Legal matters

Privacy policy

1. Controller

AlpenPura GmbH
Wagnermühle 143/Top 3
5310 Sankt Lorenz
Austria
E-mail: info@alpenpura.com
Phone: +43 664 926 03 43

We operate our holiday chalets under the brand AlpenPura Boutique Chalets, Trattenbach 299, 5741 Neukirchen am Großvenediger.

2. General information

We process personal data in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). Below we explain which data we process, for which purposes and on which legal basis.

3. Hosting of the website

Our website is delivered via Cloudflare Pages of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the website, Cloudflare processes technically necessary data (IP address, date and time, page requested, browser and operating system) to deliver the website and protect it against attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework.

4. Contact and enquiries

If you contact us by e-mail, phone or via the enquiry form, we process your details (e.g. name, e-mail address, phone number, travel dates, number of guests, message) to answer your enquiry and prepare an offer. The legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR) or our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR).

5. Bookings via EasyBooking

For online bookings and enquiries we use the EasyBooking booking system of Bergstation GmbH (easy-booking.at) as a processor. Your booking data (e.g. name, address, contact details, travel dates, number of guests, payment details) is processed there. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal obligations, such as guest registration under the Austrian Registration Act and tax retention duties (Art. 6(1)(c) GDPR). More information: EasyBooking privacy policy.

6. Cookies and consent

We only use statistics and marketing services if you have given your consent in the cookie banner (Section 165(3) TKG 2021, Art. 6(1)(a) GDPR). We store your choice in your browser's local storage. You can withdraw your consent at any time with effect for the future via the “Cookie settings” link at the bottom of every page. An overview of all cookies can be found in our cookie policy.

7. Google Tag Manager

We use Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Tag Manager is a tool for managing website tags; the statistics and marketing services integrated through it only use cookies with your consent. Tag Manager itself does not set cookies, but processes your IP address when it loads. The legal basis is our legitimate interest in a secure and consent-compliant integration of these services (Art. 6(1)(f) GDPR).

8. Google Analytics 4

With your consent we use Google Analytics 4 (provider: Google) to understand how our website is used and to improve it. In particular, a random identifier, pages viewed, time spent, interactions (e.g. clicks on “Book”), device and browser information and your approximate location (country, region) are processed. Google Analytics 4 does not store full IP addresses. Without your consent, Google Analytics only sends cookieless signals without an identifier (consent mode, see cookie policy).

The legal basis is your consent (Art. 6(1)(a) GDPR). Analytics data is stored for a maximum of 14 months. More information: Google privacy policy.

9. Google Ads

With your consent we use Google Ads (provider: Google) to measure the success of our ads (conversion tracking, e.g. whether a booking or enquiry followed an ad click) and to show relevant ads on Google and partner sites to people who have visited our website (remarketing). A click or device identifier, information about the pages viewed and conversion events are processed. The legal basis is your consent (Art. 6(1)(a) GDPR).

10. Meta Pixel

With your consent we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). It allows us to measure the effect of our advertising on Facebook and Instagram and to show relevant ads there to visitors of our website. In particular, your IP address, browser and device information, the pages viewed, events such as booking or enquiry clicks and cookie identifiers are processed. If your browser is linked to a Facebook or Instagram account, Meta may associate the data with that account.

We are jointly responsible with Meta for the collection and transmission of the data to Meta (Art. 26 GDPR); the details are set out in the Meta Controller Addendum. Meta alone is responsible for any further processing: Meta privacy policy. The legal basis is your consent (Art. 6(1)(a) GDPR). Without your consent, the Meta Pixel is not loaded.

11. Google Maps

On the home page we embed a Google Maps map so that you can see our location, and we display guest reviews from Google Maps (provider: Google). Your IP address is transmitted to Google, and Google may set its own cookies. The legal basis is our legitimate interest in presenting our accommodation in a way that is easy to find (Art. 6(1)(f) GDPR).

12. Google Hosted Libraries

We load the jQuery JavaScript library required for the booking form from Google servers (ajax.googleapis.com). Your IP address is transmitted to Google. The legal basis is our legitimate interest in a working booking form (Art. 6(1)(f) GDPR).

13. Transfers to third countries

Google, Meta and Cloudflare may also process data in the USA. For the USA there is an adequacy decision of the European Commission (EU-US Data Privacy Framework); Google LLC, Meta Platforms, Inc. and Cloudflare, Inc. are certified under it. In addition, these providers use the European Commission's standard contractual clauses.

14. Recipients

We do not sell your data. Depending on the purpose, recipients are exclusively:

15. Retention period

We only store personal data for as long as is necessary for the respective purpose. Due to legal obligations, we generally keep booking and invoice data for seven years (Section 132 of the Austrian Federal Fiscal Code, BAO). Enquiries that do not lead to a booking are deleted as soon as they are no longer needed. Cookie retention periods can be found in the cookie policy.

16. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. You can withdraw any consent you have given at any time with effect for the future. Please contact info@alpenpura.com.

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).

17. Links to external websites and social networks

Our website contains links to external websites (e.g. Hohe Tauern National Park, Wildkogel-Arena) and to our profiles on Facebook, Instagram and YouTube. These are simple links without embedded plugins; data is only transmitted when you click a link. The operators of those websites are responsible for the data processing there.

18. Changes to this policy

We will update this privacy policy if our data processing or the legal situation changes. The current version is always available on this page.

Last updated: October 2026