Privacy
Here you can find out which data is processed when you visit our website, contact us or make a booking, and what rights you have.
Grand Chalet and Romantikhütte in Innerfragant
1. Who is responsible for your data
Hotel-Konzept GmbH, Südtiroler Straße 2, 5640 Bad Gastein/Böckstein, Austria.
For privacy questions and to exercise your rights, contact chalet@eggerfeld.at or +43 670 703 4300. The accommodation is at Innerfragant 50–51, 9831 Flattach; this is different from the company’s registered address.
2. Website operation and technical data
When you open a page, technical connection data is transmitted to the web server. This includes your IP address, the page or file requested, and device and browser information sent by your browser. This processing enables content delivery and the detection and resolution of technical faults or abusive access.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to operate a secure, functioning website. Recipients are service providers engaged for hosting, technical maintenance and IT security, to the extent required for their task. WP Super Cache stores generated pages on the web server for faster delivery.
3. When you contact us
When you contact us by email or telephone, we process the contact details and enquiry content you provide so that we can respond. Please only send the information needed for this. The contact page provides email, telephone and WhatsApp links; it does not use a contact form.
For enquiries about a booking or stay, the legal basis is Article 6(1)(b) GDPR. We handle other enquiries on the basis of our legitimate interest in responding to your request under Article 6(1)(f) GDPR. Contacting us is voluntary. Without a telephone number or email address, we cannot reply through that channel. Technical email service providers receive the data required for delivery and provision of the service.
4. Booking and your stay
The booking button is an external link to partners.eviivo.com. No eviivo booking form is embedded on our website. When you visit the booking platform, its privacy information also applies. eviivo identifies eviivo Limited and associated companies as providers in that information.
To arrange and fulfil your booking, we process contact, reservation and stay data in particular, on the basis of Article 6(1)(b) GDPR. Recipients include the booking and payment service providers involved, where necessary for the booking or payment concerned. A booking is not possible without the information needed for the reservation and contract administration.
We process legally required guest-register and accounting data on the basis of Article 6(1)(c) GDPR, particularly under Austrian registration and tax legislation. The competent registration and tax authorities may receive the data provided for by law.
5. Contact via WhatsApp
Our WhatsApp button is an external link to +43 670 703 4300. Using it opens WhatsApp or the provider’s service. For the European Region, the provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The provider processes account, device and connection data, among other things, under its privacy policy.
We process the messages and contact details you send to respond to your enquiry. For booking and stay questions, this is based on Article 6(1)(b) GDPR; for other enquiries, on Article 6(1)(f) GDPR and our interest in responding. WhatsApp is optional; you can use email or telephone instead.
6. Language cookie and your choices
7. Map link and font display
The contact page links to Google Maps for route planning. A map is not loaded as an iframe on our page. When you open the map link, Google processes data under its own privacy information; this may include your IP address, device information and, where applicable, data from a signed-in Google account. Google Ireland Limited is the relevant provider for users in the European Economic Area.
The font files used to display our page content are served through our website.
8. Recipients and processing abroad
Data is received by the parties involved in the relevant process: hosting, IT and email service providers for technical operation and communication; booking and payment service providers for reservations and payments; competent authorities to fulfil legal obligations; and, where applicable, advisers engaged for accounting or specific legal matters.
When you use external services such as eviivo, WhatsApp or Google Maps, the relevant provider may also process data outside the European Economic Area. eviivo names the United Kingdom and Tunisia among its processing locations, while WhatsApp names the USA among others. Information about the companies, countries and transfer bases or safeguards described by each provider is available in its privacy information linked above. This does not promise storage exclusively within the EU or EEA.
9. How long data is stored
Enquiries that do not lead to a booking: completion of the handling of your specific enquiry is the relevant point. Data no longer needed for this must then be deleted, except where still required for a legal obligation or to address specific existing claims. The same criteria apply to our WhatsApp correspondence. WhatsApp’s own storage rules are described in its privacy policy.
Bookings and stays: contract-related data is needed for administration until the stay and billing are completed and, where applicable, until specific outstanding claims are resolved. Section 10(2) of the Austrian Meldegesetz requires guest-register records to be kept for seven years from the entry. Under section 132 BAO, tax-related books, records and supporting documents must generally be kept for seven years from the end of the relevant calendar year; relevant pending tax proceedings may extend this period.
Technical connection data is initially needed to deliver the requested page. Where technical logs are required to investigate a fault or security incident, retention must be limited to the time needed to investigate and resolve it. The lifetime of cached webpages is not a retention period for your enquiry or booking data.
10. Your rights
Subject to the legal requirements, you have rights of access, rectification, erasure and restriction of processing. Data portability applies to automated processing based on consent or a contract.
Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You may object to direct marketing at any time. You can withdraw consent at any time for the future; this does not affect the lawfulness of earlier processing. The statutory rights concerning decisions based solely on automated processing, including profiling, also apply.
For your requests, write to chalet@eggerfeld.at or the address in section 1.
11. Right to complain
If you suspect a breach of data protection law, you can complain to a data protection supervisory authority, particularly where you normally live, work, or where the suspected breach occurred.
In Austria: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at. Information and ways to complain are available on the authority’s website.