Privacy policy

This privacy policy explains which personal data are processed when you use our website. Personal data are information relating to an identified or identifiable natural person (e.g. name, address, email address, IP address, user behaviour).

We process personal data in particular on the basis of Art. 6(1) GDPR – e.g. for performance of a contract or pre-contractual measures (lit. b), due to legal obligations (lit. c), based on consent (lit. a), or to safeguard legitimate interests (lit. f), provided that the rights of the data subject do not override those interests.

When you use our website for information purposes only – i.e. if you do not register and do not otherwise transmit information to us – we process technically necessary data that your browser transmits. This data is required in order to display our website to you in a stable and secure manner (Art. 6(1) lit. f GDPR).

Our website is operated on infrastructure of Amazon Web Services (AWS). AWS processes data on our behalf for the provision, delivery and protection of the website (processing under Art. 28 GDPR).

Server log data are processed for troubleshooting, detecting abuse and attacks and for system security, and are generally stored for 30 days and then deleted, unless longer retention is required in individual cases for security reasons.

If you contact us by email or via a contact form, we process the data you provide (e.g. name, email address, optionally telephone number and the content of the message) in order to handle your request and answer follow-up questions.

The legal basis is regularly Art. 6(1) lit. b GDPR (pre-contractual measures or contract performance) or – in the case of general inquiries – our legitimate interest in efficient communication (Art. 6(1) lit. f GDPR).

For email communication, we use Microsoft 365 as a service provider (processing under Art. 28 GDPR).

The form submission is technically handled by an Amazon Web Services component (Amazon API Gateway and AWS Lambda, Europe region) on our behalf. If you join the waiting list, we will notify you later on the basis of your consent (Art. 6(1)(a) GDPR), which you may withdraw informally at any time.

We store data from inquiries until processing is completed, but no longer than 12 months, unless statutory retention obligations require longer storage.

To protect against automated spam, the form contains a field that is invisible to you as well as a check of how long it took to fill in. No additional personal data is collected and no cookies are set.

This website uses no cookies, no tracking, no web analytics and no advertising or social media pixels. No profiling takes place and no third-party services are loaded that could evaluate your behaviour.

That is also why there is no cookie banner on this website: there is nothing for you to consent to. Should this change as the site grows, we will obtain your consent beforehand and update this policy.

The fonts used (Yeseva One, Josefin Sans, Geist Mono) are served from our own server. There is no connection to Google Fonts or any other external font service.

This website links to offerings of the Wilderer Group, in particular wilderer-chalets.tirol and wilderer.group. The policies published there apply to the content and data protection of those sites. Clicking an external link transmits data to the operator of the target site; we have no influence over that processing.

Our services are generally intended for adults. Persons under 18 should not submit personal data to us without the consent of a parent or guardian.

You have extensive rights with regard to the processing of your personal data. A summary of the most important rights under the GDPR can be found below.

An informal message to the contact details listed under “Controller” is enough to exercise your rights. This does not incur any costs for you.

We implement technical and organisational security measures to protect your data against manipulation, loss, unauthorised access or other misuse. This includes in particular encrypted transmission of content where technically provided (e.g. via TLS/SSL).

Our security measures are regularly reviewed and continuously improved in line with technological developments.

We update this privacy policy as soon as changes to the data processing we carry out or to legal requirements make this necessary. The version currently published on this website applies in each case. As this website is still under construction, changes are to be expected.