Privacy policy

Your privacy and the protection of your personal data is important to us, which is why we process your data only on the basis of laws and legal regulations, namely the GDPR and the Austrian Telecommunications Law 2003. In our data privacy policy, we inform you about data processing connected with our website.


Getting in contact with us

When contacting us via email or via one of the forms on our website, we store your data for 6 months in order to be able to process your inquiry as well as to able to handle possible follow-up questions. We do not pass on your data to third parties without your consent.


Cookies

Our website uses so-called cookies. A cookie is a small text file that is saved to, and, during subsequent visits, retrieved from your browser on your computer or mobile device. They do not cause any damage.

We use cookies to provide you with the best usability. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser during subsequent visits.

If you do not agree with this practice, you can set your browser in a way that it will inform you about setting cookies. Additionally, this enables you to permit a particular cookie.

If you do not agree with this practice, you can set your browser in a way that it will inform you about setting cookies. Additionally, this enables you to permit a particular cookie.


Google Maps

We use maps provided by “Google Maps” by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Data privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.


Google Fonts

We use fonts („Google Fonts“) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Data privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.


Google ReCaptcha

We use the function “ReCaptcha” in order to prevent bots for example from filling in online-forms provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Data privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.


Web-Analysis

Our website uses functions provided by the web analysis service Google Analytics, which is provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. This implies our use of cookies which enables us to analyse the visitors’ use of our website. The information created in this process is processed to and stored on Google’s server in the USA. You can prevent this by setting your browser so that it will not store any cookies.

We have made a compliant data processing contract with the provider.

In accordance with the GDPR, we have a legitimate interest in improving our offers and our website. In order to protect our users’ data properly, we use data pseudonymization.

We record your IP-address; as soon as it is recorded, we use pseudonymization such as deleting the last 8 bit. Thus, the IP-address can be localized only roughly.

Data processing is based on legal regulations of § 96 Par 3 TKG (Telecommunications Law 2003) as well as Art 6 Par 1 lit a (agreement) and/or f (legitimate interest) of the GDPR.

Additionally, Google is certified according to the Privacy Shield-agreement and therefore guarantees to adhere to European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

User data is stored for 14 months.

Detailed information regarding Google’s use of data as well as your options concerning settings and dissent are provided on the following Google-websites: https://www.google.com/intl/de/policies/privacy/partners („How Google uses information from sites or apps that use our services“), http://www.google.com/policies/technologies/ads (Advertising“), http://www.google.de/settings/ads (Control the information Google uses to show you ads“).


Mouse-Tracking

In accordance with the GDPR, we have a legitimate interest in improving our offer and our website. Therefore, we use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular device’s IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy: https://www.hotjar.com/legal/policies/privacy.

You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this Opt-Out Link.


Storing Data in our Webshop

In order to process your order, we store the following data: title, first name, surname, address, email address, optional data you have entered (company, address details, telephone number). We require the data you have provided to fulfil the contract or take measures that are necessary during the pre-contract phase. Without this data, we cannot enter the contract with you. We do not share data with third parties; exceptions are credit card data, which we transmit to the bank(s)/the payment provider involved in order to enable them to debit your purchase, delivery service companies who we assign with the delivery of your purchase as well as our tax adviser enabling him to fulfil his legal obligations.

If you cancel your order before sending it, all the data stored will be deleted. After a contract has been made, all data connected with it are stored for a period of 7 years according to tax laws.

Data connected with name, address, purchased products/services and the date of purchase are stored for a period of 10 years, after which product liability has expired. Data processing is based on legal regulations of § 96 Par 3 TKG (Telecommunications Law 2003) as well as Art 6 Par 1 lit a (agreement) and/or lit b (necessary to fulfil a contract) of the GDPR.


Registration and user account

Registration for a user account is optional when using our webshop. By registering, we inform users about necessary information (obligatory and optional fields). We use data shared with us in the registration to enable users to use our website. We may provide users with information relevant with regard to offers and registration, such as changes of our product/service range, technical updates etc., via email.

In case a user quits the user account, data related to this account are deleted, apart from data which have to be stored for legal reasons set up by tax and/or trade laws according to GDPR Art. 6 Par. 1 lit. c. If a user quits before a contract has been fulfilled, any backup of the data rests with the user. We are permitted to delete all data stored during the contract period irretrievably.

When users use our functions to register and log in in connection with their user accounts, we store the IP-address as well as the time of the user’s particular action. This action is based on both our legitimate interest as well as the users’ interest regarding the protection against misuse and other unauthorized usage. After a maximum of 7 days, the IP-addresses are anonymized or deleted.

In general, we do not share data with third parties; however, situations in which we have to make claims or in which we have to meet a legal obligation according to GDPR Art. 6 Par. 1 lit. c have to be considered exceptions.


Newsletter

You can subscribe to our newsletter on our website. Furthermore, in order to provide you with specific information, we may collect and process additional information our users provide optionally.

For our newsletter service, we need our email address and your confirmation that you accept receiving the newsletter. Therefore, as soon as you have subscribed to our newsletter service, we send you an email comprising a link to confirm your registration.

Users can unsubscribe from the newsletter service whenever they want by sending an email to the following email address: info@ortners-resort.com

After that, we will immediately delete your data connected with our newsletter service.


Google-Re/Marketing-Services

In accordance with the GDPR, we have a legitimate interest in improving our offers and our website. Therefore, we use marketing and remarketing services (in short, „Google-Marketing-Services”) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, („Google“).

Google is certified according to the Privacy Shield-agreement and therefore guarantees to adhere to European data protection laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Thanks to Google marketing services we can display selected adverts for and on our website so that users are displayed only those adverts which reflect their potential interests. Google runs a code and uses so-called (re-)marketing tags; thus, an individual cookie is stored in the user’s browser. Our use of cookies is explained above.

Google can connect the information collected also with data collected from other sources. When users visit other websites afterwards, they can be provided with adverts reflecting their particular interests.

Additionally, the user’s IP address is recorded through Google Analytics; in connection with Google Analytics, we use data pseudonymization: We record your IP-address; as soon as it is recorded, we use pseudonymization such as deleting the last 8 bit. Thus, the IP-address can be localized only roughly, adverts only administered and displayed for a particular cookie-owner, not for a specific person. This is of course not the case if users have permitted Google explicitly to use their data without any pseudonymization. The information collected by Google Marketing Sevices is transmitted to Google and stored on their servers in the USA. The user’s IP address is not connected with other data of this user collected in other Google services.

Among others, we use cookies provided by the Google marketing service “Google AdWords”; we may display adverts by third parties by using the Google marketing service “AdSense” and its cookies. For further details regarding Google’s use of data for marketing please see https://policies.google.com/technologies/ads, for Google’s privacy policy please see https://www.google.com/policies/privacy.

Furthermore, we use “Google Tag Manager“ to implement analysis and marketing services provide by Google in our website and administer them.


Our sites in social media

We offer sites in social media and networks in order to be able to communicate with users, clients and customers who are active there. These media and networks are offered on the basis of their particular terms and conditions as well as their particular data privacy policies.

If not mentioned otherwise in our data privacy policy, we process user data when users communicate with us in social media and networks.


Our use of Facebook social media plugins

In accordance with the GDPR, we have a legitimate interest in improving our offer as well as in analysing and optimizing our website. Therefore, we use social plugins (“plugins”) provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook“). On the website, the plugins may be graphic content, text or video content or elements which enable interaction. They can be identified by the use of Facebook logos (“f” on a respective background, the “thumbs-up”-sign or the term “Like”) or the label “Facebook social plugin”. For details regarding the appearance of Facebook social plugins please see: https://developers.facebook.com/docs/plugins/.

Facebook is certified according to the Privacy Shield-agreement and therefore guarantees to adhere to European data protection laws (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

For further information regarding data collection by Facebook, further data processing and data usage as well as user rights and your personal settings to protect your privacy, please see Facebook’s data policy https://www.facebook.com/about/privacy/.


Twitter

Our website might use content and functions connected with the services provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. This includes content such as images, videos and texts or buttons which allow users to react to content. If users are registered users of Twitter, too, Twitter can assign the view of content and use functions to the particular user profile. Twitter’s privacy policy: https://twitter.com/de/privacy.

Twitter is certified according to the Privacy Shield-agreement and therefore guarantees to adhere to European data protection laws (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active).


Instagram

Our website might use content and functions connected with the services provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. This includes content such as images, videos and texts or buttons which allow users to react to content. If users are registered users of Instagram, too, Instagram can assign the view of content and use functions to the particular user profile. Instagram’s privacy policy: http://instagram.com/about/legal/privacy/.


Pinterest

Our website might use content and functions connected with the services provided by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA. This includes content such as images, videos and texts or buttons which allow users to react to content. If users are registered users of Pinterest, too, Pinterest can assign the view of the content and use of functions to the particular user profile. Pinterest’s privacy policy: https://about.pinterest.com/de/privacy-policy.


Xing

Our website might use content and functions connected with the services provided by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. This includes content such as images, videos and texts or buttons which allow users to react to content. If users are registered users of Xing, too, Xing can assign the view of content and use functions to the particular user profile. Xing’s privacy policy: https://www.xing.com/app/share?op=data_protection.


LinkedIn

Our website might use content and functions connected with the services provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. This includes content such as images, videos and texts or buttons which allow users to react to content. If users are registered users of Twitter, too, Twitter can assign the view of content and use functions to the particular user profile. LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

LinkedIn is certified according to the Privacy Shield-agreement and therefore guarantees to adhere to European data protection laws (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active).


Vimeo

Our website might use video content provided by Vimeo Inc., 555 West 18th Street New York, New York 10011, USA. Vimeo’s privacy policy: https://vimeo.com/privacy.


Youtube

Our website might use video content provided by YouTube LLC, which is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. YouTube’s information on policies and safety: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.


Your rights

You have the right to request information about the personal data we hold on you, rectification, deletion, restriction, and portability of your personal data as well as to disclaim and object. In case you consider our processing of your data not according to data privacy laws or you feel your data privacy claims have not been met in any other way, you have the right to raise a complaint to a supervisory authority. In Austria, you can raise your complaint to the Data Protection Authority (“Datenschutzbehörde”).

You can contact us easily:

Ortner’s Resort*****
Fam. Ortner-Zwicklbauer
Pockinger Straße 1 – 7
94072 Bad Füssing

+49 8531 279-0
info@ortners-resort.com

 

Source: The WKO’s model data protection declaration was used as the basis for this data protection declaration

Date: 28.10.2019

ADDITIVE+ LANDINGPAGE - Online Marketing and Landing Pages

Beside our website we do also operate optimized landing pages for means of hotel online marketing. To process your request, reservation, order, activation, registration or the transmission of other contact forms on our website as well as to save and store your data we use cloud services, CRM systems and software provided by ADDITIVE Srl, 39011 Lana (BZ), Italy (“ADDITIVE”), our partner in the field of hotel digital marketing. The adequate level of data protection is based on data processing agreements with the respective company.

Our landing pages use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics enables website operators to analyse the user behavior of the visitors. The information about the user behavior is transmitted to and stored by Google on its servers.

Your IP address is collected but immediately anonymised (for example by deleting the last 8 bits). As a result the geolocation data is less accurate.

You can prevent the data collection connected to your use of our online services through cookies and the processing of this data by Google, by installing the browser-plugin available at the following link:
https://chrome.google.com/webstore/detail/google-analytics-opt-out/fllaojicojecljbmefodhfapmkghcbnh

ADDITIVE has an insight into data gathered through Google Analytics. This data will be used only to analyse the use of our websites and to evaluate our marketing and distribution strategies.

Our website and landing pages also use functions provided by ADDITIVE for the multi-channel monitoring of the use of our websites as well as marketing and distribution strategies like landing pages, newsletter and social media presence. Information about your visits and submitted forms on our websites are also transmitted to ADDITIVE in order to evaluate and optimize our marketing and sales measures.

The data processing takes place in accordance with the requirements of art. 6 para. 1 lit f (legitimate interests) of the GDPR.

Our objective in accordance with the GDPR (legitimate interests) is the improvement of our products and services and our web presence through the analysis of the use of our website as well as marketing and distribution strategies.

Our website and our landing pages also use remarketing functions provided by Google Inc. (“Google”) and by Meta Platforms Inc. (“Meta”). Therefore, Meta and Google will know that you have visited our website. This way visitors of our website and of our landing pages will find ads adapted to their interests on Google’s advertising platforms and on the social media platforms Facebook and Instagram.

The data processing takes place in accordance with the requirements of art. 6 para. 1 lit a (consent) of the GDPR.

When you visit our landing pages a banner will inform you about the use of cookies for remarketing functions. If you continue using the website or click on the respective button you consent to the use of cookies. You can deny your consent anytime, by visiting the page containing the cookie information and denying the use in the banner that will be displayed.

ADDITIVE+ MARKETING AUTOMATION - Direct Marketing

In order to increase customer loyalty and to sell our services and additional services we use hotel online marketing software provided by ADDITIVE Srl, 39011 Lana (BZ), Italy (“ADDITIVE”) within the field of hotel marketing automation.
Therefore your data, which we gather and process in connection with your request, reservation, order, activation, registration or the transmission of other contact forms on our website, will be analysed and used to provide you with automatically generated offers for our services and additional services. Through the use of these services and systems your data will be processed and stored, at least in part, also outside of the EU or the EEC. The adequate level of data protection is based on data processing agreements.

You can deny the use of your data for this purpose anytime by clicking on the “unsubscribe” link in the respective message.

The data processing takes place in accordance with the requirements of art. 6 para. 1 lit f (legitimate interests) of the GDPR.

Our objective in accordance with the GDPR (legitimate interests) is the prevention of competitive disadvantages, the increase in brand awareness and the maximisation of our economic success through an optimal use of the acquired contacts.

ADDITIVE+ VOUCHERS

On our website you have the possibility to buy vouchers by using the integrated voucher software. To process your purchase and to save and store your data we use software provided by ADDITIVE Srl, 39011 Lana (BZ), Italy (“ADDITIVE”) in the context of voucher marketing. Through the use of these services and systems your data will be processed and stored in the EU.

The data you provide is required to fulfil the contract or to carry out pre-contractual measures. Without this data we cannot conclude a contract with you. The data will not be transferred to an outside third party, except for your credit card data which will be transferred to the payment provider and to our tax accountant to fulfil our tax obligations.

The data processing takes place in accordance with the requirements of art. 6 para. 1 lit a (consent) and/or lit b (processing necessary for the performance of a contract) of the GDPR.

ADDITIVE+ NEWSLETTER

On our website you have the possibility to subscribe to our newsletter. For the subscription we need your email address and your consent to receive our newsletter through ADDITIVE, our provider for hotel e mail marketing. To provide you with relevant information we also gather and process voluntary information concerning interests, name, date of birth and country/region of origin in our hotel newsletter tool.

After signing up for our newsletter you will receive an email containing a link to confirm the subscription.

Your subscription can be cancelled any time by clicking on the cancellation link in the respective newsletter.

To process your subscriptions and to send our newsletters we use software provided by ADDITIVE Srl, 39011 Lana (BZ), Italy (“ADDITIVE”). Through the use of these services and systems your data will be processed and stored, at least in part, also outside of the EU or the EEC. The adequate level of data protection is based on data processing agreements.