Data Protection Regulation
Hochfirst Luxury Mountain Resort
We place great importance on protecting your data. To ensure you are fully informed about how we use personal data, please review the following privacy notice.
Conclusion of a Contract
Master Data
Last name and first name, full address, all contact information (e.g., email address, phone number), and information about the nature and content of our contractual relationship.
Other Personal Data
Other personal data that you or third parties provide to us with your consent or otherwise lawfully during the pre-contractual phase, during the contractual relationship (e.g., to issue a guest card), or to fulfill legal obligations: Date of birth or age, marital status, gender, occupation, identification details, bank account information, signing or representation authority, contractual obligations, notice or cancellation periods, or other personal information that you have provided to us yourself.
Engaging Data Processors
The protection of your data is important to us. Even when we use a data processor—Feratel – Guest Registry—in accordance with Section 19 of the Registration Ordinance (MeldeV), we ensure that the data processing takes place within the European Union.
Information on Online Dispute Resolution pursuant to Article 14(1) of the ODR Regulation
The European Commission provides an online platform for the resolution of disputes (known as the “ODR platform”). The ODR platform can serve as a point of contact for the out-of-court resolution of disputes arising from online sales contracts or service contracts. Consumers have the option to submit complaints to the EU’s Online Dispute Resolution platform: http://ec.europa.eu/odr. You can also submit your complaint directly to us at the following email address: info@hochfirst.at
Additive+ Landing Page - Online Marketing and Landing Pages
In addition to our website, we operate in the field of online hotel marketing . To process your inquiry, reservation, order, activation, registration, or other submission of a form on such a landing page, as well as to store and retain your data, we use standard cloud services and CRM systems, as well as software from ADDITIVE GmbH, 39011 Lana (BZ), Italy (“ADDITIVE”), our managing hotel marketing agency. The appropriate level of data protection is ensured by the data processing agreements concluded with the respective companies.
Our landing pages use features of the web analytics service Google Analytics, provided by Google Inc. (“Google”). Google Analytics enables the analysis of how users interact with the website. The information generated as a result regarding your user behavior is transmitted to the provider’s server and stored there.
Your IP address is recorded but immediately anonymized (e.g., by deleting the last 8 bits). As a result, only a rough location can be determined.
You can prevent the transmission of data related to your use of the online service to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://chrome.google.com/webstore/detail/google-analytics-opt-out/fllaojicojecljbmefodhfapmkghcbnh.
ADDITIVE has access to the data collected via Google Analytics. This data is not used for any purpose other than analyzing the use of our websites and evaluating our marketing and sales activities.
Our websites and landing pages also use ADDITIVE features to track usage across all channels, as well as for marketing and sales activities such as landing pages, newsletters, and social media presence. In this process, information about your visits and submitted forms on our websites is also transmitted to ADDITIVE in order to evaluate and optimize our marketing and sales activities.
Data processing is carried out in accordance with the legal provisions of Article 6(1)(f) (legitimate interest) of the GDPR.
Our purpose, in accordance with the GDPR (legitimate interest), is to improve our offerings and our website by analyzing how our website is used, as well as through sales and marketing activities.
In addition, our landing pages and our website use remarketing features provided by Google Inc. (“Google”) and Meta Platforms Inc. (“Meta”). This involves transmitting information to Meta and Google indicating that you have visited this website. These features are used to present visitors to the landing pages with interest-based advertisements on Google’s advertising network or on the social networks Facebook and Instagram.
Data processing in connection with these remarketing features is carried out in accordance with the legal provisions of Article 6(1)(a) (consent) of the GDPR.
When you visit our landing pages, a banner will notify you that cookies are used for these remarketing functions. By continuing to use the site or by clicking the corresponding button, you consent to this use. You can withdraw your consent at any time by visiting the cookie information page on the respective landing page and declining the use of cookies in the banner that appears.
Additive+ Marketing Automation - Direct Marketing
To increase customer loyalty and to sell services and add-ons, we use hotel marketing automation software from ADDITIVE GmbH, 39011 Lana (BZ), Italy (“ADDITIVE”) in the area of marketing and sales automation for hotels. In this context, data that we collect and process in connection with your inquiry, reservation, order, activation, registration, or other submission of a form on the website is analyzed and used to automatically provide you with offers for services and additional services via ADDITIVE+ MARKETING AUTOMATION. The appropriate level of data protection is ensured by the data processing agreement that has been concluded.
You can opt out of having your data used for this purpose at any time by clicking the unsubscribe link in the relevant message.
Data processing is carried out in accordance with the legal provisions of Article 6(1)(f) (legitimate interest) of the GDPR.
Our objective, in accordance with the GDPR (legitimate interest), is to avoid being at a disadvantage compared to our competitors, to improve our brand awareness, and to maximize our business success by making the best possible use of the contacts we have acquired for sales purposes.
Registration Data
Reporting Requirement
Under the Austrian Registration Act, you are required to register with us by providing the information specified in Sections 5 and 10 of the Registration Act. This includes the following information: name, date of birth, gender, nationality, country of origin, address including ZIP code, and—for foreign guests—the type, number, date of issue, and issuing authority of a travel document, as well as the dates of arrival and departure.
Guest List
We will maintain this data in a guest register in accordance with the legal obligation imposed on us under Section 19 of the Registration Act Implementation Regulation and will store it for a period of 7 (seven) years, unless it is processed for longer for other purposes specified in this Privacy Policy. We maintain the guest register electronically, for which we transfer the data to an IT processor. The data is stored locally by this processor. The data is not transferred to a third country.
Disclosure of Data
The data categories “Arrival” and “Departure,” linked to the country of origin, are forwarded to the municipality in which our lodging facility is located, in accordance with Section 6 of the Tourism Statistics Ordinance. We are also required to provide Ötztal Tourismus, of which we are a member, and/or the municipality with aggregated data on the total number of overnight stays and the number of people required to pay the tourist tax. This is done in accordance with § 19 of the Tyrolean Tourist Tax Act.
Legal Basis for Data Processing
The processing described in the points above is based on Article 6(1)(c) of the GDPR.
Additional Data Transmission to TVB/Municipality
In addition, we forward your ZIP code and year of birth (in pseudonymized or anonymized form) to our municipality and our tourism board so that they can compile and analyze statistics on visitors’ places of origin and age. This transfer is based on Article 6(1)(e) (processing for the public interest) and (f) (overriding legitimate interests) of the GDPR. You may object to this at any time on grounds relating to your particular situation (Article 21(1) of the GDPR).
Guest Card
General Information
You have the option of obtaining a guest card. The guest card entitles you to a discount on regular public transportation fares. The guest card is valid for the duration of your stay with us.
Issuing the Guest Card
The guest card is issued by the accommodation provider only at your request. Depending on the guest card system used by the accommodation provider, it takes the form of either
- an electronically generated guest card or
- issued on the carbon copy of the registration form.
Personal Data Processed
For the electronically generated guest card, the following personal data—derived from the registration information (see point 1 above)—is processed: first name, last name, date of birth, country of origin/zip code, and length of stay (arrival/departure).
If the guest card is issued in the form of a “registration form,” it contains the information specified in § 5 in conjunction with § 9 of the Registration Act (see the section above titled “Registration Data” under “Registration Requirement”). In this case, there is no electronic processing for the purposes of the guest card. Neither the tourism association nor the transit operator processes the guest card data.
Legal Basis for Data Processing
The processing of your data for the purposes of the guest card is based on your consent (Art. 6(1)(a) of the GDPR). You may revoke your consent at any time by notifying the accommodation provider verbally.
Recipients of the data
To take advantage of the discount, you must show the bus driver the corresponding guest card, which displays your information, and thus disclose it yourself. The driver will visually verify whether the card is (still) valid.
Other Processing of the Data
Collection, Processing, and Use of Personal Data
Personal data is collected only if you voluntarily provide it to us (e.g., when signing up for our newsletter, submitting an inquiry via the website, making an online booking, etc.). No other personal data is collected.
Personal Information
Personal data that you submit electronically on this website—such as your name, email address, mailing address, or other personal information—will be used by us only for the purpose specified in each instance, stored securely, and not disclosed to third parties. The provider automatically collects and stores information on the web server, such as the browser used, operating system, referring page, IP address, time of access, etc. This data cannot be assigned to specific individuals without cross-referencing other data sources, and we do not further analyze this data unless there is evidence of unlawful use of our website.
Legal Basis
The EU General Data Protection Regulation, the Data Protection Act 2000, and the Data Protection Amendment Act 2018 serve to protect the right to the protection of personal data. We process your data exclusively in accordance with the applicable legal provisions (GDPR, DSG 2018, TKG 2003).
General Information
We are particularly committed to protecting and securely safeguarding all personal data you entrust to us. On this page, you can learn more about how we use and process your personal data.
Purpose, Legal Basis, Retention Period, and Data Recipients
1. We need the personal data we collect to fulfill the contract, process payments, assert contractual claims, provide customer service, and for promotional purposes. The data is collected, stored, processed, and used for these purposes.
2. The legal basis for the processing of your personal data includes, on the one hand, the performance of a contract, legitimate interests, and the fulfillment of our legal or contractual obligations, and, on the other hand, your consent (e.g., contact form, newsletter, online booking, cookies). Failure to provide the data may have various consequences.
3. We process your personal data, to the extent necessary, for the duration of the entire business relationship (from the initiation and execution of a contract through to its termination) and beyond, in accordance with the statutory retention and documentation requirements arising, among other sources, from the Austrian Commercial Code (UGB), the Federal Tax Code (BAO), and until the conclusion of any legal disputes, ongoing warranty and guarantee periods, etc.
Contact Form
1. The information you provide, including personal data from our contact form, is transmitted to us via our own mail server for the purpose of processing your inquiry, further processed, and stored by us. This data will not be collected or disclosed without your consent. Without this data, we cannot process your inquiries.
2. Data processing is carried out in accordance with the legal provisions of Section 96(3) of the Telecommunications Act (TKG) and Article 6(1)(a) (consent) of the GDPR.
Cookies
1. Cookies, other tracking technologies, and features of the Google Analytics web analytics service (see below for more information) may be used in a variety of ways on our website.
2. Cookies are small text files that enable us to recognize users and analyze their use of our websites. The information generated in this way is transmitted to the provider’s server and stored there. It is used to make our website more user-friendly, effective, and secure overall. Cookies are also used to measure the frequency of page views and to facilitate general navigation.
3. By using our website, you consent to our use of cookies. You can disable cookies in your browser settings. Please refer to your browser manufacturer’s instructions for details on how this works. If you choose to opt out of certain technical and/or functional cookies, the functionality of our website may be limited. Some cookies remain stored on your device until you delete them.
4. Your IP address is collected but immediately pseudonymized. As a result, only a rough geolocation is possible.
5. Data processing is carried out in accordance with the legal provisions of Section 96(3) of the Telecommunications Act (TKG) and Article 6 of the GDPR (in particular, consent). Because we value our users’ privacy, user data is pseudonymized.
Using Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been set at the domain or cookie level, it remains in effect for all tracking tags implemented using Google Tag Manager.
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the United States and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for the website operators, and to provide other services related to website and internet usage.
Google may also transfer this information to third parties where required by law or where such third parties process the data on Google’s behalf. Google will never associate your IP address with any other data held by Google. You can prevent the installation of cookies by adjusting your browser settings accordingly; however, please note that in this case you may not be able to use all features of this website to their full extent. By using this website, you consent to the processing of data collected about you by Google in the manner and for the purposes described above.
You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as from processing this data, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
We would like to point out that this website uses Google Analytics with the “_anonymizeIp()” extension, and therefore IP addresses are processed only in truncated form to prevent direct identification of individuals.
You can prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website: Disable Google Analytics
Use of Google Maps
We use the “Google Maps” component on our website, provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as “Google.” Each time the “Google Maps” component is accessed, Google sets a cookie to process user settings and data when the page on which the “Google Maps” component is integrated is displayed. This cookie is generally not deleted when you close your browser but expires after a certain period of time, unless you delete it manually beforehand. If you do not consent to this processing of your data, you have the option to disable the “Google Maps” service and thereby prevent the transmission of data to Google.
To do this, you must disable the JavaScript function in your browser. Please note, however, that in this case you will not be able to use “Google Maps” at all, or only to a limited extent. The use of “Google Maps” and the information obtained through “Google Maps” is subject to Google’s Terms of Service http://www.google.de/intl/de/policies/terms/regional.html as well as the additional terms and conditions for “Google Maps” https://www.google.com/intl/de_de/help/terms_maps.html.
Use of AddThis Plugins
Our website uses so-called social plugins (“plugins”) from the bookmarking service AddThis, which is operated by AddThis LLC, Inc., 8000 Westpark Drive, Suite 625, McLean, VA 2210, USA (“AddThis”). The plugins are usually identified by an AddThis logo, such as a white plus sign on an orange background. You can find an overview of the AddThis plugins and their appearance here: www.addthis.com/get/sharing. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the AddThis servers. The plugin’s content is transmitted directly from AddThis to your browser and integrated into the page. Through this integration, AddThis receives the information that your browser has accessed the corresponding page of our website and stores a cookie on your device to identify your browser.
This information (including your IP address) is transmitted directly from your browser to an AddThis server in the United States and stored there. AddThis uses this data to create anonymized user profiles, which serve as the basis for personalized and interest-based advertising targeted at visitors to websites with AddThis plugins. For information on the purpose and scope of data collection, as well as the further processing and use of the data by AddThis, please refer to AddThis’s privacy policy: www.addthis.com/privacy/privacy-policy
If you wish to opt out of data collection by AddThis in the future, you can set an “opt-out cookie,” which you can download at the following link: www.addthis.com/privacy/opt-out. You can also completely prevent the AddThis plugins from loading by using browser add-ons, such as the “NoScript” script blocker (http://noscript.net/).”
Hotjar
This website uses Hotjar, a web analytics tool. The provider is Hotjar Ltd., located at 2, St. Julian’s Business Center, 3, Elia Zammit Street, St. Julian’s STJ 1000, Malta. Hotjar anonymously records interactions between randomly selected individual visitors and the website. This creates a log of, for example, mouse movements and clicks, with the goal of identifying opportunities to improve the website. In addition, information regarding the operating system, browser, incoming and outgoing links, geographic location, as well as screen resolution and device type is analyzed for statistical purposes. This information is not personally identifiable and is not shared by Hotjar with third parties.
If you do not want Hotjar to process your data, you can disable cookies in your web browser settings and delete any cookies that are already active. By using the “Do Not Track” header, you can opt out of having your data collected by Hotjar at any time when visiting a Hotjar website. Click here to learn how to do this. You can find more information about data processing by Hotjar here.
Privacy Policy for the Use of Google+
You can use the Google +1 button to share information worldwide. Through the Google +1 button, you and other users receive personalized content from Google and our partners. Google stores both the fact that you gave a piece of content a +1 and information about the page you were viewing when you clicked +1. Your +1s may appear as recommendations alongside your profile name and photo in Google services—such as in search results or on your Google Profile—or in other places on websites and in ads across the web. Google records information about your +1 activity to improve Google services for you and others. To use the Google +1 button, you need a public Google profile that is visible worldwide and must include at least the name you selected for the profile. This name is used across all Google services. In some cases, this name may also replace another name you used when sharing content through your Google Account. The identity associated with your Google profile may be visible to users who know your email address or have other identifying information about you. In addition to the purposes described above, the information you provide will be used in accordance with Google’s applicable privacy policies. Google may publish aggregated statistics about users’ +1 activity or share them with users and partners, such as publishers, advertisers, or affiliated websites.
Privacy Policy for the Use of Facebook
Our website incorporates plugins from the social network Facebook, located at 1601 South California Avenue, Palo Alto, CA 94304, USA. You can recognize the Facebook plugins by the Facebook logo or the “Like” button on our site. You can find an overview of the Facebook plugins here: developers.facebook.com/docs/plugins/. When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. This informs Facebook that you have visited our site using your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it is used by Facebook. For more information, please see Facebook’s Privacy Policy at www.facebook.com/policy.php If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
Privacy Policy for the Use of Twitter
Our website incorporates features from the Twitter service. These features are provided by Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. When you use Twitter and the Twitter button features, the websites you visit are linked to your Twitter account and shared with other users. Data is also transmitted to Twitter in the process. Please note that, as the provider of this website, we have no knowledge of the content of the data transmitted or how Twitter uses it. For more information, please see Twitter’s Privacy Policy at twitter.com/privacy. You can adjust your privacy settings on Twitter in your account settings at twitter.com/settings/account .
Privacy Policy for the Use of YouTube
This website also uses Google Conversion Tracking. Google Conversion Tracking is an analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you click on an ad placed by Google, a conversion tracking cookie is stored on your computer. These cookies expire after 30 days, do not contain any personal data, and therefore cannot be used to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google AdWords customer receives a different cookie. Therefore, it is not possible to track cookies across the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted in to conversion tracking.
This allows customers to see the total number of users who clicked on their ad and were redirected to a page equipped with a conversion tracking tag. However, they do not receive any information that could be used to personally identify users. If you do not wish to participate in tracking, you can opt out by preventing the installation of cookies through the appropriate settings in your browser software (disable option). You will then not be included in the conversion tracking statistics. For further information and Google’s Privacy Policy, please visit: http://www.google.com/policies/technologies/ads/, http://www.google.de/policies/privacy/
Privacy Policy for the Use of Instagram
Our website incorporates features from the Instagram service. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content on our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how Instagram uses it. For more information, please see Instagram’s Privacy Policy at www.instagram.com/about/legal/privacy/.
Privacy Policy for the Use of ISSUU
Our website incorporates features from the ISSUU service. These features are provided by Issuu, Inc., 131 Lytton Ave, Palo Alto, CA 94301, USA. The Issuu service allows you to connect, collaborate, share, and mix documents with other users in the Issuu community online. Please note that, as the provider of this website, we have no knowledge of the content of the transmitted data or how it is used by ISSUU. For more information, please see the ISSUU Inc. Privacy Policy at https://issuu.com/legal/privacy
Use of IntelliAd Web Tracking
This website uses the web analytics service with bid management provided by intelliAd Media GmbH, Sendlinger Str. 7, 80331 Munich. To tailor this website to user needs and to optimize it, anonymized usage data is processed and stored in aggregated form, and usage profiles are created from this data. When intelliAd tracking is used, cookies are stored locally. You have the right to object to the processing of your usage data. To do so, please use the intelliAd opt-out function.
Web Server Log
To ensure smooth operation and, if necessary, to troubleshoot issues, websites generally maintain logs on the web server where IP addresses are stored. Like many other companies, we host our website on the servers of a professional service provider. Although IP addresses do not constitute personal data on their own, they could theoretically be linked to specific individuals using tracking tools. In addition, the time, browser type, and page visited are stored. These logs are deleted after one month.
Use of Google Fonts
We use Google Fonts on our website. This allows us to integrate specific fonts into our website. These fonts are provided by Google via servers in the United States. When a visitor accesses our website, their web browser establishes a direct connection to these servers. Among other things, the visitor’s IP address is transmitted to Google and stored there. Google participates in the EU-U.S. Privacy Shield: www.privacyshield.gov/EU-US-Framework
For more information about Google: Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA. For more information about Google’s privacy policy: https://www.google.com/policies/privacy/
Use of Typekit Fonts
We use Typekit fonts on our website. This allows us to integrate specific fonts into our website. These fonts are provided by Adobe via servers in the United States. When a visitor accesses our website, their web browser establishes a direct connection to these servers. Among other things, the visitor’s IP address is transmitted to Adobe and stored there. Adobe participates in the EU-U.S. Privacy Shield: www.privacyshield.gov/EU-US-Framework. For more information about Adobe: Adobe Systems Incorporated, 45 Park Avenue, San Jose, California 95110, USA. For more information on data protection when using Typekit: https://www.adobe.com/de/privacy/policies/typekit.html
SSL Encryption
This site uses SSL encryption for security reasons and to protect the transmission of confidential information, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser’s address bar. When SSL encryption is enabled, the data you transmit to us cannot be read by third parties.
Data Storage
Please note that, to simplify the purchasing process and facilitate subsequent contract fulfillment, the online store operator uses cookies to store the IP address of the internet connection owner, as well as the buyer’s name, address, and credit card number.
In addition, we also store the following data for the purpose of contract fulfillment: The data you provide is necessary for the performance of the contract or for the implementation of pre-contractual measures. Without this data, we cannot enter into a contract with you. Data is not transferred to third parties, with the exception of the transfer of credit card data to the processing banks/payment service providers for the purpose of charging the purchase price, to the shipping company we have commissioned to deliver the goods, and to our tax advisor to fulfill our tax obligations.
If the purchase process is canceled, the data we have stored will be deleted. If a contract is concluded, all data related to the contractual relationship will be stored until the expiration of the tax-law retention period (7 years).
In addition, the following data—name, address, purchased goods, and date of purchase—will be stored until the expiration of the product liability period (10 years). Data processing is carried out in accordance with the legal provisions of Section 96(3) of the Telecommunications Act (TKG) as well as Article 6(1)(a) (consent) and/or (b) (necessary for the performance of a contract) of the GDPR.
Cognitive/Seekda
Our website uses Kognitiv to process your booking. The privacy policy for this is provided directly within the booking process (IBE).
Additive Newsletter
You can subscribe to our newsletter through our website. To do so, we need your email address and your consent to receive the hotel newsletter via ADDITIVE GmbH, our provider for email marketing for the hotel .
In order to provide you with targeted information, we collect and process data using our newsletter system In addition, voluntarily provided information regarding areas of interest, name, date of birth, and region or country of origin.
Once you’ve signed up for the newsletter, we’ll send you a confirmation email with a link to confirm your subscription.
You can cancel your newsletter subscription at any time by clicking the unsubscribe link in the newsletter.
To process your subscription and deliver the newsletter to your email address, we use software from ADDITIVE OHG, 39011 Lana (BZ), Italy (“ADDITIVE”). Through these services and systems, your data is processed and stored, at least in part, outside the EU or the EEA. The appropriate level of data protection is ensured by the data processing agreement that has been concluded.
Further Information and Contacts
If you have any questions about this privacy policy, please contact us. You can find our contact information here. You may inquire at any time to find out whether we have stored any of your data and, if so, which data. In addition, you may send us requests for information, deletion, or correction, as well as any suggestions, via email or mail.
Further Information and Contacts
Data Security
Hotel Hochfirst***** implements technical and organizational security measures to protect stored personal data against accidental or intentional manipulation, loss, or destruction, as well as against access by unauthorized persons. Our security measures are continuously improved in line with technological advancements.
Consent and Right to Withdraw Consent
1. If your consent is required for the processing of your data, we will not process it until we have received your express consent.
2. As a general rule, we do not process data from minors and are not authorized to do so. By providing your consent, you confirm that you are at least 14 years of age or that you have obtained the consent of your legal guardian.
3. You can revoke your consent at any time by sending an email to the following address: info@hochfirst.com. In such a case, the data previously stored about you will be anonymized and subsequently used only for statistical purposes without any personal reference. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal.
Your Rights - Right to Access Information
You have the right at any time to request information about the personal data we have stored about you, its source, the recipients, and the purpose of its storage.
1. You have the right to obtain information from the data controller regarding the relevant personal data at any time. Unless there is a legal obligation to retain the data, you have the right to have this data erased and to object to its processing. Furthermore, you have the right to have the data corrected, to restrict processing, to data portability, and to file a complaint with the Austrian Data Protection Authority (Wickenburggasse 8-10, 1080 Vienna, email: dsb@dsb.gv.at).
2. Please contact us regarding your rights at info@hochfirst.com or write to:
Alpen-Wellness Resort Hochfirst *****
Gurglerstraße 123
A-6456 Obergurgl
Ötztal – Tyrol – Austria
Company Name: Alpen-Wellness Resort Hochfirst ***** Address: Gurglerstraße 123, A-6456 Obergurgl, Ötztal - Tyrol - Austria Email: info@hochfirst.com Commercial Register Number: FN 23839 h Commercial Registry Court: Innsbruck Regional Court VAT ID: ATU 32867902 Headquarters: Gurgler Straße 123, 6456 Obergurgl Specialized Group: Hospitality Industry Management: Melanie Fender, Karl Fender
