1. Contact details and contact persons

Gurglhof GmbH
Apartmenthaus Gurglhof
Gaisbergweg 16
A-6456 Obergurgl

Tel.: +43 5256 6315
E-Mail: apartmenthaus@gurglhof.at

2. Protection of personal data of natural persons

Gurglhof GmbH informs about data processing and its legal foundations pursuant to Art. 13 GDPR. In principle, these constitute the contractual relationship and consent. Only personal data which is necessary for the fulfilment and execution of the contract or data which you have provided voluntarily will be collected. Gurglhof GmbH processes your personal data in compliance with the GDPR based on legislation, the contract or your consent.

3. Type of data processed

Your personal data shall only be processed on our part if it is provided by you in connection with our contractual relationship or in connection with a pre-contractual relationship (e.g. booking enquiry) – this includes, for example, your name, address, e-mail address, telephone number, date of birth. We also store all data resulting from our communication exchange, such as the booking history, your enquiries, contracts, hotel services used, etc.

Further data will be processed if you use special services (in particular hotel WiFi). This will be mentioned separately.

4. Purpose and legal foundations of the processing

When you make contact through our website, make a booking, register for the newsletter or otherwise make use of our services, the data provided in the form will be stored by us. No data will be stored if an inquiry or booking process is aborted.

We process your personal data so that we can meet our pre-contractual obligations, such as answering your enquiries, fulfilling the contract and the associated supplementary requirements, such as accounting, provision of services, etc., and complying with our legal obligations.

The legal foundations for processing the data are therefore the contract or the pre-contractual relationship as well as Austrian legislation, provided that legal storage obligations result from it. If such processing is not required for contractual purposes, it will be carried out subject to your consent.

5. Newsletters and advertising mailings, prize draws

If consent has been given on your part, your data will also be used for advertising and information purposes, for example to inform you via newsletters or offers or to invite you to participate in competitions. You may revoke your consent at any time using this link. We will then promptly delete your email address from our newsletter system.

6. Use of the hotel Wi-Fi

If you use our Wi-Fi network, data from this Internet connection (traffic data), such as IP address, MAC address, access time and duration of the connection, is stored. No content data is stored. Data is stored and deleted in compliance with the provisions of the TKG (Telecommunications Act).

7. Payment systems

You can pay by credit card when booking through the hotel's online booking and payment system. This will be forwarded to a credit card payment system. You can enter your credit card details directly there. This data is processed solely for handling your payment.

8. Data retention

Your data shall only be stored for as long as is necessary for the above-mentioned purpose or for as long as it is necessary due to legal retention obligations or justified to protect legitimate interests, such as the defence of claims for damages. Furthermore, data will only be stored based on your consent until revoked. However, even with your consent, we are not obliged to permanently store your data and can therefore delete it at any time. Traffic data from WiFi connections is stored or deleted in accordance with the provisions of the TKG.

9. Data transmission

Data shall only be transferred to third parties, especially to external service providers such as IT specialists, tax consultants or accountants, insofar as this is necessary for the fulfilment of the contract or for the implementation of pre-contractual measures. The data may also be disclosed to lawyers or authorities if this is necessary to protect our legitimate interests. We would like to emphasise that we are entitled and obliged to disclose traffic data from WiFi connections to courts, public prosecutors and authorities under the conditions of § 99 Para. 5 TKG. Contract processing agreements within the meaning of Art. 28 GDPR are concluded with service providers. Data is transmitted and stored via servers of our IT service provider and our payment service provider located in the EU/EEA. Data is not transmitted to third countries.

10. Data security

We use state-of-the-art technology to take appropriate precautions and implement technical and organisational measures to protect your personal data. However, we cannot rule out the possibility that information that you transmit to us via the Internet or other telecommunications channels may be viewed and used by other persons despite our best efforts. We shall not assume any liability for such unauthorised use of your data by third parties.

11. Your rights

As the affected party, you are entitled at any time to obtain information about your stored personal data, its origin and recipient and the purpose of the data processing. You also have the right to correction, data transmission, objection, restriction of processing as well as blocking or deletion of incorrect or impermissibly processed data. You are free to revoke your consent to the use of your personal data at any time. We are happy to comply with your request provided that no laws, agreements or legitimate interests of the party responsible conflict with it. We kindly ask you to inform us if your personal data has changed.

Your request for information, deletion, correction, objection and/or data transmission, in the latter case provided that it does not result in unreasonable effort, can be sent to the above address of the party responsible. If you believe that the processing of your personal data by us contravenes applicable data protection legislation or that your data protection claims have been breached in any other way, please notify us so that we can investigate accordingly. It is also possible to lodge a complaint with the competent supervisory authority. In Austria, the data protection authority is responsible for this.

12. Additional data privacy statement website + cookie pop-up

12.1. Server-Log-Files

Access data: The website operator or site provider collects data about visits to the site and stores these as "server log files". The following data is logged in this way:

• Visited website

• Time when the site was accessed
• Amount of data sent in bytes
• Source/reference from which you came to the site
• Browser used
• Operating system used
• IP address used (if applicable: in anonymous form)

The data collected is used exclusively for statistical analysis and to improve the website. If, however, there are concrete indications of illegal use, the website operator then has the right to subsequently check the server log files.

12.2. Cookies

Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause damage. We use cookies to make our website user-friendly. Some cookies will remain stored on your end device until you delete them. They enable us to remember your browser the next time you visit. Deactivating or rejecting cookies may limit the functionality of our website.

12.3. Google Analytics

This website uses Google Analytics, a web analytics service of Google Inc. ("Google"). Google uses so-called "Cookies", text files, which are stored on your computer and that allow an analysis of your usage of the website. The information created by the cookie concerning your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to analyse your use of the website to compile reports about the website activity for the website operators and to provide further services related to the use of the website and the Internet. Google will also forward this information to third parties if necessary, provided that this is required by law or as far as third parties process this data on behalf of Google. Under no circumstances will your IP address be associated with other Google data. You can deactivate the installation of cookies by setting your browser software accordingly; we must, however, point out that in this case it is possible that you will not be able to fully use all the functions of this website. By using this website, you agree that the data collected about you by Google may be processed in the manner described above and for the purposes previously mentioned.

12.4. AdWords Remarketing

The provider uses the Remarketing or "similar target groups" function of Google Inc. ("Google") on the website. The provider can use this function to target website visitors with specific advertising by placing personalised, interest-related advertisements for visitors to the website of the provider when they visit other websites in the Google Display Network. Google uses so-called cookies to analyse website usage, which then forms the basis for creating interest-related advertisements. Google stores a small file with a sequence of numbers in the browsers of visitors to the website for this purpose. This number is used to record visits to the website and anonymous data about the use of the website. Personal data of visitors to the website will not be stored. If you then visit another website in the Google Display Network, you will see advertisements that are very likely to include products and information that were previously viewed. You can permanently deactivate the use of cookies by Google by clicking on the following link and downloading and installing the plugin provided there: https://www.google.com/settings/ads/plugin?hl=de.

12.5. Use of Facebook Pixel and conversion measurement

We use the "visitor action pixel" of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") as part of our Internet presence provided you have given your consent. 

We can track the actions of users after they have seen or clicked on a Facebook ad using Facebook Pixel. The objective is to optimally measure the effectiveness of Facebook advertisements and to act strategically. For us, the data collected is anonymous, i.e. we do not see the personal data of individual users. This data is stored and processed by Facebook and linked to your Facebook account. The social media platform uses this data for its own advertising purposes, in compliance with Facebook's data usage guidelines: https://www.facebook.com/about/privacy/.

12.6. Facebook Plug-ins

Plug-ins of the social network site facebook.com operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") are used on these pages.

If you access Internet pages of our website that contain such a plug-in, a connection is established to the Facebook servers and the plug-in is displayed on the Internet page via a notification to your browser. The Facebook server then receives information about which of our pages you have visited. Facebook associates this information with your personal account. This information is also assigned to your Facebook account when you use the plug-in functions (e.g. clicking the "Like" button, posting a comment). You can prevent this from happening by logging out of your account.

More information about the collection and use of data by Facebook can be found in Facebook's privacy policy.

12.7. Instagram Plug-in

Functions of the Instagram service are included on the site. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you have an Instagram account, you can link the content of our site to your profile. Instagram will therefore be able to match the visit to our site with your account. We would also like to point out that as the provider of the site, we do not receive any knowledge of the content of the data transferred or its use by Instagram.

Further information can be found in the Instagram data privacy statement at https://instagram.com/about/legal/privacy/

12.8. Twitter Plug-ins

Our website contains functions of Twitter Inc., 795 Folsom Street, Suite 600, San Francisco, CA 94107, USA. If you use Twitter and in particular the “Retweet" function, Twitter will link your account to the websites you visit. This will be made known to other Twitter users, in particular your followers. Data will also be transmitted to Twitter in this respect. As the provider of this website, we are not informed by Twitter about the content of the data transmitted or how it is used. 

You can obtain further information through the following link: https://help.twitter.com/en/rules-and-policies. Keep in mind, however, that you have the option of modifying your Twitter privacy settings in your account settings at https://twitter.com/account/settings.

12.9. Google+ Plug-ins

Our pages use Google+ functions. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

You can use Google+ to publish information worldwide. You will receive personalised content from Google through Google+. You will need a globally visible or public profile to use the Google+ button. The name of your profile will also be used by all other Google services. The identity of your Google profile may be displayed to users who know your email address or have other information that identifies you.

More info can be found at: https://policies.google.com/terms?hl=de

12.10. YouTube-Plugins

Our website uses plug-ins of the Google-operated site YouTube. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages, a connection with the YouTube servers will be established. The YouTube server will therefore be informed about which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to directly match your browsing behaviour with your personal profile. You can log out of your account to avoid this. Further information can be found in the YouTube data privacy statement at: https://policies.google.com/privacy?hl=de&gl=de