Privacy

Controller

Jürgen Deutschmann, Chalet Bergblick, Kreuztal 5a, 8812 Sankt Blasen, Austria.
Email: juergen.deutschmann@icloud.com

Visiting the website

When this website is accessed, technically necessary connection data such as the IP address, time, requested page, browser type and operating system may be processed in server logs. This is necessary for secure and stable operation.

Booking enquiries and contact

If you use the enquiry form, phone or email, we process the travel and contact details, number of guests, message and any payment preference you provide in order to check availability, answer your enquiry and prepare a possible booking. Form enquiries are stored in a protected area of our web hosting and sent by email to juergen.deutschmann@icloud.com. This preserves the enquiry if email delivery is delayed; no email program is opened automatically. The legal basis is taking steps prior to a contract under Article 6(1)(b) GDPR. Details are retained only for as long as required for the enquiry, booking and statutory obligations.

Direct booking and booking administration

When you make a binding booking through the direct-booking function, we process your name, email address, any phone number and message you choose to provide, arrival and departure dates, the number of adults and children and the children’s stated ages, your payment choice, price components and total price. We also store the booking reference, booking time, the accepted version of the booking terms and acceptance time, and technical transaction identifiers for secure processing. We need these data to calculate the price, check availability, conclude the booking, administer your stay and payments, and keep a record of the agreement. The legal basis is Article 6(1)(b) GDPR and, where processing is required by statutory obligations, Article 6(1)(c) GDPR.

Storage and booking confirmation

Booking data remain stored beyond your browser session in a protected area of our web hosting at World4You. Confirmation is emailed to the address you provide and to Jürgen Deutschmann at juergen.deutschmann@icloud.com. The hosting and email services used also process the data necessary for this purpose. We store delivery status and necessary information about delivery attempts so that confirmation can be resent if a temporary delivery problem occurs. Delayed email delivery does not delete a successfully confirmed booking. We retain the data only for as long as necessary for the booking, stay, payment, handling of possible claims and statutory retention obligations.

Availability calendar

To display occupied dates, our web server retrieves private calendar exports from Booking.com and Airbnb. Only occupied date ranges and the time of the latest check are sent to your browser, without names, booking references or other guest data. To block directly booked stays on those platforms, we provide a calendar export containing occupied date ranges, including preparation time, and technical calendar identifiers. This export contains no names, contact details, children’s ages, prices or internal booking references. Synchronisation is server-side, so the platforms do not receive your browser IP address through this process. The calendar display is indicative; a direct booking becomes binding only when it has been successfully completed.

Protection against misuse

We limit submissions to protect the enquiry form. For this purpose, the IP address is converted into a daily changing one-way checksum. The submission times stored for that limit are discarded after no more than one hour. Direct booking also limits technical requests, using checksums derived from the IP address and time-limited counters in a protected area. These data are used solely to prevent misuse and erroneous or duplicate booking submissions, not to analyse your browsing behaviour. The legal basis is our legitimate interest in secure operation under Article 6(1)(f) GDPR.

Cryptocurrency payment

BTC, ETH or USDC can be selected in the enquiry form as a non-binding payment preference. The form does not collect wallet addresses or blockchain data. The binding total remains fixed in EUR in our offer; the coin amount, exchange-rate time and network are agreed separately in writing before payment.

Online payments through Stripe

For a confirmed booking, we may provide an individual online payment link for the deposit or balance. Only if you use that payment method are the contact, booking, payment and transaction data necessary for payment processing transferred to Stripe Payments Europe, Limited and its affiliated Stripe companies. Depending on the processing step, Stripe acts as a processor and/or an independent controller. We do not receive your complete card number. The legal basis for payment processing is Article 6(1)(b) GDPR; legally required processing is based on Article 6(1)(c) GDPR and fraud prevention, where applicable, on legitimate interests under Article 6(1)(f) GDPR. Stripe may also process data outside the EEA using recognised safeguards. Further information, including Stripe’s retention periods, is available in Stripe’s privacy policy.

External links

Map, review, booking and payment platforms are opened only after you click the relevant link. The respective provider’s privacy terms apply from that point.

Cookieless reach measurement

We count only aggregated interactions with availability, phone, email, holiday-idea and destination links. No cookies, device identifiers, user profiles, IP addresses or complete referrers are stored in these statistics. Only the event type, target, language, page path and calendar day are recorded. Daily values are deleted after no more than 400 days. Processing is based on our legitimate interest in improving the website under Article 6(1)(f) GDPR.

Session cookie, cookies and marketing

Direct booking uses a technically necessary session cookie to securely associate the steps of your booking and protect forms against unauthorised submissions. It is sent only over an encrypted connection (Secure), cannot be read by JavaScript (HttpOnly), and is restricted to requests within our website (SameSite=Strict). It contains no names, payment details or advertising identifier. It is set as a session cookie and is not used for analytics or marketing. The public website does not use analytics or marketing cookies. The separately described aggregated click statistics remain free of such cookies. If you open an external Stripe payment link, Stripe’s technical procedures and privacy information apply to that payment page.

Your rights

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction, data portability and objection. Complaints may be submitted to the Austrian Data Protection Authority.

Further information

See the separate direct booking terms. Datenschutzinformationen auf Deutsch.