Data Protection & Cookies
The controller for the processing of your personal data on our website is Das kleine Berghotel. You can find our details in the Legal Notice.
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
TLS encryption
We use HTTPS (Hypertext Transfer Protocol Secure) to transmit data securely over the internet. This means that the complete transmission of all data from your browser to our web server is secured – no one can „listen in“.
Biscuits
Our website uses HTTP cookies to store user-specific data. Below, we explain what cookies are and why they are used so that you can better understand the following privacy policy. Whenever you surf the internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.
This is what cookie data can look like, for example:
Name: _ga
Value: GA1.2.1326744211.152113235519-9
Purpose: Segmentation of website visitors
Expiry date: after 2 years
A browser should be able to support these minimum sizes:
- At least 4096 bytes per cookie
- At least 50 cookies per domain
- At least 3,000 cookies in total
Purpose of processing via cookies
The purpose ultimately depends on the specific cookie. You can find further details below or by contacting the manufacturer of the software that sets the cookie.
What data is processed?
Cookies are small helpers for many different tasks. It is unfortunately not possible to generalise which data is stored in cookies, but we will inform you about the processed or stored data within the scope of the following privacy policy.
How long cookies are stored for
The duration for which cookies are stored depends on the specific cookie and is set out in more detail below. Some cookies are deleted after less than an hour, whilst others may remain stored on a computer for several years.
You also have control over how long cookies are stored. You can manually delete all cookies at any time via your browser (see also “Right to object” below). Furthermore, cookies based on consent will be deleted at the latest upon withdrawal of your consent, whilst the lawfulness of their storage up to that point remains unaffected.
Formulation
What data is processed?
At this stage, we can only outline the exact data that is stored in terms of categories. This is because it always depends on the services you receive from us. In some cases, you simply provide us with your email address so that we can, for example, get in touch with you or answer your questions. In other cases, you purchase a product or service from us, and for this we require significantly more information, such as your contact details and personal data.
Here is a list of potential data that we receive and process from you:
- Name
- Contact details
- Email address
- Phone number
- Date of birth
You have the right to access, rectify, erase, restrict processing and data portability of your personal data, as well as the right to lodge a complaint with the supervisory authority (Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, ).
Google Site Kit and Google Analytics
Google Site Kit Privacy Policy
We have integrated the WordPress plugin Google Site Kit, provided by the American company Google Inc., into our website. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services. Google Site Kit allows us to quickly and easily view statistics originating from various Google products, such as Google Analytics, directly in our WordPress dashboard. The tool, or rather the tools integrated into Google Site Kit, also collects personal data from you, among other things. In this privacy policy, we explain why we use Google Site Kit, how long and where data is stored, and which further privacy texts are relevant to you in this context.
What is Google Site Kit?
Google Site Kit is a plugin for the WordPress content management system. This plugin allows us to view important website analytics statistics directly in our dashboard. These are statistics collected by other Google products, most notably Google Analytics. In addition to Google Analytics, the Google Search Console, PageSpeed Insights, Google AdSense, Google Optimize and Google Tag Manager services can also be linked using Google Site Kit.
Why do we use Google Site Kit on our website?
As a service provider, our job is to offer you the best possible experience on our website. You should feel comfortable on our website and quickly and easily find exactly what you are looking for. Statistical evaluations help us to get to know you better and to tailor our range of services to your wishes and interests. We use various Google tools for these evaluations. Site Kit makes our work much easier in this regard because we can view and analyse the statistics of the Google products directly in the dashboard. This means we no longer have to log in separately for each individual tool. Site Kit therefore always provides a good overview of the most important analytical data.
What data is stored by Google Site Kit?
If you have actively consented to tracking tools in the cookie notice (also known as a script or banner), Google products such as Google Analytics will set cookies and data about you, such as your user behaviour, will be sent to Google, where it is stored and processed. This also includes the storage of personal data such as your IP address.
For more detailed information on the individual services, we have dedicated sections in this privacy policy. For example, please see our privacy policy for Google Analytics. Here, we go into great detail about the data collected. You will find out how long Google Analytics stores, manages and processes data, which cookies may be used and how you can prevent data storage. Likewise, we also have separate privacy policies with comprehensive information for other Google services such as Google Tag Manager and Google AdSense.
Below we show you exemplary Google Analytics cookies that can be set in your browser, provided you have generally consented to data processing by Google. Please note that these cookies are merely a selection:
Name: _ga
Value:2.1326744211.152121420302-2
Purpose: By default, analytics.js uses the _ga cookie to store the user ID. Basically, it is used to distinguish website visitors.
Expiry date: after 2 years
Name: _gid
Value:2.1687193234.152121420302-7
Purpose: This cookie is also used to distinguish between website visitors.
Expiry date: after 24 hours
Name: _gat_gtag_UA_ Value: 1
Purpose: This cookie is used to throttle the request rate.
Expiry date: after 1 minute
How long and where is the data stored?
Google stores the data it collects on its own servers, which are located around the world. Most of the servers are in the United States, so it is quite possible that your data will also be stored there. On https://www.google.com/about/datacenters/inside/locations/?hl=de see exactly where the company deploys servers.
Data collected by Google Analytics is retained for 26 months as standard. Your user data will then be deleted. This retention period applies to all data linked to cookies, user identification and advertising IDs.
How can I delete my data or prevent data storage?
You always have the right to obtain information about your data, and to have your data deleted, corrected, or restricted. You can also deactivate, delete, or manage cookies in your browser at any time. Here we show you the corresponding instructions for the most common browsers:
Chrome: Delete, enable and manage cookies in Chrome
Safari: Managing cookies and website data with Safari
Firefox: clear cookies to remove data that websites have stored on your computer
Internet Explorer: Deleting and Managing Cookies
Microsoft Edge: Delete and manage cookies
Google is an active participant in the EU-U.S. Privacy Shield Framework, which governs the correct and secure transfer of personal data. You can find more information about this at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&tid=121420302. To find out more about data processing by Google, we recommend Google's comprehensive privacy policy at https://policies.google.com/privacy?hl=de.
Legal basis
The use of Google Site Kit requires your consent, which we have obtained through our cookie popup. According to Art. 6(1)(a) GDPR (consent) the legal basis for the processing of personal data, as can occur during collection by web analytics tools, sets out.
In addition to consent, we have a legitimate interest in analysing the behaviour of website visitors in order to improve our offering both technically and commercially. With the help of Google Site Kit, we detect website errors, can identify attacks and improve economic efficiency. The legal basis for this is Article 6(1)(f) GDPR (Legitimate interests). Nevertheless, we only use Google Site Kit provided you have given your consent.
Google also processes data from you in the USA, amongst other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
In addition, Google uses so-called standard contractual clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are template documents provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the standard contractual clauses, Google undertakes to maintain the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision by the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
The Google Ads Data Processing Terms, which refer to the Standard Contractual Clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.
To find out more about how Google processes data, we recommend that you read Google’s comprehensive privacy policy at https://policies.google.com/privacy?hl=de.
Google Customer Reviews privacy policy
We also use the Google Customer Reviews evaluation platform for our website. The service provider is the American company Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services.
Google also processes data from you in the USA, amongst other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
WP Statistics
We use the analytics plugin WP Statistics on our website. This plugin was developed by Veronalabs (5460 W Main St, Verona, NY 13478, United States), an American software company. This plugin provides us with simple statistics on how you, as a user, make use of our website. In this privacy policy, we go into more detail about the analytics tool and show you which data is stored where and for how long.
What data is stored by WP Statistics?
WP Statistics does not set cookies and the data collected is only used to generate anonymised statistics about the use of our website. WP Statistics also anonymises your IP address. You as an individual cannot be identified.
WP Statistics collects visitor data (known as visitor data) when your web browser connects to our web server. This data is stored in our database on our server. This includes, for example:
- the URL of the requested web page
- Browser and browser version
- the operating system used
- the URL of the previously visited page (referrer URL)
- the hostname and IP address of the accessing device
- Date and time
- Information on country/city
- Number of visitors coming from a search engine
- Duration of website visit
- Website clicks
Further third parties
We use easybooking on our website, an online booking system for accommodation providers. The service provider is the Austrian company zadego GmbH (easybooking), Sparkassenplatz 2, 6020 Innsbruck, Austria.
Your Rights
You have the right to access, rectify, erase and restrict the processing of personal data, as well as the right to data portability.
You have the right to withdraw any consent you may have given to the processing of your personal data. The law.
You have the right to object to the processing of your personal data for the purpose of direct marketing. In the event of an objection, your personal data will no longer be processed for the purpose of direct marketing.
Furthermore, you have the right to lodge a complaint with the supervisory authority (Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, ).
All texts are protected by copyright.
Source: created with AdSimple Free privacy policy generator for Austria (GDPR)