Privacy Policy
We take the protection of your personal data very seriously. We process your personal data exclusively in accordance with the applicable legal provisions, in particular the General Data Protection Regulation (GDPR) and the Austrian Telecommunications Act (TKG 2021).
This Privacy Policy explains what personal data we collect when you visit our website, how we use it, and what rights you have regarding the processing of your personal data.
1. Data Controller
Hüttenschatz
Bettina and Daniel Schatz
Forst 49
9412 St. Margarethen
Austria
Email:
info@huettenschatz.at
Website:
https://huettenschatz.at
2. Hosting
Our website is hosted on servers operated by STRATO AG. Whenever you visit our website, the web server automatically collects and stores certain information in so-called server log files.
This information may include, in particular:
- IP address
- Date and time of access
- Pages and files accessed
- Amount of data transferred
- Browser type and browser version
- Operating system used
- Referrer URL (the previously visited website)
- Hostname of the accessing device
This data is used solely to ensure the secure and reliable operation of our website, to maintain system security, and to analyse technical errors. It is not combined with data from other sources.
The processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR.
3. SSL/TLS Encryption
To protect the transmission of confidential information, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" prefix in your browser's address bar and the padlock symbol.
This ensures that any data you transmit to us cannot be read by unauthorised third parties.
4. Server Log Files
The hosting provider automatically collects and stores information transmitted by your browser in server log files.
As a general rule, this data is not analysed on a personal basis. It is stored solely to ensure the technical operation of the website, maintain system security, and detect or prevent misuse and cyber attacks.
The processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR.
5. Cookies
Our website uses cookies. Cookies are small text files stored on your device that contain certain information.
Some cookies are technically necessary to ensure that our website functions properly. Other cookies are only set with your explicit consent.
You can change or withdraw your cookie preferences at any time via our cookie banner or the cookie settings.
6. Cookie Consent (CCM19)
We use the consent management tool CCM19 to manage your cookie preferences and your consent.
CCM19 stores your selected preferences regarding the use of cookies and external services. This ensures that services requiring your consent are only activated after you have given your permission.
The processing is based on Article 6(1)(c) GDPR (compliance with legal obligations) and Article 6(1)(f) GDPR (our legitimate interest in maintaining a legally compliant consent management system).
7. External Links to Google Maps
Our website may contain links to Google Maps. By clicking on such a link, you leave our website and are redirected to Google's website. From that point onwards, Google's own Privacy Policy applies.
https://policies.google.com/privacy
8. Google Fonts
Google Fonts used on this website are hosted locally on our own server.
As a result, no connection to Google's servers is established when you visit our website, and no personal data is transmitted to Google in connection with the use of these fonts.
9. Contact Form
If you contact us using our contact form, we process the personal data you provide, such as your name, email address, telephone number, and any other information you choose to submit, in order to handle your enquiry.
The processing is carried out solely for the purpose of responding to your enquiry and is based on Article 6(1)(b) GDPR (pre-contractual measures) and, where applicable, Article 6(1)(f) GDPR (our legitimate interest in efficient communication).
Your data will not be shared with third parties unless we are legally required to do so.
10. Email Services (Brevo)
We use Brevo to send emails. This includes, in particular, contact enquiries, booking confirmations, notifications, and other system-related emails.
For this purpose, the personal data required for communication may be processed.
For more information, please visit:
https://www.brevo.com/de/legal/privacypolicy/
11. Cloudflare Turnstile
To protect our website against spam, abusive submissions, and automated attacks, we use Cloudflare Turnstile.
Turnstile is used in particular to protect our contact form and login area. During the verification process, technical information such as your IP address, browser information, and other data required for security checks may be processed.
The processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in protecting our website and user accounts against misuse and automated attacks.
For more information, please visit:
https://www.cloudflare.com/privacypolicy/
12. Booking System (Easy Hotel Booking)
We use the Easy Hotel Booking system to manage our accommodations, bookings, and user accounts.
When you make a booking or register for an account, we may process the following personal data:
- First and last name
- Email address
- Telephone number
- Billing and booking information
- Check-in and check-out dates
- Number of guests
- Any additional information you choose to provide voluntarily
The processing of this data is necessary to manage your booking, communicate with you, and fulfil our contractual and legal obligations in accordance with Article 6(1)(b) GDPR.
13. User Account
When making a booking, you may create a user account or receive login credentials for one.
The personal data collected for this purpose is used exclusively to manage your user account, your bookings, and the features provided through your account.
The processing is based on Article 6(1)(b) GDPR.
14. Payment Processing (Stripe)
We use Stripe Payments Europe Ltd to process online payments.
When you make an online payment, the personal data required to process the transaction (such as your name, payment amount, and payment details) is transmitted to Stripe.
The processing is carried out for the performance of a contract in accordance with Article 6(1)(b) GDPR.
For more information, please visit:
15. iCal Calendar Synchronisation
Our booking system may use the iCal standard to synchronise booking availability with external calendar services.
Only the occupancy information required for calendar synchronisation is processed. No payment information or other confidential content is transmitted via iCal.
The processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in ensuring accurate and up-to-date availability management.
16. Web Analytics (Google Analytics)
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics helps us analyse how our website is used so that we can continuously improve our services and user experience.
Google Analytics is activated only after you have given your explicit consent via our cookie consent tool (CCM19). The legal basis for this processing is Article 6(1)(a) GDPR.
Google may process information about your use of our website, device information, and other technical data. Where supported by Google Analytics, your IP address is processed in a shortened (anonymised) form.
You can withdraw your consent at any time through the cookie settings.
For more information, please visit:
https://policies.google.com/privacy
17. Data Retention
We retain personal data only for as long as necessary to fulfil the respective purposes for which it was collected or to comply with applicable legal retention obligations.
Once the purpose of the processing no longer applies and no statutory retention obligations prevent deletion, the personal data will be deleted.
18. Your Rights
Under the applicable data protection laws, you have the following rights in particular:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw your consent at any time with future effect
If you wish to exercise any of these rights, you may contact us at any time via info@huettenschatz.at.
19. Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with the competent data protection authority.
Contact details of the Austrian Data Protection Authority are available at:
https://www.dsb.gv.at/
In Austria, the competent supervisory authority is the Austrian Data Protection Authority.
20. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy whenever necessary, for example due to changes to our website, new legal requirements, or the introduction of new services.
The latest version published on this website shall always apply.
Last updated: July 2026