible for legal reasons.


Instead of deletion, the data can also be made anonymous, which means that any personal reference is irretrievably removed.


  1. cookies


Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do no harm.

We use cookies to make our offer user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognize your browser on your next visit.

If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases.

If cookies are deactivated, the functionality of our website may be restricted.


  1. Web Analysis


Our website uses functions from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its advertising offering and its advertising.

You can prevent this by setting up your browser so that no cookies are saved.



  1. Newsletter

We do not send you any newsletters


  1. Social Media Plugins

We use Facebook.


  1. You can assert the following rights with regard to the processing of your data:

  • Right to information: You have the right to learn from us whether and to what extent we are processing your data.

 Contact / Responsible:

Apartments Diana

Dave Bouwman

Leharstrasse 3

9546 Bad Kleinkirchheim (Carinthia)


  • Your rights

In principle, you have the right to information, correction, deletion, restriction, data transferability, revocation and objection. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can complain to the supervisory authority. In Austria, this is the data protection authority.


  • Right of appeal: If you believe that the processing of your personal data violates Austrian or European data protection law, please contact us to clarify any questions. Of course you have the right to complain to the Austrian data protection authority or to a supervisory authority within the EU.


  1. Confirmation of identity:

In order to protect your rights and your privacy, we are entitled to request proof of identity in case of doubt.


  1. Claiming rights over fee:

If you request one of the mentioned rights for obvious reasons or particularly frequently, we are entitled to charge a reasonable processing fee or to refuse to process the request.


  1. Obligation to participate:

As part of our duty to cooperate, we are obliged to provide data on request in accordance with the statutory provisions (e.g. BAO, Registration Act, ZPO, StPO, ...).


  1. Period of validity:

This data protection declaration is valid from 01 October 2022 and replaces the existing data protection regulations.

bottom of page