Privacy policy

Thank you for visiting our website. Protecting your personal data is important to us. In this privacy policy, we inform you about the personal data we collect during your visit to our website and how this data is used. Please take a moment to read this statement.

  1. Data Controller:

The entity responsible for processing your personal data on this website is:
Hotel Winterbauer GmbH, Am Feuersang 28, 5542 Flachau, +43 6452 4248,

  1. Collection and Use of Personal Data:

2.1. Log-Data

Upon each access to our website, certain information is automatically collected and stored in log files on our server. This information may include your IP address, date and time of access, the accessed page, the referrer URL (the previously visited page), browser type and version, operating system, and similar technical information. This information is used solely for statistical purposes and to improve our website. It is not linked to other data sources.

2.2. Contact Form

When you use the contact form on our website, the data you enter (e.g., name, email address, phone number) is stored to process and respond to your inquiry. This data is used only for the stated purpose and is not disclosed to third parties unless necessary to process your request.

2.3. Cookies

Our website uses cookies to provide certain functions and improve your user experience. Cookies are small text files stored on your device when you visit our website, allowing us to recognize your browser and store certain information. You have the option to disable the use of cookies in your browser settings, but this may result in limitations in using our website. For more information on the use of cookies on our website, please refer to our Cookie Policy.

  1. Legal Basis for Data Processing:

The processing of your personal data is based on the GDPR. The legal basis for processing your personal data may vary depending on the type of data and the purpose of processing. In general, we rely on one or more of the following legal bases:

  • Consent: If we obtain your consent for the processing of specific personal data, this is done on the basis of Article 6(1)(a) GDPR. You have the right to withdraw your consent at any time.
  • Contractual Performance: When processing your personal data is necessary for the performance of a contract with you, it is based on Article 6(1)(b) GDPR.
  • Compliance with Legal Obligations: In some cases, we are legally obligated to process your personal data, e.g., to fulfill tax or legal requirements. In such cases, we rely on Article 6(1)(c) GDPR.
  • Legitimate Interest: When processing your personal data based on a legitimate interest, we ensure that our interests do not override your fundamental rights and freedoms. The legal basis for this is Article 6(1)(f) GDPR.
  1. Data Disclosure to Third Parties:

We do not disclose your personal data to third parties without your explicit consent unless it is necessary to process your request or fulfill a contract with you. However, in some cases, we may be legally obligated to disclose your data to authorities or other third parties.

  1. Duration of Data Storage:

We only store your personal data for as long as necessary to fulfill the purposes for which it was collected, unless there are legal retention requirements. After the retention periods expire, your data will be deleted or anonymized.

  1. Your Rights:

According to the GDPR, you have specific rights regarding your personal data. These include the right to information, correction, deletion, restriction of processing, data portability, and the right to object. To exercise these rights, please contact us using the contact information below.

  1. Changes to the Privacy Policy:

We reserve the right to change this privacy policy at any time. The current version is available on our website. We will inform you about significant changes.