Privacy Policy

MINT Management GmbH Girardigasse 6 1060 Vienna, Austria Email: welcome@mintvienna.com Phone: +43 67633 02005 For any question about this policy or your personal data, write to the email address above.

Booking data — your name, email address, phone number, billing address, arrival and departure dates, the number of guests, the apartment booked, and any requests you send us. Payment data — card payments are handled by Stripe. We receive the card brand, the last four digits and whether the payment succeeded. We never receive or store your full card number. Guest registration data — where Austrian registration law applies, this includes nationality, date of birth and travel document details. Invoicing data — everything that appears on your invoice, including the Vienna city tax (Ortstaxe) where it applies. Technical data — IP address, browser and device type, pages viewed, and the site or campaign that referred you. Correspondence — the emails and messages you send us.

Directly from you, when you book on this website, email us or call us. From a booking platform, when you book through one. Booking.com and Airbnb pass us the booking and the contact details you gave them — for Airbnb this is usually a forwarding address rather than your own. Automatically from your device when you browse the site, as described in section 6.

- To confirm, manage and deliver your stay - To take payment and issue a legally compliant invoice - To meet Austrian guest registration obligations - To collect and remit the Vienna city tax (Ortstaxe) - To report guest statistics, including nationality, to the authorities where we are required to - To keep accounting records for the statutory retention period - To answer your enquiries and provide guest support - To understand how the website is used and improve it - To send the welcome offer or newsletter, where you asked us to

- Performance of a contract, Art. 6(1)(b) — booking, payment and delivery of your stay - Legal obligation, Art. 6(1)(c) — guest registration, city tax, tax and accounting records - Legitimate interest, Art. 6(1)(f) — website analytics, site security, fraud prevention, and understanding which marketing brings guests to us - Consent, Art. 6(1)(a) — the newsletter and welcome offer, and non-essential cookies. You can withdraw consent at any time.

Essential cookies — required for the site to work: your cookie choice, your currency preference and the region signal used to pick a default currency. Analytics — Google Analytics 4 (measurement ID G-GVGXZFKJ8W), used to understand how visitors find and use the site. Analytics is on by default and you can turn it off at any time through the "Cookie Preferences" link in the footer. Google Consent Mode v2 is in use, so when you turn analytics off Google receives only anonymised signals, with no client identifier and no advertising data. Where you complete a booking, the purchase event is also sent from our server so that we can measure bookings accurately. Marketing attribution — the Ekamoira pixel sets an identifier that we store alongside your booking record so we can tell which marketing led to a booking. You can change or withdraw your cookie consent at any time through "Cookie Preferences" in the footer.

We do not sell your personal data. We share it with the following processors, each of which acts on our instructions: - Hostfully, Inc. (United States) — our property management system; holds your booking and guest details - Stripe Payments Europe, Ltd. (Ireland) and Stripe, Inc. (United States) — card payments - easybill GmbH (Germany) — issuing and archiving invoices - Supabase (EU region) — our database, which stores booking and invoice records - Vercel Inc. (United States) — website hosting and delivery - Google Ireland Limited / Google LLC — Google Analytics 4 - Ekamoira — marketing attribution We also share data with the booking platform you booked through, with our tax adviser, and with public authorities where the law requires it — including guest registration and statistical reporting.

Some of the processors above are based in, or may access data from, the United States. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses, and by the EU-US Data Privacy Framework where the recipient is certified under it.

- Invoices and accounting records: 7 years, as required by §132 of the Austrian Federal Fiscal Code (BAO) - Booking records: for your stay and afterwards only as long as needed for the purposes above - Guest registration data: for the period set by Austrian registration law - Website analytics: 26 months - Newsletter data: until you unsubscribe

Under the GDPR you have the right to: - Access the personal data we hold about you - Have inaccurate data corrected - Have your data erased, where no legal retention duty applies - Restrict how we process your data - Receive your data in a portable format - Object to processing based on legitimate interest - Withdraw consent at any time, without affecting processing carried out before you withdrew it To exercise any of these, email welcome@mintvienna.com. We will respond within one month.

All traffic to this site is encrypted in transit (TLS). Access to booking and invoice records is restricted to the people who need it. Card details are handled entirely by Stripe, a PCI DSS Level 1 certified provider, and are never stored on our systems.

If you believe we have handled your personal data unlawfully, you can lodge a complaint with the Austrian data protection authority: Österreichische Datenschutzbehörde Barichgasse 40-42, 1030 Vienna, Austria Email: dsb@dsb.gv.at Web: dsb.gv.at

If you give us your email address for the welcome offer or the newsletter, we use it to send you that offer and occasional news about the apartments and the neighbourhood. This is based on your consent. Every email carries an unsubscribe link, and unsubscribing takes effect immediately.

We update this policy when the way we handle data changes — for example when we add or remove a processor. The current version always appears on this page. Last updated: 3 August 2026