Privacy policy
1. Controller
The controller responsible for processing personal data on this website is:
Arlberg Chalets Betriebs GmbH
Arlbergstraße 46
6752 Wald am Arlberg, Austria
Phone: +43 664 9278035
Email: info@arlbergchalets.eu
For questions about data protection or to exercise your rights, please contact us using these details.
2. Principles and legal bases
We process personal data only in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). Depending on the purpose, we rely on the following legal bases:
| Legal basis | When we use it |
|---|---|
| Consent, Art. 6(1)(a) GDPR and § 165(3) TKG 2021 | Statistics, marketing and additional features that you select in the cookie banner |
| Contract and pre-contractual measures, Art. 6(1)(b) GDPR | Enquiries and bookings of chalets and apartments |
| Legal obligation, Art. 6(1)(c) GDPR | Retention obligations, e.g. under tax and registration law |
| Legitimate interest, Art. 6(1)(f) GDPR | Secure and stable operation of the website, necessary services |
You can withdraw any consent you have given at any time with effect for the future via the privacy icon at the bottom left of every page.
3. Hosting and server log files
This website is hosted by hostpower (iloweb e.U., owner Oliver Fleps, Mozartstraße 3, 6850 Dornbirn, Austria). The provider processes data on our behalf under a data processing agreement (Art. 28 GDPR).
When you access the website, the server automatically stores technical data in log files: IP address, date and time, page accessed, referrer URL, browser and operating system. This is necessary for secure operation and error analysis (Art. 6(1)(f) GDPR). The log files are deleted as soon as they are no longer needed for these purposes, unless they are required to investigate a security incident.
We use Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA) to deliver and secure the website. Your IP address and browser data are routed via Cloudflare servers; Cloudflare sets the technically necessary cookie cf_clearance for this purpose. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).
4. Cookies and consent management
Without your consent, we only set technically necessary cookies. All other services are only loaded once you agree to the respective category in the cookie banner. The categories are: Necessary, Statistics, Marketing and Additional features.
To manage your consent, we use the consent management platform TRUENDO (truendo.com). TRUENDO stores your choice in the cookie truendo_cmp together with an anonymised record of consent. Your IP address and browser data are processed in the course of this; the banner's scripts and fonts are loaded from TRUENDO servers. The legal basis is our legal obligation to be able to demonstrate consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).
The multilingual display of the website may set a technically necessary cookie to store your selected language.
An up-to-date list of all services and cookies used, including their storage periods, can be found in the privacy settings (icon at the bottom left). There you can change or withdraw your choice at any time.
5. Contact, enquiries and bookings
Contact form, email and phone: When you contact us, we process the information you provide (name, email address, phone number, travel dates, message) in order to answer your enquiry. The legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR). Enquiries submitted via the contact form are sent to us directly by email and are not additionally stored on the website. If no booking results, we delete the data once your enquiry has been fully dealt with.
Online booking via Casablanca: For availability checks and bookings we use the booking system of CASABLANCA hotelsoftware GmbH (Öde 32, 6491 Schönwies, Austria). The data required for the booking is processed: name, address, contact details, travel dates, number of guests and payment information. Casablanca acts on our behalf (Art. 28 GDPR) and stores the data in data centres within the EU (Microsoft Azure). Casablanca uses the service providers Mailgun and Lox24 to send booking confirmations and invoices, and Datadog for technical monitoring. For details, please see Casablanca's privacy notice at www.casablanca.at. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR).
Your stay: For your stay, we are legally obliged to record certain data in the guest register under the Austrian Registration Act (Meldegesetz) and to retain accounting records for seven years (§ 132 of the Austrian Federal Fiscal Code, BAO). The legal basis is Art. 6(1)(c) GDPR.
Owners of the accommodation: The chalets and apartments belong to individual owners who have commissioned us with their marketing and management. Where necessary to arrange your stay, we pass your booking data on to the owner of the booked accommodation (Art. 6(1)(b) GDPR).
6. Services used
The following services are only loaded after you have consented to the respective category, except for those marked as "Necessary".
| Service | Provider | Category | Purpose |
|---|---|---|---|
| TRUENDO | TRUENDO | Necessary | Consent management |
| Cloudflare CDN | Cloudflare, Inc., USA | Necessary | Delivery and protection of the website |
| Casablanca | CASABLANCA hotelsoftware GmbH, Austria | Necessary | Availability checks and bookings |
| Google Tag Manager | Google Ireland Limited | Statistics | Management of statistics and marketing services |
| Google Analytics 4 | Google Ireland Limited | Statistics | Analysis of website usage |
| Google Ads with conversion tracking | Google Ireland Limited | Marketing | Measuring the success of advertisements |
| Google Maps | Google Ireland Limited | Additional features | Display of the directions map |
| Matterport | Matterport, Inc., USA | Additional features | Virtual 3D tours of the accommodation |
| tourly | iloweb e.U., Austria | Additional features | Virtual 3D tours, e.g. of the wellness area |
Address of Google: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager does not set any cookies itself, but processes your IP address when it is loaded. We therefore only load it after you have given your consent.
Google Analytics 4 records how you use the website, e.g. pages viewed, time spent, device and approximate location. IP addresses are truncated by Google within the EU and are not stored. The data is deleted at the end of the retention period set in Google Analytics. We use Google Consent Mode: without your consent, no Analytics cookies are set.
Google Ads conversion tracking measures whether visitors complete an enquiry or booking after clicking on one of our ads. For this purpose, cookies are set and data is transmitted to Google.
Google Maps: The map on the contact page is only loaded after you have consented to "Additional features". Your IP address and browser data are then transmitted to Google, and Google may set cookies.
Matterport: The 3D tours on the accommodation pages are only loaded after you have consented to "Additional features". Your IP address and browser data are then transmitted to Matterport.
tourly: Further 3D tours, e.g. of the wellness area, are provided by tourly, a brand of iloweb e.U. (Oliver Fleps, Mozartstraße 3, 6850 Dornbirn, Austria). They are only loaded after you have consented to "Additional features". Your IP address and browser data are then transmitted to tourly. The tour viewer uses the analytics tool Usermaven to evaluate usage. Further information is available from tourly at info@tourly.at.
7. Fonts, libraries and social media links
The website's fonts, icon fonts and JavaScript libraries are hosted on our own server. No connection to Google or other third parties is established for them when the website loads. The exception are the icon fonts of the booking system, which are loaded by Casablanca (see section 5).
Our website contains links to our profiles on Instagram and Facebook (both Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). These are simple links, not embedded content. Data is only transmitted when you click a link and visit the respective platform, where Meta's privacy policy applies.
8. Transfers to third countries
Some providers (Google, Cloudflare, Matterport) may process data in the USA. Such transfers are based on the European Commission's adequacy decision on the EU-US Data Privacy Framework, insofar as the provider is certified under it, and otherwise on standard contractual clauses (Art. 46 GDPR). Despite these safeguards, access to the data by US authorities cannot be ruled out.
9. Storage period
We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. The storage periods of cookies can be found in the privacy settings.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR). To do so, please use the contact details in section 1.
Right to object (Art. 21 GDPR): Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims. You may object to processing for direct marketing purposes at any time without giving reasons.
This website uses TLS encryption, recognisable by "https://" and the padlock icon in your browser's address bar. This prevents third parties from reading the data you transmit to us.
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
Last updated: October 2026
