This is a translation for your convenience. In case of doubt, the German version shall prevail.

1. Controller

Pension Edelweiss
Bettina Harasser
Dorf 99, 6306 Söll, Austria
Phone: +43 660 13 111 82
E-mail: infoedelweiss-soell.at

We process personal data exclusively on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).

2. Hosting and server logs

Our website is operated by a hosting provider with servers in Germany acting on our behalf (processor pursuant to Art. 28 GDPR). When you access the website, the following data is processed in server logs for technical reasons: IP address, date and time of access, requested address, amount of data transferred, referrer URL and browser/operating system information. This data is used solely to operate the website securely and reliably (e.g. to fend off attacks) and is not combined with other data. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Logs are deleted automatically after a short period unless they are needed to investigate a security incident.

Our website is transmitted exclusively in encrypted form (HTTPS). Fonts and icons are loaded directly from our own server – there is no connection to Google or other providers for this.

3. Cookies, local storage and consent management

We do not set any tracking cookies ourselves. The only technically necessary storage is your privacy choice in your browser’s local storage (entry “ew-consent”, retention 12 months). The legal basis is § 165(3) TKG 2021 and Art. 6(1)(c) and (f) GDPR.

All non-essential services (statistics and external content) are only loaded after you have agreed via our consent banner (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). Your consent is voluntary and can be changed or withdrawn at any time with effect for the future via the “Cookie settings” link in the footer of every page.

4. Contacting us (e-mail, phone, contact form, WhatsApp)

If you contact us by e-mail, phone or via the contact form, we process the information you provide (e.g. name, e-mail address, message) to handle your enquiry and any follow-up questions. The legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). The data is deleted six months after your enquiry has been completed unless statutory retention obligations apply. To prevent abuse, the contact form stores a non-reversible hash of your IP address for a maximum of one hour.

The WhatsApp button takes you to WhatsApp (WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). Data is only transferred when you click the button. WhatsApp’s privacy policy applies to its processing.

5. Online booking

Our booking page includes the booking widget of the Wilder Kaiser tourism association (partner.wilderkaiser.info). It is only loaded on the booking page and is technically necessary for the online booking you request (Art. 6(1)(b) GDPR, § 165(3) TKG 2021). Your IP address is transmitted to the provider in the process. The data entered during booking is processed to handle your booking. Further information can be found in the privacy policy of the Wilder Kaiser tourism association at wilderkaiser.info.

We process data from bookings and stays (e.g. name, address, length of stay, billing data) to perform the contract (Art. 6(1)(b) GDPR) and to comply with legal obligations (Art. 6(1)(c) GDPR), for example under the Austrian Registration Act, the Tyrolean tourist tax legislation and tax retention obligations (generally 7 years, § 132 BAO). To issue the guest card (Wilder Kaiser Card), the required registration data is transmitted to the Wilder Kaiser tourism association.

6. External content (only with your consent)

The following content is only displayed once you have consented to the “External media” category or the individual service, or have explicitly requested it via “Load content”. When it is loaded, your IP address is transmitted to the respective provider, which may also use cookies or similar technologies.

• Google Maps (map display) and YouTube (“Wilder Kaiser” live stream, privacy-enhanced mode) – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

• Instagram feed via the LightWidget service (lightwidget.com); the images are loaded from Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

• Google reviews via the Elfsight service (Elfsight LLC, USA).

• TrustYou review seal – TrustYou GmbH, Munich, Germany.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). Some providers also process data in the USA. Where a provider is certified under the EU-US Data Privacy Framework, the transfer is based on the European Commission’s adequacy decision; otherwise it is based on your explicit consent (Art. 49(1)(a) GDPR). In the USA there is a risk that authorities may access the data and that only limited legal remedies are available to you.

7. Web analytics with Google Analytics 4 (only with your consent)

If you consent to the “Statistics” category, we use Google Analytics 4 by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to analyse and improve the use of our website. Cookies (_ga, _ga_*, stored for up to 2 years) are set and usage data such as pages viewed, time spent, device and browser information and approximate origin (country/region) are processed. Google Analytics 4 does not store IP addresses. Advertising features and Google Signals are disabled. Data may be transferred to the USA (Google is certified under the EU-US Data Privacy Framework). We have concluded a data processing agreement with Google. The data is deleted after the configured retention period (maximum 14 months). The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021), which you can withdraw at any time via “Cookie settings”.

8. Links to social networks

Our website contains simple links to Facebook and Instagram. No plug-ins of these networks are embedded; data is only transferred when you click a link and visit the respective network.

9. Your rights

You generally have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent you have given at any time with effect for the future. Simply contact us using the details above.

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

Last updated: September 2026