Privacy Policy

This Privacy Policy explains who we are, how we obtain and use personal information about you, why we are allowed to do so by law, who has access to your personal information and what your rights are. Please review it carefully.

You can review the following sections to find out more about:
  • Changes to data protection legislation
  • Who we are
  • What personal information we collect and why
  • How we use your personal information
  • Who we share your personal information with and where it is stored
  • Legal grounds for using your personal information
  • Your rights
  • How you can contact us or make a complaint
  • Changes to this Privacy Policy
You have the right to object to us using your personal information for our organisation’s legitimate purposes. For more information about our organisation’s legitimate purposes for using your personal information, and your rights and how you can exercise them, please see the sections
Legal grounds for using your personal information and Your rights below.

Change to data protection legislation

The law in relation to data protection in the EU is changing in May 2018. This Privacy Policy has been updated with effect from 25 May 2018 to reflect your rights and to let you know how we collect and use personal information about you. We are committed to protecting your personal information. We will always keep your personal information safe and comply with applicable data protection legislation when using your personal information. This Privacy Policy explains how we will do that.

Who we are

We are GrandEtage GmbH, a private limited company incorporated in (and subject to the laws of) Austria. Our registered address is at:
  • GrandEtage GmbH
  • Schanzstrasse 37/17
  • 1140 Vienna, Austria
In this Privacy Policy, GrandEtage GmbH is also referred to as "GrandEtage", "we", "us" or "our". We are the “controller” of the personal information you provide to us. This Privacy Policy covers the use of your information by us and our local legal entities (which form part of the GrandEtage GmbH group of companies). If you have any questions concerning any GrandEtage GmbH, you can contact us using the details set out at the end of this Privacy Policy.

How we use your personal information

In addition to the uses outlined above, we may also use your personal information to:
  • personalise your experience (your information helps us to better respond to your individual needs)
  • improve our website (we continually strive to improve our website offerings based on the information and feedback we receive from you)
  • improve customer service (your information helps us to more effectively respond to your customer service requests and support needs)
  • process transactions
  • administer a contest, promotion, survey or other site feature
  • send periodic emails

We only ever use your personal information where we have a legal right to do so. Please see the
Legal grounds for using your personal information section below for further information. We implement a variety of security measures to maintain the safety of your personal data when you place an order or enter, submit, or access your personal data. Your personal data will be stored locally by us but may also be stored and backed up on servers located outside of the European Economic Area by our third-party cloud service provider. We ensure that your data is protected in these countries by requiring the recipients of your data to enter in standard contractual clauses which have been approved by the European Commission. If you would like to see a copy of these clauses, you can contact us using the details set out at the end of this Privacy Policy.

Legal grounds for using your personal information

We only collect and use your personal information if have legal grounds to do so. We rely on a number of different grounds for handling your personal information. These are as follows:

For our organisation’s legitimate purposes

In certain circumstances, it is necessary to collect and use your personal information for the purposes of our legitimate interests as an organisation.
Where we rely on this legal ground for handling your personal information, we consider whether our interests as an organisation are overridden by your interests or fundamental rights and freedoms. We have considered these matters and on balance, we consider that our interests described above are not outweighed by your fundamental rights and freedoms. You may request further information from us concerning the process we have followed here.
You have the right to object to the decision we have arrived at. Please see Your rights below. Where we think there is a risk that one of your interests or fundamental rights and freedoms may be affected, we will not use your personal information unless we have obtained your consent to using it in that way.

For compliance with our legal obligations

If asked, and if obligated and authorised to do so by law, we share your personal information with law enforcement agencies, regulators, courts or other public authorities.

For performance of our contract with you

Aside from the information noted above that we use on the basis of our legitimate purposes and to comply with our legal obligations, we use the information we collect as part of our booking process to assist in entering into a contract with you to provide our services. This may include us providing you with a quote for provision of our services.

Consent

We first obtain your consent before we:
  • Collect and use your information for the purpose of informing you of information about our business which may include new products, new locations and promotional offers.
  • Collect and use personal information concerning your health circumstances.
You may withdraw your consent at any time. Please see
Your rights below.

How long we keep your personal information

We retain your personal information for no longer than is necessary for the purposes for which it was provided and in accordance with our data retention policy. What this means in practice will vary between different types of information. Following these periods, we will stop using the relevant information and it will either be anonymised or deleted to the extent it is technically feasible to do so. In certain limited circumstances we may be required to retain your personal information for longer. When determining whether this is necessary for the purpose(s) for which it was provided, we take into account factors including:
  • The sensitivity of the personal data we are holding and business risks we face if we delete or anonymise the data.
  • Specific regulatory or other legal requirements to hold the information.

Your rights

You have the following rights regarding your personal information.
Right to be informed You have the right to be provided with clear, transparent and easily understandable information about how we use your personal information and your rights. This is why we are providing you with the details of what information we keep in this Privacy Policy.
Right of access You have the right to obtain access to your personal information (if we are using it) and certain other information (similar to that provided in this Privacy Policy). This is so you are aware and can check that we are using your personal information in accordance with data protection law.
Right to rectification You are entitled to have your personal information corrected if it is inaccurate or incomplete.
Right to erasure This is also known as ‘the right to be forgotten’, and, in simple terms, enables you to request the deletion or removal of your personal information where there is no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions (for example, we have the right to continue using your personal information if such usage is necessary for compliance with our legal obligations).
Right to restrict processing You have the right to ‘block’ or suppress further use of your personal information in certain circumstances (for example, where you think the personal information we are using about you is inaccurate, whilst we verify its accuracy). When usage is restricted, we can still store your personal information, but may not use it further. We keep lists of people who have asked for further use of their personal information to be ‘blocked’ to make sure the restriction is respected in future.
Right to data portability You have the right to obtain and reuse your personal information in a structured, commonly used and machine-readable format in certain circumstances when we use your personal information on certain legal grounds, such as consent. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party. The right to data portability does not apply to personal information which it is necessary for us to process for our organisation’s legitimate purposes.Please see the section Legal grounds for using your personal information to read about the circumstances in which we use your personal information on the basis of consent or for our organisation’s legitimate purposes.
Right to object to processing on the grounds of legitimate interests You have the right to object to us using your personal information for our organisation’s legitimate purposes. Please see the section Legal grounds for using your personal information to read about the circumstances in which we use your personal information for our organisation’s legitimate purposes.
Right to withdraw consent to processing If you have given your consent to us to use your personal information for a specific purpose, you have the right to withdraw your consent at any time (although if you do so, it does not mean that any use of your personal information up to that point is unlawful).
Right to make a complaint to the data protection authorities You have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal information or believe our use of your personal information does not comply with data protection law.
For more information about your rights or if you would like to exercise any of your rights, you are welcome to contact us at the contact details set out below under How you can contact us.

How you can contact us or make a complaint

If you would like to exercise your data protection rights or if you are unhappy with how we have handled your personal information, you may contact us by mail at:
  • GrandEtage GmbH
  • Schanzstrasse 37/17
  • 1140 Vienna, Austria
or by email at:
privacy@grandetage.net

If you would like to contact the company representative responsible for data, you may do so by email at privacy@grandetage.net, or by mail at:
  • Data Representative
  • GrandEtage GmbH
  • Schanzstrasse 37/17
  • 1140 Vienna, Austria

Changes to this Privacy Policy

From time to time we may update this Privacy Policy, and when we do we will publish the changes on our website