This Privacy Policy applies to the collection and use of personal data that may be collected when you contact us, for example when you visit our website, request, book, purchase services or call us. Please take a moment to read the following document, which informs you about how Gurglhof GmbH handles your personal data, what types of data are collected, how and for what purposes this data is used, to whom Gurglhof GmbH may disclose this data, and how Gurglhof GmbH protects your personal data.
The controller responsible for processing your data is Gurglhof GmbH and all its affiliated locations, with its registered office at Ramolweg 19, A-6456 Obergurgl.

The affiliated locations include: Hotel & Apartments Gurglhof and Josl Mountain Lounging in Obergurgl, Hotel Valentin and Valentin Design Apartments in Sölden, and Hotel Enzian in Hochsölden.

Your personality rights are of the highest priority, and Gurglhof GmbH strives to protect these rights to the best of its ability. All further-reaching data protection obligations beyond this Privacy Policy remain unaffected, of course.

Why does Gurglhof GmbH collect personal data and for how long is personal data stored?
Gurglhof GmbH collects and uses your personal data to provide you with exemplary customer service in connection with your stay at the hotel properties of Gurglhof GmbH, to enable convenient access to our website, and to offer you optimal service packages. In addition, your personal data helps Gurglhof GmbH keep you informed about the latest product announcements, special offers, and other developments that we believe may be of interest to you.
If you do not wish to be kept up to date on the latest developments, product and service information, you may inform us of this at any time.
Your personal data will be stored for as long as necessary to fulfil the aforementioned services or as long as Gurglhof GmbH is legally required to store such data.

What data is collected?
There are a number of situations in which your personal data can help Gurglhof GmbH provide you with better service. For example, you may be asked to provide personal information when you initiate a transaction. Gurglhof GmbH will only request information that is relevant to the specific situation. This may include your name, postal address, telephone number, email address, preferred method of contact, or credit card details. In addition, Gurglhof GmbH collects information for market research purposes to better understand its customers and provide them with more effective service. Gurglhof GmbH also collects personal data about customer activities on its website. This data enables Gurglhof GmbH to determine which information is truly useful to its customers and which areas of its websites and internet services are of most interest to them.

When does Gurglhof GmbH disclose personal data?
Gurglhof GmbH takes the protection of your personality rights very seriously. Gurglhof GmbH assures you that it neither sells nor lends your contact information to other providers. To provide you with exemplary service, Gurglhof GmbH may disclose your personal data to companies that are required to protect such data in accordance with this Privacy Policy. In some cases, it may be beneficial for Gurglhof GmbH to provide certain personal data to other companies that work for Gurglhof GmbH to deliver products and services to you on behalf of Gurglhof GmbH. These companies may assist us in processing information, fulfilling customer orders, delivering products, managing and maintaining customer data, providing customer service, assessing your interest in Gurglhof GmbH products and services, conducting customer research, or carrying out customer satisfaction surveys. These companies are also required to protect your personal data in accordance with this Privacy Policy and applicable laws on the protection of personality rights. In addition, Gurglhof GmbH may be required to disclose your personal data due to mandatory legal provisions or official orders.

How does Gurglhof GmbH protect your personal data?
Gurglhof GmbH takes precautions, including administrative, electronic, and physical measures, to protect your personal data from loss, theft, and misuse, as well as from unauthorised access, disclosure, alteration, and destruction.
The Gurglhof GmbH website uses SSL (Secure Sockets Layer) encryption at certain points. This ensures the confidentiality of your personal information and credit card details during internet transactions. Further details on how your personal data is handled on our website can be found below. You can also help us by taking appropriate precautions to protect your personal data online. Always ensure that you use a secure web browser and activate the browser settings to protect your personal data.

Integrity of your personal data
Gurglhof GmbH has taken protective measures to ensure that your personal data is accurate, complete, and up to date for its intended purposes. Of course, you always have the right to check the accuracy and currency of the personal data you have provided and to request any necessary changes. You can help us ensure that your contact information and preferences are accurate, complete, and up to date. You can also request a copy of your personal data by contacting us via the email address provided below.

Our company-wide commitment to protecting your personality rights
As mentioned earlier, Gurglhof GmbH takes the protection of your personality rights very seriously. To ensure the security of your personal data, these policies are communicated to all relevant employees, and security measures to protect personality rights within the company are strictly implemented.
The website contains links to websites of other companies. Gurglhof GmbH is not responsible for how these companies handle personality rights. Gurglhof GmbH therefore recommends that you inquire about their Privacy Policy with these companies.

Questions about the protection of personality rights
If you have any questions or concerns about data protection, please contact us. To do so, send us a message (contact details are provided in the last section of this Privacy Policy).
Of course, you can also ask Gurglhof GmbH which data Gurglhof GmbH processes about you, where this data comes from, how it is used, and to whom it is disclosed. You can also, of course, correct incorrect data or have unlawfully processed data deleted. The provisions of the applicable data protection laws apply accordingly.
Consent declarations that you have given to Gurglhof GmbH regarding the processing of personal data can be revoked at any time. However, such a revocation does not apply to types of data processing that are already permitted by law.
Gurglhof GmbH reserves the right to amend this Privacy Policy from time to time. If material changes are made, a corresponding notice will be published on our website along with the updated version of the Privacy Policy.

Below, we inform you about the key aspects of data processing within the scope of our website.

Website
Protecting your personal data is particularly important to us. We therefore process your data exclusively on the basis of the applicable legal provisions (GDPR, TKG 2003). In this Privacy Policy, we inform you about the key aspects of data processing within the scope of our website.

Voucher shop
1. Description and scope of data processing
Our website offers the option to purchase vouchers. If a user takes advantage of this option, the data entered in the input mask is transmitted to and stored by us. This data includes: title, first name, last name, address, email address, telephone number, voucher value, personalisation of the voucher, shipping options/alternative delivery address, and payment method.
If you purchase a voucher value from our websites, this is done through the online ordering platform of websLINE Internet & Marketing GmbH, Sägewerkstrasse 24, 83395 Freilassing, Germany. All order data you enter is transmitted in encrypted form. websLINE has committed to handling your transmitted data in a data-protection-compliant manner. websLINE takes all organisational and technical measures to protect your data. In this context, your data will not be disclosed to any third parties. The data is used exclusively for processing the booking and for communication purposes.
2. Legal basis for data processing
The legal basis for processing the data is the conclusion of a purchase contract with the user.
3. Purpose of data processing
The processing of the personal data from the input mask serves solely to process the voucher purchase and to handle payment transactions.
4. Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. If a contractual relationship exists, we will delete the data once national, commercial, statutory, or contractual retention obligations have been fulfilled.
5. Objection and deletion options
The user may object to the processing of their personal data at any time.

Booking request section
1. Description and scope of data processing
Our website offers the option to book and/or request rooms and offers. If a user takes advantage of this option, the data entered in the input mask is transmitted to and stored by us. This may include: title, first name, last name, email address, telephone number, address, number of travellers, requests, date, time, room selection, offers, and price.
If you make an online booking from our websites, this is done through the online reservation system of websLINE Internet & Marketing GmbH, Sägewerkstrasse 24, 83395 Freilassing, Germany. All booking data you enter is transmitted in encrypted form. websLINE has committed to handling your transmitted data in a data-protection-compliant manner and takes all organisational and technical measures to protect your data.
In this context, your data will not be disclosed to any third parties. The data is used exclusively for processing the booking and for communication purposes.
2. Legal basis for data processing
The legal basis for processing the data is the conclusion of a guest accommodation contract with the user.
3. Purpose of data processing
The processing of the personal data from the input mask serves solely to process the booking request and to handle payment transactions.
4. Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. If a contractual relationship exists, we will delete the data once national, commercial, statutory, or contractual retention obligations have been fulfilled.
5. Objection and deletion options
The user may object to the processing of their personal data at any time.
Please note that if you object, the booking cannot be completed or the conversation cannot be continued.

General
The use of our website is generally possible without providing any personal data. Where personal data (e.g. name, address, or email address) is collected on our pages, this is done on a voluntary basis where possible. This data will not be disclosed to third parties without your express consent. Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. It is not possible to provide complete protection of data against access by third parties.

Contact form
If you send us an enquiry via the contact form, the information you provide in the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. However, your accommodation enquiry can only be used and sent to us electronically if you explicitly consent to this Privacy and Data Use Policy by clicking the checkbox. We will not disclose this data without your consent. Please also refer to our Privacy Policy in this regard.

Cookies
Our website uses so-called cookies. These are small text files that are stored on your device using your browser. They do not cause any damage. We use cookies to make our offering user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognise your browser on your next visit. If you do not wish this, you can configure your browser to inform you about the setting of cookies and to allow this only in individual cases. If cookies are deactivated, the functionality of our website may be restricted.

Web analysis
Our website uses the functions of the web analysis services Google Analytics and Matomo. Google Analytics is provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Matomo is operated on the servers of Cookis GmbH, 6460 Imst, Franz Xaver Rennstraße 4 (Bakehouse customers). Cookies are used for this purpose, which enable an analysis of the website usage by your users. The information generated in this way is transmitted to the server of the respective providers and stored there. You can prevent this by setting your browser so that no cookies are stored. Your IP address is recorded but immediately pseudonymised by deleting the last eight bits. This means that only a rough localisation is possible. The data processing is based on the legal provisions of § 96 para. 3 TKG and Art. 6 para. 1 lit. a (consent) and/or f (legitimate interest) of the GDPR. Our concern within the meaning of the GDPR (legitimate interest) is the improvement of our offering and our web presence. Since we consider the privacy of our users to be important, the user data is pseudonymised.

Google Maps
Privacy policy for use This website uses the Google Maps product from Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. By using this website, you consent to the collection, processing, and use of the automatically collected data by Google Inc., its representatives, and third parties. The terms of use of Google Maps can be found under "Terms of Use of Google Maps": https://policies.google.com/privacy.

SSL encryption
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator. You can recognise an encrypted connection by the fact that the browser address bar changes from "http://" to "https://" and by the lock symbol in your browser bar. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Facebook plugins (Like button)
Privacy policy for use Our pages integrate plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. You can recognise the Facebook plugins by the Facebook logo or the "Like button" ("I like it") on our page. An overview of the Facebook plugins can be found here: http://developers.facebook.com/docs/plugins/ If you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook is thereby informed that you have visited our page with your IP address. If you click the Facebook "Like button" while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook’s privacy policy at https://de-de.facebook.com/policy.php If you do not wish Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

Instagram
Privacy policy for use Our pages integrate functions of the Instagram service. This service is provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Further information on this can be found in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

YouTube
Privacy policy for use Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This informs the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to associate your surfing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. Further information on the handling of user data can be found in YouTube’s privacy policy at https://www.google.de/intl/de/policies/privacy

ISSUU
Privacy policy for use Our pages integrate functions of the ISSUU service. This service is provided by Issuu, Inc., 131 Lytton Ave, Palo Alto, CA 94301, USA. With the Issuu service, you can connect, collaborate, share, and mix documents with other users of the Issuu service community on the internet. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by ISSUU. Further information on this can be found in the privacy policy of ISSUU Inc. at https://issuu.com/legal/privacy

Casablanca Hotel Software
Further processing of personal data Further processing of personal data is permitted if a business transaction (offer, reservation) exists, the person has given their consent, or a legal requirement (e.g. invoicing, reporting) necessitates the processing. Specifically, the hotel software includes adjustments to correspondence and registration forms, as well as a solution for recording, storing, and archiving the consent declarations of the affected persons. Data security & logging In line with the GDPR, all databases on the servers are encrypted, and no general user accounts are created in Casablanca, so that all access to personal data is traceable and attributable to individual users. In general, all access to the guest directory and selections in Casablanca are automatically logged. All passwords are encrypted and comply with data protection guidelines. Credit card data is stored in PCI-compliant manner (bypayone.com - Our KK provider).

Feratel analysis services
The data is used by feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck, FN 72841w Landesgericht Innsbruck. Feratel analysis services Matomo Feratel feratel media technologies AG uses Matomo, which is a so-called web analysis service. Matomo uses so-called "cookies", which are text files stored on your computer and which enable us to analyse the use of the website/player. For this purpose, the usage information generated by the cookie (including your truncated IP address) is transmitted to the server of feratel media technologies AG and stored there for analysis purposes, which serves to optimise our website/player. Your IP address is anonymised immediately during this process, so that you remain anonymous to us as a user. The information generated by the cookie about your use of this website/player is not disclosed to third parties. You can prevent the use of cookies by setting your browser software accordingly, but you may not be able to use all functions of this website/player in full. If you do not consent to the storage and evaluation of this data from your visit, you can object to the storage and use of this data by clicking the following link. In this case, an opt-out cookie will be stored in your browser, which means that Matomo will not collect any session data.

ÖWA counting pixel analysis services
Feratel Our website/player uses the "Scalable Central Measurement Procedure" (SZM) of the Austrian Web Analysis (ÖWA) to determine statistical key figures for the use of our offerings. Anonymous measured values are collected in the process. The SZM reach measurement uses either a cookie with the identifier "oewabox.at" or a signature created from various automatically transmitted information from your computer to recognise computer systems. IP addresses are not stored in the process and are only processed in anonymised form. The reach measurement was developed with data protection in mind. The aim of the reach measurement is to statistically determine the intensity of use and the number of users of a website/player. Individual users are never identified at any time. No advertising is delivered via the system. The usage statistics collected by the Austrian Web Analysis are published monthly and can be viewed at www.oewa.at. If you wish to opt out of these analysis services, click the following link to set the ÖWA opt-out cookie in your browser: https://optout-at.iocnt.net Please note: If you delete your cookies, this will also delete the opt-out cookie, which may need to be reactivated by you.

Your rights
You are generally entitled to the rights of access, rectification, erasure, restriction of processing, data portability, withdrawal, and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you may lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority.

Our contact details You can reach us at the following contact details:
Hotel Gurglhof, Gurglhof GmbH, Ramolweg 19, 6456 Obergurgl, Austria
Email: urlaub@gurglhof.at, VAT number: ATU67239366