Privacy policy

1. Data protection at a glance

General notes

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.

Data collection on our website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find his contact details in the imprint of this website.

How do we collect your data?
On the one hand, your data is collected by you providing it to us. This may be, for example, data that you enter in a contact form.
Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.

What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have with regard to your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have a right to demand the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint for this purpose and for further questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

2. General notes and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data are collected. Personal data is data by which you can be personally identified. This Privacy Policy explains what information we collect and how we use it. It also explains how and for what purpose this is done.
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Note on the responsible body

The data controller for this website is:
SK Hotelbetriebs GmbH & Co KG
Erholungshotel Kaltenhauser
Geschäftsführer: Eva Maria Steinhauser
Hollersbach 17
5731 Hollersbach
Tel. +43(0)6562/8117-0
Fax +43(0)6562/8117-50
E-Mail:

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar).

Your rights

You have the right to information, correction, deletion and restriction of the processing of personal data. If the legal basis for the processing of your personal data is your consent or a contract concluded with you, you also have the right to data portability.
You have the right to revoke any consent you may have given for the processing of your personal data. The lawfulness of the processing of the personal data until the revocation is not affected by the revocation.
You have the right to object to the processing of your personal data for the purpose of direct marketing. In the event of an objection, your personal data will no longer be processed for the purpose of direct advertising.
Furthermore, you have the right to lodge a complaint with the supervisory authority (Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna, ).

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Information, blocking, deletion

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data. For this purpose as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.

Objection to advertising e-mails

The use of contact data published within the scope of the imprint obligation to send advertising and information material that has not been expressly requested is hereby prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

3. Data collection on our website

Cookies

Some of the Internet pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies to analyse your surfing behaviour) are stored, these are treated separately in this data protection declaration.

Server-Log-Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data is not merged with other data sources.
The basis for data processing is Art. 6 (1) lit. f DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

4. Analysis tools and advertising

By ticking the Privacy Policy checkbox, you consent to the processing of the personal data you have entered by the data protection officer, Thomas Steinhauser, Hotel Kaltenhauser, 5733 Hollersbach, Tel. 06562 8117-0, for the purpose of sending you an e-mail newsletter on the basis of your consent until revocation or objection.

There is no legal or contractual obligation to provide the personal data or to give consent. Non-consent or failure to give consent will only result in you not being sent any information. No information will be passed on to other recipients.

You have the right to withdraw your consent at any time by written notice or by clicking on the unsubscribe link, without affecting the lawfulness of the processing carried out on the basis of the consent until the withdrawal. Likewise, you can object in the same way to the use of your personal data for the purpose of direct marketing. In the event of an objection, your personal data will no longer be processed for the purpose of direct marketing in the form of an e-mail newsletter. You have the right to information, correction, deletion, restriction of processing and transferability of your personal data as well as the right to lodge a complaint with the supervisory authority (Austrian Data Protection Authority, Wickenburggasse 8, 1010 Vienna, ).

If you do not refuse to receive e-mail advertising, the person responsible for data protection, Thomas Steinhauser, Hotel Kaltenhauser, 5733 Hollersbach, Tel. 06562 8117-0, will use the above data for the purpose of sending an e-mail newsletter on the basis of the Telecommunications Act or legitimate interest until you object.

You have the right to object to the use of your personal data for the purpose of direct marketing at any time by notifying us in writing or by clicking on the unsubscribe link. In case of objection, your personal data will no longer be processed for the purpose of direct marketing.

Google Analytics

We use Google Analytics, Google's statistics and tracking tool. Google uses cookies for this. We use Google Analytics to analyze the origin of website users and their behavior on the website, to optimize our website and to analyze our marketing activities. The basis for the data agreement is your consent in accordance with Art. 6 (1) sentence 1 lit. a) GDPR). Google Analytics 4 largely anonymises visitor data. If you accept third-party cookies, your data will be forwarded to Google (USA). If you do not want this, you can object to the opt-in via the browser plugin: https://tools.google .com/dlpage/gaoptout?hl=en.

Google Ads and Conversion Tracking

We use Google Ads, the advertising programme of Google, to specifically advertise our offer. When you click on an advertisement from Google, a cookie is set for conversion tracking so that Google and we know how many people have clicked on the ads and subsequently made a request, if applicable. The basis for the data agreement is your consent according to Art. 6 para. 1 p. 1 lit. a) DSGVO).

Google ReCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). The purpose of reCAPTCHA is to check whether data entry on our websites (e.g. in a contact form) is made by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place. The data processing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM.

For more information on Google Analytics, Google Ads and Conversion Tracking, Google reCAPTCHA and Google's privacy policy, please see the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

5. Plugins and Tools

Online bookings and booking requests

Our website uses the booking technology of GMS Hotelsoftware Division GmbH Co OG, Schillerstr. 25-27, 5020 Salzburg ("GMS"). We have concluded an order processing contract with GMS.

If you make an online booking or a booking enquiry via our website, we need your e-mail address, your travel dates, the product you have booked and your title, first name and surname for processing. In individual cases, your telephone number will also be requested in order to be able to contact you quickly, particularly in relation to unforeseeable circumstances that affect your booking.

For the calculation of the valid travel price, the dates of stay, the selected product, the number of persons travelling and whether the persons are adults or children are required. If you are travelling with children, the age of the children is also requested for the correct calculation of the travel price. Furthermore, we ask for the desired means of payment for the trip. If a prepayment is applicable for your travel parameters, you will be forwarded to a payment service provider for the secure processing of the prepayment after selecting the desired means of payment. Further information in the form is provided on a voluntary basis.

The processing of your data for the online booking and the online booking request is based on Art. 6 para. 1 lit. b DSGVO and serves the fulfilment of a contract or the implementation of pre-contractual measures. The data you transmit to us will remain with us until the purpose for storing the data no longer applies (e.g. after processing your request has been completed). Mandatory legal provisions - in particular legal retention periods - remain unaffected. In order to ensure data protection-compliant processing, we have concluded an order processing contract with GMS.

Giggles

Our website uses the booking technology of Giggle GmbH, Müllerstraße 1, 6020 Innsbruck (Giggle). We have concluded an order processing contract with Giggle.

If you make an online booking for an event or service via our website, we need your e-mail address, your travel dates, the product booked and your title as well as your first and last name for processing. In individual cases, your telephone number will also be requested in order to be able to contact you quickly, particularly in relation to unforeseeable circumstances that affect your booking.

The processing of your data for online booking is based on Art. 6 para. 1 lit. b DSGVO and serves the fulfilment of a contract or the implementation of pre-contractual measures. The data you send us will remain with us until the purpose for storing the data no longer applies (e.g. after processing your request has been completed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Userlike

This site uses chat software from the company Userlike UG (haftungsbeschränkt), Probsteigasse 44-46, 50670 Cologne, Germany. You can use the chat like a contact form to chat with our staff in almost real time. When you start the chat, the following personal data is collected:

Date and time of the call,
Browser type/version,
IP address,
operating system used,
URL of the previously visited website,
amount of data sent.
And if specified: First name, last name, and email address.

Depending on the course of the conversation with our employees, further personal data may be collected in the chat, which you enter. The nature of this data depends largely on your enquiry or the problem you are presenting to us. The processing of all this data is intended to provide you with a fast and efficient means of contact and thus to improve our customer service.

All our employees have been and will be trained on the topic of data protection and taught how to handle customer data safely and confidentially. All our employees are bound to confidentiality and have signed an addendum in their employee contracts to commit to maintaining confidentiality and observing data protection.

By accessing the kaltenhauser.com website, the chat widget is loaded in the form of a JavaScript file from AWS Cloudfront. The chat widget technically represents the source code that runs on your computer and enables the chat.

In addition, we store the history of the chats for a period of 90 days. This serves the purpose of sparing you extensive explanations about the history of your enquiry under certain circumstances as well as for the constant quality control of our chat service. The processing is therefore permitted in accordance with Art. 6 Para. 1 Letter f DSGVO. If you do not wish this, you are welcome to inform us of this using the contact details below. Saved chats will then be deleted by us immediately.

The storage of chat data also serves the purpose of ensuring the security of our information technology systems. This is also our legitimate interest, which is why the processing is permissible under Art. 6 (1) f DSGVO.

For further information, please refer to the Privacy Policy of Userlike UG.