Privacy Policy

Hotel Alpenhof
Klaus Dengg
Family Gabi and Klaus Dengg
Hintertux 750
A-6293 Tux
Tel.: 05287/8550
Fax: 05287/8550-99
International dialing code +43-5287-8550
Email: k.dengg@alpenhof.at

Company Name: Hotel Alpenhof Dengg KG
Commercial Register No.: 508105p
VAT ID: ATU74097746

This privacy policy applies to the collection and use of personal data. This data may be collected when you visit our website, when you submit an inquiry or make a booking via our website, or when you purchase additional services, such as a gift certificate, or when you subscribe to a Newsletter. We would like to provide you with the following information to give you an overview of what types of data are collected, how they are used, and why data is collected. Please be assured that the protection of your personal data is our top priority and that we handle the information you entrust to us with care—within the scope of our offers, sales, and services. Of course, we also inform you to what extent you can revoke your consent to data storage. Hotel Alpenhof reserves the right to make changes from time to time depending on developments and requirements. Should these be major and significant changes, we will inform you accordingly. All information provided is intended for both female and male readers and is not gender-specific.

How is personal data collected, stored, and used?

At Hotel Alpenhof, we collect personal data to provide you with the best possible service, to keep you informed, and to be able to create a tailored service offering for you. In doing so, we ask for personal data that helps us prepare an offer or, at your request, issue a reservation confirmation, and thus incorporate your data into our hotel system. We operate according to the principle of data minimization and limit ourselves to data necessary for order fulfillment or the pre-contractual offer. Furthermore, this helps us keep you up to date in the future about special offers that may be of interest to you and news regarding your vacation. Of course, you can easily and free of charge let us know at any time if you no longer wish to receive further product offers, news, or special offers. Your personal data will be stored for as long as necessary to fulfill the services listed, and as long as we assume you may have a legitimate interest in receiving further information, provided no revocation has been made. Additionally, we note that the deletion of data is not legally possible if we are not obligated to store the data due to other—mandatory—legal provisions.

What data is collected?

To fulfill your requests, such as receiving an offer, making a booking, purchasing a gift certificate, or subscribing to a Newsletter, we only collect and process data necessary for contract fulfillment or pre-contractual information. This may include: first name, last name, mailing address, phone number, and email address. In addition, we may request data that helps us understand what other information might be important to you, as well as for market research purposes to better understand our customers’ needs. Providing this information is voluntary and is therefore marked as non-mandatory for contract fulfillment. Thus, you decide for yourself whether or not you wish to provide this information in, for example, an inquiry form, a newsletter system, or similar.

What rights do you have regarding your data?

You have the right to correct your data: If you notice in our communications that we have recorded data that is incomplete or incorrect, please notify us of the corrections. Right to erasure of your data: If you no longer wish to receive further information, you have the right to have your data erased and to revoke consent for its storage. This applies, for example, if you are no longer interested in our offers or if the data is no longer necessary for the purposes for which it was collected. The right to erasure does not apply if another right is mandatory and we are therefore required by another legal provision to store the data. Right to restriction: The data subject has the right to request that the controller restrict processing. Right to object: The data subject has the right to object at any time to the processing of personal data concerning them for reasons arising from their particular situation. Of course, you have the right to access your data at any time. Please let us know via email or phone if you wish to exercise these rights. We kindly note that for requests made by phone or email, we require a copy of your ID to ensure that you are making a legitimate request.

To whom is your data disclosed, and if so, why?

We at Hotel Alpenhof hereby confirm that we do not sell or otherwise make guest data available to third parties for marketing or any other purposes. However, to ensure that you receive our product offers, company information, reservations, and/or orders, we work with external partners who perform these services on our behalf. These include, for example, printing companies, mail service providers, and IT service providers who ensure that your requested mail and emails are delivered to you properly, as well as newsletter distributors who act exclusively as data processors with whom we have a data processing agreement and who are required to maintain the highest standards of data protection. These companies and/or individuals are also obligated to handle your data with the utmost care in accordance with the Privacy Policy. Furthermore, Hotel Alpenhof may be required by law or official directives to disclose data to courts, authorities, and government agencies as appropriate.

The inclusion of links from the hotel website to other external websites does not involve the transfer of personal data but is intended solely to provide further information. We assume no responsibility for the content of other external, non-hotel websites. These may include links to sports partners, recreational facilities in the region, mountain railways, etc. Our guests decide for themselves whether or not to follow these links. We are also happy to answer any questions by phone or email.

Information Security and Data Protection

We implement technical measures to enhance information security and data protection, and to safeguard your data against loss, theft, unauthorized access, disclosure, and destruction. To this end, we utilize technical and electronic procedures for data protection and information security. In areas where credit card information can be entered via the website, we ensure SSL encryption. This guarantees the confidentiality of your personal credit card information during online transactions.

Personal data for applications submitted via email or application form

We are pleased that numerous applicants contact us via email and send us their application materials. Applicant data is stored for the purpose of the application, recruitment, and interest in a currently advertised or potentially future job opening. We store applicant data for 7 (seven) months (storage may be extended at the request of the data subject) and subsequently delete applicant data if no employment relationship is established. Employee data following an employment relationship will be deleted upon request, provided no other mandatory legal provisions prohibit such deletion.

Video recordings and photo data

If video recordings are made in public areas of the hotel, we will inform you via appropriate signage. Video recordings are retained for 72 hours and viewed exclusively by authorized personnel. If photo shoots, events, or gatherings take place at our location, we will inform you accordingly through our communication channels within the hotel. You have the right to object at any time. We do not post guest photos on our website or social media channels without your consent.

Use of Cookies

We use cookies on our website—however, you can disable the use of cookies at any time via your browser settings.

Cookies are used on various pages to simplify the use of our website and communication, and to better tailor our online presence to your needs. A cookie is a small text file that a website stores on your hard drive. Cookies do not harm your computer and do not contain viruses. Cookies are primarily used to determine which sections of our website are popular and to optimize the user-friendliness and usability of the website for guests and visitors. You may disable cookies at any time and still visit all pages of the website without restriction.

INCERT Gift Certificate Shop – Order Data Processing

Based on a separate agreement regarding the processing of personal data, your data is collected and processed on our behalf by INCERT eTourismus GmbH [&] Co KG, Leonfeldner Strasse 328, 4040 Linz, within the framework of commissioned data processing pursuant to Article 28 of the GDPR in accordance with the relevant legal requirements. As a data processor in the case of support measures, INCERT eTourismus also has access to your data, but may only use it for the purpose of support measures and not for its own purposes.

Retention and Deletion of Data

After the shopping or ordering process is canceled, the data stored by us is deleted after 14 days to enable support for any issues arising during the ordering process. In the event of a contract being concluded, all data arising from the contractual relationship is stored until the expiration of the 7-year tax retention period.
The data “name, address, voucher ordered, goods purchased, and date of purchase” will be stored beyond this period until the expiration of product liability (10 years) or until the expiration of the period specified in the Consumer Protection Act based on warranty and the redemption period for vouchers (30 years).
Upon receipt of a valid objection, we, Hotel Alpenhof, will ensure the deletion of the data from our systems and from any third parties to whom the data was transmitted. Data processing is carried out in accordance with the legal provisions of § 96(3) TKG as well as Article 6(1)(a) (consent) and/or (b) (necessary for the performance of a contract) of the GDPR.

Google Tag Manager

We use “Google Tag Manager” from “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) on our website. “Google Tag Manager” is a solution that allows website tags and other third-party elements to be managed via a single interface.

First, when you visit the website, Google Tag Manager sends an HTTP request to Google. This transmits device information and personal data, such as your IP address and information about your browser settings, to Google. We use Google Tag Manager to facilitate electronic communication by transferring information to third-party providers via programming interfaces, among other methods. In Google Tag Manager, the respective tracking codes of third-party providers are implemented without us having to make extensive changes to the website’s source code ourselves. Instead, integration occurs via a container that inserts a so-called “placeholder” code into the source code. In addition, Google Tag Manager allows user data parameters to be exchanged in a specific order, particularly by organizing and systematizing the data packets. Your data is occasionally also transferred to the United States. So-called “standard contractual clauses” have been concluded with Google to ensure compliance with an adequate level of data protection. Upon request, we will provide you with a copy of the standard contractual clauses. The legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interests in processing lie in facilitating and carrying out electronic communication by identifying communication endpoints, controlling the exchange of data elements in a specified order, and identifying transmission errors. Google Tag Manager does not cause any data storage. Further information on data protection at “Google” can be found at: https://policies.google.com/privacy?hl=en&gl=en.

You may object to the processing provided that the processing is based on Art. 6(1)(f) of the GDPR. Your right to object applies for reasons arising from your particular situation. You can prevent the processing by deleting your browsing history and website data in your browser settings or by opening the browser in “incognito mode.”

Additionally, Google Tag Manager integrates third-party tags, such as tracking codes or tracking pixels, into our website. The tool triggers other tags that in turn collect your data; we provide separate information about this within this privacy policy. Google Tag Manager itself does not evaluate the device information and personal data of users collected by the tags. Rather, your data is forwarded to the respective third-party service for the purposes specified in our consent management tool. We have configured Google Tag Manager to work with our consent management tool in such a way that the triggering of certain third-party services in Google Tag Manager depends on your selection in our consent management tool, so that only those third-party tags for which you have given consent trigger data processing. The use of Google Tag Manager is covered by the consent for the respective third-party service. The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR. Google also processes the data in part in the United States. There is no adequacy decision by the European Commission regarding data transfers to the United States; The legal basis for the transfer to the U.S. is your consent pursuant to Art. 49(1)(a) GDPR. You can find the retention periods for your data in the following descriptions of the individual third-party services. Further information on data protection at “Google” can be found at: https://www.google.de/intl/en/policies/privacy.

You may withdraw your consent to processing and transfer to third countries at any time by sliding the toggle in the “Settings” of the consent tool for the respective third-party provider. The withdrawal does not affect the lawfulness of processing carried out on the basis of consent prior to the withdrawal.

Google Universal Analytics

To tailor our website optimally to user interests, we use “Google Analytics,” a web analytics service provided by “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). “Google Analytics” uses so-called “cookies” (see the “Cookies” section above), which are stored on your device. With the help of cookies, “Google” processes the information generated about your use of our website via your device—e.g., that you have visited a specific webpage—and processes, among other things, the data mentioned in the section “Use of Our Website,” in particular your IP address, browser information, the previously visited website, and the date and time of the server request, for the purpose of statistical analysis of website usage. For this purpose, it may also be determined whether different devices belong to you or your household. This website uses “Google Analytics” with the “anonymizeIp()” extension. This shortens IP addresses before processing to make it significantly more difficult to trace them back to an individual. According to “Google,” your IP address is shortened within member states of the European Union. Only in exceptional cases is the full IP address transmitted to a “Google” server in the U.S. and truncated there. On our behalf, “Google” will process this information to evaluate your use of the website, to compile reports on website activity, and—to the extent we specifically indicate—to provide us with other services related to website usage. The IP address transmitted by your browser for these purposes is not merged with other data held by “Google.” The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR. “Google” also processes the data in part in the United States. There is no adequacy decision by the European Commission regarding data transfers to the United States; The legal basis for the transfer to the U.S. is your consent pursuant to Art. 49(1)(a) GDPR. Your data in connection with “Google Analytics” will be deleted after fourteen months at the latest. Further information on data protection at “Google” can be found at: https://policies.google.com/privacy?hl=en&gl=en.

You may withdraw your consent to processing and transfer to third countries at any time by sliding the toggle back in the “Settings” of the consent tool. The withdrawal does not affect the lawfulness of processing carried out on the basis of your consent prior to the withdrawal.

Google Analytics 4

To tailor our website optimally to user interests, we use “Google Analytics,” a web analytics service provided by Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; Google, LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Analytics uses so-called cookies, which are stored on your device for recognition purposes, as well as similar tracking methods for device recognition such as web beacons, device fingerprinting, and programming interfaces (e.g., APIs and SDKs) to process information from your device. For this purpose, a randomly generated identification number (cookie ID/device ID) is assigned to your device. Using these technologies, Google processes the information generated regarding your device’s use of our website, as well as access data, for the purpose of statistical analysis—e.g., visits to a specific webpage, number of unique visitors, entry and exit pages, duration of visit, clicks, swipe and scroll behavior, button clicks, Newsletter sign-ups, bounce rate, and similar user interactions. For this purpose, it may also be determined whether different devices belong to you or your household. Access data includes, in particular, the IP address, browser and device information, cookie ID/device ID, the previously visited website, and the date and time of the server request.

In Google Analytics 4 systems, individual IP addresses are not logged or stored. When Google captures the IP address in dedicated local data centers within the EU, your IP address is used to determine location information. The IP address is then deleted before the access data is stored in a data center or on a server for Google Analytics. Google Analytics does not provide precise data on geographic location, but only general location information such as the region and city where the device is located, which is derived from the IP address. Google will process this information to evaluate your use of the website, compile reports on website activity for us, and—to the extent we specifically indicate—provide us with additional services related to website usage. If you are registered with a Google service, Google may associate your website visit with your user account and create and evaluate cross-application user profiles.
In addition, a cross-platform analysis of user behavior on websites and apps that use Google Analytics 4 technologies is conducted. This allows user behavior to be equally recorded, measured, and compared across different environments. For example, the user’s scroll events are automatically recorded to facilitate a better understanding of how websites and apps are used. For this purpose, different cookie IDs/device IDs are used for various end devices. Subsequently, we are provided with anonymized statistics on the use of the various platforms, generated according to selected criteria.
Using “Google Analytics 4,” target groups are automatically created for specific cookie IDs/device IDs or mobile advertising IDs, which are later used for personalized advertising. Possible target group criteria include, for example: users who viewed products but did not add them to a shopping cart, or added them to a shopping cart but did not complete the purchase, OR users who purchased specific items. A target group comprises at least 100 users. Using the “Google Ads” tool, interest-based ads can then be displayed in search results. Similarly, website users can be recognized on other websites within the Google advertising network (in Google Search, on “YouTube,” so-called “Google Ads,” or on other websites) and presented with ads tailored to the defined target group criteria. The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR. Google also processes some of the data in the United States. There is no adequacy decision by the European Commission regarding data transfers to the United States; the transfer to the U.S. is based on your consent pursuant to Art. 49(1)(a) GDPR. Your data in connection with Google Analytics will be deleted after fourteen months at the latest. For more information on data protection at Google, please visit: http://www.google.de/intl/en/policies/privacy.

You may withdraw your consent to processing and third-country transfers at any time by sliding the toggle back in the "Settings" of the consent tool. The withdrawal does not affect the lawfulness of processing carried out on the basis of your consent prior to the withdrawal.

Google Analytics Advertising (Remarketing Option)

We also use the web analytics service “Google Analytics” with the remarketing feature “Google Analytics Advertising” from Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, and Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). To this end, Google Analytics Advertising uses technologies such as “cookies,” “tracking pixels,” and “device fingerprinting” to track specific user behavior on websites. In doing so, information stored on users’ devices is also processed. Using the “tracking pixels” embedded in websites and the “cookies” stored on users’ end devices, Google processes the information generated about the use of our website via users’ end devices and access data for the purpose of statistical analysis—e.g., that a specific webpage was visited or a Newsletter subscription took place—and for the purpose of displaying personalized advertisements based on this data. For these purposes, it may also be determined whether different devices belong to you or your household. The additional “Google Analytics Advertising” feature enables the creation of target groups for specific cookies or mobile advertising IDs, which can later be used for renewed personalized advertising. Possible target group criteria include, for example: users who viewed products but did not add them to a shopping cart, or added items to a cart but did not complete the purchase, and users who purchased specific items. A target group comprises at least 100 users. Using the “Google Ads” tool, interest-based ads can then be displayed in search results. This allows users of websites to be recognized on other websites within the Google advertising network (in Google Search or on “YouTube,” so-called “Google Ads,” or on other websites) and to be presented with ads tailored to the defined target group criteria. The ads may also relate to products and services that users have already viewed on our website. Access data includes, in particular, the IP address, browser information, the previously visited website, and the date and time of the server request. “Google Analytics” is used with the “anonymizeIp()” extension. This shortens IP addresses during processing to make it more difficult to trace them back to an individual. Due to the use of the Google Analytics Advertising tool, the user’s browser automatically establishes a direct connection to Google’s server. If users are registered with a Google service, Google can associate the visit with the user’s account and create and evaluate cross-application user profiles. The legal basis for processing is your consent pursuant to Art. 6(1)(a) GDPR. “Google” also processes some of the data in the United States. There is no adequacy decision by the European Commission regarding data transfers to the United States; the legal basis for the transfer to the United States is your consent pursuant to Art. 49(1)(a) GDPR. Your data in connection with “Google Analytics” will be deleted after fourteen months at the latest. Further information on data protection at “Google” can be found at: https://policies.google.com/privacy?hl=en&gl=en.

You may withdraw your consent to processing and transfer to third countries at any time by sliding the slider back in the “Settings” of the consent tool. The withdrawal does not affect the lawfulness of processing carried out on the basis of your consent prior to the withdrawal.

Google Ads Conversion Tracking

We use the “Google Ads” service provided by “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) to draw attention to our attractive offers on external websites using advertising materials (formerly known as “Google AdWords”). We can determine the success of individual advertising measures based on the data from the advertising campaigns. These advertisements are delivered by “Google” via so-called “ad servers.” For this purpose, we use “ad server” cookies, which allow certain parameters for measuring reach—such as the display of ads or clicks by users—to be tracked. If you arrive at our website via a “Google” ad, “Google Ads” will store a cookie on your device. Using these cookies, “Google” processes the information generated by your device regarding interactions with our advertising materials (visiting a specific webpage or clicking on an ad), the data mentioned in the section “Use of Our Website”—in particular your IP address, browser information, the previously visited website, and the date and time of the server request, for the purpose of analyzing and visualizing the reach of our advertisements. For this purpose, it may also be determined whether different devices belong to you or your household. Due to the marketing tools used, your browser automatically establishes a direct connection with the “Google” server. If you are registered with a “Google” service, “Google” can associate the visit with your account. Even if you are not registered with “Google” or have not logged in, there is a possibility that the provider may obtain and process your IP address. We receive only statistical reports from “Google” for the purpose of measuring the effectiveness of our advertising materials. The legal basis for the processing of your data is your consent pursuant to Art. 6(1)(a) GDPR. “Google” also processes some of the data in the United States. There is no adequacy decision by the European Commission regarding data transfers to the United States; The legal basis for the transfer to the U.S. is your consent pursuant to Art. 49(1)(a) GDPR. The retention period at “Google” is a maximum of twenty-four months. Further information on data protection and the retention period at “Google” can be found at: https://policies.google.com/privacy?hl=en&gl=en.

You may withdraw your consent to processing and the transfer to third countries at any time by sliding the toggle back in the “Settings” of the consent tool. The withdrawal does not affect the lawfulness of processing carried out on the basis of your consent prior to the withdrawal.

Google Ads Remarketing

We use the “Google Ads” tool with the “Dynamic Remarketing” feature from “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). This is a method we use to reach out to you again. With the “Dynamic Remarketing” feature, we can recognize users of our website on other websites within the “Google” advertising network (in “Google” Search or on “YouTube,” so-called “Google Ads,” or on other websites) and present advertisements tailored to their interests. The advertisements may also relate to products and services that you have already viewed on our website. To this end, user interaction on our website is analyzed—for example, which offers the user was interested in—so that we can display targeted advertising to users on other sites even after they have visited our website. When you visit our website, “Google Ads” stores a cookie on your device. With the help of cookies, “Google” processes the information generated by your device regarding the use of our website and interactions with our website, as well as the data mentioned in the section “Use of Our Website”—in particular your IP address, browser information, the previously visited website, and the date and time of the server request—for the purpose of displaying personalized advertisements. For this purpose, it may also be determined whether different devices belong to you or your household. The data collected through “Google Ads” is not combined with data from other “Google” products. The legal basis for the processing of your data is your consent pursuant to Art. 6(1)(a) GDPR. “Google” also processes some of the data in the United States. There is no adequacy decision by the European Commission regarding data transfers to the United States; the legal basis for the transfer to the United States is your consent pursuant to Art. 49(1)(a) GDPR. The retention period at “Google” is a maximum of twenty-four months. For more information on data protection and the retention period at “Google,” please visit: https://policies.google.com/privacy?hl=en&gl=en.

Disabling Google Ads

(http://www.google.com/privacy_ads.html) or on the Network Advertising Initiative’s opt-out page (http://www.networkadvertising.org/managing/opt_out.asp)

Use of Google Maps

Use of Google Maps: The media owner’s services use Google Maps to display maps and create directions. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When the user uses the platform, it establishes a direct connection to Google’s servers. Google thereby receives device-specific data, location data, IP address (log files), and information about cookies. By using the platform, the user consents to the transmission, collection, processing, and use of the automatically collected data by Google.

Facebook Analytics

We use the “Facebook Analytics” tool from “Facebook.” The provider is Facebook Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com; hereinafter: “Facebook”). For the use of “Facebook Analytics,” we use the so-called “Facebook Pixel” to analyze the use of our website and online presence (e.g., on social networks such as “Facebook” and “Instagram”), user interactions on our website and online presence, and the reach of our advertisements. With the help of “Facebook Pixels”—small graphics that are embedded on our website, automatically loaded when you visit our website, and enable tracking of user behavior—your browser automatically establishes a direct connection to the “Facebook” server. Through the integration of “Facebook Pixels,” “Facebook” processes information generated by cookies regarding your device’s use of our website—e.g., that you have visited a specific webpage—and processes, among other things, the data listed in the section “Use of Our Website,” in particular your IP address, browser information, the previously visited website, the “Facebook ID,” as well as the date and time of the server request—for the purpose of analyzing our website and online presence, analyzing user interactions, and measuring the reach of our advertisements. For these purposes, it may also be determined whether different devices belong to you or your household. The information obtained using the “Facebook Pixel” serves us solely for statistical purposes, is transmitted to us by “Facebook” anonymously as statistics, and provides no insight into the user’s identity. If you are registered with a “Facebook” service, “Facebook” may associate the collected information with your account. Even if a user is not registered with “Facebook” or is not logged in, there is a possibility that “Facebook” may obtain and process the IP address and other identifying characteristics. The processing of your data is based on your consent pursuant to Art. 6(1)(a) GDPR. “Facebook” also processes some of the data in the United States. There is no adequacy decision by the European Commission regarding data transfers to the United States; the legal basis for the transfer to the United States is your consent pursuant to Article 49(1)(a) of the GDPR. The retention period for the information stored in Facebook cookies is three months. You can find further information on data protection and retention periods at “Facebook” at: https://www.facebook.com/privacy/explanation and https://www.facebook.com/policies/cookies/.

You may withdraw your consent to processing and the transfer to third countries at any time by sliding the toggle back in the “Settings” of the consent tool. The withdrawal does not affect the lawfulness of the processing carried out on the basis of your consent prior to the withdrawal.

Facebook Custom Audiences

Furthermore, the website uses the “Website Custom Audiences” feature from “Facebook.” The provider is Facebook Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com; hereinafter: “Facebook”). Information about usage behavior on our website is collected via so-called web beacons such as the “Facebook Pixel” and processed by “Facebook.” This allows interest-based advertisements (“Facebook Ads”) to be displayed to website users and “Facebook” users who belong to a comparable target group when they visit the “Facebook” social network. With the help of “Facebook Pixels” (small graphics that are embedded on our website and automatically loaded when you visit our website, enabling tracking of user behavior), your browser automatically establishes a direct connection to the “Facebook” server. Through the integration of “Facebook Pixels,” “Facebook” processes information generated by cookies regarding your device’s use of our website—e.g., that you have visited a specific webpage—and processes, among other things, the data listed in the section “Use of Our Website,” in particular your IP address, browser information, the previously visited website, the “Facebook ID,” as well as the date and time of the server request, for the purpose of displaying personalized advertisements. For this purpose, it may also be determined whether different devices belong to you or your household. If you are registered with a “Facebook” service, “Facebook” may associate the collected information with your account. Even if you are not registered with “Facebook” or are not logged in, there is a possibility that the provider may obtain and process your IP address and other identifying characteristics. The legal basis for the processing of your data is your consent pursuant to Art. 6(1)(a) GDPR. “Facebook” also processes some of the data in the United States. There is no adequacy decision by the European Commission regarding data transfers to the United States; the legal basis for the transfer to the United States is your consent pursuant to Article 49(1)(a) of the GDPR. The retention period for the information stored in Facebook cookies is three months. For more information on data protection and retention periods at “Facebook,” please visit: https://www.facebook.com/privacy/explanation and https://www.facebook.com/policies/cookies/.

You may withdraw your consent to processing and the transfer to third countries at any time by sliding the toggle back in the “Settings” of the consent tool. The withdrawal does not affect the lawfulness of the processing carried out on the basis of your consent prior to the withdrawal.

Use of Yandex Metrica

We use Yandex.Metrica, a web analytics and click-tracking service provided by Yandex, located at 16 L. Tolstoy Street, Moscow 119021. The information generated by the use of this service regarding your use of our website (including your IP address) is transmitted to a Yandex server in the Russian Federation and stored there. Cookies are used on your device for this purpose. Cookies are text files that are stored on your computer and enable an analysis of your use of the website. Yandex will use this information to evaluate your use of the website, to compile reports on website activity for the website operators, and to provide other services related to website and internet usage. Yandex may also transfer this information to third parties where required by law or where such third parties process the data on behalf of Yandex. You may object to this form of data collection and storage at any time with future effect. You can do this yourself in your browser settings by preventing the storage of cookies from the website www.metrica.yandex.com. If you wish to have your already stored data deleted, simply send an email to info@alpenhof.at.

HolidayCheck

Web widgets from HolidayCheck AG, Bahnweg 8, CH-8598 Bottighofen, Switzerland, are integrated into our website. Web widgets (widgets) are small programs that are integrated into the website and display information from other websites. The content displayed on our
website (reviews/recommendation rate) is always retrieved in real-time from the HolidayCheck servers. For this to work technically, data must be exchanged between the two servers involved. This includes the date and time of the visit; the page from which the request is made; the Internet Protocol (IP) address used; browser type and version; device type; operating system; and similar technical information.
The legal basis is our legitimate interest pursuant to Article 6(1)(f) of the GDPR. By providing this service, we deliver up-to-date and accurate content on our website. The processed data is used solely for the purpose of providing the content or transmitting data that you provided when you submit a review directly on our website. It is not processed for any other purpose, in particular not to analyze usage behavior. We do
not store the aforementioned data as part of this processing. To design the widgets, we use Google Fonts. For this purpose, your IP address is transmitted to Google servers in the United States. The EU-US Privacy Shield serves as a safeguard under Article 45 of the GDPR. The legal basis is our legitimate interest pursuant to Article 6(1)(f) of the GDPR. By using these fonts, we ensure consistent rendering of the widgets. Information regarding data processing by HolidayCheck AG can be found in the privacy policy at www.holidaycheck.de/datenschutz.

Hotelchamp

We use the services of Hotelchamp, a software and service provider, to improve our online booking process and to personalize and enhance our interaction with you. In providing this service, both for us and for you, Hotelchamp may process some of your personal data on our behalf. Both Hotelchamp and we value and respect your privacy and process and protect your personal data in accordance with all applicable laws and regulations.
We have entered into a "Data Processing Agreement" with Hotelchamp to establish specific arrangements regarding the processing and protection of your personal data.
We and Hotelchamp may process data such as your email address, IP address, and browser fingerprint in conjunction with your booking data and other interactions on our website to provide you with content and offers that we believe are most relevant and appealing to you. For example, if your booking details fall around Christmas, we may present you with a special Christmas offer. Or if your booking details indicate that you are a family, we may display a special family offer to you.
Hotelchamp’s services may involve the use of cookies on our website. By continuing to visit our website, you consent to the use of cookies, which help us personalize and improve our interaction with you.
Your interactions are used exclusively with us and our website to personalize content and offers; they are never shared with other websites or platforms.

Through the Newsletter, we keep you informed about us and our offers. If you would like to receive the Newsletter, we require a valid email address from you, as well as information that allows us to verify that you are the owner of the provided email address or that the owner consents to receiving the Newsletter. If additional, voluntarily provided information regarding areas of interest, postal code, etc., is collected, this is used solely to provide you with targeted information. This data is used only for sending the Newsletter and is not shared with third parties. When you subscribe to the Newsletter, we store your IP address and the date of registration. This storage serves solely as proof in the event that a third party misuses an email address and subscribes to the Newsletter without the authorized person’s knowledge. You may revoke your consent to the storage of your data, your email address, and their use for sending the Newsletter at any time. You can revoke your consent via a link in the Newsletter themselves, in your profile area, or by contacting us using the contact options listed above.

User Consent

By using our website and the services offered therein, you agree that the personal data you voluntarily provide will be stored by us and processed and used in accordance with this Privacy Policy.

Right to Information

You have the unrestricted right to receive information free of charge regarding the data we have stored about you, as well as the right to have unauthorized data deleted or blocked, or to have incorrect data corrected. Upon request, we are happy to inform you in writing whether and what personal data we have stored about you. To the extent possible, we will take appropriate measures to update or correct your data stored with us as soon as possible. In such cases, please contact our hotel management directly.

Google reCAPTCHA

This website uses Google reCAPTCHA (provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). reCAPTCHA is used to protect our forms from spam and abuse by verifying whether form submissions are made by a human or an automated bot.

To this end, reCAPTCHA analyzes the behavior of website visitors and collects data such as IP addresses, browser and device information, and user interactions. This data is transmitted to Google and processed on servers in the United States.

The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in protecting our website from spam and abuse) or Art. 6(1)(a) GDPR (consent), as applicable.

For more information, please see Google’s Privacy Policy: https://policies.google.com/privacy