Legal information
Privacy policy
Status: 4 November 2026. The German version is authoritative.
Controller
occursus – Urs Treuthardt
Kennelbacherstraße 36a
6900 Bregenz
Austria
Telephone: +43 664 2131891
E-mail: hi@occursus.eu
Overview
This website provides information. There are no visitor accounts, embedded videos, AI features, online payments or public booking calendar. On the arrival page, Google Maps can be embedded voluntarily after explicit consent; no connection to Google for the map is made beforehand. The enquiry form only prepares an e-mail in the visitor’s own e-mail application. The partner Booker is a separate application with its own invitation-only sign-in.
Hosting and delivery
The website is operated through Lovable in the existing Business workspace. Lovable Labs Incorporated is the contracting party and processor for the website service. Processing of personal data on behalf of the controller is governed by the Data Processing Agreement included in the Business plan. Lovable uses the sub-processors named in the linked list.
When a page is requested, technically necessary connection data is processed, including IP address, date and time, requested address, browser and device information and the referring page. The purposes are delivery, stability and prevention of misuse. The legal basis is legitimate interest in a secure, functioning website (Art. 6(1)(f) GDPR).
According to Lovable’s privacy notice, operational and security logs are retained only as long as required for operation and security; security incidents may require longer retention. They are then deleted or anonymised. No fixed retention period in days or particular hosting region is claimed here.
Photographs and fonts
Approved photographs are served as static files through the platform’s delivery infrastructure, not from a visitor database. Technical connection data is processed as for page requests.
Bricolage Grotesque and Hanken Grotesk (SIL Open Font License) are delivered together with the website. No connection is made to Google Fonts or other font providers.
Cookies, local storage and analytics
Without activation of the Google map, the application code sets no marketing or analytics cookies on public pages and does not save enquiry details in local storage. This website has no sign-in area of its own. According to the provider, hosting infrastructure may use technical cookies for security and delivery.
No additional analytics or marketing services are included in the application code. Optional platform-level Visitor Analytics is disabled for this project.
Contact by e-mail
Contact is possible by e-mail to hi@occursus.eu or by telephone. Details entered are assembled locally in the browser and handed to the visitor’s own e-mail application; they are neither transmitted nor stored through this website. The message is only sent from the e-mail application. Information sent is used to handle the enquiry and follow-up correspondence (Art. 6(1)(b) or (f) GDPR) and deleted once no longer needed, unless statutory retention obligations apply. The existing contact channel uses a mailbox operated through Microsoft 365.
Google Maps on the arrival page
A Google Maps map can be embedded on request to help visitors find the confirmed data:room by occursus location. The provider for users in the EEA and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other Google companies may be involved in processing.
A connection to Google is made only after agreeing to load the map. Google may then process information including the IP address, browser and device details, the requested map address and usage data. Google may use cookies and local storage and link data to a signed-in Google account. Processing may also take place outside the EU/EEA, particularly in the USA. Google’s privacy policy explains its processing and international transfers.
The legal basis for loading the map and the associated data transfer is voluntary consent under Art. 6(1)(a) GDPR; where cookies or similar storage access require consent, it is given through the same deliberate activation. Without consent, the local arrival plan and written directions remain available. No map resources or Google preconnections are loaded beforehand.
Consent applies only to the current page view and is not saved. It may be withdrawn at any time with effect for the future using Hide map · Withdraw consent, which removes the embedded map. This does not retrospectively delete data already sent to Google or cookies set by Google. Returning to the page does not load the map automatically. An external Google Maps link opens the service directly and independently of the embed; Google’s privacy policy applies there.
External links and partner Booker
External map, directions, partner and event links are ordinary links. They are distinct from the separately activated Google Maps embed on the arrival page. Data is transferred to the external provider only when a link is opened; the provider’s privacy notice then applies.
The partner Booker is a separate application intended only for invited partners, with its own sign-in. Private calendars are neither loaded nor embedded on this website; a public enquiry requires no account.
Recipients and transfers to third countries
Recipients of data processed for website operation are Lovable Labs Incorporated and the service providers identified in the DPA or sub-processor list. Processing outside the EU/EEA, particularly in the USA, is possible. For relevant transfers, the DPA provides EU standard contractual clauses as contractual safeguards where no applicable adequacy decision exists. Switzerland benefits from an EU Commission adequacy decision. No blanket EU-US Data Privacy Framework certification is claimed. Information about these safeguards is available through the linked DPA and hi@occursus.eu.
Data subject rights
Where statutory conditions are met, data subjects have rights of access, rectification, erasure, restriction of processing and data portability. Under Art. 21 GDPR, processing based on Art. 6(1)(f) GDPR may be challenged on grounds relating to the data subject’s particular situation. Where processing relies on consent, consent may be withdrawn at any time with effect for the future; withdrawal does not affect the lawfulness of earlier processing. Requests to hi@occursus.eu.
Right to lodge a complaint
Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna