Privacy Policy

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device or enable access to information already stored on your device.

Some cookies and technologies are technically necessary to provide our website and the functions expressly requested by you. Other technologies are used in particular to analyse the use of our website, measure reach, optimise our services and measure the effectiveness of our advertising activities.

Technically necessary cookies and similar technologies may be used where this is strictly necessary to provide a service expressly requested by you.

Technically non-essential cookies and similar technologies, in particular analytics, tracking and marketing technologies, are only used after you have given your consent via our consent management tool.

The legal basis for storing information on your device or accessing information already stored on your device is Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). Where personal data are processed in this context, such processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

You can change or withdraw your consent at any time with effect for the future via our cookie settings. The lawfulness of processing carried out on the basis of your consent prior to its withdrawal remains unaffected.

Adjust cookie settings

When you access our website, technical information may automatically be processed by the web server. This may include, in particular, your IP address, the date and time of access, the page or file accessed, the amount of data transferred, the referrer URL, browser type, browser version and operating system.

This processing is carried out for the technical provision of the website, to ensure its stability and security and to detect and prevent disruptions and misuse.

The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR in the secure and functional operation of our website.

p> We use Google Tag Manager provided by Google. For users in the European Economic Area, Google services are generally provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used to centrally manage and control website tags. It enables us, for example, to integrate analytics and marketing services into our website and activate them depending on the choices you make in our consent management tool.

Google Tag Manager itself is not used to create separate user profiles. However, technical information such as your IP address may be transmitted to Google when using the service. Services integrated via Google Tag Manager are described separately in this Privacy Policy.

Where technically non-essential services are activated via Google Tag Manager, this will only take place after you have given your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

Further information can be found in Google's Privacy Policy.

We use Google Analytics 4, a web analytics service provided by Google. For users in the European Economic Area, the provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to statistically analyse the use of our website. Information processed may include pages viewed, the origin of visitors, length of stay, interactions, device used, browser, operating system and technical identifiers.

Google Analytics may use cookies and similar technologies to collect information about the use of our website. Google may derive general location information from the IP address. According to Google, individual IP addresses are not logged or stored in Google Analytics 4.

Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

You may withdraw your consent at any time with effect for the future via our cookie settings.

Further information on data processing by Google can be found in Google's Privacy Policy.

We use Google Ads and the associated conversion tracking provided by Google. This enables us to measure whether users perform certain actions on our website after clicking on one of our Google advertisements, for example visiting a booking page, submitting an enquiry or completing a booking.

Cookies and other identifiers may be used for this purpose, and information about your interactions with our advertisements and our website may be transmitted to Google.

The processing is carried out to measure the effectiveness of our advertising campaigns and to optimise them.

Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

You may withdraw your consent at any time with effect for the future via our cookie settings.

Where you have given your consent, we use Google Ads functions for remarketing and/or personalised advertising.

This enables users of our website to be assigned to specific target groups based on their previous interactions with our website. As a result, advertisements based on previously viewed content or offers may be displayed on other websites, in Google Search, on YouTube or within other Google services.

Cookies, online identifiers and information about the use of our website may be processed for this purpose.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

You can withdraw your consent at any time via our cookie settings.

Maps provided by Google Maps may be embedded on our website. Google Maps is a service provided by Google.

When using Google Maps, your IP address, device information, location information and information about your use of the map function may, in particular, be transmitted to and processed by Google.

Unless Google Maps is integrated exclusively in a technically privacy-friendly manner without prior data transmission, it will only be activated after you have given your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

Further information can be found in Google's Privacy Policy.

Google Fonts may be used on our website.

Where the fonts used are stored locally on our web server, no connection to Google's servers is established when the fonts are loaded.

If Google Fonts are loaded externally from Google servers, your IP address in particular may be transmitted to Google. In this case, the external integration will only take place in accordance with the applicable data protection requirements.

We may use Google reCAPTCHA on our website to protect forms and other input facilities against automated access, spam and misuse.

Technical information about your device and your use of our website may be processed. This may include, in particular, your IP address, browser and device information and information about your interactions with the website.

Where consent is required for its use, reCAPTCHA will only be activated after you have made the corresponding selection in our consent management tool.

In this case, the legal basis is Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

Where you have given your consent, we use Hotjar to better understand how visitors use our website and how we can improve its usability, content and structure.

This may involve processing information such as pages viewed, length of stay, clicking, scrolling and navigation behaviour, device type, screen size, browser information and general location information.

Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

You may withdraw your consent at any time via our cookie settings.

Where you have given your consent, we use technologies provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, on our website, in particular the Meta Pixel.

The Meta Pixel enables us to determine whether users perform certain actions on our website after viewing or clicking on an advertisement on Facebook or Instagram. This enables us to measure the effectiveness of our advertisements and optimise our campaigns.

Information about pages viewed, interactions, conversions, browser and device information, IP address and technical identifiers may, in particular, be transmitted to Meta.

If you have a Facebook or Instagram account and are logged in, Meta may be able to associate the processed information with your account. Further processing by Meta is governed by Meta's applicable privacy policies.

Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

You may withdraw your consent at any time with effect for the future via our cookie settings.

Where you have given your consent and we use the corresponding functions, data from the Meta Pixel may be used to create target groups (Custom Audiences).

This may enable users who have visited our website or performed certain actions to be shown interest-based advertisements or advertisements tailored to their previous use on Facebook or Instagram.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

We advertise within the ChatGPT service. The advertising services are provided by OpenAI. To measure and optimise the effectiveness of our advertising on ChatGPT, we use the OpenAI Measurement Pixel and, where applicable, the OpenAI Conversions API on our website.

Scope of processing: If you reach our website via an advertisement in ChatGPT, the destination URL may contain a click identifier (oppref). The OpenAI Measurement Pixel may store this identifier in a first-party cookie named __oppref on your device.

In addition, the Measurement Pixel may use a first-party cookie named __obref. This contains a randomly generated browser reference for our website.

According to OpenAI, the intended storage period for the __oppref cookie is 30 days after it is stored. The __obref cookie has an intended lifetime of 365 days. Browser restrictions or the deletion of cookies may shorten these periods.

If you perform an action on our website that is relevant for measuring advertising performance, for example completing a booking or submitting a form, corresponding event data may be transmitted to OpenAI. This may include, in particular, the pixel ID, event type, event ID, time of the event, URL accessed, transaction or booking information, booking value, currency and available attribution identifiers.

Where the "Automatic Advanced Matching" function is activated, the OpenAI Measurement Pixel may detect supported customer information on the website. According to OpenAI, such information is normalised and hashed using SHA-256 in the browser before transmission; the corresponding raw data are not transmitted to OpenAI through this function.

Purpose: The processing is used to determine whether specific actions on our website can be attributed to an advertisement in ChatGPT, to measure the effectiveness of our advertising, optimise campaigns and improve the measurement of our advertising activities.

Legal basis: The OpenAI Measurement Pixel and corresponding technically non-essential measurement functions are only activated if you have given your prior consent. The legal basis is Section 165(3) TKG 2021 and Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future via our cookie settings. According to OpenAI, the aforementioned first-party cookies are removed when consent for the Measurement Pixel is withdrawn.

Responsibility: According to the OpenAI Ad Tools Data Processing Addendum, we and OpenAI generally act as independent controllers in relation to the processing of personal data through the OpenAI Ad Tools. For certain processing activities designated as "Restricted Processing", OpenAI provides for processing on behalf of the advertiser.

International data transfers: In connection with the OpenAI Ad Tools, personal data may be processed outside the European Economic Area. According to the OpenAI Ad Tools Data Processing Addendum, OpenAI Ireland Limited processes personal data originating from the EEA and Switzerland and uses a valid transfer mechanism for onward transfers to countries without an adequate level of data protection.

Further information can be found in OpenAI's Privacy Policy and the applicable terms for OpenAI advertising tools.

Videos from the YouTube platform may be embedded on our website. YouTube is a service provided by Google.

When playing or – depending on the technical integration – when loading a YouTube video, information such as your IP address, device and browser information, the page accessed and information about your interaction with the video may be transmitted to Google.

If you are simultaneously logged into your Google account, Google may be able to associate this information with your account.

Where the integration triggers a transfer of data, the video will only be activated after you have given your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

Videos from the Vimeo platform may be embedded on our website. When accessing or playing an embedded Vimeo video, technical information such as your IP address, browser and device information and information about the page accessed may be transmitted to Vimeo.

Where the integration triggers a transfer of data, it will only be activated after you have given your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

We maintain online presences on social networks and platforms in order to provide information about our company and our services and to communicate with guests, interested parties and users.

When you visit our profiles, the privacy policies and terms of use of the respective platform operators also apply. Personal data may also be processed by the respective platform operator.

This applies in particular to our presence on Facebook, Instagram, LinkedIn, Pinterest and – where used by us – X.

We maintain company profiles on Facebook and Instagram. For users in the European Economic Area, the provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

If you visit our profiles or interact with our posts, Meta processes personal data in accordance with its own privacy policies. Depending on the use of the platform, Meta may provide us with statistical and aggregated information about the use of our profiles.

Where we maintain a company presence on X or embed content from X on our website, personal data may be processed by the operator of the X platform.

When visiting our profile or interacting with X content, information such as your IP address, device and browser information, usage data, interactions and – for logged-in users – information associated with the respective X account may be processed.

Where X content is directly embedded on our website and this triggers a transfer of data, it will only be activated after you have given your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.

We may maintain a company presence on LinkedIn and/or integrate content and functions from LinkedIn into our website. For users in the European Economic Area, the provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

When visiting our LinkedIn presence or using embedded functions, personal data may be processed by LinkedIn.

Where LinkedIn technologies are directly integrated into our website and this results in technically non-essential data processing, they will only be activated after you have given your consent.

Where we maintain a company presence on Pinterest or integrate Pinterest functions into our website, personal data may be processed by Pinterest.

When visiting our Pinterest presence or using corresponding functions, the privacy policies of Pinterest also apply.

<

You have the option of subscribing to our newsletter. For registration, we require in particular your email address and your consent to receive the newsletter.

We may use a double opt-in procedure to verify your registration. After registering, you will receive an email asking you to confirm your subscription.

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future, in particular via the unsubscribe link contained in each newsletter or by contacting us.

After unsubscribing, your data will generally no longer be used for sending the newsletter. Where necessary, verification data may continue to be stored within the applicable statutory limitation and documentation periods in order to provide evidence that consent was properly obtained or withdrawn.

If you book services, purchase vouchers or other products, or submit a booking enquiry via our website, we process the personal data required to carry out the respective transaction.

This may include, in particular, title, first and last name, address, email address, telephone number, travel and accommodation details, the number of and information about accompanying guests, room and rate information, booked services, reservation status, billing information and payment information.

Processing is carried out for the implementation of pre-contractual measures and/or the performance of the contract concluded with you pursuant to Art. 6(1)(b) GDPR and – where statutory retention and documentation obligations apply – pursuant to Art. 6(1)(c) GDPR.

Online Booking System – Seekda

For the processing of online bookings and booking enquiries, we use the booking and reservation system provided by Seekda. The system is used, in particular, to display availability and prices, process booking enquiries and complete reservations.

When you use our online booking function, the personal data required for the respective booking are processed via Seekda's systems and transmitted to us. This may include, in particular, contact details, travel and accommodation data, information about booked rooms and rates, occupancy, additional services booked, reservation status and information about the selected payment method.

These data are processed for the purpose of handling your booking enquiry, processing and managing your reservation and performing the accommodation contract concluded with you on the basis of Art. 6(1)(b) GDPR.

Where Seekda processes personal data on our behalf, such processing is carried out on the basis of an appropriate data processing agreement pursuant to Art. 28 GDPR.

Further information on data protection at Seekda can be found at: Seekda Privacy Policy.

Payment Processing

Where necessary for processing a booking or payment, the required data may be transmitted to payment service providers, banks or other service providers involved in the performance of the contract.

Where possible, payment data are processed directly by the respective payment service provider. In such cases, we generally receive only the information required to process or confirm the payment.

Storage Period

Booking, contractual and billing data are stored by us only for as long as necessary for the performance of the contractual relationship or for as long as statutory retention and documentation obligations apply.

Some of the service providers we use belong to corporate groups with headquarters or technical infrastructure outside the European Economic Area (EEA). Therefore, personal data may be processed in third countries in connection with individual services.

Such transfers only take place where the requirements of Art. 44 et seq. GDPR are met. This may be based, in particular, on an adequacy decision by the European Commission, appropriate safeguards such as Standard Contractual Clauses or – where legally permissible – your explicit consent.

Where a provider is validly certified under the EU-U.S. Data Privacy Framework for transfers to the United States, the transfer may be based on the corresponding adequacy decision of the European Commission. For transfers not covered by such a framework, Standard Contractual Clauses or other legally recognised transfer mechanisms may be used.

As a general principle, we store personal data only for as long as necessary to fulfil the respective purpose of processing or for as long as statutory retention obligations apply.

The specific storage period depends on the type of data, the respective processing purpose, statutory retention periods and, where applicable, the retention periods of the service providers used.

As soon as the respective purpose no longer applies and there are no statutory or other legitimate grounds for continued storage, the data will be deleted or anonymised.

Subject to the applicable statutory requirements, you have, in particular, the following rights:

• Right of access pursuant to Art. 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to erasure pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to object pursuant to Art. 21 GDPR
• Right to withdraw consent pursuant to Art. 7(3) GDPR

You may withdraw any consent you have given at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If you believe that the processing of your personal data infringes applicable data protection law, you also have the right to lodge a complaint with a data protection supervisory authority.

In Austria, the competent supervisory authority is:

Austrian Data Protection Authority
(Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria

If you have any questions regarding data protection or wish to exercise your rights, please contact us:

Hotel Kaprun Betriebsgesellschaft mbH
DAS ALPENHAUS KAPRUN
Schlossstraße 2
5710 Kaprun
Salzburg
Austria
Tel.: +43 6547 7647
Email: willkommen@alpenhaus-kaprun.at