Controller
Berghotel Presslauer GmbH
Kreuth 18
9631 Kreuth ob Rattendorf, Austria
E-mail: mail@berghotel-presslauer.at
Phone: +43 4285 209
VAT ID: ATU58020616
No data protection officer has been appointed, as this is not required by law.
General information
The protection and security of your personal data are important to us. This website therefore stores and processes data exclusively in accordance with the Austrian and European General Data Protection Regulation (GDPR). As a user, you consent to data processing as described in this policy. The current version of the GDPR is available at eur-lex.europa.eu
This privacy policy applies only to this website. If links on our pages take you to other websites, please refer to those websites directly for information on how they handle your data. We process your personal data (e.g. title, name, address, e-mail address, phone number, bank details, credit card number) only in accordance with Austrian data protection law. The following provisions inform you about the nature, scope and purpose of the collection, processing and use of personal data.
As a rule, you can use this website without providing any personal data. Where personal data (for example name, address or e-mail addresses) is collected on our pages, this is always done on a voluntary basis as far as possible. We only pass this data on to third parties if you have consented, if it is necessary to process your enquiry or booking, or if we are legally obliged to do so. Our processors, the hosting provider CS4Web KG with the data centre ALL-INKL and asut computer- und rechenzentrum gmbh for the AIDA booking software, process data only on our behalf. Which providers receive data when you visit the website, for example Google after your consent, is described under “Services and service providers used”.
Please note that data transmission over the internet (e.g. when communicating by e-mail or via unencrypted websites) may have security gaps. Complete protection of data against access by third parties is not possible.
When you place an order via our website, the data you submit or enter is checked manually or automatically against our existing records for validity and accuracy and, where necessary, matched in order to correct the data we hold. For this purpose, our staff may need to contact you by e-mail or phone. The data you enter is used exclusively to process your order or registration; we only pass it on to third parties in the cases mentioned above.
Your rights
Under the EU General Data Protection Regulation, you have extensive rights as a data subject. These rights are intended above all to ensure greater transparency regarding your data. Your rights as a data subject are the right of access to the personal data concerning you, the right to rectification, erasure, restriction of processing, the right to object to processing (direct marketing), the right to data portability (only where there is a contractual relationship or consent) and the right to withdraw your consent at any time.
You can exercise all of these rights by sending an e-mail to mail@berghotel-presslauer.at, by contacting us in person (e.g. by phone or on site) or by writing to us by post.
You also have the right to lodge a complaint with the data protection authority at any time regarding the processing of your personal data. The contact details of the data protection authority are:
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40-42
1030 Vienna, Austria
Phone: +43 1 521 52-25 69
E-mail: dsb@dsb.gv.at
Deletion of data
Your data will be deleted as soon as the respective contract with you has been fulfilled and there is no longer any legal obligation to store it. As a rule, your data is therefore deleted after seven years, the retention period under Section 132 of the Austrian Federal Fiscal Code (BAO).
Statutory or legal retention obligations or contractual obligations, e.g. towards customers arising from warranty or damages claims or towards contractual partners, are a basis for continuing to store personal data (Art. 6(1)(c) GDPR – legal basis for processing: legal obligation).
Links
We check links leading away from our website very carefully. Nevertheless, we accept no responsibility or liability for the content of websites linked from this website or from any other website.
Contact form
If you send us enquiries via a contact form, the information from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing your enquiry and in case of follow-up questions. We only pass this data on to third parties in the cases described under “General information”.
Enquiry form “Non-binding enquiry”
Our enquiry form lets you ask us about availability and prices without obligation. We process the information you enter: your preferred dates or travel months, the number of adults and children with their ages, accommodation, board, special requests and your message, as well as your title, name, e-mail address, phone number and postal address.
When you submit the form, your enquiry is sent to us by e-mail (mail@berghotel-presslauer.at), and you receive a confirmation at the e-mail address you entered. The website itself does not store enquiries in a database. The e-mails are sent via the server of our web host (see “Hosting and e-mail delivery”).
We use your information to process your enquiry, prepare an offer for you and clarify any questions. The legal basis is the consent you give by ticking the box in the form (Art. 6(1)(a) GDPR) and the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR). You can withdraw your consent at any time by sending a message to mail@berghotel-presslauer.at. If a booking follows, the information under “Deletion of data” applies.
To protect against automated spam, the form contains a field that is invisible to visitors and a time stamp that checks whether a few seconds have passed between loading the page and submitting the form. No further personal data is stored for this purpose, and no external service is used.
Customer data
Without your express consent or a legal basis, your personal data will not be passed on to third parties outside the performance of the contract. Once the contract has been fully performed, your data will be blocked for further use. After the expiry of the retention periods under tax and commercial law, this data will be deleted unless you have expressly consented to its further use.
Your personal data, insofar as it is required to establish, define the content of or amend the contractual relationship (customer data), is used exclusively to perform the contract. For example, your name and address must be passed on to the supplier for the delivery of goods.
Information about cookies
There are three categories of cookies:
- strictly necessary cookies to ensure the basic functions of the website
- functional cookies to ensure the performance of the website
- targeting cookies to improve the user experience.
Some of the pages on this website use cookies. Cookies do not harm your computer and do not contain viruses. They serve to make our website more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser.
Most of the cookies we use are so-called “session cookies”. They are deleted automatically at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.
You can set your browser to inform you when cookies are set and to allow cookies only in individual cases, to exclude cookies for certain cases or in general, and to delete cookies automatically when you close the browser. If you disable cookies, the functionality of this website may be limited.
Limited functionality without cookies
If you do not allow us to use cookies at all, certain functions and pages will not work as expected.
Services and service providers used
You can find an overview of the services and service providers used here:
In detail, this website uses the following services.
Consent management (Borlabs Cookie)
We manage your consent to cookies and third-party services with the WordPress plugin Borlabs Cookie. It runs on our own server. Your choice is stored in the cookie “borlabs-cookie”, and your choice for Google services additionally in the cookie “borlabs-cookie-gcs”. Both cookies are stored for up to 365 days, or for 182 days if you only allow necessary cookies. As proof of your consent, we store a randomly generated ID, your choice, the version of the cookie settings and the time in our database.
The legal basis is our legal obligation to be able to demonstrate consent (Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR). You can change your choice at any time: Adjust cookie settings
Session cookie of our room management (MotoPress Hotel Booking)
We use the WordPress plugin MotoPress Hotel Booking to manage our rooms and holiday apartments. When you visit the website, it sets the cookie “WP_SESSION_COOKIE” containing a random session ID. The cookie expires after 30 minutes. It is processed on our server and not passed on to third parties. The legal basis is our legitimate interest in a properly functioning website (Art. 6(1)(f) GDPR).
Online booking (AIDA)
The booking form of our hotel software AIDA is embedded on our booking pages. It is loaded from the servers at www.aidabooking.net when you open the page. In the process, your IP address and technical information about your browser are transmitted. If you search and book in the booking form, your entries (for example travel dates, number of guests, name, contact details and, where applicable, payment details) are processed in the booking form and transmitted to us.
The AIDA hotel software and its booking form are provided by asut computer- und rechenzentrum gmbh, Industriestraße 9, 9800 Spittal an der Drau, Austria. It processes the booking data on our behalf under a data processing agreement (Art. 28 GDPR). Privacy information: www.asut.com/datenschutz
The booking form also loads fonts from Google Fonts. In the process, your IP address is transmitted to Google (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; privacy information: policies.google.com/privacy).
The purpose is to process your booking. The legal basis is the performance of the contract or of pre-contractual measures (Art. 6(1)(b) GDPR) and, for embedding the booking form, our legitimate interest in offering direct booking on our website (Art. 6(1)(f) GDPR).
Virtual 360° tours (vivis3d, MPskin, Matterport)
On our “360° tour” page we show virtual tours of our hotel. A tour is only loaded once you have agreed: either in the cookie settings (category “External Media”) or, after starting a tour, with the “Load tour” button, before which we inform you about the data transfer. Content is then loaded from the following providers, and your IP address, technical information about your browser and usage data (for example which rooms you view) are transmitted to them:
- vivis3d (tour at tour.vivis3d.at): CS4Web KG, Lederergasse 29, 9500 Villach, Austria; privacy information: www.vivis3d.at/datenschutz
- MPskin (display of the tour, cdn.mpskin.com and file.mpskin.com): MPskin GmbH/Srl, Bozner Str. 40, 39057 Eppan (BZ), Italy; privacy information: www.mpskin.com/en/privacy
- Matterport (3D model and usage statistics, my.matterport.com, cdn-2.matterport.com and events.matterport.com): Matterport, Inc., USA, a CoStar Group company; privacy information: www.costar.com
- Google Maps (map on the start view of the tour): Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; privacy information: policies.google.com/privacy
The providers may use cookies or similar technologies. Matterport and Google may transfer data to the USA. We are not aware of any certification of Matterport under the EU-U.S. Data Privacy Framework, so the level of data protection there may be lower. The legal basis is your consent (Art. 6(1)(a) GDPR) and, for the transfer to Matterport in the USA, Art. 49(1)(a) GDPR. You can withdraw your consent in the cookie settings at any time: Adjust cookie settings
Google Tag Manager
We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). With Tag Manager we integrate the Google Ads tag (see “Google Ads”). Tag Manager is only loaded once you have consented to the “Marketing” category. Without this consent, our website does not connect to Google. After you consent, your browser loads the files of Tag Manager and the Google Ads tag from Google servers (www.googletagmanager.com); in the process, your IP address is transmitted to Google. We pass your choice on to the Google services via Google’s consent mode so that they only operate within the scope of your consent.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 165(3) of the Austrian Telecommunications Act 2021), which you can withdraw at any time via the cookie settings.
Google Ads (conversion tracking)
We advertise on Google and use the Google Ads tag (ID AW-17593407014) to measure whether, for example, an enquiry or booking follows a click on an ad. The tag is only loaded if you have consented to the “Marketing” category. Google sets cookies for this purpose, for example “_gcl_au” with a storage period of 90 days, and may also use the data for personalised advertising. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 165(3) of the Austrian Telecommunications Act 2021), which you can withdraw at any time via the cookie settings. Google’s privacy policy: policies.google.com/privacy
Google Analytics 4
We use Google Analytics 4 (measurement ID G-D1E1WSTFBD) to analyse how our website is used, for example which pages are viewed, which steps of the enquiry form are reached and whether links for booking, calling or e-mailing are clicked. We transmit the page viewed and the language, but no form contents, phone numbers or e-mail addresses. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics is only loaded once you have consented to the “Statistics” category. Your browser then loads the program file from Google servers (www.googletagmanager.com), and Google Analytics sets the cookies “_ga” and “_ga_D1E1WSTFBD” with a storage period of two years. Without consent, no data is sent to Google Analytics. According to Google, Google Analytics does not log or store individual IP addresses, and data from users in the EU is collected via servers in the EU. We have set the retention period for event-level and user-level data to 14 months.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 165(3) of the Austrian Telecommunications Act 2021), which you can withdraw at any time via the cookie settings. Information on data protection in Google Analytics: Google Analytics Help
Data transfers to the USA
Google LLC (USA) is certified under the EU-U.S. Data Privacy Framework. Transfers to Google in the USA are therefore covered by the adequacy decision of the European Commission (Art. 45 GDPR). Information: Google’s privacy frameworks
Web analytics, monitoring and optimisation
Web analytics (also known as “reach measurement”) serves to evaluate visitor flows on our website and may include behaviour, interests or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis we can, for example, see at what times our website or its functions or content are used most frequently or invite repeat use. We can also see which areas need to be optimised.
In addition to web analytics, we may also use testing procedures, for example to test and optimise different versions of our website or its components.
For these purposes, user profiles may be created and stored in a file (a so-called “cookie”), or similar procedures with the same purpose may be used. This information may include, for example, content viewed, web pages visited and elements used there, and technical information such as the browser and computer system used and times of use. If users have consented to the collection of their location data, this may also be processed depending on the provider.
The IP addresses of users are also stored. However, we use an IP masking procedure (i.e. pseudonymisation by shortening the IP address) to protect users. In general, no clear data of users (such as e-mail addresses or names) is stored in the context of web analytics, A/B testing and optimisation, only pseudonyms. This means that neither we nor the providers of the software used know the actual identity of users, only the information stored in their profiles for the purposes of the respective procedures.
Notes on legal bases
Where we ask users for their consent to the use of third-party providers, the legal basis for processing data is consent. Otherwise, users’ data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, please also refer to the information on the use of cookies in this privacy policy.
- Types of data processed: usage data (e.g. web pages visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
- Data subjects: users (e.g. website visitors, users of online services).
- Purposes of processing: reach measurement (e.g. access statistics, recognition of returning visitors), tracking (e.g. interest/behaviour-based profiling, use of cookies), conversion tracking, profiling (creation of user profiles).
- Security measures: IP masking (pseudonymisation of the IP address).
- Legal bases: consent (Art. 6(1)(a) GDPR), legitimate interests (Art. 6(1)(f) GDPR).
Legal basis
The legal basis for this data processing is your consent pursuant to Art. 6(1)(a) GDPR.
Withdrawal of consent
You can withdraw your consent at any time with effect for the future by opening the settings for cookies and third-party services and changing your choice there.
The lawfulness of processing carried out on the basis of your consent before its withdrawal remains unaffected.
You can also prevent cookies from being stored in the first place by adjusting your browser settings accordingly. However, if you configure your browser to reject all cookies, the functionality of this and other websites may be limited. You can also prevent the collection by Google of the data generated by the cookie and relating to your use of the website (including your IP address) and the processing of this data by Google by
a. not giving your consent to the cookie being set, or
b. downloading and installing the browser add-on for deactivating Google Analytics here: tools.google.com/dlpage/gaoptout
For more information on the terms of use of Google Analytics and on data protection at Google, please see marketingplatform.google.com and policies.google.com.
Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
This data cannot be attributed to specific persons. This data is not combined with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.
Hosting and e-mail delivery
Our hosting provider is CS4Web KG, Lederergasse 29, 9500 Villach, Austria (privacy information: www.cs4web.at/datenschutz). It processes the data of this website on our behalf under a data processing agreement (Art. 28 GDPR). The servers are provided by the data centre ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, as a sub-processor of CS4Web KG. The server log files are processed and the e-mails from the enquiry form are sent on these servers. The legal basis is our legitimate interest in the secure and reliable operation of the website (Art. 6(1)(f) GDPR) or the processing of your enquiry (Art. 6(1)(b) GDPR).
SSL encryption
For security reasons and to protect the transmission of confidential content, such as the enquiries you send to us as the website operator, this website uses SSL encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the lock symbol in your browser bar.
When SSL encryption is activated, the data you transmit to us cannot be read by third parties.
Questions about data protection
If you have any questions, please contact us at the following e-mail address: mail@berghotel-presslauer.at
This privacy policy was last updated in October 2026.