Privacy policy
1. An overview of data protection
General information
The following gives a simple overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy – as listed below.
Data collection on our website
Who is responsible for the data collection on this website?
Data processing on this website is carried out by a website operator. You can find the contact details of the website operator in the section “Information about the responsible party” in this data protection declaration.
How do we collect your data?
Data are collected when provided to us. This could, for example, be data you enter on a contact form.
Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data e.g. browser and operating system you are using or when you access the page. These data are collected automatically as soon as you enter our website.
How do we use your data?
Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyse your user behaviour.
Also for the facilitation and realisation of guest booking; the successful execution of the guest’s stay; to coordinate the hotel stay according to the wishes and interests of the guest; to ensure the provision of future hotel services which correspond with the interests of the guest; for marketing purposes as pertaining to hotel performance and the improvement of this performance.
Data transfer to third parties
To contracted service providers who supply cloud-based software and data handling solutions to the hotel. These providers operate with the sole purpose of processing and analysing guest data for the aforementioned purposes
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
For this purpose and for further questions on the subject of data protection, you can contact us at any time.
Analysis tools and third-party tools
When visiting this website, your surfing behaviour may be statistically analysed. This is done primarily with cookies and with so-called analysis programmes.
Detailed information about these analysis programmes can be found in the following privacy policy.
2. Hosting and Content Delivery Networks (CDN)
External hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s server. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
The hoster is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our hoster will only process your data to the necessary extent to fulfil its service obligations and follow our instructions regarding this data.
We use the following hoster:
Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4-6
32339 Espelkamp
Conclusion of a contract on order processing
To ensure data protection-compliant processing, we have concluded an order processing contract with our hoster.
3. General notes and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
Notice concerning the party responsible for this website
The party responsible for processing data on this website is:
Pirchner Hof Betriebs GmbH
Neudorf 42
6235 Reith im Alpbachtal
Telephone: +43 (5337) 62 749
E-Mail: info@pirchnerhof.at
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).
Storage period
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.
Data protection officer required by law
We have appointed a data protection officer for our company.
Pirchner Hof Betriebs GmbH
Neudorf 42
6235 Reith im Alpbachtal
Telefon: +43 5337 62749
E-Mail: info@pirchnerhof.at
Note on data transfer to the USA and other third countries
Among other things, tools from companies based in the USA or other third countries that are not secure from a data protection perspective are integrated on our website. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.
Revocation of your consent to data processing
Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to the collection of data in specific cases and to direct marketing (Art. 21 GDPR)
If the data processing is based on Art. 6 Abs. 1 lit. E or F GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims (objection under article 21(1) GDPR).
If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling as long as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to article 21 (2) GDPR).
Right of appeal to the competent supervisory authority
In the event of a breach of the GDPR, data subjects shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged breach, if the data subject considers that the processing of personal data concerning him or her infringes this Regulation.
Right to data portability
You have the right to have data that we process automatically based on your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request direct transfer of the data to another responsible party, this will only be done if technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Encrypted payment transactions on this website
If there is an obligation to transmit your payment data (e.g. account number in case of direct debit authorization) to us, after the conclusion of a binding contract, this data is required for payment processing.
Payment transactions via the common means of payment (Visa/MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
With encrypted communication, your payment data that you transmit to us cannot be read by third parties.
Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of data processing and, if necessary, the right of correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of processing your personal data.
If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
If you have lodged an objection pursuant to Art. 21 (1) GDPR, an assessment of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a Member State.
Objection to advertising e-mails
The use of contact data published within the framework of the imprint obligation for the transmission of advertising and information material not expressly requested is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.
4. Data collection on our website
Cookies
Our Internet pages use so-called “cookies”. Cookies are small text files and do not cause any damage to your terminal device and do not contain viruses. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your personal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your web browser.
In some cases, cookies from third-party companies may also be stored on your personal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behaviour or display advertising.
Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies, e.g. shopping cart function) or to optimize the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 (1) lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies has been requested, the storage of the cookies in question is based exclusively on this consent (Art. 6 para. 1 lit. a GDPR); consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
If cookies are used by third-party companies or for analysis purposes, we will inform you separately about this within the framework of this data protection declaration and, if necessary, request your consent.
Cookie consent with Cookiebot
Our website uses cookie consent technology from Cookiebot to obtain your consent to store certain cookies on your device and to document this consent in accordance with data protection law. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).
When you enter our website, a connection is established to Cookiebot’s servers to obtain your consents and other declarations regarding cookie use. Subsequently, Cookiebot stores a cookie in your browser in order to be able to assign the consents granted to you or their revocation. The data collected in this way will be stored until you request us to delete it, delete the Cookiebot cookie yourself or until the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.
Cookiebot is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 p. 1 lit. c GDPR. Your consent to the use of statistical, analytical and/or marketing cookies can be subsequently adjusted or revoked at any time: Open Cookie settings
Contract on order processing
We have concluded an order processing contract with Cookiebot. This is a contract required by data protection law, which ensures that Cookiebot only processes the personal data of our website visitors according to our instructions and in compliance with the GDPR.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP-address
This data is not merged with other data sources.
The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected.
Inquiry via contact form, email or telephone
If you send us inquiries via a contact form, your data from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests sent to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this was requested.
The data you entered in the contact form will remain with us until the purpose for storing the data no longer applies or you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after processing your request has been completed).
Mandatory legal provisions – in particular retention periods – remain unaffected.
5. Analytics and advertising
Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to embed tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. However, the Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company in the United States.
The use of the Google Tag Manager is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in a quick and uncomplicated integration and management of various tools on his website. If a corresponding consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. This data is assigned to the respective end device of the user. An assignment to a user-ID does not take place.
Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis.
Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
IP anonymization
On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyze your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.
Browser plug-in
You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.
Google Signals
We use Google Signals. Whenever you visit our website, Google Analytics records, among other things, your location, the progression of your search and YouTube progression as well as demographic data (site visitor data). This data may be used for customized advertising with the assistance of Google Signal. If you have a Google account, your site visitor information will be linked to your Google account by Google Signal and used to send you customized promotional messages. The data is also used to compile anonymized statistics of our users’ online patterns.
Contract data processing
We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.
Google Analytics E-Commerce-Tracking
This website uses the “E-Commerce Tracking” function of Google Analytics. With the assistance of E-Commerce Tracking, the website operator is in a position to analyze the purchasing patterns of website visitors with the aim of improving the operator’s online marketing campaigns. In this context, information, such as the orders placed, the average order values, shipping costs and the time from viewing the product to making the purchasing decision are tracked. These data may be consolidated by Google under a transaction ID, which is allocated to the respective user or the user’s device.
Google Ads
The website operator uses Google Ads. Google Ads is an online advertising programme of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to play advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be played on the basis of user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analysing, for example, which search terms have led to the display of our advertisements and how many ads have resulted in corresponding clicks.
The use of Google Ads is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in marketing its service products as effectively as possible.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks?hl=en-GB and https://privacy.google.com/businesses/controllerterms/mccs/.
Google Remarketing
This website uses the functions of Google Analytics Remarketing. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Remarketing analyses your user behaviour on our website (e.g. clicking on certain products) in order to classify you in certain advertising target groups and subsequently play suitable advertising messages to you when you visit other online offers (remarketing or retargeting).
Furthermore, the advertising target groups created with Google Remarketing can be linked with Google’s cross-device functions. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. cell phone) can also be displayed on another of your devices (e.g. tablet or PC).
If you have a Google account, you can object to personalised advertising at the following link: https://www.google.com/settings/ads/onweb/=en .
The use of Google Remarketing is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in marketing its products as effectively as possible. If a corresponding consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Further information and the privacy policy can be found in Google’s privacy policy at: https://policies.google.com/technologies/ads?hl=en.
Google Conversion-Tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With the help of Google conversion tracking, Google and we can recognise whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked, how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We learn the total number of users, who clicked on our ads and what actions they took. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.
The use of Google conversion tracking is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.
More information on Google conversion tracking can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en .
Facebook Pixel
This website uses the visitor action pixel from Facebook for conversion measurement. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.
In this way, the behaviour of page visitors can be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.
The collected data is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.
The use of Facebook Pixel is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://www.facebook.com/help/566994660333381
In this respect, as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its forwarding to Facebook. The processing by Facebook that takes place after the onward transfer is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. You can find the text of the agreement at: https://www.facebook.com/legal/controller_addendum
According to this agreement, we are responsible for providing the privacy information when using the Facebook tool and for the privacy-secure implementation of the tool on our website. Facebook is responsible for the data security of the Facebook products. You can assert data subject rights (e.g. requests for information) regarding data processed by Facebook directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.
You can find further information on protecting your privacy in Facebook’s data protection notices: https://www.facebook.com/about/privacy/
You can also use the Custom Audiences remarketing feature in the Ad Settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen to deactivate the Custom Audiences remarketing feature. To do this, you must be logged in to Facebook.
If you do not have a Facebook account, you can opt out of usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: https://www.youronlinechoices.com/uk/your-ad-choices
6. Newsletter
Newsletter data
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.
The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose has ceased to exist. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR.
After you have unsubscribed from the newsletter distribution list, your e-mail address will be stored by us or the newsletter service provider in a blacklist, if necessary, in order to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) lit. f GDPR). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
Mailchimp
This website uses Mailchimp to send newsletters. The provider is Mailchimp Agentur
AIXhibit AG Hauptsitz Aachen, Oppenhoffallee 143, 52066 Aachen, Germany (hereinafter: “Mailchimp”). Mailchimp is a service with which the newsletter dispatch can be organised and analysed. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) is stored on Mailchimp’s servers in Germany.
Our newsletters sent with Mailchimp allow us to analyse the behaviour of newsletter recipients. Among other things, we can analyse how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analysed whether a predefined action (e.g. purchase of a product on this website) has taken place after clicking on the link in the newsletter. For more information on data analysis by Mailchimp newsletter, please visit: https://mailchimp.com/legal/privacy/
The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
If you do not want any analysis by Mailchimp, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message.
The data you have provided to us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe. Data that has been stored by us for other purposes remains unaffected by this.
After you have unsubscribed from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) lit. f GDPR). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
For more details, please refer to Mailchimp’s privacy policy at: https://mailchimp.com/legal/privacy/
Conclusion of an order processing contract
We have concluded an order processing contract with the Mailchimp provider and fully implement the strict requirements of the German data protection authorities when using Mailchimp.
7. Plugins and tools
Google Web Fonts (local hosting)
This site uses so-called web fonts provided by Google and MyFonts for the uniform display of fonts. Google Fonts and MyFonts are installed locally. A connection to Google servers and MyFonts servers do not take place.
For more information on Google Web Fonts, please visit https://developers.google.com/fonts/faq
Google’s privacy policy: https://policies.google.com/privacy?hl=en
For more information and privacy policy on MyFonts, please visit: https://www.myfonts.com/legal/website-use-privacy-policy
Google Maps
This site uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. If Google Maps is activated, Google may use Google Web Fonts for the purpose of uniform display of fonts. When calling up Google Maps, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms and https://privacy.google.com/businesses/gdprcontrollerterms/sccs
More information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en.
Web push notifications from PushPanda.io
We use web push notifications from PushPanda.io. Web push notifications are notifications that can be displayed on your terminal device without opening the website or the relevant app.
No distinctive user data, such as IP addresses or similar, that could allow the user in question to be identified, are saved. If somebody registers for the notification distributor (opt-in process), only an identification code and the geographical IP information (country and state) of the user are sent to PushPanda.io and stored in its database. This code is issued by the respective browser provider (Google, Mozilla, etc.) and enables the notifications to be sent to the relevant browser later. Notifications are sent by the browser provider itself.
If the opt-in for push notifications is withdrawn (opt-out), all data saved with PushPanda.io is deleted and the identification code will be invalid.
You can find information about opting out of push notifications at https://www.pushpanda.io/de/links/abmeldung/
PushPanda.io is a service of Project K GmbH, with headquarters in Innsbruck, Austria.
Interactive conversations with ReGuest Messenger
In order to serve you during your inquiry or visit to our website, we provide a chat function. When a chat connection is made to the reception desk, a connection is made to our communication software. At no time will your browser be accessed. Within the scope of the chat, you have the option of selecting different communication channels by selecting the corresponding menu items.
By using the chat, information is transmitted to the messenger server, which is managed by ReGuest GmbH on our behalf. This data is information that is required for the technical processing of the chat. The standardised data collection takes place solely for the purpose of online consulting. We store the data required for the above-mentioned functions exclusively for these purposes.
Further evaluations take place at most in anonymous form for statistical purposes. The owner of all data collected during the use of Messenger is Pirchner Hof Betriebs GmbH. The stored chat logs, which we must keep for evidence purposes for you and us, are not forwarded to third parties.
Vioma BOOKING – Online bookings and booking requests
Our website uses the booking technology vioma BOOKING, provided by vioma GmbH, Industriestraße 27, 77656 Offenburg, Germany (“vioma”). We have concluded an order processing agreement with vioma.
If you make an online booking or a booking request via our website, we need your e-mail address, your travel data, the booked product and your title as well as first and last name for processing. In individual cases, your telephone number and your e-mail address will also be requested in order to be able to contact you quickly, especially in relation to unforeseen circumstances that affect your booking.
For the calculation of the valid travel price for your individual travel parameters, the number of persons traveling with you is also required, as well as information as to whether the persons traveling with you are adults or children. If you are traveling with children, the age of the children is also requested for the correct calculation of the travel price. Furthermore, we ask for the desired means of payment for the trip. If a prepayment is applied for your travel parameters, you will be forwarded to a payment service provider for the secure processing of the prepayment after selecting the desired means of payment. Further information in the form is provided on a voluntary basis.
The processing of your data for the online booking and the online booking request is based on Art. 6 para. 1 sentence 1 lit. b GDPR and serves the fulfilment of a contract or the implementation of pre-contractual measures.
The data you provide to us will remain with us until the purpose for storing the data no longer applies (e.g. after processing your request has been completed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
For further information on the handling of personal data, please visit https://www.vioma.de/datenschutzhinweise .
Commissioned data processing by INCERT eTourismus GmbH & Co KG
Based on a separate agreement on the processing of personal data, your data will be collected and processed on our behalf by the company INCERT eTourismus GmbH & Co KG, Leonfeldner Strasse 328, 4040 Linz within the scope of commissioned data processing pursuant to Art 28 GDPR in accordance with the relevant legal requirements. As a processor in the case of support measures, the company Incert eTourismus also has access to your data, but may only use it for the purpose of support measures and not for its own purposes.
Guest-Club
The website uses KunLeiSys Guest Club software. Provider is GASTROpoint GmbH, Pommernstraße 17, 83395 Freilassing, Germany. KunLeiSys Guest-Club Software is a service that organizes and manages the Guest-Club, offers, loyalty points, event emails and newsletter delivery.
Registration of the loyalty programme takes place at check-in or check-out at reception desk. Data entered for this purpose is solely used for respective offer or services. Personal information requested during the registration process must be provided. Otherwise, we will reject the registration. The processing of data entered during registration is based on your consent (Art. 6 para. 1 lit. a GDPR); the consent can be revoked at any time via the ‘unsubscribe’ link in the email or by unsubscribing in the guest club.
The data deposited for the purpose of the Guest Club will be stored until unsubscribed and will be deleted from servers, after unsubscribing and deleting your Guest Club account.
For important changes (e.g. necessary technically changes, changes of terms and conditions), we will use the e-mail address provided during registration process for information updates. Legal retention periods remain unaffected. We have concluded an order data processing contract with GASTROpoint GmbH and fully implement the strict specifications of the data protection authorities when using KunLeiSys Guest-Club software.