Privacy policy

in accordance with Article 13 GDPR

Thank you for your interest in our website. The trust of all visitors and customers, the security of your data and the protection of your privacy are of central importance to us.

Your personal data will therefore be treated by us in accordance with the applicable statutory data protection regulations and this privacy policy. Personal data is information that can be used to determine your identity. Typical personal data includes your surname, first name, address, telephone number, IP address, cookies and e-mail address.

When you view and use our website or otherwise expressly transmit information to us, we process the data that is automatically transmitted to us with each request from your browser (see the “Log data” section). If you voluntarily transmit personal data to us, the processing is exclusively earmarked to the request or the respective order. We would like to point out that data transmission on the Internet can never be completely protected against access by third parties.

In the following sections, we would like to explain to you in more detail what data we process, when and for what purpose. It explains how our services work and how the protection of your personal data is guaranteed.

Name and address of the person(s) responsible:

The controller within the meaning of the EU General Data Protection Regulation and other data protection regulations is

Mario Manzl e.U.
Römerstraße 16
A-6065 Thaur

Scope

This privacy policy applies to our websites alpechalets.at, buchung.alpechalets.at, alpechalets.de and buchung.alpechalets.de. All four websites are run by the same web host (see the section “Web hosting via all-inkl”).

A cookie banner, through which you give and manage consent for services that require consent, exists on alpechalets.at and buchung.alpechalets.at. There is no cookie banner on alpechalets.de and buchung.alpechalets.de. No services requiring consent are used there, with the exception of Google Maps on buchung.alpechalets.de, which is only loaded after you click (see the section “Google Maps”).

To complete an online booking, our booking portals forward you to the booking pages of our booking system provider at www.my-bookings.cc. What is loaded and processed there is described in the section “Booking system”.

Legal basis for the processing of personal data

As a provider, we may only process the personal data of website visitors if one of the following conditions exists as a legal basis:

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

Art. 6 para. 1 lit. b GDPR serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for data processing.

Data erasure and storage duration

The personal data of the data subject will be deleted as soon as the purpose of storage no longer applies.

Data may also be stored if this is provided for by European or national laws or other regulations to which the controller is subject.

The data will also be blocked or deleted if a storage period prescribed by the aforementioned regulations expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

Contact us

When you contact us (e.g. by contact form, email, telephone or via social media), your details will be processed to process the contact request and its handling in accordance with Art. 6 para. 1 lit. b) GDPR (so-called pre-contractual measure).

We delete the requests if they are no longer required. We review this necessity every two years. Furthermore, the statutory archiving obligations apply.

Legal basis

The legal basis for the processing of this data is so-called pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR

Protocol data

The provider of the Internet services (provider) automatically collects “log data” in server log files.

The log data includes the following information:

• Date and time of the respective request
• Internet address (URL) that was requested
• URL that the visitor visited immediately before (referrer)
• Browser and language used
• Operating system used
• IP address and host name of the visitor
• Access status / http status code
• Amount of data transferred in each case

The transmission of this data to us is automatic and this data cannot be assigned to your person with reasonable effort.

Legal basis

The legal basis for the processing of this data is our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Logging is used for access control and monitoring of technical processes and their optimization.

The data will not be passed on to third parties, except to law enforcement authorities by court order.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected or after the legally prescribed deletion period has expired.

Consequently, there is no possibility for the user to object.

Your rights

You have a right to free information about the personal data we have stored about you and, if applicable, a right to rectification, restriction of processing or erasure of this data. You also have the right to data portability. Finally, you also have the right to complain to the data protection supervisory authority about the processing of your personal data by us.

Right of objection

We would also like to point out that you can object to the future processing of your personal data at any time in accordance with the legal requirements pursuant to Art. 21 GDPR. In particular, you may object to processing for direct marketing purposes.

Right to information

If you have any questions regarding the collection, processing or use of your personal data, for information, for the correction, blocking or deletion of data as well as for the revocation of any consent given or for objection to a specific use of data, please contact us using the following e-mail address:

c.manzl@alpe-chalets.at

Encryption through SSL / TLS

For security reasons, our website uses SSL or TLS encryption. This ensures that transmitted data is protected and cannot be read by third parties. You can recognize successful encryption by the fact that the protocol name in the status bar of the browser changes from “http://” to “https://” and that a closed lock symbol is visible there.

Linking

This website may contain links to websites operated by other companies, including, for example, websites of social media channels.

If you follow such links, you may encounter cookies that are not under our control. We cannot accept any liability for this and we refer you to the data protection provisions or cookie guidelines of the respective websites.

Web hosting via all-inkl

We use the services of ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, D-02742 Friedersdorf for web hosting for our websites and have concluded an order processing contract with all-inkl.com in accordance with Art. 28 GDPR.

Further information can be found in all-inkl’s privacy policy at https://all-inkl.com/datenschutzinformationen.

Legal basis

The legal basis for processing this data is our legitimate interest in operating and maintaining the operational security of this website in accordance with Art. 6(1)(f) GDPR.

Google Web Fonts

We use Google Web Fonts. On all websites named in this privacy policy, all fonts are loaded locally from our own web space.
When using Google Web Fonts, no personal data is forwarded to third parties. The fact that Google Maps loads its own fonts from Google servers after your consent is described in the section “Google Maps”.

Booking system

Booking enquiry via our enquiry form

For booking enquiries we provide our own enquiry form on our enquiry pages, running directly on our website. When you open the enquiry page, no data is transferred to third parties.

If you submit the enquiry form, we process the following data you provide in order to handle your enquiry.

• desired property
• arrival and departure date
• number of persons
• name
• e-mail address
• phone number (optional)
• your message (optional)

Your details are transmitted by e-mail to our mailbox and processed there. No transfer to third parties takes place. For the hosting of our website, please see the section on the hosting provider.

The data you transmit to us will remain with us until the purpose for storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Online booking via our booking portals

On buchung.alpechalets.at and buchung.alpechalets.de you can check the availability and prices of our accommodation. For this check, our web server sends the selected accommodation, the period and the number of persons to the booking system my-bookings. No personal details about you are transmitted.

When you click “Book now”, you are forwarded to the booking pages at www.my-bookings.cc. There you enter the data required for the booking:

• first name and last name
• address (street, postcode, city, country)
• e-mail address
• phone number
• company (optional)
• voucher code (optional)
• payment details (see “Payment processing”)

The selected accommodation, the period, the number of persons, any extras chosen and the chosen cancellation option are processed as well.

The booking system is provided by IMS Media GmbH, Hagedornweg 73a, 1220 Vienna, Austria. IMS Media GmbH processes your booking data on our behalf as a processor under Art. 28 GDPR. The booking pages are delivered from a server in Austria.

When the booking pages are opened, your browser calls the service ip2c.org, which determines your country from your IP address in order to pre-select the country code in the phone field (server in Poland). Images of the accommodation are loaded there from a server in France provided by the hosting provider Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus. Your IP address is transmitted in each case. Both servers are located in the European Union.

We store your booking data for as long as it is needed to carry out and invoice your stay. We keep booking and invoice records for seven years because of the statutory retention obligation under tax law (Section 132(1) of the Austrian Federal Fiscal Code, BAO). The data we record in our guest register under the Austrian Registration Act (guest registration form) is kept for seven years from the date of entry (Section 10(2) of the Registration Act 1991). After these periods the data is deleted unless another statutory retention obligation applies.

Payment processing

Payment takes place on the my-bookings booking pages. For bookings via buchung.alpechalets.at, credit card and PayPal are available; for bookings via buchung.alpechalets.de, credit card.

You enter your credit card details (card number, card holder, expiry date and security code) directly into the form on the booking pages. They are transmitted in encrypted form to the my-bookings server and passed on from there to the payment service provider connected by my-bookings, Unzer Austria GmbH, Columbusplatz 7-8, 1100 Vienna, Austria (FN 359641i), and to the card acquiring payment institution to process the payment. The amount due is charged when you book. Your card details are stored in the booking system for as long as they are needed for the payment of your stay. Unzer’s privacy notice also applies: https://www.unzer.com/en/data-protection/

If you choose PayPal, the payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal’s privacy statement also applies: https://www.paypal.com/de/legalhub/paypal/privacy-full

Legal basis

The processing of your data for the online booking, the payment and the online booking request is based on Art. 6 para. 1 lit. b GDPR and serves the fulfillment of a contract or the implementation of pre-contractual measures. Booking and invoice records are kept to comply with our legal obligations (Art. 6 para. 1 lit. c GDPR). The calls to ip2c.org and the image server are based on our legitimate interest in functioning booking pages (Art. 6 para. 1 lit. f GDPR).

Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your end device and store certain information for exchange with our system.

Cookie types

First-party cookies – Necessary cookies

These are generated by our website and are necessary for the error-free operation of the application. Some of these cookies are automatically deleted at the end of the browser session, i.e. when the browser is closed; others remain stored for the period stated below.

Without these cookies, error-free operation of the website cannot be guaranteed.

The following cookies and browser storage entries are set without your consent because they are technically required:

• “wp-wpml_current_language” on alpechalets.at: stores the selected language, deleted when the browser is closed.
• “pll_language” on buchung.alpechalets.at and buchung.alpechalets.de: technically necessary (strictly necessary) language cookie, stores the selected language (German or English); the booking engine reads the language from this cookie in order to show you the booking process in your language, storage period 1 year.
• “max2-cookie” on alpechalets.at and buchung.alpechalets.at: stores your choice in the cookie banner, storage period 182 days (see the section “Cookie banner”).
• “wpEmojiSettingsSupports” in the browser’s session storage on buchung.alpechalets.at and buchung.alpechalets.de: a technically necessary WordPress check whether your browser can display emojis, with no reference to your person, deleted when the browser tab is closed.

alpechalets.de does not set any cookies.

Legal basis

The legal basis for the processing of this data is Art. 6 para. 1 sentence 1 lit. f GDPR. Storing this information on your device is strictly necessary so that we can show you the website in the language you selected and with your settings (Section 165(3) TKG 2021; for visitors from Germany Section 25(2) no. 2 TDDDG).

Cookies from third-party providers

These are set by various services (e.g. analysis services or Facebook) and store a unique identifier that recognizes your end device the next time you visit (persistent cookies).

These cookies remain on your end device for a specified period of time. This duration is variable.

Legal basis

The legal basis for the processing of this data is Art. 6 para. 1 sentence 1 lit. a GDPR, for storing and reading information on your device in conjunction with Section 165(3) TKG 2021 (for visitors from Germany Section 25(1) TDDDG).

Please note that with some providers, especially providers from the USA, data may be transferred to and processed in the USA. For companies in the USA certified under the EU-US Data Privacy Framework, an adequacy decision of the European Commission exists (Art. 45 GDPR). In addition, such transfers are based on the European Commission’s standard contractual clauses (Art. 46 GDPR). Which basis applies to an individual provider is stated in the section on the respective service.

Deactivate cookies

Please note that certain cookies are already set as soon as you enter our website.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases, in particular cookies from third-party providers (third-party cookies) or in general.

If you do not accept cookies, the functionality of our website may be restricted for you.

Cookie banner

On alpechalets.at and buchung.alpechalets.at we use the tool max2-cookie-banner, a further development of Borlabs Cookie that runs on our own web space, to manage your consent. It sets the technically necessary cookie “max2-cookie”, which stores your choice and a randomly generated identifier (UID). The cookie applies to alpechalets.at and buchung.alpechalets.at together and is deleted after 182 days.

To be able to prove your consent, we store your choice together with this identifier and the time in the database of the respective website. Your IP address is not stored. The entries are automatically deleted after 182 days. The legal basis is our obligation to be able to demonstrate consent (Art. 6 para. 1 lit. c in conjunction with Art. 7 para. 1 GDPR).

If you wish to withdraw your consent, you can do so via the cookie settings below or by deleting the cookie in your browser. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal. Once you have deleted the cookie, you will be asked for your cookie consent again the next time you visit the website.

Cookie settings

Cookie settings

Consent history

Your consent history:

If you have any questions, please contact us using the following UID.

UID:

Cookie list

We use the following cookies:

Google Maps

On alpechalets.at (among others on the contact page) and on our booking portals buchung.alpechalets.at and buchung.alpechalets.de we embed maps from Google Maps. On the booking portals we also use the Google Maps Platform programming interface including the Places library. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When a map is loaded, a connection to Google servers is established. In particular, your IP address, information about your browser and the address of the page you are viewing are transmitted to Google. To display the map, Google loads fonts from Google servers and may set cookies.

Maps are only loaded after your consent:

• On alpechalets.at and buchung.alpechalets.at, after you have allowed the category “External Media” in the cookie banner. You can withdraw this consent at any time via the cookie settings.
• There is no cookie banner on buchung.alpechalets.de. There you first see a placeholder instead of the map, which points out the transfer to Google and links to this privacy policy. The map is only loaded when you click “Load map”. Your click is noted in your browser’s session storage (entry “max2MapsOk”) so that further maps in the same browser tab load without another click. The consent ends when you close the browser tab. You withdraw it by closing the tab.

The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

A transfer of data to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework (list of certified companies: https://www.dataprivacyframework.gov/list). In addition, Google has concluded the European Commission’s standard contractual clauses. Information from Google on these safeguards: https://policies.google.com/privacy/frameworks?hl=en. The European Commission’s standard contractual clauses are available at https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

Further information: https://policies.google.com/privacy

Legal basis

The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 165(3) TKG 2021 (for visitors from Germany Section 25(1) TDDDG).

Kuula 360° Tours

On our website, we use the Kuula service provided by Kuula Inc., USA, to embed interactive 360° panoramic tours of our chalets.

The 360° tours will not be loaded until you have given your explicit consent. Until you give your consent, a placeholder will be displayed in place of the tour. Once you give your consent, a connection is established to Kuula’s servers (static.kuula.io, kuula.co), during which your IP address, browser type, referrer URL, and device information are transmitted. Kuula may set cookies and collect usage statistics during this process.

According to its own information, Kuula processes data mainly in the USA and bases transfers from the European Economic Area on the European Commission’s standard contractual clauses (information from Kuula: https://kuula.co/legal/gdpr; the European Commission’s standard contractual clauses: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en).

For more information about Kuula’s privacy policy, visit: https://kuula.co/legal/privacy

Legal basis

The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 165(3) TKG 2021 (for visitors from Germany Section 25(1) TDDDG).

Consent, withdrawal and loading order

All third-party services listed below are only used on alpechalets.at and buchung.alpechalets.at and are only loaded after you have allowed the matching category in the cookie banner. Before you give your consent, no connection to these providers’ servers is established and no related cookies are set. The legal basis for cookies and comparable technologies that are not technically necessary is your consent under Art. 6(1)(a) GDPR in conjunction with Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021), for visitors from Germany additionally Section 25(1) TDDDG.

Your consent is voluntary and can be withdrawn at any time. You can change or fully withdraw it through the cookie settings on this website. Withdrawing is as easy as giving consent. The lawfulness of processing carried out before the withdrawal remains unaffected.

Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (container ID GTM-K6JPD3VK). Google Tag Manager is a management tool through which we integrate and control the services described below. Tag Manager itself does not set analytics cookies and does not store personal data, but it triggers the integrated services, which process data themselves.

When Google Tag Manager loads, a connection to Google servers is established and your IP address is transmitted. Google Tag Manager is only loaded after you have given your consent.

Legal basis

Processing is based on your consent under Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (measurement ID G-B40LYDV6XX). Google Analytics uses cookies and similar technologies to analyse how you use this website. The data collected includes the pages you visit, the time spent, the source of the visit, the device, operating system and browser used, an approximate location based on your shortened IP address, and interactions such as viewing an accommodation, starting an availability search and opening the booking process.

We have enabled IP anonymisation, so your IP address is shortened by Google within the European Union before any further processing. The results are made available to us in aggregated form. We use them to improve our offer and our website.

A transfer of data to the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework. In addition, Google has concluded the European Commission’s standard contractual clauses.

Further information: https://policies.google.com/privacy

Legal basis

Processing is based on your consent under Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

Google Ads conversion tracking

We advertise our offer through Google Ads and use conversion tracking provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (conversion ID 11029646969). If you reach this website through one of our ads, a cookie is set that allows us to see whether an action relevant to us followed the ad click, for example a booking enquiry. We only receive aggregated reports and cannot identify you personally.

A transfer of data to the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework. In addition, Google has concluded the European Commission’s standard contractual clauses.

Legal basis

Processing is based on your consent under Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

Meta Pixel (Facebook Pixel)

We use the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (pixel ID 1778739225920480). The Meta Pixel records your interaction with this website and transmits that information to Meta so that we can measure the effect of our advertising on Facebook and Instagram and show you relevant ads there. In doing so, a connection to Meta servers is established (connect.facebook.net) and cookies are set.

If you have a Meta account and are logged in, Meta can link the information collected to your account. We have no influence on this linking.

A transfer of data to the USA cannot be ruled out. Meta Platforms Inc. is certified under the EU-US Data Privacy Framework. In addition, Meta has concluded the European Commission’s standard contractual clauses.

Further information: https://www.facebook.com/privacy/policy

Legal basis

Processing is based on your consent under Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

Booking portals buchung.alpechalets.at and buchung.alpechalets.de

Our online booking portals are operated at buchung.alpechalets.at and buchung.alpechalets.de.

On buchung.alpechalets.at the same services are used as on this website, plus Google Maps to display the location. The choice you make in the cookie banner applies to alpechalets.at and buchung.alpechalets.at together, because the consent status is stored across the domain. You therefore only need to make your choice once and can change it in either place.

There is no cookie banner on buchung.alpechalets.de. Neither Google Tag Manager nor Google Analytics, Google Ads or the Meta Pixel are used there. Maps from Google Maps are only loaded there after you click (see the section “Google Maps”).

For how a booking works, see the section “Booking system”.

Legal basis

For processing a booking, Art. 6(1)(b) GDPR. For services requiring consent, Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

Contact form

We provide a form on our contact pages on alpechalets.at and alpechalets.de. The details you enter there (first name, last name, email address, phone number and your message) are sent to our email address willkommen@alpechalets.at and used to handle your enquiry. We do not send you an automatic confirmation email. The details are additionally stored in the database of the respective website so that no enquiry is lost.

We use the form tool FluentForm, which runs on our own web space. No form data is passed on to third parties, apart from our web host acting as a processor.

Your details remain stored until the purpose of storage no longer applies, meaning after your enquiry has been dealt with, and provided you do not ask us to erase them. Mandatory statutory retention periods remain unaffected.

Legal basis

For an enquiry aimed at a contract, Art. 6(1)(b) GDPR. Otherwise our legitimate interest in answering your enquiry under Art. 6(1)(f) GDPR and, where you give us consent, Art. 6(1)(a) GDPR.

No automated decision-making

Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.

Right to lodge a complaint with the supervisory authority

If you believe that the processing of your personal data infringes data protection law, you can lodge a complaint with the competent supervisory authority. In Austria this is the Data Protection Authority:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Web: https://www.dsb.gv.at

Status and changes to this privacy policy

We update this privacy policy whenever the processing or the services used change. Please check back regularly for the current version.

Status: October 2026