This Privacy Policy applies to the collection and use of personal data that may be collected when contacting us, for example, when you visit our website, request, book, or purchase services, or when you call us. Please take a moment to read the following document, which informs you about how Gurglhof GmbH handles your personal data, what types of data are collected, how and for what purpose this data is used, to whom Gurglhof GmbH discloses this data, and how Gurglhof GmbH protects your personal data. The responsible party for processing your data is Gurglhof GmbH, including all associated facilities, located at Ramolweg 19, A-6456 Obergurgl.

Facilities include: Hotel & Apartments Gurglhof and Josl Mountain Lounging in Obergurgl, Hotel Valentin and Valentin Design Apartments in Sölden, as well as Hotel Enzian in Hochsölden. The Data Protection Officer is .

Your personality rights are of the highest priority, and Gurglhof GmbH strives to protect these rights to the best of its ability. All additional data protection obligations beyond this privacy policy remain unaffected.

Why does Gurglhof GmbH collect personal data and how long is it stored?
Gurglhof GmbH collects and uses your personal data to provide exemplary customer service related to your stay at Gurglhof GmbH hotels, to enable convenient access to our website, and to offer you optimal services. Additionally, your personal data helps Gurglhof GmbH keep you informed about the latest product announcements, special offers, and other developments that may be of interest to you, based on our assessment. If you are not interested in being kept informed about the latest developments and current product and service information, you can let us know at any time. Your personal data is stored as long as necessary to fulfill the above-mentioned services or as required by law.

What data is collected?
There are various situations where your personal data can help Gurglhof GmbH provide better service. For example, you may be asked for personal details when initiating a transaction. Only information relevant to the specific situation is requested, such as your name, mailing address, phone number, email address, preferred contact method, or credit card details. Additionally, Gurglhof GmbH collects information for market research purposes to better understand its customers and provide more effective service. Furthermore, Gurglhof GmbH records personal data related to customer activities on its website. This data helps Gurglhof GmbH determine which information is truly useful for its customers and which areas of its websites and internet services are of the most interest to them.

When does Gurglhof GmbH disclose personal data?
Gurglhof GmbH takes the protection of your personality rights very seriously. Gurglhof GmbH assures you that it does not sell or lend your contact information to other providers. To provide exemplary service, Gurglhof GmbH may share your personal data with companies that are obligated to protect this data in accordance with this privacy policy. Sometimes, it may be advantageous for Gurglhof GmbH to provide certain personal data to other companies working on its behalf to deliver products and services. These companies may assist in processing information, executing customer orders, delivering products, managing and maintaining customer data, providing customer service, assessing your interest in Gurglhof GmbH products and services, conducting customer research, or conducting customer satisfaction surveys. These companies are also bound to protect your personal data in accordance with this privacy policy and applicable laws. Additionally, Gurglhof GmbH may be required by law or official orders to disclose your personal data.

How does Gurglhof GmbH protect your personal data?
Gurglhof GmbH takes precautions, including administrative, electronic, and physical procedures, to protect your personal data against loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction.
The Gurglhof GmbH website uses industry-standard SSL (Secure Sockets Layer) encryption at certain points. This ensures the confidentiality of your personal information and credit card data during online transactions. Details regarding the handling of your personal data on our website are provided below. You can also help us by taking precautions to protect your personal data online. Always use a secure web browser and activate the relevant security settings to protect your personal data.

Integrity of your personal data
Gurglhof GmbH has implemented safeguards to ensure that your personal data is always accurate, complete, and up-to-date for its intended purposes. You have the right to verify the accuracy and currency of your personal data at any time and request corrections if necessary. You can help ensure that your contact information and preferences are correct, complete, and current. You can also request a copy of your personal data by contacting us via the email address provided below.

Our company-wide commitment to protecting your personality rights
As mentioned earlier, Gurglhof GmbH takes the protection of your personality rights very seriously. To ensure the security of your personal data, these policies are communicated to all relevant employees, and security measures to protect personality rights are strictly implemented within the company. The website contains links to other companies' websites. Gurglhof GmbH is not responsible for how these companies handle personality rights. Therefore, Gurglhof GmbH recommends that you inquire about their privacy policies directly with those companies.

Questions about protecting personality rights
If you have questions or concerns regarding data protection, please contact us. Send us a message (contact details are provided in the last section of this privacy policy). Of course, you can inquire with Gurglhof GmbH about which data it processes about you, where this data comes from, how it is used, and to whom it is transmitted. You can also correct incorrect data or request the deletion of unlawfully processed data. The provisions of applicable data protection laws apply accordingly.
Consent declarations you have given to Gurglhof GmbH regarding the processing of personal data can be revoked at any time. Such revocation does not affect data processing already permitted by law. Gurglhof GmbH reserves the right to amend this privacy policy from time to time. If significant changes are made, a notice will be posted along with the updated version of the privacy policy on our website.

Below, we inform you about the main aspects of data processing within our website.

WEBSITE

The protection of your personal data is one of our prime concerns. Therefore, we process your data exclusively on the basis of the statutory provisions (GDPR, TKG [Telecommunications Act] 2003). In this data protection statement, we inform you about the most important aspects of data protection within the framework of our website.

General
It is generally possible to use our website without entering personal data. If personal data (e.g. name, address or email address) is collected on our pages, this will always be on a voluntary basis, wherever possible. This data will not be forwarded to any third parties without your explicit consent. We would like to point out that data transfer via the internet (e.g. when communicating via email) may have security flaws. Flawless protection of your data against access by third parties is not possible.

Contact form
If you send us queries using the contact form, your information in the query form and the contact data entered by you therein will be stored by us to process the request and in case of any follow-up questions. However, your accommodation request can only be used by you and sent to us electronically, if you explicitly agree to this data privacy and data usage statement by clicking on the button. We will not pass this data on without your consent. In this respect, please take note of our data privacy statement.

Vouchershop
1. Description and scope of data processing
On our website there is the option to purchase vouchers. If a user uses this option, the data entered in the input mask will be transmitted to us and saved. This data is: title, first name, surname, address, email address, telephone number, voucher amount, personalisation of the voucher, shipping options/alternative shipping address, method of payment.
Voucher purchases on our website go through the online ordering system of websLINE Internet- & Marketing GmbH, Sägewerkstrasse 24, 83395 Freilassing, Germany. All order data you enter shall be encrypted. websLINE commits to the data privacy-appropriate handling of your personal data. The company takes all organisational and technical measures to protect your data.
In this context, no further transfer of your data to third parties takes place. The data is used exclusively for processing your booking and for communication purposes.
2. Legal basis for the processing of data
The legal basis for the processing of the data is the conclusion of a contract of sale with the user.
3. Purpose of data processing
The processing of personal data from the input mask serves solely to process your voucher purchase and to process payment transactions.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of a contractual relationship, we will delete the data received as soon as national, commercial, statutory or contractual retention requirements have been met.
5. Means of objection and removal
The user has the option to object to the processing of their personal data at any time.
.

Booking & Enquire
1. Description and scope of data processing
On our website you have the possibility to book and/or inquire rooms and offers. If a user uses this option, the data entered in the input mask will be transmitted to us and saved. This data is: title, first name, surname, email address, telephone number, address, number of guests, requests, date, time.
Online bookings via our website are completed using the online reservation system of websLINE Internet- & Marketing GmbH, Sägewerkstrasse 24, 83395 Freilassing, Germany. All booking data you enter shall be encrypted. websLINE commits to the data privacy-appropriate handling of your personal data. The company takes all organisational and technical measures to protect your data.
In this context, no further transfer of your data to third parties takes place. The data is used exclusively for processing your booking and for communication purposes.
2. Legal basis for the processing of data
The legal basis for the processing of the data is the conclusion of an accommodation contract with the user.
3. Purpose of data processing
The processing of personal data from the input mask serves solely to process your booking request and to process payment transactions.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of a contractual relationship, we will delete the data received as soon as national, commercial, statutory or contractual retention requirements have been met.
5. Means of objection and removal
The user has the option to object to the processing of their personal data at any time.
We would like to point out that in the case of objection, the booking cannot be completed or the communication cannot be continued

Cookies
Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause damage. We use cookies to make our website user-friendly. Some cookies will remain stored on your end device until you delete them. They enable us to remember your browser the next time you visit. If you do not want this, you can set your browser so that it informs you about the placing of cookies, and so that you only allow this on a case-by-case basis. Deactivating cookies may limit the functionality of our website.

Web analysis
Our website uses functions of website analysis services Google Analytics and Matomo. The provider of Google Analytics is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Matomo runs on the servers of Cookis GmbH, 6460 Imst, Franz Xaver Rennstrasse 4 (Bakehouse customers). For this purpose, cookies are used that enable users to use the website. The information thereby generated is transferred to the server of the respective provider, where it is stored. You can prevent this by setting your browser so that no cookies are stored. Your IP address will be logged, but it will be immediately anonymised by deleting the last eight bits clwz. Therefore, only a rough localisation is possible. The data processing takes place on the basis of the statutory provisions of Section 96(3) TKG and Art. 6(1)(a) (consent) and/or (f ) (legitimate interests) GDPR. Our concern within the scope of GDPR (legitimate interests) is to improve our services and our website. As the privacy of our users is important to us, the user data is pseudonymised.

Google Maps
This website uses the Google Maps product by Google Analytics is the Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA. By using this website, you consent to the collection, processing and use of the automated data collected by Google Inc, its agents and third parties. You can find the Terms of Use for Google Maps under "Google Maps Terms of Service": https://policies.google.com/privacy.

SSL encryption
For reasons of security and to protect the transfer of confidential content, such as the queries you send to us as the site operator, this site uses SSL encryption. You will recognise an encrypted connection if the address bar of the browser changes from “http://” to “https://” and by the lock symbol in your browser bar. If SSL encryption is activated, the data you send to us cannot be read by third parties.

Facebook plugins (Like button)
Data privacy statement for use Plugins of social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA, are integrated on our site. You will recognise the Facebook plugins by the Facebook logo or the “Like button” on our site. You will find an overview of the Facebook plugins here: http://developers.facebook.com/docs/plugins/. When you visit our site, a direct connection will be established between your browser and the Facebook server via the plugin. Facebook will thereby receive notification that you have visited our site with your IP-address. If you click on the Facebook “Like button” while you are logged into your Facebook account, you can link the content of our site to your Facebook profile. Facebook will therefore be able to match the visit to our site with your user account. We would like to point out that as the provider of the site, we do not receive any knowledge about the content of the data transferred or its use by Facebook. Further information can be found in the Facebook data privacy statement at https://dede. facebook.com/policy.php. If you do not want Facebook to be able to match the visit to our site with your Facebook user account, please log out of your Facebook user account.

Twitter
Data privacy statement for use Functions of the Twitter service are included on our site. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When using Twitter and the “Retweet” function, the websites visited by you will be linked to your Twitter account and disclosed to other users. Data will thereby also be transferred to Twitter. We would like to point out that as the provider of the site, we receive no knowledge about the content of the data transferred or its use from Twitter. Further information can be found in the Twitter data privacy statement at http://twitter.com/privacy. You can change your data privacy settings on Twitter in the account settings at http://twitter.com/account/settings.

Instagram
Data privacy statement for use Functions of the Instagram service are included on our site. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our site to your Instagram profile by clicking the Instagram button. Instagram will therefore be able to match the visit to our site with your user account. We would like to point out that as the provider of the site, we do not receive any knowledge of the content of the data transferred or its use by Instagram. Further information can be found in the Instagram data privacy statement at https://instagram.com/about/legal/privacy/.

Pinterest
Data privacy statement for use On our site, we use social plugins of social network Pinterest, which is operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA (“Pinterest”). If you display a page that contains such a plugin, your browser will establish a direct connection with the servers of Pinterest. The plugin will thereby transfer log files to the servers of Pinterest in the USA. These log files may contain your IP address, the address of the visited websites that also contain Pinterest functions, the type and settings of the browser, the date and time of the request, how you use Pinterest, and cookies. Further information about the purpose, extent and further processing and use of the data by Pinterest, as well as your rights and opportunities to protect your privacy in this regard, can be found in the data protection notice of Pinterest at https://about.pinterest.com/de/privacy-policy.

YouTube
Data privacy statement for use Our website uses plugins of Google-operated site YouTube. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages provided with a YouTube plugin, a connection with the YouTube servers will be established. The YouTube server will therefore be informed about which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to directly match your surfing behaviour with your personal profile. You can prevent this by logging out of your YouTube account. Further information can be found in the YouTube data privacy statement at https://www.google.de/intl/de/policies/privacy.

ISSUU
Data privacy statement for use Functions of the ISSUU service are included on our site. These functions are offered by Issuu, Inc., 131 Lytton Ave, Palo Alto, CA 94301, USA. With the Issuu service, you can connect, work with, approve and mix documents with other users of the Issuu service community on the internet. We would like to point out that as the provider of the site, we do not receive any knowledge about the content of the data transferred or its use by ISSUU. Further information can be found in the ISSUU Inc. data privacy statement at https://issuu.com/legal/privacy.

Casablanca hotel software
Further processing of personal data Further processing of personal data is permitted: if there is a business case (offer, reservation), if permission from the person has been granted, or if statutory further use (e.g. accounting, reporting) requires processing. Specifically, adjustments to correspondence and the registration form, as well as a solution for the logging, storage and archiving of the declarations of consent of the people concerned, are carried out in the hotel software. Data security and logging In the wake of GDPR, all databases on the servers will be encrypted and no more general users will be created in Casablanca, so that all access to personal data is traceable and can be allocated to respective users. In general, all access to the guest register and selections in Casablanca will be logged automatically. All passwords are encrypted and comply with the data protection guidelines. Credit card details are stored in accordance with PCI (bypayone.com - our KK provider).

Your rights
You have the fundamental right to information, correction, deletion, restriction, data transferability, cancellation and objection. If you believe that the processing of your data violates data protection law or that your legal data protection rights have been violated in any other way, you may make a complaint to the supervisory authority. In Austria, this is the Datenschutzbehörde [data protection authority].

Our details 
Hotel Enzian, Gurglhof GmbH, Randweg 19, 6456 Obergurgl, Österreich 
E-Mail: backoffice@hotel-enzian.at, UID-Nummer: ATU62849804