Apartment ChristlApartment Christl
Enquire
DEENIT

Legal

Privacy Policy

1. Controller (Art. 13 GDPR)

Apartment Christl
Oberrotte 83
A-9963 St. Jakob in Defereggental
Austria – East Tyrol
Email: in**@**************tl.at
Phone: +43 664 5970515
Website: https://apartmentchristl.at

2. Principles of data processing

We process personal data only where permitted by law or where you have consented. The legal bases for processing follow from Art. 6 of the General Data Protection Regulation (GDPR). We collect only the data necessary for the respective purpose (data minimisation, Art. 5 GDPR).

3. Hosting & server log files

Our website is operated by a professional hosting provider. When you visit our website, technical data is automatically collected and stored in server log files:

  • Browser type and version
  • Operating system used
  • Referrer URL (previously visited page)
  • IP address of the requesting device
  • Date and time of the server request

Purpose: ensuring technical operation and defending against attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
Storage period: log files are automatically deleted after 7 days at the latest, unless there are concrete indications of unlawful use.

4. Contact form

If you send us an enquiry via the contact form, the data you provide (name, email address, travel dates, number of guests, message) is stored for the purpose of processing the enquiry and for any follow-up questions.

Purpose: handling your booking enquiry or request.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
Storage period: enquiries are deleted after they have been fully processed, at the latest after 3 years, unless statutory retention obligations apply.

Data is not passed on to third parties without your express consent.

Occupancy calendar & booking management

To manage availability we operate an internal occupancy calendar. Via a calendar synchronisation (iCal), bookings from distribution channels (Feratel/Deskline, Booking.com, Airbnb) are imported and occupancy is synchronised. Booking-related data (e.g. surname and period) may be processed and stored internally only. No personal data is published on the website – at most the status „available/booked“ is shown publicly. The legal basis is Art. 6(1)(b) GDPR (initiation/performance of the accommodation contract) and (f) (efficient occupancy management).

5. Cookies

Our website uses cookies – small text files stored in your browser. We distinguish between:

  • Strictly necessary cookies: essential for the operation of the website. These are set without consent (Art. 6(1)(f) GDPR).
  • Analytics cookies: only after your express consent (Art. 6(1)(a) GDPR).
  • Marketing cookies: only after your express consent (Art. 6(1)(a) GDPR).

The exact list of all cookies and services used can be found in the cookie statement and in the cookie consent banner. You can withdraw your consent at any time via the „Manage consent“ button.

6. Google Analytics 4 (GA4)

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (or Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Google Analytics 4 sets cookies that enable an analysis of your use of this website. The information generated (including your truncated IP address) is stored on Google servers, possibly also in the USA.

Purpose: analysis of user behaviour to improve our offering.
Legal basis: Art. 6(1)(a) GDPR (consent). Google Analytics is only activated after your express consent.
Storage period: user data is deleted in GA4 after 14 months by default.
Third-country transfer: Google LLC is certified under the EU-US Data Privacy Framework. Further information: Google Analytics privacy.

You can withdraw your consent at any time via the cookie banner („Manage consent“). You can also install the Google Analytics opt-out browser add-on.

7. Fonts (self-hosted)

The fonts used on this website (Fraunces, Inter) are hosted locally on our own server. No connection to Google servers is established and no data (such as your IP address) is transmitted to third parties when the fonts are loaded.

8. Google Maps

To display our location we embed map material from the „Google Maps“ service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). When a map loads, data – in particular your IP address – is transmitted to Google and may be processed on servers in third countries (USA). Embedding only takes place after your consent via our consent tool (Art. 6(1)(a) GDPR); you can withdraw your consent at any time with effect for the future. Further information: https://policies.google.com/privacy.

9. Social media links (Facebook, Instagram, LinkedIn)

Our website contains links to our social media profiles (Facebook, Instagram, LinkedIn). These are simple hyperlinks – when clicked, you are redirected to the respective platform. Data is only transmitted to the platform when you click the link.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in public relations).

10. SSL encryption

For security reasons, this website uses SSL encryption (recognisable by „https://“ and the padlock symbol in the address bar). Transmitted data cannot be read by third parties.

11. Processors

We use external service providers as processors (e.g. hosting provider, Google Analytics). Data processing agreements pursuant to Art. 28 GDPR have been concluded with them, ensuring that data is only processed on our instructions.

12. Your rights as a data subject (Art. 15–22 GDPR)

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR), unless statutory retention obligations apply
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR) at any time with effect for the future

To exercise your rights, please contact: in**@**************tl.at

13. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the Austrian Data Protection Authority if you believe that the processing of your personal data infringes the GDPR:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Email: ds*@****gv.at
Web: www.dsb.gv.at

14. Objection to advertising emails

We hereby object to the use of contact data published under the imprint obligation for sending unsolicited advertising. We reserve the right to take legal action in the event of unsolicited advertising.

As of: May 2026 · This privacy policy applies to the website www.apartmentchristl.at. Please note: the German version is legally binding.