Skip to content
Deutsch
Request Book now

Data protection & cookies

Nalin Ltd.
Unterbergstrasse 56
5611 Grossarl, Austria

T. +43(0) 6414 200 40
F. +43(0) 6414 20 04 08
urlaub@hotel-bergzeit.at

We strive to provide services of outstanding quality. In order to be able to guarantee this in the future and to offer you the best possible service and perfect performance, we collect and process data and activities from inquiries, bookings, voucher purchases or when you visit our website. We process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing in the context of our website, our Facebook and Instagram accounts and our newsletter system. When you make a booking or purchase with us, send us an inquiry or request information or brochures, we process your personal data in accordance with Art. 6 para. 1 sentence 1 lit. b, f. GDPR.


What data do we collect?

Website: When you use this website, we collect technically necessary data that is automatically transmitted to our server, including IP address, date and time of the session, type of end device, access status/HTTP status code, browser type, language and version of the browser software, operating system.
This is technically necessary in order to display our website to you. We also use the data to improve the website in line with your expectations and to ensure the security and stability of the website. The legal basis for the collection is Art. 6 para. 1 lit. f GDPR.

Forms: If you contact us via a form on the website or by e-mail, make an inquiry or make a booking, you provide us with the personal data (e.g. name, postal address, e-mail address, telephone number, interests, etc.) for processing that we need in order to be able to process your request. We store and process this data. We do not pass it on to third parties.

This does not apply to companies that act as processors on our behalf and with whom we have entered into an agreement that they will handle your data with the same legally prescribed duty of care as we do. The companies are listed below in this privacy policy.


Cookies

Our website uses cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause any damage.

We need cookies to make our website user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognize your browser on your next visit. If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases.

If you do not allow cookies, not all functions of our website may be available.


Web analysis – Google Analytics

We use Google Analytics on our website to analyze and improve the use of our website.
Google Analytics is a web analytics service provided by Google Inc. Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

The legal basis for the processing of data with the help of Google Analytics is Art. 6 para. 1 lit. f GDPR. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

We have concluded a corresponding contract with the provider for order processing.
You can prevent this by setting up your browser so that no cookies are stored. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent. You can also prevent the data generated by cookies and relating to your use of the website (including your IP address) from being passed on to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

We use Google Analytics with the extension “_anonymizeIp()”. This shortens the IP addresses (so-called IP masking). A reference to specific persons can thus be excluded. Google participates in the EU-US Privacy Shield, www.privacyshield.gov exceptional cases in which Google processes personal data /EU-US framework. This means that there is also an adequate level of data protection in the USA.

Information about Google: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001
Further information on Google’s terms of use:
www.google.com/analytics/terms/de.html
More information about Google’s privacy policy:
www.google.com/intl/de/analytics/privacyoverview.html


Google Adwords conversion tracking

We use Google Adwords to show you advertisements on Google and other third-party websites. We use conversion tracking to determine the effectiveness of individual advertising measures with the purpose of showing you advertising that is of interest to you and to make our website more interesting for you. The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR.
The advertising is delivered by Google via “Ad Server”. For this purpose, we use cookies that can be used to measure certain parameters to determine success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies generally lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Adwords customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s servers. We have no influence on the scope and further use of the data collected by Google and inform you according to our level of knowledge: Through the integration of AdWords conversion tracking, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible for the provider to find out and store your IP address.
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://www.google.com/settings/ads/plugin

Further information on data protection at Google can be found here:
www.google.com/intl/de/policies/privacy
https://www.google.com/about/products/


Google Adwords Remarketing

We use Google Adwords Remarketing. This application allows us to show you advertisements on other websites after you have visited our website. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your usage behavior when you visit various websites. This enables Google to determine your previous visit to our website. According to its own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymization is used in remarketing.


Google Maps

This website accesses the Google Maps service. This enables us to show you interactive maps directly on our website and allows you to use the map function conveniently. By using Google Maps, data is transmitted to Google in the USA, including your IP address.
You can prevent the transmission of data to Google by deactivating JavaScript in your browser settings. In this case, the services of Google Maps will also not be available to you
The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR. Google participates in the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework
Information about Google:
Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA
More information on Google’s terms of use:
www.google.com/analytics/terms/de.html
More information about Google’s privacy policy:
www.google.com/intl/de/analytics/privacyoverview.html
More information on the terms of use of Google Maps:
www.google.com/intl/de_US/help/terms_maps.html


Social media plugins

We use the following social media plugins on our website: Facebook, Instagram. You can recognize them by the special icons or terms such as “Like”, “Gefällt mir” etc. for social media channels. Personal data is transmitted to the respective plug-in provider and stored there.

The respective plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. We offer you the opportunity to interact with the social networks and other users via the plug-ins so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 lit. f GDPR.

Data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider. In the case of US providers, data is transmitted in the USA; these providers have submitted to the EU-US Privacy Shield:
www.privacyshield.gov/EU-US-Framework

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the privacy policies of these providers. There you will also find further information on your rights and options for changing settings to protect your privacy:
Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA
www.facebook.com/policy.php


Storage duration

We only process and store your data for as long as is necessary for processing or to comply with legal obligations. Once the purpose of processing no longer applies, your data will be blocked or deleted. If there are additional legal obligations for storage, we will block or delete your data when the legal storage periods expire.


Our measures to protect your personal rights

As mentioned at the beginning, we take the protection of your personal data very seriously and use it exclusively to stay in contact with you, to optimize our service and to tailor it to your wishes and needs.
We take appropriate measures to prevent unauthorized access to the stored data, theft, disclosure, modification or destruction.
Our employees are trained accordingly and are obliged to maintain confidentiality and use your data in accordance with the law.

With service providers to whom we disclose personal data for communication purposes (newsletters, mailings, etc.) or for commercial purposes (bookkeeping, accounting, booking route, data management systems, etc.), we have concluded agreements to protect the confidentiality of your personal data. Agreements concluded for order processing
Our website contains links to third-party websites. We are not responsible for the compliance of these providers with the provisions of the GDPR. We therefore recommend that you also enquire about the privacy policy of these companies.


Your rights

In particular, the GDPR grants you the right of access to your personal data (whether and which data we store, processing purposes, duration of storage), the right to rectification and completion, the right to erasure, the right to restriction of processing, the right to data portability, the right to object and the right to withdraw consent under data protection law.

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If you wish to exercise this right of confirmation, you can contact our data protection officer at any time.
You have the right to receive information from us free of charge at any time about the personal data stored about you. Furthermore, the European legislator has granted you the right to obtain information about the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations, where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases where the processing is based on automated decision-making, the significance and envisaged consequences of such processing for the data subject. and 4 GDPR and – at least in these cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you. If the personal data was not collected from you, you have the right to access all available information about the origin of the data.
You also have the right to know whether personal data has been transferred to a third country or to an international organization. If this is the case, you also have the right to obtain information about the appropriate safeguards in connection with the transfer.
You have the right to demand the immediate correction of incorrect personal data concerning you.
You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the following grounds applies and insofar as the processing is not necessary

  • The personal data were collected or otherwise processed for purposes for which they are no longer necessary.
  • The data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) GDPR, or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
  • The data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) GDPR.
  • The personal data was processed unlawfully.
  • The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
  • The personal data was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.

If one of the above-mentioned reasons applies and you wish to have personal data stored by us deleted, you can contact our data protection officer at any time. Our data protection officer or an employee appointed by him will ensure that the request for deletion is complied with immediately.

If we have made the personal data public and our company is obliged to erase the personal data in accordance with Art. 17 (1) GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data that you have requested the erasure of all links to your personal data or of copies or replications of your personal data from these other data controllers, unless the processing is necessary. Our data protection officer or an employee appointed by him will take the necessary steps in individual cases.

You have the right to obtain from us restriction of processing where one of the following applies:

  • The accuracy of the personal data is contested by you, for a period enabling us as the controller to verify the accuracy of the personal data.
  • The processing is unlawful, you oppose the erasure of the personal data and request the restriction of the use of the personal data instead.
  • We as the controller no longer need the personal data for the purposes of the processing, but you as the data subject require them for the establishment, exercise or defense of legal claims.
  • You have objected to processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether our legitimate grounds override yours as the data subject.

If one of the above conditions is met and you wish to request the restriction of personal data stored by us, you can contact our data protection officer at any time. Our data protection officer or an employee appointed by him will arrange for the restriction of processing.

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us as the controller to whom the personal data has been provided, provided that the processing is based on consent pursuant to Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 letter a GDPR or on a contract pursuant to Art. 6 para. 1 letter b GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as the controller.

Furthermore, in exercising your right to data portability pursuant to Art. 20 (1) GDPR, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

To assert the right to data portability, you can contact our data protection officer at any time.

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.

If you have any questions about this statement or the processing of your personal data by our company, please contact us by e-mail at urlaub@hotel-bergzeit.at

If you make a booking or purchase with us, send us an inquiry or request information or brochures, we process your personal data in accordance with Art. 6 para. 1 sentence 1 lit. b, f. GDPR.

Innsbruck, on 31.08.2018

ADDITIVE+ LANDINGPAGE – Online marketing and landing pages

In addition to our website, we also operate optimized sales landing pages in the area of online hotel marketing. We use common cloud services and CRM systems as well as software from ADDITIVE GmbH, 39011 Lana (BZ), Italy (“ADDITIVE”), our hotel marketing agency, to process your inquiry, booking, order, activation, registration or other transmission of a form on such a landing page and to store and save your data. The appropriate level of data protection results from the order processing agreements concluded with the respective companies.

Our landing pages use functions of the web analysis service Google Analytics from Google Inc (“Google”). Google Analytics makes it possible to analyze the use of the website by its users. The information generated about your user behavior is transferred to the provider’s server and stored there.

Your IP address is recorded but immediately anonymized (e.g. by deleting the last 8 bits). This means that only a rough localization is possible.

You can prevent the transfer of data relating to your use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:

https://chrome.google.com/webstore/detail/google-analytics-opt-out/fllaojicojecljbmefodhfapmkghcbnh

ADDITIVE has insight into the data collected by Google Analytics. This data is not used for purposes other than analyzing the use of our websites and evaluating our marketing and sales measures.

Our websites and landing pages also use ADDITIVE functions for cross-channel recording of the use of our websites as well as marketing and sales measures such as landing pages, newsletters and social media presences. Information about your visits and submitted forms on our websites is also transmitted to ADDITIVE in order to evaluate and optimize our marketing and sales measures.

Data processing is carried out on the basis of the legal provisions of Art. 6 para. 1 lit f (legitimate interest) of the GDPR.

Our concern within the meaning of the GDPR (legitimate interest) is the improvement of our offer and our website by analyzing the use of our website as well as sales and marketing measures.

In addition, our landing pages and our website use remarketing functions of Google Inc (“Google”) and Meta Platforms Inc (“Meta”). Meta and Google are informed that you have visited this website. These functions are used to present interest-based advertisements to visitors to the landing pages in Google’s advertising network or on the social network Facebook and Instagram.

Data processing in connection with these remarketing functions is carried out on the basis of the legal provisions of Art. 6 para. 1 lit a (consent) of the GDPR.

When you visit our landing pages, a banner will inform you about the use of cookies for these remarketing functions. You only consent to the use of cookies by clicking on the corresponding button. You can revoke your consent at any time by calling up the page with the cookie information on the respective landing page and rejecting the use of cookies in the banner that appears.

ADDITIVE+ MARKETING AUTOMATION – Direct marketing

We use hotel marketing automation software from ADDITIVE GmbH, 39011 Lana (BZ), Italy (“ADDITIVE”) in the area of marketing and sales automation for hotels to increase customer loyalty and to sell services and additional services. Data that we collect and process in connection with your inquiry, booking, order, activation, registration or other transmission of a form on the website is analyzed and used to automatically provide you with offers for services and additional services via ADDITIVE+ MARKETING AUTOMATION. The appropriate level of data protection results from the concluded order processing agreement.

You can object to the use of your data for this purpose at any time via the unsubscribe link in the respective message.

Data processing is carried out on the basis of the legal provisions of Art. 6 para. 1 lit f (legitimate interest) of the GDPR.

Our concern within the meaning of the GDPR (legitimate interest) is to avoid disadvantages compared to our competitors, to improve our brand awareness and to maximize our economic success through the best possible sales use of the contacts gained.

ADDITIVE+ VOUCHERS

You have the option of purchasing vouchers via our website using an online voucher system. We use the voucher software of ADDITIVE GmbH, 39011 Lana (BZ), Italy (“ADDITIVE”) to process your purchase and to store and save your data in the area of voucher marketing tourism. Your data is processed and stored within the EU/EEA.

The data you provide is required to fulfill the contract or to carry out pre-contractual measures. We cannot conclude the contract with you without this data. Data will not be transferred to third parties, with the exception of the transfer of credit card data to the payment service provider for the purpose of debiting the purchase price and to our tax advisor to fulfill our tax obligations.

Data processing is carried out on the basis of the legal provisions of Art. 6 para. 1 lit. b (necessary for contract fulfillment) of the GDPR.