Information about cookies and data protection

Declaration on the duty to inform
The protection of your personal data is important to us. In this privacy policy, we inform you about which data we process when you use our website, the purposes for which this is done, the legal basis on which we act and the rights to which you are entitled.

Contacting us
If you contact us via a contact form on this website, by e-mail or by telephone, we process the personal data that you voluntarily provide to us in the course of contacting us. This may include, in particular, your name, your e-mail address, your telephone number and the content of your enquiry.
This data is processed exclusively for the purpose of processing your request, answering queries and implementing pre-contractual measures or fulfilling an existing contractual relationship.

Purpose of processing:
Processing and responding to enquiries, communicating with interested parties and customers, implementing pre-contractual measures and maintaining business correspondence.
Legal basis:
Art. 6 para. 1 lit. b GDPR (contract or pre-contractual measures) and - if no contractual relationship exists - Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient and comprehensible communication).
Storage period:
The data transmitted when contacting us will only be stored for as long as is necessary to process the enquiry. Any further storage will only take place if there are statutory retention obligations or if the data is required for the assertion, exercise or defence of legal claims.
Recipients:
Your data will only be passed on to those internal departments that are responsible for processing your enquiry. If external service providers (e.g. hosting or IT service providers) are involved, this is done exclusively within the framework of order processing in accordance with Art. 28 GDPR.

Web analysis with Google Analytics 4 (GA4)
If you have expressly consented, we use the web analysis service Google Analytics 4 (GA4) on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics 4 uses cookies and similar technologies to collect and analyse information about the use of the website. These reports are also provided in Google Analytics 4 exclusively in aggregated form. In particular, the following data may be processed

• Pages accessed and interactions
• technical information about the end device (e.g. browser type, operating system)
• Approximate location information
• abbreviated IP address

The information collected is used to analyse user behaviour on the website, to compile reports on website activity and to continuously improve our online offering.

Purpose of the processing:
Reach measurement, analysis of user behaviour and optimisation of content, structure and performance of the website.
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent). The processing takes place exclusively after your active consent via the consent management tool used.
Recipient / data processing:
Google processes the data on our behalf. The use of Google Analytics 4 may result in the transfer of data to third countries (in particular to the USA). You can find more information on this in the section "Data transfer to third countries".
Storage period:
The storage period of the data collected depends on the settings made in Google Analytics 4 and is limited to the maximum periods specified by Google. Event data is automatically deleted as soon as the specified retention period is reached.
Revocation of consent:
You can revoke your consent at any time with effect for the future via the cookie settings on this website.
Further information:
Details on data processing by Google can be found in Google's privacy policy.
Note: Details on data processing by Google can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de

IP anonymisation
We use Google Analytics with activated IP anonymisation. This means that your IP address is truncated before further processing so that it cannot be easily assigned to your person.
In exceptional cases, a full IP address may be transmitted to a Google server and truncated there. Google uses the processed information to analyse the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage.

Browser plugin
Irrespective of your consent via the consent banner, you can also prevent the collection and processing of your usage data by Google Analytics by installing the browser add-on provided by Google:
https://tools.google.com/dlpage/gaoptout?hl=en
Please note: If blockers/restrictions are activated, individual website functions may be restricted.

Demographic characteristics
If activated and if you have given your consent, Google Analytics can provide reports on demographic characteristics (e.g. age ranges, gender, interests). According to Google, this information comes from interest-based advertising and data from third-party providers, among other things, and is generally presented in aggregated form.

• Purpose: better understanding of target group interests, optimisation of content.
• Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
• Deactivation: You can reduce or deactivate personalised advertising in your Google account or via Google's advertising settings. Click here to go to the Google SafetyCenter: https://safety.google/intl/de[_]ALL/settings/privacy-settings/

Newsletter
You have the option to subscribe to our newsletter through our website. For this we will need your email address, first name, surname and your declaration of consent for receiving the newsletter. In order to provide you with targeted information, we also collect and process information provided voluntarily with regard to fields of interests, address, date of birth and additional fields if applicable. As soon as you have completed subscription to the newsletter, we will send you a confirmation email with a link for confirming the subscription. You can cancel the subscription to the newsletter at any time, please fill out the following form to this end: ***Unsubscribe to newsletter***
We will immediately delete your data related to the newsletter subscription.

Online Booking Service
If you undertake a reservation on our website www.heisenhof.at, you can do so with the help of our online booking software, the “Webbox”, provided by the company Interalp Touristik GmbH. All personal information which you provide during the booking process (such as first name, last name, address, email address, specific personal information concerning your reservation, etc) will be transferred securely. This data will only be used and stored to process your reservation. The software provider Interalp Touristik obliges to handle your personal data with care and in accordance to the data protection regulations.

Your rights
In accordance with the GDPR, you have the following rights in particular

• Information (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing on the basis of legitimate interests (Art. 21 GDPR)
• Revocation of consent given with effect for the future (Art. 7 para. 3 GDPR)

If you believe that the processing of your personal data violates data protection law, you can lodge a complaint with a supervisory authority. In Austria, this is the data protection authority.

You can reach us on the following contact details:

Familienhotel Heisenhof
Familie Helga & Josef Riedmann
Moosen 150
A - 6363 Westendorf

Tel: +43 (0)5334 6229
Mobil: +43 (0)664 1136554
info@heisenhof.at