Responsible:

Parkring 10 in 1010 Vienna,

T : +43 1 516 31 0   F : +43 1 516 31 190   E: office@lenikushotels.com

LENIKUS HOTEL COLLECTION GmbH,
Parkring 10 in 1010 Vienna.

Collection and storage of personal data and the type and purpose of their use.

www.theleogrand.com

The information is automatically sent from your device to our website.

The following information is temporarily stored in a so-called log file:

• IP address of the end device
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made
• The browser used and, if applicable, the operating system of your computer and the name of your access provider

This data is kept for 6 months until it is automatically deleted.

From this data, important clues for optimizing the website can be obtained. Errors and crashes can be better understood and user friendliness improved. The data is technically necessary to display the website to you and to ensure stability and security.

The legal basis for data processing is Art 6 Para 1 lit f GDPR. Our legitimate interest lies in the purposes mentioned above.

 Without the provision of your personal data, we cannot guarantee the efficient and secure operation of the website.

• If you contact us by email, via the contact form offered or via other channels (visible on the website), the data you provide will be stored so that we can answer your request.
• We have a legitimate interest in processing your request within the meaning of Art 6 Para 1 lit f GDPR.
• In the event that a contract is concluded, separate information is Art 13 GDPR for data processing. If no contract is concluded, your data will be deleted at the end of the calendar year following the end of the negotiations.
• If you do not want to provide us with your data in this way, you can also contact us by phone or post at any time.
• We cannot contact you without providing your personal data. On the other hand, fields that are not required fields in the contact form enable us to process your request more efficiently.

Data processing in connection with the online booking option for our hotels and related functionalities
 

• We are partners of Design Hotels AG. You can book rooms in our hotels via the booking option linked to www.theleogrand.com, which is operated via a booking platform of Design Hotels AG, Stralauer Allee 2c, 10245 Berlin.
• If you make use of this option, we process the personal information you provide via this booking platform (contact details, payment information, booking data such as time of arrival and departure as well as booked room, participation in loyalty programs, possibly historical booking data), which are necessary to your Make a room reservation.
• This information is marked with a black arrow. The booking process cannot be carried out without providing this data.
• We process information that is not marked with a black arrow if you voluntarily provide it in order to be able to make your booking more efficiently or to be able to take into account your special wishes with regard to a booking.
• We process the data you provide as well as the data that arise during the booking process for the purpose of making your room booking and the payment process.
• The legal basis for this is the need to carry out (pre-) contractual measures, but also our (and your) legitimate interest in uncomplicated and efficient booking processing. So that your room reservation or the related payment can be processed, we pass on your personal data to the credit card provider you have selected.

Data processing in the event of registration for our newsletter with your consent

• We use the Daily Point newsletter to send newsletters with information about our offers and products.
• If you register there by ticking the box, you give us your consent to process your email address [add any other data that may be processed in this context, if necessary], so that we can send you this newsletter.
• You can revoke your consent at any time, which does not affect the lawfulness of processing based on your consent until your revocation.
• You can revoke your consent at any time directly via the Daily Point newsletter or by contacting us as shown under "Rights of the data subject".
• Without the provision of your contact details, we cannot send you information about our products and offers.

We use cookies on our website. These are small text files that are automatically saved on your device when you visit our website. The use of cookies serves on the one hand to make the visit to our website as pleasant as possible, and on the other hand to optimize the user-friendliness of our website.
 

The legal basis is Art 6 Para 1 lit f GDPR. The legitimate interests lie in the purposes mentioned. Furthermore, cookies and analysis tools enable us to carry out statistical evaluations of the use of our website to improve our offer.
 

These are used exclusively on the basis of your consent and are only set after we have given your consent. You give us your consent via the cookie bar on the page. They help us to continuously improve our website, increase the success of our website and optimize our offer.
 

Google Analytics is used on our website. This is a web analysis service provided by Google Inc. (https://www.google.at/intl/de_at/about) (1600 Amphitheater Parkway, Mountain View, CA 94043, USA, hereinafter referred to as Google).

Google has submitted to the EU-US Privacy Shield. Please see the privacy policy at https://www.google.com/intl/de_ALL/policies/privacy/.

 

The following information is generated by the cookie and processed by Google:

• Browser type / version
• Operating system used
• Previously visited page
• IP address
• Time of the server request
  
   

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
 

If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the EEA Agreement. The full IP address will only be transmitted to a Google server in the USA and abbreviated there in exceptional cases.
 

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and internet usage to the website operator.
 

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de.
 

This website uses Google Analytics with the extension "anonymizeIP ()". As a result, IP addresses are processed in abbreviated form, so that they cannot be linked to a person. As far as the data collected about you is personal, it is immediately excluded and the personal data is then deleted immediately. We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.
 

You can delete set cookies at any time via your browser. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

Social media plug-ins from Facebook, Google Tags and Twitter are used on our websites to make our company better known and to improve our reach. These are initially blocked by the Shariff process so that they do not determine or transmit any data. The button is activated the first time and the desired action (eg "Like") is set only when the button is clicked a second time.
 

You can recognize the provider of the plug-in and the website via which such cookies are set by the logo on the respective page.
 

As soon as you activate data transmission with the first click, data is automatically transmitted to the respective platform, regardless of whether you have an account or are logged in or not. Do not click a button until you agree to the data transfer. The platforms also use the data for their own purposes, such as advertising, market research, and the design of their own pages as needed.

For this purpose, usage, interest and relationship profiles are created by the respective provider. We have no influence on all of this: we have no influence on the data collected and data processing operations, nor are we aware of the full scope of the data collection, the purposes of the processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

If you do not want these platforms to collect data about you, you must not activate the buttons. Please note the respective data protection declarations of the following providers:
 

• Facebook Inc., 1601 S California Ave, Palo Alto, California 94303, USA. Facebook has submitted to the EU-US Privacy Shield. https://www.facebook.com/about/privacy
• Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94303, USA. Google has submitted to the EU-US Privacy Shield. https://www.google.com/intl/de_ALL/policies/privacy/
• Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94043, USA, USA. Twitter has submitted to the EU-US Privacy Shield. https://twitter.com/privacy

We use Google Maps on some websites. This enables us to display interactive maps directly on the website and enables you to conveniently use the map function. When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in this declaration is automatically transferred when you visit our website, regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want this, you must log out before activating the button.

Google stores your data as usage profiles and uses them for purposes of advertising, market research and / or designing a website to meet your needs. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about their activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise them. Further information on the purpose and scope of data collection of your processing by the plug-in provider can be found in the provider's data protection declaration. For more information related to Google, please see Google Analytics above.

With the plug-ins, we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The use of the plug-ins is based on our, but also your legitimate interest in enabling the functions mentioned. In this context, please also note our information on cookies.

Processing of Customer Reviews and Use of Artificial Intelligence

We use applications based on Artificial Intelligence to support the analysis and response to customer reviews as well as other communication and administrative activities.

For the automated analysis and response to customer reviews, we use, in particular, the AI powered tool Raitify. Raitify is an Austria based company. According to the provider, data processed through Raitify is handled exclusively on servers located within the European Union.

In addition, we may use other AI powered applications and services, in particular ChatGPT by OpenAI and Claude by Anthropic, as well as comparable AI applications. These services may support us, for example, in creating, revising, translating, summarising and structuring texts as well as generating suggested responses.

Types of Data Processed

In connection with the analysis and response to customer reviews, we primarily process publicly available review texts published, for example, on Google, Tripadvisor, booking platforms or other review portals.

Depending on the content of the respective review, such texts may also contain personal data, such as first names, surnames, usernames or other information voluntarily disclosed by the reviewer.

We ensure that personal data is transmitted to AI powered services only to the extent necessary for the respective purpose. Where possible, data is anonymised or pseudonymised before processing.

Special categories of personal data within the meaning of Art. 9 GDPR should generally not be transmitted to AI powered applications unless this is necessary for a specific purpose and legally permissible under applicable data protection law.

Purpose of Processing

The processing is carried out in particular for the following purposes:

Supporting the analysis of customer reviews, generating suggested responses, improving the language and style of texts, translations, summaries and supporting professional and efficient communication with guests and customers.

The AI applications are not used to make automated decisions that produce legal effects concerning individuals or similarly significantly affect them.

Content generated by AI applications may be reviewed and, where necessary, adjusted by our employees before being used.

Legal Basis for Processing

Where personal data is processed in connection with the use of the services mentioned above, such processing is generally carried out on the basis of Art. 6 (1) (f) GDPR.

Our legitimate interests include, in particular, the efficient handling of customer reviews and enquiries, improving our communication, optimising internal workflows and supporting our employees in creating and editing texts.

Where another legal basis applies to a specific processing activity, the processing will be carried out on the basis of the respective applicable legal provision.

Use of External AI Service Providers

When using AI powered applications, data may be transmitted to and processed by the respective providers of these services.

These providers may include, in particular:

Raitify, based in Austria

OpenAI, provider of ChatGPT

Anthropic, provider of Claude

as well as other providers of comparable AI powered services that we may use.

Where a provider processes personal data on our behalf, the provider is engaged in accordance with the applicable data protection requirements for processors.

We select the services we use taking into account their respective data protection and security standards and limit the information transmitted to what is necessary for the respective processing purpose.

Processing Outside the European Union

According to the provider, processing by Raitify takes place exclusively within the European Union.

When using other AI providers, particularly internationally operating providers such as OpenAI or Anthropic, personal data may also be processed outside the European Union or the European Economic Area.

Where personal data is transferred to countries outside the European Union or the European Economic Area, such transfers are carried out only in compliance with the requirements of Art. 44 et seq. GDPR.

This may include, in particular, an adequacy decision by the European Commission, Standard Contractual Clauses approved by the European Commission or other appropriate safeguards ensuring an adequate level of data protection.

Data Retention

We retain personal data in connection with the use of AI applications only for as long as necessary for the respective processing purpose or as required by applicable statutory retention obligations.

When external AI providers are used, transmitted data may be processed and retained for a limited period in accordance with the contractual arrangements and data protection provisions of the respective provider.

Where technically and contractually possible, we select settings and services designed to limit the retention of personal data to what is necessary.

No Solely Automated Decision Making

We use AI applications as supporting tools. Decisions that produce legal effects concerning an individual or similarly significantly affect an individual are not made solely on the basis of the AI applications we use.

Rights of Data Subjects

Subject to the applicable legal requirements, data subjects have, in particular, the right of access pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR and, where applicable, the right to data portability pursuant to Art. 20 GDPR.

Where processing is based on Art. 6 (1) (f) GDPR, data subjects also have the right, pursuant to Art. 21 GDPR, to object to the processing on grounds relating to their particular situation.

Data subjects may exercise these rights by contacting us using the contact details provided in this Privacy Policy.

This data protection declaration is currently valid and has the status 03/2025

Due to the further development of our website and offers, legal changes or official requirements, it may be necessary to change this data protection declaration.”

Data subjects generally have the right to information, correction, deletion, restriction, data portability, revocation and objection. These rights can be exercised by email to datenschutz@lenikus.at or by post at LENIKUS HOTEL COLLECTION GmbH, Parkring 10 in 1010 Vienna. You can also revoke your consent to data processing in this way. There is also the right to lodge a complaint with the responsible supervisory authority (in Austria this is the data protection authority).

With regard to the exercise of data subject rights in connection with the third-party providers mentioned in this data protection declaration, please contact the person responsible in the relevant data protection guideline.