Privacy policy

Deutsche Fassung · Last updated: November 2026

The short version

This website works without cookies, tracking, analytics tools or contact forms. Fonts, images and the map are stored on our own web space, so visiting the site does not connect you to Google, Meta or any other third party. We only receive personal data if you contact us, and in the form of the technically necessary logs of our web server.

Controller

Christian Schumi
Der Schumi. Landgasthof
Reipersdorf 4
9313 St. Georgen am Längsee
Austria

Tel: +43 4213 2038
Email: [email protected]

When you visit this website

So that this website can be displayed, our web server processes technically necessary data each time it is accessed:

We use this data to deliver the website, keep it secure and detect faults or attacks. We do not analyse it to identify visitors or build profiles. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). The logs are kept only as long as necessary for these purposes and are then deleted automatically. The website is transmitted in encrypted form via HTTPS.

Cookies and similar technologies

We do not set cookies or store any other information on your device. No consent is therefore needed, and no cookie notice appears.

When you contact us

If you call us or send an email, for example about a table reservation, a room enquiry or a celebration, we process your details to deal with your request. These are usually your name, your contact details and the content of your enquiry. The legal basis is the performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR), and for other enquiries our legitimate interest in answering them (Art. 6(1)(f) GDPR).

We delete this data once your enquiry has been dealt with, unless we have to keep it for longer. Records relevant for accounting and tax are generally kept for seven years (Section 132 of the Austrian Federal Fiscal Code, BAO). Providing your data is voluntary, but we cannot deal with your enquiry without it.

Normal emails are not encrypted all the way. Please do not send us particularly confidential information by email.

When you stay with us

We process the data needed for your stay (Art. 6(1)(b) GDPR). We are also legally required to keep a guest register and to report levies (Art. 6(1)(c) GDPR). We keep this data for the statutory retention periods.

When you apply for a job

We use application documents only for the application process (Art. 6(1)(b) GDPR). If you are not hired, we generally delete them no later than seven months after the process ends, so that we can respond to any legal claims (Art. 6(1)(f) GDPR). We only keep them for longer with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

Links to other providers

This website contains simple links to Google Maps, Instagram and Facebook. These are not plugins or embedded content: data is only transferred when you click a link. From then on, the privacy policy of the provider concerned applies. Data may also be transferred to the USA.

Our pages on Facebook and Instagram

We run our own pages there to share news about our house. When you visit or interact with them, Meta processes your data under its own responsibility. For the page statistics (“Insights”) that Meta provides to us in aggregated form, we are joint controllers with Meta (Art. 26 GDPR). The agreement on this states that Meta is responsible for fulfilling your rights, but you can also contact us. The legal basis is our legitimate interest in communicating with guests and other interested people (Art. 6(1)(f) GDPR).

Who receives your data

We do not sell your data and only share it where necessary. Recipients may be our web hosting and email providers and IT service providers acting on our behalf (Art. 28 GDPR), as well as our tax advisers and public authorities where there is a legal obligation.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)).

Right to object: Where we process data on the basis of our legitimate interest, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

Just write to us at [email protected]. No automated decision-making, including profiling, takes place.

If you believe that the processing of your data breaches data protection law, you can lodge a complaint with the supervisory authority:

Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42
1030 Vienna
www.dsb.gv.at

Map credit

The map on this website is a stored image based on data from OpenStreetMap contributors (ODbL).