Privacy statement
  /  Privacy statement

Privacy statement

General information
Sambucus Apartments has developed this Internet Privacy Policy in order to protect the privacy of visitors to the website as a trusted partner who respects and guarantees the personal right to confidentiality.
In accordance with DSGVO 2016/679, Gruber Petra is the holder of the right to manage and process any personal data that may be collected via the website. The data controller manages or processes any data collected via the website ( under the conditions set out below.

Purpose of the processing and method of data collection
Sambucus Apartments only processes data that the visitor voluntarily provides to the website. Navigation on the website is also possible without providing personal data and information. Each visitor is free to provide Sambucus Apartments with limited personal data in order to use only certain services. Personal data collected and stored will only be used for the services mentioned in the available information letter.
Visitors to the website may submit their data in order to:

  • Obtain information on services/products, offers, room availability, cost estimates
  • book stays/holidays

passing on the data to third parties
The personal data will not be passed on to other companies. In addition, the personal data will be passed on if this is required by law or if the judicial authorities or other bodies and institutes request it.
Sambucus Apartments does not intend to collect sensitive or judicially relevant personal data via its own website.
According to art. 4 of the DSGVO 2016/679, sensitive data are personal data relating to gender, ethnic origin, religious, philosophical or other beliefs, political opinions, membership of political parties, trade unions, associations or organisations with a religious, philosophical, political or trade union background as well as data relating to health or sexual orientation. Pursuant to art. 4 of DSGVO 2016/679, personal data of relevance to the court include those personal data which, on the basis of measures based on art. 3, paragraph 1, letters a) to o) and r) to u), D.P.R. no. 313 of 14 November 2002 on criminal records, the register of administrative sanctions for criminal offences or proceedings pending thereon, or the status of accused or suspected person within the meaning of articles 60 and 61 of the Code of Criminal Procedure, may be inferred from measures taken pursuant to art. 3, paragraph 1, letters a) to o) and r) to u). We recommend that you do not provide such information on our website.

integration of services and contents of third parties

  • Google Analytics, Google IP Locator, Google Maps, Google Maps Distance Api, Google reCAPTCHA
    Owner: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • YouTube Content
    Owned by: Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Social Network Facebook
    Owner: Facebook Inc., Menlo Park, California, USA
  • Social Network Twitter
    Owner: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland
  • Social Network Instagram
    Owner: Facebook Inc., Menlo Park, California, USA

Further external content can be loaded via widgets and iFrames. To view this list, you need to send an email to

Links to websites of third parties
Please note that the website contains links to other websites that are not managed in accordance with this Privacy Policy.

data security
All necessary technical and organizational security measures to protect personal data from loss and misuse are taken by Sambucus Apartments. Sambucus Apartments protects personal data through internationally recognized security standards and through procedures that

  • the unauthorized access
  • unauthorized use and distribution
  • the unauthorized change
  • the loss and accidental or unlawful destruction

make it impossible.

Storage and deletion of data
The information and personal data collected through this website, including those voluntarily provided by the visitor to receive information material or other communications by writing to the addresses provided in the “Non-binding request” section, will be kept solely for the purpose of providing the requested service and for the period strictly necessary for that purpose. Once the service has been provided, all personal data will be deleted in accordance with the Sambucus Apartments Privacy Policy, unless otherwise requested by the authorities or required by law.

Underage visitors (16 years old)
The Sambucus Apartments website, which is governed by this Privacy Policy, is not intended for use by minors. We are aware of the need to protect data concerning minors, especially in the online environment. For this reason, we do not collect and store any data about minors, unless we do so involuntarily.

Exercise of rights
In accordance with art. 15 of DSGVO 2016/679, the data owner has the right at any time to obtain information on the content of his personal data collected via this website, to correct, update or delete it, or to exercise other rights granted to him by law. For this purpose, it is necessary to contact the data controller or the data protection officer by e-mail

Specific use of personal data
Below you will find specific instructions on how certain sections of this website work:

  • Range Non-binding inquiry
    The “Enquiry/Online Booking” section of this website offers the possibility to obtain information about offers and availability of stays/holidays as well as to book or purchase holidays/holidays. If you choose to provide us with your personal information, it will only be processed for the purposes set out above by specially appointed persons and in accordance with the regular internal administrative processes.