Skip to content

Privacy Policy

Privacy Policy

Protecting your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, Austrian Data Protection Act, Austrian Telecommunications Act 2021). Here you can find out which data we process, for what purpose and on what legal basis.

Controller

Moritz Steinlechner, Casa Momo

Schönaugasse 76, 8010 Graz, Austria

Email: office@casamomo.at · Phone: +43 664 1999605

Visiting the website

Our website is hosted by Framer B.V. (Amsterdam, Netherlands). When you visit it, technically necessary data is processed: IP address, date and time, the page requested, and your browser and operating system. This is required to provide the website securely and reliably (legitimate interest, Art. 6(1)(f) GDPR).

For anonymous visitor statistics we use Framer’s analytics. It works without cookies and without user profiles; no conclusions can be drawn about individual persons.

Fonts and images are loaded from our website or Framer’s network, not from Google or other third parties.

Cookies

Our website does not set any cookies and does not use any tracking or advertising services. For bookings, the page briefly remembers in your browser’s session storage which apartment you selected; this entry is deleted at the latest when you close the tab.

Contacting us

If you contact us by email or phone, we process your details in order to answer your enquiry (Art. 6(1)(b) and (f) GDPR).

Booking on our website

For direct bookings we process your name, email address, phone number, billing address, travel dates, number of guests and the payment status. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). We use the following service providers for this:

– Smoobu GmbH, Berlin (Germany): booking and calendar system in which your booking is stored.

– Stripe Payments Europe Ltd., Dublin (Ireland): payment processing. You enter your payment details (e.g. card number) directly with Stripe; we do not receive them. More information: stripe.com/privacy

– Cloudflare, Inc. (USA): operation of our booking interface, which transmits availability, prices and your booking to Smoobu and Stripe.

Bookings through platforms

If you book through Airbnb, Booking.com or another platform, we receive the data required for the booking from the platform. The platform’s privacy policy applies to the processing on the platform.

Legal obligations

As an accommodation provider we are legally required to record guest data (Austrian Registration Act, guest register), to pay the City of Graz tourist tax and to keep tax records (Art. 6(1)(c) GDPR).

Disclosure of data

Data is only passed on where this is necessary for the booking or required by law: to the service providers named above, to authorities in connection with registration and tax obligations, to our tax advisor and – where needed to organise your stay, such as the arrival date – to cleaning companies. Data is never passed on for advertising purposes.

Transfers to third countries

Some service providers (e.g. Cloudflare and Stripe, as well as subcontractors of Framer) may also process data in the USA. Such transfers are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

Storage period

We only store personal data for as long as is necessary for processing the booking or as required by statutory retention obligations. Booking and invoice data is kept for seven years in accordance with § 132 of the Austrian Federal Fiscal Code (BAO). Enquiries that do not lead to a booking are deleted after one year at the latest.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. To exercise these rights, write to us at office@casamomo.at.

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, Austria, dsb.gv.at.

External links

Our website links to Instagram, LinkedIn and Google Maps. These services are not embedded; their privacy policies only apply once you click a link.

Last updated

October 2026