This is a non-binding English translation. The German version is legally binding: Datenschutzerklärung.
General information
We are pleased that you are interested in our website. The protection of your privacy is very important to us. Below we provide detailed information about how we handle your data.
Personal data is any data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
Controller
The controller responsible for data processing on this website is:
Haus Edelweiss
Gitta Geisler
Vorderlanersbach 240
6293 Tux
Austria
Phone: +43 664 8408754
Email: info@edelweiss-tux.at
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Storage period
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. If you assert a justified request for deletion, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, deletion will take place after these reasons no longer apply.
Legal basis for processing
If your data is required for the performance of a contract or for pre-contractual measures (e.g. because you submit a booking inquiry), we process your data on the basis of Art. 6(1)(b) GDPR. In all other cases, processing is based on our legitimate interest in the technically flawless provision of this website and in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR).
Hosting
We host the content of our website with the following provider:
1&1 IONOS SE
Elgendorfer Str. 57
56410 Montabaur, Germany
When you visit our website, IONOS collects various log files including your IP address. For details, see the IONOS privacy policy: ionos.de/terms-gtc/terms-privacy.
The use of the hosting provider is for the purpose of fulfilling our contracts with prospective and existing guests (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). We have a data processing agreement (DPA) with IONOS, which ensures that personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.
SSL / TLS encryption
For security reasons and to protect the transmission of confidential content, such as inquiries you send to us via the contact form, this site uses SSL / TLS encryption. You can recognise an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL / TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Server log files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources. This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website — for this purpose, the server log files must be recorded.
Contact form
When you send us an inquiry via the contact form, your details (name, email address, optionally phone number, requested travel dates, number of guests and your message) are forwarded to us by email in order to process your inquiry. Your details are not stored in a database on our web server — the data is processed solely for the purpose of delivering this email.
This data is processed on the basis of Art. 6(1)(b) GDPR, as your inquiry serves to initiate or fulfil an accommodation contract, as well as on the basis of our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR).
The data transmitted by email remains in our email inbox until you ask us to delete it, the purpose for storing the data no longer applies (e.g. once your inquiry has been fully processed), or statutory retention periods prevent deletion.
Inquiries by email or phone
If you contact us by email or phone, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR, provided your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR).
The data you send to us will remain with us until you ask us to delete it or the purpose for storing the data no longer applies. Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.
Live webcam
Our website includes a live webcam and a timelapse archive provided by the external service finisky.com. Once you scroll to the webcam section of the page, your browser loads an updated camera image from finisky.com's servers at regular intervals (every 20 seconds). In doing so, your IP address is transmitted to finisky.com. Before you reach this section, no connection to finisky.com is made.
This use is in the interest of an appealing and up-to-date presentation of our offering and is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. Information about finisky.com's data protection practices is available directly from the provider at finisky.com.
Google Fonts (self-hosted)
This website uses so-called Google Fonts for the consistent display of typefaces. The font files used for this purpose are stored locally on our web server. When you visit this website, no connection to Google's servers is made and no data is transmitted to Google.
Your rights
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your personal data stored by us, its origin and recipients and the purpose of the data processing, and, if applicable, a right to rectification, restriction of processing or deletion of this data. You also have the right to data portability. For these and any further questions on the subject of personal data, you may contact us at any time using the contact details given above.
If the processing of your personal data is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation (Art. 21 GDPR).
You also have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the data protection authority: www.dsb.gv.at.