Privacy policy

Data protection

Protecting your personal data is very important to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, Austrian DSG and TKG 2021). This privacy policy informs you about the most important aspects of data processing on our website.

Controller

The controller responsible for data processing on this website is Pension Haus Elisabeth, Bernadette Zangerle, Galtür 22b, 6563 Galtür, Austria. You can reach us by email at haus-elisabeth@galtuer.at or by phone on +43 5443 8289.

Contacting us

If you contact us via the form on the website or by email, we process your details to answer your request and make you an offer (Art. 6(1)(b) GDPR). The data you provide will be stored by us for six months in case of follow-up questions.

Data submitted via the request form is delivered to us by email through our hosting provider Cloudflare (see “Hosting”). Beyond that, we do not pass it on without your consent.

To prevent abuse, the number of requests per IP address is limited. For this, your IP address is stored for at most one hour when you submit the form and then deleted automatically. The legal basis is our legitimate interest in operating the form securely (Art. 6(1)(f) GDPR).

Cookies and web analytics

This website itself does not set cookies, does not store anything in your browser and does not use any web analytics services. No usage profiles are created.

Only when you load the Google Maps map or the feratel booking system may these providers use cookies or your browser’s local storage. See the respective sections below for details.

Server log files

When you visit the website, our hosting provider Cloudflare processes technically necessary data such as IP address, date and time, the page requested and browser type in order to deliver the website and protect it against attacks (Art. 6(1)(f) GDPR). We do not keep access logs ourselves. If a technical error occurs when the request form is submitted, it is logged without your form details and deleted after three days at the latest.

Hosting

This website is operated by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Cloudflare serves the pages, receives form requests and sends them to us by email. In doing so, Cloudflare processes your IP address and the details from the form on our behalf. We have a data processing agreement with Cloudflare; Cloudflare is certified under the EU-US Data Privacy Framework. For more information, see https://www.cloudflare.com/privacypolicy/.

Google Maps

On the “Location & directions” page you can load a map from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is only embedded after you click “Load map”; the legal basis is this consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). Data, in particular your IP address, is then transmitted to Google, including to the USA, and Google may set cookies. Google is certified under the EU-US Data Privacy Framework. For more information, see Google’s privacy policy at https://policies.google.com/privacy.

feratel booking system

On the “Book online” page you can load the search and booking system that feratel media technologies AG (Maria-Theresien-Straße 8, 6020 Innsbruck, Austria) operates for the Paznaun-Ischgl holiday region. It is only embedded after you click “Load booking system”; the legal basis is this consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). Data, in particular your IP address, is then transmitted to feratel, and the system stores your search and booking details in your browser’s local storage.

If you book through it, your details are processed in the region’s booking system to handle the booking (Art. 6(1)(b) GDPR). For more information, see feratel’s privacy policy at https://www.feratel.at/en/privacy-policy/.

Your rights

You have the right to information, rectification, erasure, restriction, data portability, withdrawal and objection. You can withdraw consent at any time with effect for the future. To do so, contact us at haus-elisabeth@galtuer.at.

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can lodge a complaint with the supervisory authority. In Austria this is the Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, https://www.dsb.gv.at).