DATa privacy statement

This Privacy Policy applies to the collection and use of personal data that may be collected when you contact us, for example, when you visit our website, request, book, purchase services, or when you call us. Please take a moment to read the following document, which informs you about how Gurglhof GmbH handles your personal data, what types of data are collected, how and for what purpose this data is used, to whom Gurglhof GmbH discloses this data, and how Gurglhof GmbH protects your personal data.

The data controller for your data processing is Gurglhof GmbH with all associated facilities, located at Ramolweg 19, A-6456 Obergurgl.

Facilities include: Hotel & Apartments Gurglhof, Josl Mountain Lounging in Obergurgl, Hotel Valentin, and Valentin Design Apartments in Sölden, as well as Hotel Enzian in Hochsölden. Your privacy rights are of the highest priority, and Gurglhof GmbH strives to protect these rights to the best of its ability. All additional data protection obligations beyond this privacy policy remain unaffected.

Why does Gurglhof GmbH collect personal data and how long is it stored?
Gurglhof GmbH collects and uses your personal data to provide exemplary customer service related to your stay at Gurglhof GmbH's hotels, to enable convenient access to our website, and to offer you optimal services. Additionally, your personal data helps Gurglhof GmbH keep you informed about the latest product announcements, special offers, and other developments that may be of interest to you, in our opinion.
If you are not interested in being kept up-to-date with the latest developments and current product and service information, you can inform us at any time. Your personal data will be stored only as long as necessary to fulfill the above-mentioned services or as required by law or other legal obligations.

What data is collected?
There are various situations where your personal data can help Gurglhof GmbH provide better service. For example, you may be asked for personal details when initiating a transaction. Only relevant information will be requested, such as name, postal address, phone number, email address, preferred contact method, or credit card details. Gurglhof GmbH also collects information for market research purposes to better understand its customers and offer more effective services. Furthermore, Gurglhof GmbH collects personal data related to customer activities on its website. This data helps Gurglhof GmbH determine which information is most useful for its customers and which areas of its websites and internet services are of greatest interest.

When does Gurglhof GmbH share personal data?
Gurglhof GmbH takes the protection of your privacy very seriously. Gurglhof GmbH assures you that it does not sell or lend your contact information to other providers. To provide exemplary service, Gurglhof GmbH may share your personal data with companies that are obliged to protect this data in accordance with this privacy policy. Sometimes, it may be advantageous for Gurglhof GmbH to provide certain personal data to other companies working on its behalf to deliver products and services. These companies may assist in processing information, fulfilling customer orders, delivering products, managing customer data, providing customer service, assessing your interest in Gurglhof GmbH's products and services, conducting customer research, or conducting customer satisfaction surveys. These companies are also bound to protect your personal data in accordance with this privacy policy and applicable laws. Additionally, Gurglhof GmbH may be compelled to disclose your personal data due to legal requirements or official orders.

How does Gurglhof GmbH protect your personal data?
Gurglhof GmbH implements precautions, including administrative, electronic, and physical procedures, to safeguard your personal data against loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. The Gurglhof GmbH website uses industry-standard SSL (Secure Sockets Layer) encryption at certain points to ensure the confidentiality of your personal information and credit card data during online transactions. Further details on how your personal data is handled on our website are provided below. You can also help us by taking precautions to protect your personal data online, such as using a secure web browser and enabling browser settings that protect your data.

Integrity of your personal data
Gurglhof GmbH has implemented measures to ensure that your personal data is always accurate, complete, and up-to-date for its intended use. You have the right to verify and, if necessary, request correction of your personal data at any time. You can help ensure your contact information and preferences are correct, complete, and current. You can also request a copy of your personal data by contacting us via the email address provided below.

Our company-wide commitment to protecting your privacy rights
As mentioned, Gurglhof GmbH takes the protection of your privacy rights very seriously. To ensure the security of your personal data, these policies are communicated to all relevant employees, and security measures to protect privacy rights are strictly enforced within the company.
The website contains links to other companies’ websites. Gurglhof GmbH is not responsible for how these companies handle privacy rights. We recommend that you review their privacy policies.

Questions about protecting privacy rights
If you have any questions or concerns regarding data protection, please contact us. Send us a message (contact details are in the last section of this privacy policy). You can inquire about what data Gurglhof GmbH processes about you, where it comes from, how it is used, and to whom it is transmitted. You can also correct incorrect data or request the deletion of unlawfully processed data. The applicable data protection laws apply accordingly.
Any consent you have given Gurglhof GmbH regarding data processing can be revoked at any time. Such revocation does not affect data processing that is already lawful under legal provisions.
Gurglhof GmbH reserves the right to modify this privacy policy from time to time. Significant changes will be announced along with the updated version of the privacy policy on our website. Below, we inform you about the key aspects of data processing related to our website.

WEBSITE

The protection of your personal data is a special concern for us. We process your data only on the basis of legal provisions (GDPR, TKG 2003). This privacy information provides you with an overview of the most important aspects of data processing on our website.

Gift Shop
1. Description and scope of data processing
Our website offers the possibility to purchase vouchers. When a user takes advantage of this, the data entered in the input form is transmitted and stored by us. This data includes: salutation, first name, last name, address, email address, phone, voucher value, personalization of the voucher, shipping options/alternative delivery address, payment method.
If you purchase a voucher through our website, this is processed via the online ordering platform of websLINE Internet & Marketing GmbH, Sägewerkstrasse 24, 83395 Freilassing, Germany. All entered order data is transmitted encrypted. websLINE is committed to data protection-compliant handling of your transmitted data. websLINE takes all organizational and technical measures to protect your data.
In this context, there is no further sharing of data with third parties. The data is used solely for processing the booking and communication.

Legal basis for data processing
The legal basis for processing the data is the conclusion of a purchase agreement with the user.

Purpose of data processing
The processing of personal data from the input form is solely for handling the voucher purchase and processing the payment transactions.

Duration of storage
The data is deleted once it is no longer necessary to achieve the purpose of collection. In the case of a contractual relationship, we will delete the data once the statutory, commercial, or contractual retention periods are fulfilled.

Right to object and delete
The user can object to the processing of their personal data at any time.

Online booking & inquiry
1. Description and scope of data processing
Our website offers the possibility to book rooms and offers and/or make inquiries. When a user takes advantage of this, the data entered in the input form is transmitted and stored by us. This may include: salutation, first name, last name, email address, phone, address, number of travel companions, wishes, date, time, room selection, offers, price.
If you make an online booking through our website, it is processed via the online reservation system of websLINE Internet & Marketing GmbH, Sägewerkstrasse 24, 83395 Freilassing, Germany. All entered booking data is transmitted encrypted. websLINE is committed to data protection-compliant handling of your transmitted data. It takes all organizational and technical measures to protect your data.
In this context, there is no further sharing of data with third parties. The data is used solely for processing the booking and communication.

Legal basis for data processing
The legal basis for processing the data is the conclusion of a accommodation contract with the user.

Purpose of data processing
The processing of personal data from the input form is solely for handling the booking inquiry and processing the payment transactions.

Duration of storage
The data is deleted once it is no longer necessary to achieve the purpose of collection. In the case of a contractual relationship, we will delete the data once the statutory, commercial, or contractual retention periods are fulfilled.

Right to object and delete
The user can object to the processing of their personal data at any time. Please note that in case of objection, the booking cannot be completed or the conversation cannot be continued.

General
Access to our website is generally possible without providing personal data. When personal data (such as name, address, or email addresses) are collected on our pages, it is done voluntarily whenever possible. This data will not be shared with third parties without your explicit consent. Please note that data transmission over the Internet (e.g., email communication) may have security gaps. Complete protection of data from third-party access is not possible.

Contact form
If you contact us via the contact form, your information from the form including your contact details will be stored for processing your inquiry and in case of follow-up questions. Your accommodation request can only be used and sent electronically if you explicitly agree to this privacy and data use policy by clicking. We do not share this data without your consent. Please review our privacy policy accordingly.

Cookies
Our website uses cookies, which are small text files stored on your device via your browser. They do no harm. We use cookies to make our offer more user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit. If you do not wish this, you can configure your browser to notify you when cookies are set and to allow cookies only in individual cases. Disabling cookies may limit the functionality of our website.

Web analytics
Our website uses features of web analytics services Google Analytics and Matomo. The provider of Google Analytics is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Matomo runs on servers of Cookis GmbH, 6460 Imst, Franz Xaver Rennstraße 4 (Bakehouse clients). Cookies are used to analyze website usage by your users. The generated information is transmitted to the respective provider's server and stored there. You can prevent this by configuring your browser not to store cookies. Your IP address is recorded but immediately pseudonymized by deleting the last eight bits. This only allows a rough localization. Data processing is based on legal provisions of § 96 Abs 3 TKG and Art 6 Abs 1 lit a (consent) and/or f (legitimate interest) of the GDPR. Our legitimate interest under GDPR (interest) is to improve our offer and web presence. Since user privacy is important to us, user data is pseudonymized.

Google Maps
Privacy policy for using This website uses Google Maps product by Google Analytics. The operator of Google Maps is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. By using this website, you agree to the collection, processing, and use of data automatically collected by Google Inc., their representatives, and third parties. The terms of use for Google Maps can be found under "Terms of Use of Google Maps": https://policies.google.com/privacy.

SSL encryption
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as site operators. You can recognize an encrypted connection by the change in the address line from "http://" to "https://" and the padlock symbol in your browser. When SSL encryption is active, data you transmit to us cannot be read by third parties.

Facebook plugins (Like button)
Our pages include plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. You recognize Facebook plugins by the Facebook logo or the "Like" button (“Gefällt mir”) on our page. An overview of Facebook plugins can be found here: http://developers.facebook.com/docs/plugins/. When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook receives information that your IP address has visited our page. If you click the Facebook "Like" button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. Facebook can then associate your visit to our pages with your user account. We point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. For more information, see Facebook’s privacy policy at https://de-de.facebook.com/policy.php. If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook account.

Twitter
Privacy policy for using Our pages include functions of the Twitter service. These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter. We point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Twitter. For more information, see Twitter’s privacy policy at http://twitter.com/privacy. You can change your privacy settings in your Twitter account under http://twitter.com/account/settings.

Instagram
Privacy policy for using Our pages include functions of the Instagram service. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages with your Instagram profile by clicking the Instagram button. Instagram can then associate your visit to our pages with your user account. We point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. For more information, see Instagram’s privacy policy at https://instagram.com/about/legal/privacy/.

Pinterest
Privacy policy for using Our page uses social plugins from the social network Pinterest operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA (“Pinterest”). When you visit a page containing such a plugin, your browser establishes a direct connection to Pinterest’s servers. The plugin transmits log data to Pinterest’s servers in the USA. This log data may include your IP address, the visited website addresses containing Pinterest features, browser type and settings, date and time of the request, your usage of Pinterest, and cookies. For more information on the purpose, scope, and further processing and use of data by Pinterest, as well as your rights and options to protect your privacy, see Pinterest’s privacy notices: https://about.pinterest.com/en/privacy-policy.

YouTube
Privacy policy for using Our website uses plugins from YouTube operated by Google. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with a YouTube plugin, a connection is established to YouTube’s servers. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, YouTube can assign your browsing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. Further information on handling user data can be found in YouTube’s privacy policy at https://www.google.de/intl/de/policies/privacy.

ISSUU
Privacy policy for using Our pages include features of the ISSUU service. These features are provided by ISSUU, Inc., 131 Lytton Ave, Palo Alto, CA 94301, USA. With the ISSUU service, you can share documents with other users of the ISSUU community online, collaborate, share, and remix. We point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by ISSUU. For more information, see ISSUU’s privacy policy at https://issuu.com/legal/privacy. Casablanca Hotel Software Processing of Personal Data The processing of personal data is permitted when a business transaction (offer, reservation) exists, with the person’s consent, or when a legal purpose (e.g., invoicing, reporting) requires processing. Specifically, the hotel software makes adjustments to correspondence and registration forms, as well as a solution for recording, storing, and archiving consent declarations of affected persons. Data security & logging Under GDPR, all databases on servers are encrypted, and no general users are created in Casablanca, so all access to personal data is traceable and assignable to individual users. All access to the guest database and selections in Casablanca are automatically logged. All passwords are encrypted and comply with data protection guidelines. Credit card data is stored PCI-compliant (bypayone.com - our credit card provider).

Your rights
You generally have rights to access, rectification, deletion, restriction, data portability, revocation, and objection. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated, you can file a complaint with the supervisory authority.
In Austria, this is the Data Protection Authority.

You can contact us at the following details: 
Valentin Apartments, Address: Gurglhof GmbH, Ramolweg 19, 6456 Obergurgl,
Email: direktion@hotel-valentin.at, UID number: ATU67239366