1. Data Privacy at a Glance
General Information
The following information provides you an overview of what happens with your personal data when you visit this website. Personal data includes all data that can be used to personally identify you. You can find detailed information about the topic of data privacy in the data privacy policy in this text.
Data Collection on this Website
Who is responsible for data collection on this website?
Data on this website is processed exclusively by the website operator. Their contact information can be found in the section “Information About the Competent Authority”.
How do we collect your data?
One way your data is collected is by you providing it to us. This can include, e.g., data you enter into a contact form.
Other data are collected automatically or per your consent by our IT systems when you visit the website. These include, in particular, technical data (e.g. web browser, operating system or time at which the page was accessed). These data are collected automatically as soon as you enter this website.
What do we use your data for?
A portion of the data is collected to ensure the website works properly. Other data can be used to analyse your user behaviour.
What rights do you have with respect to your data?
You have the right to obtain information about the origin, recipient and purpose of your stored personal data at any time, free of charge. You also have the right to demand the correction or deletion of these data. If you have issued your consent to data processing, you can revoke it at any time, effective for the future. You also have the right, under certain circumstances, to demand the processing of your personal data be restricted. You are also entitled to file a complaint with the competent supervisory authority.
You can contact us at any time for more information or inquiries regarding the topic of data privacy.
Analysis Tools and Third-Party Provider Tools
When visiting this website, your user behaviour may be statistically analysed. This is done using so-called analysis programmes.
You can find detailed information about these analysis programmes in the following Data Privacy Policy.
2. General and Mandatory Information
Data Privacy
The operators of these websites take the protection of your personal data very seriously. We keep your personal data confidential and handle it in compliance with the statutory data protection regulations and this Data Privacy Policy.
If you use this website, various personal data will be collected. Personal data include data that can be used to personally identify you. This Data Privacy Policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.
Please note that there may be security gaps when transmitting data via the Internet (e.g. when communicating via email). Seamless protection of the data against third-party access is not possible.
Information About the Competent Authority
The authority responsible for data processing on this website is:
GRIES1 Betreibergesellschaft mbH
CEO: Florian Stanglmeier
Ziegeleistr. 14
84089 Aiglsbach
Telephone: 08532-9279000
Email: info@das-aunhamer.de
The competent authority is the natural person or legal entity with the sole or joint decision-making power regarding the purpose and means of processing of personal data (e.g. names, email addresses, etc.).
Retention Period
Unless a special retention period is specified in this Data Privacy Policy, we will retain your personal data until the purpose of the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legal grounds to retain your personal data (e.g. retention periods required under tax or commercial law); in the latter case, the data will be deleted when these grounds no longer apply).
Information about Data Forwarding to the USA
Among other things, tools from companies located in the USA are used on our website. If these tools are active, your personal data may be forwarded to the respective company's US servers. Please note that the USA is not a secure third country in terms of EU data protection law. US companies are obligated to disclose personal data to security agencies without you, as the affected party, being entitled to file a claim in court. It therefore cannot be ruled out that US authorities (e.g. secret services) might process, analyse and permanently store your data for surveillance purposes if located on US servers. We have no influence on these processing activities.
Revocation of Your Consent to Data Processing
Many data processing procedures are only permitted with your express consent. You can revoke consent, after having issued it, at any time. The legality of the data processing up to the date of the revocation shall not be affected.
Right to object to data collection in special cases and to direct marketing (Art. 21 of the GDPR)
IF THE DATA PROCESSING IS EXECUTED ON THE BASIS OF ART. 6 (1) E OR F OF THE GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR SPECIFIC SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU CAN FIND THE RESPECTIVE LEGAL BASIS ON WHICH A PROCESS IS BASED IN THIS DATA PRIVACY POLICY. IF YOU OBJECT, WE WILL CEASE PROCESSING YOUR PERSONAL DATA UNLESS WE CAN PROVE WE HAVE COMPELLING GROUNDS TO PERFORM THE PROCESSING WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND AGAINST LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 (1) OF THE GDPR).
IF YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF RELEVANT PERSONAL DATA FOR SUCH DIRECT MARKETING PURPOSES AT ANY TIME; THIS ALSO APPLIES TO PROFILING IF IT IS CONNECTED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21 (2) OF THE GDPR).
Right to file a complaint with the competent supervisory authority
In the event of violations of the GDPR, affected parties are entitled to file a complaint with a supervisory authority, in particular in the member state in which they normally reside, have their place of work or the place at which the alleged violation occurred. The right to file a complaint applies irrespective of other administrative remedies or judicial remedies.
Right to data portability
You have the right to have data we have automatically processed on the basis of your consent or in the framework of fulfilling a contract handed over to you or a third party in a common, machine-readable format. If you request a direct transfer of the data to another competent party, this shall only be executed to the extent it is technically feasible.
SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, for example, orders or requests you send to us as the site operator. You can identify an encrypted connection based on the “http://” changing to “https://” in the address bar and the lock appearing in the browser line.
When the SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Information, deletion and correction
In accordance with applicable statutory regulations, you have the right to obtain information about your stored data, the origin and recipient thereof and the purpose of the data processing and, if applicable, a right to the correction or deletion of these data. You can contact us at any time if you have questions regarding this or the topic of personal data.
Right to restrict processing
You have the right to demand the restriction of the processing of your personal data. You can contact us at any time regarding this. The right to restrict the processing exists in the following cases:
- If you dispute the accuracy of the personal data we have stored, we generally require time to review. For the duration of the review, you have the right to demand the restriction of the processing of your personal data.
- If the processing of your personal data was/is executed illegally, you can demand the restriction of the data processing in lieu of deletion.
- If we no longer require your personal data, however you require them to exercise, defend against or assert legal claims, you have the right to demand the restriction of the processing of your personal data in lieu of deletion.
- If you have filed an objection pursuant to Art. 21 (1) of the DSGVO, your interests must be weighed against ours. Until it has been determined whose interests outweigh the others, you have the right to demand the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data, except the retention thereof, may only be processed with your consent or to assert, exercise or defend against legal claims or to protect the rights of other natural persons or legal entities or for reasons of an important public interest of the European Union or a member state.
Objection to advertising emails
We herewith object to the use of contact data published in the framework of our duty to provide imprint information to send advertising and information materials unless expressly requested. The operators of the websites expressly reserve the right to take legal action in the event that unsolicited advertising information is sent, for instance spam emails.
3. Data collection on this website
Cookies
Our websites use cookies. Cookies are small text files and do not harm your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them or they are automatically deleted by your browser.
Cookies from third-party companies can also be stored on your device if you access our site (third-party cookies). These enable us or you to use specific services from the third-party company (e.g. cookies for the processing of payment services).
Cookies perform a variety of functions. Several cookies are required for technical reasons because certain website functions will not function without them (e.g. shopping cart function or video playback). Other cookies are used to analyse user behaviour or display advertisements.
Cookies required to execute the electronic communication process (essential cookies) or to provide specific functions you have requested (functional cookies, e.g. for the shopping cart function) or to optimise the website (e.g. cookies to measure the web audience) shall be saved on the basis of Art. 6 (1) f of the GDPR unless other legal grounds are specified. The website operator has a legitimate interest in saving cookies to provide its services in a technically flawless and optimised manner. If consent to save cookies has been requested, the relevant cookies will be saved exclusively on the basis of this consent (Art. 6 (1) a of the GDPR; consent can be revoked at any time.
You can set your browser to be informed when cookies are saved and only allow cookies in individual cases, accept cookies for specific cases or generally disable cookies as well as automatically delete cookies when closing the browser. If cookies are disabled, the functionality of this website may be limited.
If cookies are used by third-party companies or for analysis purposes, you will be separately informed of this in the framework of this Data Privacy Policy and asked for your consent.
Contact Form
If you send us an inquiry via the contact form, we will save the information you enter in the inquiry form, including the contact information you provided for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on these data without your consent.
These data are processed in accordance with Art. 6 (1) b of the GDPR if your inquiry is related to the fulfilment of a contract or is required to execute pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries submitted to us (Art. 6 (1) f of the GDPR) or on your consent (Art. 6 (1) a of the GDPR) if your consent was requested.
We will retain the data you entered in the contact form until you request their deletion, revoke your consent to their storage or the purpose of storing the data no longer applies (e.g. after fully processing your inquiry). Mandatory statutory regulation, in particular retention periods, shall not be affected.
Inquiry via email, telephone or fax
If you contact us via email, telephone or fax, we will save and process your inquiry, including all personal data therein (name, inquiry) for the purpose of processing the matter. We do not pass on these data without your consent.
These data are processed in accordance with Art. 6 (1) b of the GDPR if your inquiry is related to the fulfilment of a contract or is required to execute pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries submitted to us (Art. 6 (1) f of the GDPR) or on your consent (Art. 6 (1) a of the GDPR) if your consent was requested.
We will retain the data sent to us as part via contact inquiries until you request their deletion, revoke your consent to their storage or the purpose of storing the data no longer applies (e.g. after fully processing the matter). Mandatory statutory regulations, in particular statutory retention periods, shall not be affected.
4. Plugins and Tools
Google Web Fonts (local hosting)
This site uses Web Fonts provided by Google to uniformly display fonts. The Google fonts are installed locally. No connection to the Google servers is established.
You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's data privacy policy: https://policies.google.com/privacy?hl=de.
Font Awesome (local hosting)
This site uses Font Awesome to uniformly display fonts. Font Awesome is installed locally. No connection to Fonticons, Inc.'s servers is established.
You can find more information about Font Awesome in Font Awesome's data privacy policy at: https://fontawesome.com/privacy.
Google Analytics
Online marketing and web analytics; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com/intl/de/about/analytics/; Data privacy policy: https://policies.google.com/privacy; Opt-out option: Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, Settings for the presentation of advertising overlays: https://adssettings.google.com/authenticated.
Google Maps
This site uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Saving your IP address is required to use the Google Maps functions. This information is generally transmitted to a Google server in the USA and saved there. The provider of this site has no influence over this data transmission.
Google Maps is used in the interest of displaying our online offers and to make it easy to find the locations we specify on the website. This constitutes a legitimate interest in terms of Art. 6 (1) f of the GDPR. If consent was requested, the data shall be processed exclusively on the basis of Art. 6 (1) a of the GDPR; consent can be revoked at any time.
The transmission of data to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
You can find more information about how user data is handled in Google's data privacy policy: https://policies.google.com/privacy?hl=de.
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to check whether data are entered on this website (e.g. on a contact form) by a human or an automated programme. To this end, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor accesses the website. reCAPTCHA uses different information for the analysis (e.g. IP address, length of the visitor's stay on the website or user mouse movements). Data collected during the analysis are transmitted to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.
The data are stored and analysed on the basis of Art. 6 (1) f of the GDPR. The website operator has a legitimate interest in protecting its online offers against improper, automated espionage and SPAM. If consent was requested, the data shall be processed exclusively on the basis of Art. 6 (1) a of the GDPR; consent can be revoked at any time.
You can find more information about Google reCAPTCHA in Google's data privacy policy and Google's terms and conditions via the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.
ADDITIVE+ MARKETING AUTOMATION - Direct Marketing
In order to increase customer loyalty and to sell our services and additional services we use hotel online marketing software provided by ADDITIVE Srl, 39011 Lana (BZ), Italy (“ADDITIVE”) within the field of hotel marketing automation.
Therefore your data, which we gather and process in connection with your request, reservation, order, activation, registration or the transmission of other contact forms on our website, will be analysed and used to provide you with automatically generated offers for our services and additional services. Through the use of these services and systems your data will be processed and stored, at least in part, also outside of the EU or the EEC. The adequate level of data protection is based on data processing agreements.
You can deny the use of your data for this purpose anytime by clicking on the “unsubscribe” link in the respective message.
The data processing takes place in accordance with the requirements of art. 6 para. 1 lit f (legitimate interests) of the GDPR.
Our objective in accordance with the GDPR (legitimate interests) is the prevention of competitive disadvantages, the increase in brand awareness and the maximisation of our economic success through an optimal use of the acquired contacts.
ADDITIVE+ VOUCHERS
On our website you have the possibility to buy vouchers by using the integrated voucher software. To process your purchase and to save and store your data we use software provided by ADDITIVE Srl, 39011 Lana (BZ), Italy (“ADDITIVE”) in the context of voucher marketing. Through the use of these services and systems your data will be processed and stored in the EU.
The data you provide is required to fulfil the contract or to carry out pre-contractual measures. Without this data we cannot conclude a contract with you. The data will not be transferred to an outside third party, except for your credit card data which will be transferred to the payment provider and to our tax accountant to fulfil our tax obligations.
The data processing takes place in accordance with the requirements of art. 6 para. 1 lit a (consent) and/or lit b (processing necessary for the performance of a contract) of the GDPR.
ADDITIVE+ NEWSLETTER
On our website you have the possibility to subscribe to our newsletter. For the subscription we need your email address and your consent to receive our newsletter through ADDITIVE, our provider for hotel e mail marketing. To provide you with relevant information we also gather and process voluntary information concerning interests, name, date of birth and country/region of origin in our hotel newsletter tool.
After signing up for our newsletter you will receive an email containing a link to confirm the subscription.
Your subscription can be cancelled any time by clicking on the cancellation link in the respective newsletter.
To process your subscriptions and to send our newsletters we use software provided by ADDITIVE Srl, 39011 Lana (BZ), Italy (“ADDITIVE”). Through the use of these services and systems your data will be processed and stored, at least in part, also outside of the EU or the EEC. The adequate level of data protection is based on data processing agreements.
