Privacy policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Dr. Wolfgang Neuser
Berwang 171
6622 Berwang, Austria
Email: info@holzhaus171.at
Phone: +49 1525 6147959

We have not appointed a data protection officer, as we are not required to do so.

2. In brief

This website is intentionally simple. It uses no cookies, no analytics or tracking tools, no third-party content (including no externally loaded fonts, maps or videos) and no contact form. When you visit, only the technical data needed to deliver the pages is processed (see section 3).

3. Hosting and server logs

This website is managed and hosted on our behalf by Wechner Digital, Manuel Wechner, Mitteregg 5, 6622 Berwang, Austria. Wechner Digital uses Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA ("Netlify") as a sub-processor. When you access the site, technically necessary connection data is processed, in particular your IP address, the date and time of the request, the requested address (URL), the request method and status code, information about your browser and operating system (user agent) and a technical request ID.

Purpose: delivering the website reliably, quickly and securely, including detecting and preventing malfunctions and attacks.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of the website.

Retention: The logs are stored by Netlify. According to Netlify, logs of its systems are kept online for 90 days and offline for up to one year. We do not analyse this data ourselves or combine it with other data.

Processors: We have a data processing agreement with Wechner Digital under Art. 28 GDPR. Wechner Digital has contractually imposed the same data protection obligations on Netlify (Netlify Data Processing Agreement).

Transfer to the USA: Netlify may process data in the United States. Netlify states that it is certified under the EU-U.S. Data Privacy Framework. For certified companies, the European Commission has found an adequate level of protection (Art. 45 GDPR). Should that basis cease to apply, the European Commission's Standard Contractual Clauses agreed with Netlify apply (Art. 46(2)(c) GDPR). You can view the certification at www.dataprivacyframework.gov; a copy of the Standard Contractual Clauses is available on request at info@holzhaus171.at.

For visitors from Switzerland: Data is disclosed to the USA. The basis is the standard data protection clauses Netlify has agreed for data from Switzerland or, where Netlify is certified under the Swiss-U.S. Data Privacy Framework, that certification.

4. Contact by email or phone

If you contact us by email or phone, we process the information you give us, such as your name, contact details, preferred travel dates and your message, solely to answer your enquiry.

Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a stay with us. Otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering your enquiry.

Retention: We delete your enquiry once it has been dealt with and no further communication is expected. If a booking results, we keep the records for as long as the law requires (for example seven years under tax law).

Direct booking by email: If you book directly with us, we process your details to perform the contract (Art. 6(1)(b) GDPR) and to meet legal obligations such as guest registration under the Austrian Registration Act and the local tourist tax (Art. 6(1)(c) GDPR). We transmit the data required for this to the competent bodies: the guest registration form to the Municipality of Berwang as the registration authority (Austrian Registration Act), and the tourist tax details to the Tiroler Zugspitz Arena Tourist Board (Tyrolean Tourist Tax Act).

The phone and email links only open your own phone or email app. The website itself stores nothing.

Emails sent to info@holzhaus171.at are stored by our email provider IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The provider processes the messages on our behalf. The mailbox contract is held by Dr. Wolfgang Neuser. Emails are not forwarded to any other address or provider. IONOS is based in the EU; no data is transferred to a third country.

5. Booking via “booking & more / Tiroler Zugspitz Arena Tourist Board”

For online bookings, we link to the booking platform “booking & more” of the Tiroler Zugspitz Arena Tourist Board. When you click the link, you leave our website. The booking page's own privacy notice explains which data is processed there. After a booking, we receive your booking data and process it to perform the contract (Art. 6(1)(b) GDPR). We also use it to meet legal obligations such as guest registration under the Austrian Registration Act and the local tourist tax (Art. 6(1)(c) GDPR). We transmit the data required for this to the competent bodies: the guest registration form to the Municipality of Berwang as the registration authority (Austrian Registration Act), and the tourist tax details to the Tiroler Zugspitz Arena Tourist Board (Tyrolean Tourist Tax Act).

6. Link to Google Maps

For directions, we link to Google Maps. The map is not embedded in our site. Google Maps is only opened when you click the link, and Google's privacy policy then applies (for users in the EEA: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

7. No cookies, no tracking, no third-party content

This website does not set cookies or store any other information on your device. We use no analytics, advertising or tracking services. All fonts and images are served from our own web space, and no connections to third-party servers are made when the page loads. Consent is therefore not required.

8. Obligation to provide data; automated decisions

For a booking, we need the details required for the contract and for the statutory guest registration; without them we cannot accept the booking. Beyond that, you are under no obligation to provide data. Without the technical connection data (section 3), however, the website cannot be displayed. We do not use automated decision-making, including profiling.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of legitimate interests, you may object on grounds relating to your particular situation (Art. 21 GDPR). Just write to info@holzhaus171.at.

10. Right to lodge a complaint

If you believe that we are not processing your data lawfully, you may lodge a complaint with a data protection supervisory authority. In Austria this is the Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40–42, 1030 Vienna, Austria, phone +43 1 52 152-0, email dsb@dsb.gv.at, www.dsb.gv.at.

11. Changes

We will update this policy if the website or the law changes. The version published here applies.