Privacy Policy

1. Controller

S.IN GmbH — Schitterhof CAMPING WEISS, Birkachweg 3, 8724 Spielberg, Austria.
Email: servus@schitterhof.at (alternatively info@schitterhof.at) · Tel. +43 670 50 90 460.

2. What data we process

• Booking data: name, address, email, phone, chosen category, period, persons, options and payment status.
• Guest registration data (§ 5 Meldegesetz): data of all accompanying persons as well as your digital signature for the legally required guest registration.
• Payment data: payment is processed via our payment service provider; complete card details are not stored by us.
• Entries in the AI chat assistant: questions and text you enter into our FAQ assistant (see point 8).
• Technical data: server logs (IP, time, page accessed) for secure provision.

3. Purposes & legal bases

• Performance of the contract (booking, payment, confirmation) — Art. 6(1)(b) GDPR.
• Statutory registration obligation (guest registration) — Art. 6(1)(c) GDPR.
• Secure operation of the website, responding to enquiries and fraud prevention — Art. 6(1)(f) GDPR.

4. Processors & recipients

We use carefully selected service providers (processing under Art. 28 GDPR):

• Supabase / AWS — database hosting in the EU (Frankfurt region, eu-central-1).
• Vercel — hosting/delivery of the website.
• Mollie — payment processing (EU).
• Resend — sending of confirmation and service emails.
• AI service provider — processing of entries in the FAQ assistant (see point 8).
• Authorities, insofar as legally required (e.g. registration system, local tourist tax).

5. Data transfer to third countries (USA)

Some of the service providers used (in particular Vercel, Resend as well as the AI service mentioned under point 8) are companies with their registered office or parent company in the USA. Processing in a third country outside the EU/EEA therefore cannot be ruled out. The database hosting itself takes place in the EU (Frankfurt).

Insofar as personal data is transferred to a third country, this takes place on the basis of appropriate safeguards within the meaning of Art. 44 et seq. GDPR — in particular via the EU Standard Contractual Clauses and/or a certification of the respective provider under the EU-US Data Privacy Framework (DPF). A copy of the respective safeguards can be requested from us.

6. Retention period

Booking and invoice data is stored in accordance with the retention periods under tax and company law (as a rule 7 years). Registration data is retained in accordance with the requirements of the registration law. Beyond that, we store data only for as long as is necessary for the stated purposes.

7. Cookies

We use exclusively technically necessary cookies for the booking process and the protected area. No tracking for advertising purposes takes place.

8. AI chat assistant

On our website you can voluntarily chat with "Resi", our digital receptionist. Resi is an AI assistant (disclosure pursuant to Art. 50 of the EU AI Act) — you are not talking to a human unless our team takes over the conversation; team replies are labelled as such in the chat.

Data processed: your chat messages including time and language. Please only enter information that is necessary for your request.

Purpose & legal basis: answering enquiries about your stay and booking and handing over to our team — Art. 6(1)(b) GDPR (pre-contractual enquiry) or Art. 6(1)(f) GDPR (service quality).

Recipients: replies are generated via the Claude API of Anthropic PBC (USA); transfers are based on the EU-U.S. Data Privacy Framework. Anthropic does not use these inputs to train its AI models. Conversations are stored in our database (EU, Frankfurt region) so that our team can take over and assist.

Retention: chat conversations are deleted automatically no later than 12 months after the last message — earlier at any time on request (an e-mail to servus@schitterhof.at is sufficient).

WhatsApp chat with Resi

You can also reach Resi via WhatsApp. This is voluntary — the chat on this website, email and phone are open to you for the same request.

Data processed: your mobile number, the profile name stored in WhatsApp, the content of your messages, plus time and language. Please do not send payment, ID or health data via WhatsApp.

Purpose & legal basis: answering your enquiry and handing it to our team — Art. 6(1)(b) GDPR (pre-contractual enquiry) and Art. 6(1)(f) GDPR (quality of service). You start the communication yourself by writing to us.

Recipients: delivery runs through WhatsApp Ireland Limited / Meta Platforms Ireland Limited; data may also be transferred to the USA (EU-U.S. Data Privacy Framework). Meta also receives metadata such as phone numbers and timestamps. We have no influence over that processing; WhatsApp's own terms apply in addition. Replies are generated via the Claude API of Anthropic PBC (USA); we store the conversations in our database in the EU.

AI disclosure & retention: on WhatsApp, too, Resi answers first — an AI assistant (Art. 50 of the EU AI Act); we say so in the chat on first contact. If our team takes over, we tell you. Conversations are deleted no later than 12 months after the last message, earlier on request (email servus@schitterhof.at).

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. To exercise these, please contact servus@schitterhof.at. You also have the right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

As of: 07/2026. Note: This text is a carefully prepared draft and does not replace legal advice.

Language version

This privacy policy is provided in further languages as a pure service translation. Only the German version is authoritative; in the event of discrepancies, the German text prevails.