DATA PROTECTION

Last updated: June 13, 2025

1. Controller

The controller under the General Data Protection Regulation (GDPR) is:
Daniel Josef Jehle, Chalet WildRuh
Address: Brandstattweg 7, 6273 Ried im Zillertal, Austria
Email: willkommen@chaletwildruh.tirol
Phone: +43 664 1647474

2. Data Protection Officer

A data protection officer has not been appointed, as this is not legally required.

3. General Information

We process personal data solely in accordance with legal regulations (e.g., GDPR, TKG, TTDSG). HTTPS connections on this website are encrypted by default. The website operator treats your personal data confidentially and takes privacy seriously.

4. Hosting & Webflow

This website is hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA.
Webflow collects server log data including IP addresses, browser type, timestamps, etc. This data is technically necessary to provide the website and is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest).

Webflow participates in the EU–US Data Privacy Framework and uses Standard Contractual Clauses (SCCs) under Art. 46 GDPR for data transfers to the USA. A Data Processing Agreement (DPA) under Art. 28 GDPR has been concluded with Webflow.

5. Cookies & Cookie Banner

We use the following types of cookies:

• Necessary cookies: for session handling, security, and website functionality (based on Art. 6(1)(f) GDPR).
• All other cookies are only set with your explicit consent (Art. 6(1)(a) GDPR and § 25 TTDSG).

You can revoke your consent at any time via the cookie banner. If you reject cookies, parts of the website may not function properly.

6. Web Analytics & Third-Party Tools

6.1 Google Maps

This site uses Google Maps, provided via API by:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Using Google Maps requires the processing of your IP address. This information is typically transferred to a Google server in the USA. We have no control over this data transmission.

Maps are used in the interest of an appealing presentation and to make our location easy to find (legitimate interest, Art. 6(1)(f) GDPR). Where consent is obtained (e.g., via the cookie banner), the processing is based on Art. 6(1)(a) GDPR and § 25 TTDSG, and can be revoked at any time.

Google processes data on U.S. servers and is subject to the EU–US Data Privacy Framework and SCCs.

More info:
https://policies.google.com/privacy
https://maps.google.com/help/terms_maps.html

6.2 Google Analytics

This website uses Google Analytics, a web analytics service by:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Google Analytics uses cookies to analyze website usage. The information (including your anonymized IP address) is usually transmitted to a Google server (also in the USA) and stored there.

IP anonymization is activated on this site: within the EU or EEA, your IP address is shortened before transmission. In exceptional cases, the full IP address may be sent to and shortened on Google servers in the USA.

Google Analytics is used based on your explicit consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG), given via the cookie banner. This consent can be revoked at any time with future effect.

Google may combine data with other services. Google is certified under the EU–US Data Privacy Framework and uses Standard Contractual Clauses for lawful transfers.

Further details:
https://support.google.com/analytics/answer/6004245?hl=en
https://policies.google.com/privacy

6.3 YouTube Videos

YouTube videos are embedded on this site. The provider is:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("YouTube").

We use YouTube's enhanced privacy mode, which according to Google does not place tracking cookies unless you actively play the video. Upon playback, personal data (e.g., IP address, device info) may be collected and linked to your Google account.

Processing is based on your explicit consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG) granted via the cookie banner or directly before video playback. Consent can be withdrawn at any time.

YouTube data may be processed on servers in the USA. Standard Contractual Clauses (SCCs) and the EU–US Data Privacy Framework apply.

More information:
https://policies.google.com/privacy

7. Contact Forms (Webflow)

If you contact us via our contact form, the data you provide (e.g., name, email, message) will be processed solely for the purpose of handling your inquiry and any follow-up communication.

Legal basis for processing:

• Art. 6(1)(a) GDPR – your explicit consent when submitting the form voluntarily
• Art. 6(1)(b) GDPR – if your inquiry relates to entering into a contract (e.g., booking request)

We do not share this data without your consent.

Processing by Webflow:
The form is technically provided by Webflow Inc. (USA). Data submitted through forms is processed via Webflow servers. A Data Processing Agreement (Art. 28 GDPR) has been concluded with Webflow. Webflow participates in the EU–US Data Privacy Framework, and SCCs apply.

Submitted data is deleted once your request is resolved and no legal obligations for retention exist.

8. Data Sharing & Transfers to Third Countries

We do not share your personal data with third parties unless:

• It is legally required or permitted (e.g., to public authorities),
• It is shared with service providers (e.g., Webflow, analytics tools) under a Data Processing Agreement.

Data transfers to the USA are based on the EU–US Data Privacy Framework or Standard Contractual Clauses (SCCs). The relevant mechanisms have been transparently disclosed.

9. Data Retention

• Log and system data: stored for technical operation, per Webflow’s retention schedule
• Contact form data: stored until the request is resolved, then deleted
• Analytics data: stored based on the tool, e.g., 6 months (if consent was granted)

10. Your Rights

You have the following rights at any time under the GDPR:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (“right to be forgotten”, Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object to processing (Art. 21)
• Right to withdraw consent (Art. 7(3))
• Right to lodge a complaint with a data protection authority
  (e.g., DSB Austria or BfDI Germany)

11. Changes to This Privacy Policy

We reserve the right to update this policy if new technologies, legal requirements, or third-party services are introduced. The latest update date will be displayed at the top of this page.