Gustaffo digital service GmbH

Privacy Policy for Gustaffo digital concierge website and Gustaffo mobile room key app

State: 07.05.2018
Scope of application

This Privacy Policy is intended to inform the users of this website according to the European General Data Protection Regulation (GDPR) on the nature, scope and purpose, of the collection and use of personal data by the service operator Gustaffo digital service GmbH, hereinafter referred to as “operator”.
The operator takes your privacy very seriously and will treat your personal information confidentially and according to the legal data security regulations.
Keep in mind that data transmission on the Internet can generally be subject to security vulnerabilities. Providing full protection against access by unknown parties is not possible.


The operator services include, among others, the following applications:

  • mobile / digital concierge for hotel guests
  • guest communication via browser or messenger
  • mobile room key
  • mobile check-in / check-out
  • sending emails (pre-stay, post-stay)
  • hotel system interfaces (eg. PMS)
Processing of personal data

The website operator collects, uses and transfers your personal data only if this is permitted by law or if you consent to the collection of data. Personal information means all information that is used to identify your person and which can be traced back to you – such as your name, e-mail address and telephone number.

Personal data collected

The following personal data may also be processed:

  • For web check-in / -out: booking details (eg. name, date of arrival, date of departure, address, room number, email, date of birth, passport number, language, nationality, telephone number)

This data will be collected during web check-in on behalf of the hotel and will be forwarded via the interfaces or it will be required during the web check-out in order to carry out the check-out.

  • For the digital concierge / guest communication: order / communication data (eg. room number, name, telephone number, email, messages, orders)

This is for the purpose of passing on, checking and answering the guests requests.

  • For the mobile room key app: mobile keys, email, phone number

This is to allow the mobile room key app to send, the mobile room key to the guest and to open the door with the app.

  • For all applications: IP addresses and device information (browser, operating system)

This is to identify if the device is on the hotel network as well as to optimize the display for the respective device.

Deletion of personal data

All the personal data collected will be deleted, at the latest, after 30 days or it will be anonymized, where it is technically not possible, for reasons of integrity, to delete.


If Gustaffo is being used in the browser, Cookies are used. These are small text files which are stored on your device. These cause no damage. Your browser accesses these files. The use of cookies increases the user-friendliness and security of this website.
Most browsers offer the setup option to not allow cookies. Notice: If you do make these setting changes, there will be no guarantee that you will be able to access all the features of this website without restrictions.

User rights: information, rectification and cancellation

As a user, you will receive, at request, free information about which personal data has been stored about you. Unless your request is not the result of legal obligations (eg. data retention), you are entitled to correct incorrect data and to block or delete your personal data.

External services

We use the following external services to provide our services:

Google Analytics

The website uses the „Google Analytics“ service provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyse the use of the website by users. The service uses “cookies” – text files stored on your device. The information collected by the cookies is usually sent to a Google server in the US and stored there.

In the event that IP anonymisation is activated on this website, your IP address will first be shortened by Google in the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. This reduction eliminates the personal reference of your IP address. Under the terms of the agreement, which the website operators have signed with Google Inc., the collected information is used to compile an evaluation of website usage and activity and provides services related to internet usage.
You have the possibility to prevent the use of cookies on your device by making the appropriate setup changes in your browser. However, if your browser does not allow cookies, there is no guarantee that you will be able to access all the features of this website without restrictions.

Furthermore, you can use a browser plug-in to prevent the information collected by cookies (including your IP address) to be sent to Google Inc. and used by Google Inc. The following link leads you to the corresponding plugin:

Alternatively, by clicking on this link, you prevent Google Analytics from collecting data about you on this website. By clicking on the link above you download an “Opt-Out-Cookie”. Your browser must allow cookies to be stored. If you delete your cookies regularly, you will need to click on the link each time you visit this website.
Here you can find more information about data usage by Google Inc.:

Google Cloud Platform
  • The Google Cloud Platform is a web hosting and IT infrastructure cloud computing service provided by Google Inc. we use it for our server and database infrastructure
  • personal data collection: different types of data, as described in the privacy policy of the service
  • processing location: EU, USA
  • data privacy:
  • PubNub is a Real-Time Messaging service provided by PubNub Inc. that we use to transmit, for example: guest communication in real time
  • personal data collection: IP-address
  • processing location: USA
  • data privacy:
  • Sendgrid is a service provided by Sendgrid, Inc. for managing email addresses and sending messages. We use it to send pre- and post stay emails, as well as emails to hotel staff
  • personal data collection: email
  • processing location: USA
  • data privacy:
  • is a mobile app service provided by Branch Metrics, Inc., which we use to associate the click of a link to an app installation for the mobile room key and load the right key
  • personal data collection: IP-address, device information
  • processing location: USA
  • data privacy:
  • Messagebird is one of MessageBird B.V. provided SMS, Chat and Voice API service we use it for example, to send the mobile room key via SMS
  • personal data collection: phone number
  • processing location: EU
  • data privacy:
  • For any questions related to this Privacy Policy or to processing your data, please contact:
  • Gustaffo digital service GmbH
  • Vorgartenstrasse 206B, 1020 Vienna, Austria
  • Email: