Skip to content

Privacy policy

Editorial note: every bracketed placeholder must be completed and the whole text reviewed by a lawyer before publication.

Google Tag Manager is configured and loads on every page (section 5). The booking flow (section 9) is not yet active — if the site goes live before then, remove that section or mark it as not yet active.

1. Controller

The controller responsible for data processing on this website is:

Vision Solutions Pro GmbH
Fischerstiege 9/4, 1010 Vienna, Austria
Email: contact@goldenbridgevienna.com · Phone: +43 1 963 9999 300
FN 628562 g, Commercial Court of Vienna · VAT: ATU 80807389

2. Principles

We process personal data only where necessary to run this website and provide our services. Without your consent, this website embeds no third-party content: fonts, map data and all scripts are served from our own server. Simply visiting the site therefore establishes no connection to any third-party server. The services described under 5 to 8 are loaded only once you consent to the relevant category.

3. Hosting and server log files

The website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you access it, the server automatically records data sent by your browser: IP address, date and time, the address requested, volume of data transferred, referrer, and browser and operating system identifiers.

The IP address is not stored in full: the last two blocks are set to zero, so 11.22.33.44 becomes 11.22.0.0.

The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR). Log files are deleted after 190 days. A data processing agreement under Art. 28 GDPR is in place with the provider.

4. Cookies and consent

We set only strictly necessary cookies without consent. All other cookies are set only after you have agreed in the banner. You can change or withdraw your decision at any time via “Cookie settings” in the footer.

Strictly necessary cookies

  • cc_consent and cc_consent_vid – store your cookie decision so the banner does not reappear. Lifetime: 180 days.
  • CRAFT_CSRF_TOKEN – protects forms against misuse. Lifetime: session.
  • CraftSessionId – identifies your session. Lifetime: session.

Legal basis: Section 165(3) of the Austrian Telecommunications Act 2021 in conjunction with Art. 6(1)(f) GDPR (legitimate interest in proper operation).

Proof of consent

To meet our accountability obligations (Art. 5(2), Art. 7(1) GDPR) we log, for each decision: a random visitor identifier, the categories chosen, the time, the cookie policy version, the browser identifier, and your IP address in hashed form – the original IP address is not stored.

5. Google Tag Manager

We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to manage our measurement and advertising tags.

Tag Manager is loaded on every page, that is, before you have made a choice in the banner. Doing so transmits your IP address to Google; processing in the USA may occur. Google LLC is certified under the EU-US Data Privacy Framework. We use Google Consent Mode v2: every storage and advertising function is set to “denied” when the container loads. As long as you do not consent, no cookies are set and you are not recognised; only cookieless signals without any identifier reach Google, from which Google estimates the number of visits it cannot measure. The legal basis for loading Tag Manager and for these cookieless signals is our legitimate interest in reliable reach and advertising measurement (Art. 6(1)(f) GDPR). You may object to this processing at any time (Art. 21 GDPR). Everything beyond that — cookies and recognition — rests on your consent (Art. 6(1)(a) GDPR, Section 165(3) of the Austrian Telecommunications Act 2021), which you can withdraw at any time via “Cookie settings” in the footer.

6. Analytics: Google Analytics 4

Through Tag Manager we use Google Analytics 4 to understand how the website is used. This processes, among other things, a truncated IP address, the pages you visit, time spent, referral source, and device and browser details. Google sets cookies on your device for this purpose.

The property used has the measurement ID G-VMJQL3F3VH. The provider is Google Ireland Limited. Transfers to the USA may occur. The legal basis is your consent (Art. 6(1)(a) GDPR). We use Google Consent Mode v2: no analytics cookies are set without your consent.

[Add: GA4 user-data retention period, data processing agreement with Google.]

7. Advertising: Google Ads

We advertise our apartments through Google Ads. If you consent to the “Marketing” category, Google measures whether a click on one of our ads later led to a booking. Google sets cookies for this and processes the signals ad_storage, ad_user_data and ad_personalization.

The provider is Google Ireland Limited. The legal basis is your consent (Art. 6(1)(a) GDPR). Without your consent Google sets no advertising cookies and does not recognise you. Only cookieless signals without an identifier are transmitted, from which Google extrapolates the share it cannot measure.

[Before activation, add: conversion ID, retention period for conversion data.]

8. Conversion measurement after a completed booking

After a booking, our booking system returns you to a confirmation page on this website. The address contains the booking number, the amount and the language. If you have consented to the “Analytics” category, we pass these details to the services named above as a purchase event, so that we can measure the success of our advertising.

To prevent an event being counted twice when the page is reloaded, we store a note against the booking number locally in your browser (localStorage). That note contains no personal data beyond the booking number and is set only after your consent.

Without your consent nothing is stored on your device and the booking is not attributed to you; all that is transmitted is a cookieless signal without an identifier. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 165(3) of the Austrian Telecommunications Act 2021).

9. Booking enquiry and payment

The search form lets you enter travel dates and number of guests to check availability. These details are transmitted to our booking system my-bookings, operated by IMS Media GmbH, Hagedornweg 73a, 1220 Vienna, Austria. The legal basis is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR).

The booking and the payment themselves take place on that provider’s systems, not on this website, where their privacy notice applies. Once complete, you are returned to the confirmation page described under 8.

[Add the data processing agreement, retention period and the provider’s privacy notice.]

10. Map on the contact page

The map is served entirely from our own server (map data from OpenStreetMap, processed and self-hosted). Displaying the map transmits no data to third parties.

11. Contacting us

If you contact us by email or phone, we process your details to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise our legitimate interest in responding (Art. 6(1)(f) GDPR). We delete this data once it is no longer needed, at the latest after [retention period], unless statutory retention obligations apply.

12. Your rights

You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw any consent at any time with effect for the future.

To do so, please contact [email address].

13. Right to lodge a complaint

If you believe the processing of your data infringes data protection law, you may lodge a complaint with the supervisory authority:

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
dsb@dsb.gv.at

14. Version

This privacy policy is dated [date]. We update it whenever our processing changes.