Data protection

Privacy Policy

This privacy policy aims to inform you about the nature, scope, and purpose of the processing of personal data (hereinafter also referred to as "data"). Personal data is any data that relates to you personally, such as your name, address, email address, or your user behavior. This privacy policy applies to all data processing operations carried out by us, both within the scope of our core business and for the online media we maintain.

Who is responsible for data processing at our company?

The entity responsible for data processing is:

Haus Piesendorf
Bakker Jacobus and Hes Susanne
Dorfstraße 340

5721 Piesendorf
Telephone: 0043(0)664 2449665
Austria

info@hauspiesendorf.com

Processing of your data within the scope of our company's core business

If you are our customer or business partner, or if you are interested in our services, the type, scope, and purpose of processing your data are determined by the contractual or pre-contractual relationship between us. In this context, the data we process includes all data that you provide or have provided for the purpose of using our contractual or pre-contractual services and that is necessary for processing your inquiry or fulfilling the contract concluded between us. Unless otherwise stated in this privacy policy, the processing of your data and its transfer to third parties is limited to the data that is necessary and appropriate for responding to your inquiries and/or fulfilling the contract concluded between you and us, protecting our rights, and complying with legal obligations. We will inform you which data is required for this purpose before or during data collection. If we use third-party providers to provide our services, the privacy policies of those respective third-party providers apply.

Data affected:

Inventory data (e.g. names, addresses)
Payment details (e.g. bank account details, invoices)
Contact details (e.g. email address, telephone number, postal address)
Contract details (e.g., subject matter of the contract, contract duration)

Affected persons: Prospective customers, business partners and contractual partners

Purpose of processing: Handling of contractual services, communication and answering of contact requests, office and organizational procedures

Legal basis: Contractual performance and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Your rights under the GDPR

Under the GDPR, you have the following rights, which you can assert at any time with the controller named in section 1 of this privacy policy:

Right to information: You have the right to request information from us about whether and what data we process about you.
Right to rectification: You have the right to request the correction of inaccurate data or the completion of incomplete data.
Right to erasure: You have the right to request the erasure of your data.
Right to restriction: In certain cases, you have the right to request that we process your data only to a limited extent.
Right to data portability: You have the right to request that we transfer your data to you or another controller in a structured, commonly used and machine-readable format.
Right to lodge a complaint : You have the right to lodge a complaint with a supervisory authority. The competent supervisory authority is the one in your place of habitual residence, your place of work, or our company headquarters.

Right of withdrawal

You have the right to withdraw your consent to data processing at any time.

Right to object

You have the right to object at any time to the processing of your data, which we base on our legitimate interest pursuant to Article 6(1)(f) GDPR. If you exercise your right to object, we ask that you state the reasons for your objection. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests and rights.

Notwithstanding the above, you have the right to object at any time to the processing of your personal data for advertising and data analysis purposes.

Please send your objection to the contact address of the responsible party given above.

When will we delete your data?

We delete your data when we no longer need it or when you instruct us to do so. This means that – unless otherwise stated in the individual data protection notices of this privacy policy – we delete your data,

when the purpose of the data processing has ceased to exist and therefore the respective legal basis mentioned in the individual data protection notices no longer exists, e.g.

- after termination of the contractual or membership relationship existing between us (Art. 6 para. 1 lit. a GDPR) or

- after our legitimate interest in the further processing or storage of your data ceases to exist (Art. 6 para. 1 lit. f GDPR),

if you exercise your right of withdrawal and no other legal basis for processing within the meaning of Art. 6 para. 1 lit. b GDPR applies,
if you exercise your right to object and there are no compelling legitimate grounds against deletion.

However, if we need to retain (certain parts of) your data for other purposes, for example, due to tax retention periods (generally 6 years for business correspondence and 10 years for accounting documents), the establishment, exercise, or defense of legal claims arising from contractual relationships (up to four years), or if the data is needed to protect the rights of another natural or legal person, we will only delete (that part of) your data after these periods have expired. Until these periods have expired, we will restrict the processing of this data to these purposes (fulfilling our retention obligations).

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are placed and stored on your device. Cookies primarily serve to exchange information between your device and our website. This includes, among other things, your language settings, login status, or the point at which you last watched a video.

Two types of cookies are used when you visit our websites:

Temporary cookies (session cookies): These store a so-called session ID, which allows different requests from your browser to be associated with the same session. Session cookies are deleted when you log out or close your browser.
Persistent cookies: Persistent cookies remain stored even after you close your browser. This allows our website to recognize your computer when you return. These cookies store information such as language preferences or login details. They also allow us to track and store your browsing behavior. This data can be used for statistical, marketing, and personalization purposes.

In addition to the above classification, cookies can also be distinguished with regard to their purpose:

Necessary cookies: These are cookies that are absolutely essential for the operation of our website, to save logins or shopping carts for the duration of your session, or cookies that are set for security reasons.
Statistics, marketing and personalization cookies: These are cookies used for analysis or audience measurement purposes. Such "tracking" cookies can store information about search terms entered or the frequency of page views. In addition, the browsing behavior of an individual user (e.g., viewing specific content, using certain functions, etc.) can be stored in a user profile. These profiles are used to display content to users that matches their potential interests. If we use services that store cookies on your device for statistical, marketing, and personalization purposes, we will inform you separately about this in the following sections of our privacy policy or when obtaining your consent.

Data affected:

Usage data (e.g., access times, websites clicked)
Communication data (e.g., information about the device used, IP address).

Affected persons: Users of our online services

Purpose of processing: Displaying our websites, ensuring the operation of our websites, improving our online services, communication and marketing

Legal basis:
Legitimate interest, Art. 6 para. 1 lit. f GDPR
Unless we obtain your consent to set cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, in particular its content and functions. You can object to the use of cookies set by us within the scope of our legitimate interest via your browser's security settings. There, you can specify whether you want to accept no cookies at all, only upon request, or have cookies deleted after each time you close your browser. If cookies are deactivated for our website, some of its functions may no longer be fully available.

Consent, Art. 6 para. 1 lit. a GDPR
If we ask for your permission to place certain cookies on your device before you visit our website, and you consent, the legal basis for this is your consent. As part of the consent process, we will inform you about the specific cookies we use. If you do not grant this consent, only the so-called technically necessary cookies, which are required for the proper functioning of our website and its display in your browser, will be set. If you have consented to the use of cookies, you have the right to withdraw your consent at any time.

Booking system

We use the booking system from https://www.easy-booking.at on this website. The privacy policy for the booking system is linked in the booking form and can also be viewed via the following links:

Chalet am Park – Privacy Policy

Haus Piesendorf – Data Protection

Haus Alpenliebe / Tauernhütte – Privacy Policy

Studio Almwiese – Privacy Policy

Web hosting

We use a provider to host our website. Our website is stored on their servers and made available for access on the internet (hosting). In this process, the provider may process all data transmitted via your browser that is generated when you use our website. This includes, in particular, your IP address, which the provider needs to deliver our online content to your browser, as well as all information you enter on our website. Furthermore, the provider we use may

the date and time of access to our website
Time zone difference to Greenwich Mean Time (GMT)
Access status (HTTP status)
the amount of data transferred
the Internet service provider of the accessing system
the browser type and version you are using
the operating system you are using
the website from which you may have accessed our website
the pages or subpages that you visit on our website.

We collect the aforementioned data. This data is stored as log files on our provider's servers. This is necessary to ensure the stability and security of our website's operation.

Data affected:

Content data (e.g., posts, photos, videos)
Usage data (e.g., access times, websites clicked)
Communication data (e.g., information about the device used, IP address)

Affected persons: Users of our website

Purpose of processing: Displaying our websites, ensuring the operation of our websites

Legal basis: Legitimate interest, Art. 6 para. 1 lit. f GDPR

Web host commissioned by us:

1&1 Webhosting

Service provider: 1&1 Telecommunication SE, Elgendorfer Str. 57, 56410 Montabaur
Website: https://www.1und1.de/
Privacy Policy: https://www.1und1.de/Datenschutz

Contact

If you contact us via email, social media, telephone, fax, post, our contact form or otherwise, and provide us with personal data such as your name, telephone number or email address, or provide further information about yourself or your request, we process this data to answer your request within the framework of the pre-contractual or contractual relationship existing between us.

Data affected:

Inventory data (e.g. names, addresses)
Contact details (e.g. email address, telephone number, postal address)
Content data (texts, photos, videos)
Contract details (e.g., subject matter of the contract, contract duration)

Affected persons: Prospective customers, clients, business partners and contractual partners

Purpose of processing: Communication and answering of contact requests, office and organizational procedures

Legal basis: Contractual performance and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Web analytics and statistics

To track and statistically analyze visitor traffic on our website, we use web analytics services. These services collect data such as the website from which you accessed our site (referrer), the pages you visited, the duration of your visit, and your interactions with the site. Data about your browser, operating system, and device type are also collected. Furthermore, these services may collect pseudonymous demographic information, such as age and gender. Depending on the provider, your location data may also be processed if you have consented to its collection.

To collect and store this data, the web analytics service we use typically places a cookie on your device, which also collects your assigned IP address. However, this IP address is shortened using a process called IP masking, so that it can no longer be associated with your visit to our website. Furthermore, no personally identifiable information such as names or email addresses is stored. Neither we nor the service we use knows the identity of visitors to our website.

However, when collecting data, the service provider can create pseudonymous usage profiles with information from the use of different devices through the use of cookies.

Please note that, depending on the country where the service provider listed below is located, data collected through this service may be transferred and processed outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR may not be guaranteed and that the enforcement of your rights may be impossible or significantly impeded.

Data affected:

Usage data (e.g., access times, websites clicked)
Communication data (e.g., information about the device used, IP address).

Affected persons: Users of our online services

Purpose of processing: Reach measurement, campaign success monitoring, remarketing, and interest- and behavior-based marketing.

Legal basis: If we have requested your consent before using the respective service, this constitutes the legal basis, Art. 6 para. 1 lit. a GDPR. Otherwise, we use the respective service based on our legitimate interest in analyzing visitor traffic to our website in order to continuously improve its functions, offers, and user experience, Art. 6 para. 1 lit. f GDPR.

We use the following web analytics services:

Matomo Analytics (without cookies)

Service provider: InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand
Website: https://matomo.org/
Privacy Policy: https://matomo.org/privacy/

When using Matomo, the data collected via the analytics tool is not transferred to the service provider, but remains on our server. Furthermore, the version we use does not employ cookies. Instead, returning users are recognized using a so-called "digital fingerprint." This fingerprint is stored anonymously and changed every 24 hours. It is impossible to draw conclusions about the identity of individual users.

Our online presence on social networks

We maintain online presences on the social networks listed below. When you visit one of these platforms, the respective provider collects and processes the data detailed below. This data is generally collected for advertising and market research purposes, and user profiles are created based on this data. These user profiles can store data regardless of the device you use. This is particularly true if you are a member of the respective platform and are logged in. The providers can use these user profiles to display interest-based advertising to you. You have the right to object to the creation of user profiles. To exercise this right, you must contact the respective provider.

If you have an account with one of the providers listed below and are logged in when you visit our website, the respective provider may collect data about your usage behavior on our website. To prevent such a linking of your data, you can log out of the provider's service before visiting our site.

For what purpose and to what extent data is collected by the provider, you can find information in the respective privacy policies of the providers listed below.

We would like to inform you that, depending on the country of origin of the provider mentioned below, the data collected via its platform may be transferred and processed outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR may not be guaranteed and that the enforcement of your rights may be impossible or significantly impeded.

Data affected:

Inventory and contact data (e.g., name, address, telephone number, email address)
Content data (e.g., posts, photos, videos)
Usage data (e.g., access times, websites clicked)
Communication data (e.g., information about the device used, IP address).

Purpose of processing: Communication and marketing, tracking and analysis of user behavior

Legal basis: Consent, Art. 6 para. 1 lit. a GDPR, legitimate interests Art. 6 para. 1 lit. f GDPR

Options for lodging an objection: For information on the respective opt-out options, please refer to the information provided by the providers linked below.

We maintain online presences on the following social networks:

Facebook

Service provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Headquarters in the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Website: https://www.facebook.com/
Privacy Policy: https://www.facebook.com/about/privacy/
Privacy policy for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data

Instagram

Service provider: Instagram Inc., 1601 Willow Road, Menlo Park CA 94025, USA
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Headquarters in the EU: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Website: https://www.instagram.com/
Privacy Policy: http://instagram.com/about/legal/privacy

Messenger services

We communicate via messaging services. Messaging services are chat programs that allow users to send text messages, as well as image or video files, in real time over the internet. They can also be used to send emoticons, electronic greeting cards, and contacts. For messages to be transmitted, participants must be connected to each other via a network such as the internet, either directly or through a server, using a computer program (called a client). Messages can usually be sent even if the recipient is offline – the message is then temporarily stored by the service's server and delivered to the recipient later when they are online again. Finally, these services can also be used for screen sharing and online games.

If the service uses end-to-end encryption for the sent content (texts, attachments), only the selected communication partners, and not third parties or the service provider itself, can view the message. Therefore, we recommend regularly installing updates for the service to ensure content encryption. However, the service provider has the ability to access the communication metadata. This includes the time and (depending on the settings) location of the communication, as well as the device you used.

Data affected:

Inventory and contact data (e.g., name, telephone number, email address)
Content data (e.g., posts, photos, videos)
Usage data (e.g., access times, websites clicked)
Communication data (e.g., information about the device used, IP address).

Purpose of processing: Communication and Marketing

Legal basis: If we have requested your consent before using the respective service, this constitutes the legal basis, Art. 6 para. 1 lit. a GDPR. In this respect, we clarify that we will not transmit your contact details to the service provider for the first time without your consent. If we communicate with you via one of the services listed below in the context of contract negotiations or within the framework of an existing contractual relationship, the legal basis is the performance or preparation of the contract, Art. 6 para. 1 lit. b GDPR. Furthermore, we rely on our legitimate interests in fast and efficient communication and fulfilling the communication needs of our communication partners via the services listed below, Art. 6 para. 1 lit. f GDPR.

Options for lodging an objection: You can revoke your consent to use the following service at any time. You can also object to communication via the messenger service at any time.

We use the following messenger services:

WhatsApp

Service provider: WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025, USA
Headquarters in the EU: Whatsapp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Website: https://www.whatsapp.com/
Privacy Policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

Content services

We use certain services to display specific content or graphics (videos, images, music, fonts, maps) on our website. The services we use process your IP address, which is assigned to you at the time of your visit to our website, as this is the only way the respective content can be displayed in your browser. Furthermore, these service providers may place additional cookies on your device, which collect information about your usage patterns, your interests, the device and browser you are using, and the time and duration of your session. These providers regularly use this data for analysis, statistics, and marketing purposes. This information may also be combined with information from other sources. This is particularly true if you have an account with the service provider and are logged in at the time of your session.

Please note that, depending on the country of origin of the service provider listed below, the data specified in more detail below may be transferred to and processed on servers outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR may not be guaranteed and that the enforcement of your rights may be impossible or significantly impeded.

Data affected:

Usage data (e.g., access times, websites clicked)
Communication data (e.g., information about the device used, IP address)

Affected persons: Users of our website

Purpose of processing: Displaying our websites, offering content, ensuring the operation of our websites

Legal basis: Consent via cookie consent banner, Art. 6 para. 1 lit. a GDPR, legitimate interests, Art. 6 para. 1 lit. f GDPR

We use the following content services:

Google Maps

We use Google Maps on our website. Google collects and processes the visitor's IP address in this process. When you visit a website that integrates Google Maps, your IP address and location data (the latter usually only without your consent) are transmitted to Google, regardless of whether you actually use Google Maps or are logged into your Google account. Your IP address will be associated with your Google account if you are logged in to it when visiting our website.

Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Headquarters in the EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://www.google.de/maps
Privacy Policy: https://policies.google.com/privacy
Opt-out option: https://tools.google.com/dlpage/gaoptout?hl=de

Google Web Fonts

With Google Web Fonts, we can integrate fonts (web fonts) into the design of our website and display them correctly in your browser. These web fonts are integrated via a server request to Google. From there, the fonts are compressed and sent to your browser, where they are decompressed. This server is typically located in the USA. When you visit one of our pages that uses Google Fonts, information about which of our web pages you have visited is transmitted to Google.

Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Headquarters in the EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://fonts.google.com/
Privacy Policy: https://policies.google.com/privacy

YouTube

We use YouTube components on this website to embed videos so that they can be played in your web browser when you visit our site. During your visit, both YouTube and Google are informed which page or subpage you have accessed by transmitting your IP address to Google's external servers in the USA. This information is transmitted regardless of whether the displayed videos are actually viewed or clicked, or whether you are logged into your YouTube or Google account. This information is collected and associated with your Google account if you are logged in when you visit our website.

Service provider: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
Website: https://www.youtube.com/
Privacy Policy: https://policies.google.com/privacy
Opt-out option: https://tools.google.com/dlpage/gaoptout?hl=de

Security measures

Furthermore, we implement state-of-the-art technical and organizational security measures to comply with data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties.

Updates and changes to this privacy policy

This privacy policy is currently valid and was last updated in April 2026. Due to changes in legal or regulatory requirements, it may be necessary to amend this privacy policy.

This privacy policy was created using the privacy policy generator from SOS Recht. SOS Recht is a service provided by Mueller.legal Rechtsanwälte Partnerschaft, based in Berlin.