Privacy Policy

1) Information on the Collection of Personal Data and Controller

1.1 Thank you for visiting our website and for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Metzgerwirt VIEH HELI e.U.
Helmut Unterberger
Au 17, 4822 Bad Goisern am Hallstättersee, Austria
Phone: +43 664 1129718
Email: ta.ilehheiv%40eciffo

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. inquiries or bookings), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.

2) Data Collection When You Visit Our Website (Server Log Files)

If you use our website for information purposes only, i.e. if you do not contact us in any other way, we only collect the data that your browser transmits to the server (so-called "server log files"). When you visit our website, we process the following data, which is technically necessary to display the website to you and to ensure its stability and security:

● page visited
● date and time of access
● amount of data transferred
● source/referrer
● browser used
● operating system used
● IP address used (shortened where applicable)

This processing is based on Art. 6(1)(f) GDPR and our legitimate interest in the stability, security and functionality of our website. The data is not passed on or used in any other way. We reserve the right to review the server log files retrospectively if there are specific indications of unlawful use. Hosting is provided by a service provider commissioned by us (see section "Hosting and Website Platform").

3) Cookies and Consent Management

To make your visit to our website more appealing and to enable certain features, we use cookies. These are small text files that are stored on your device. Some cookies are deleted at the end of your browser session (session cookies), while others remain on your device and allow us to recognize your browser on your next visit (persistent cookies).

We use cookies and similar technologies in the following categories:

● Strictly necessary cookies that are required to operate the website (e.g. storing your cookie settings).
The legal basis is Art. 6(1)(f) GDPR.
● Analytics and marketing cookies, which are only set with your consent (e.g. Google Analytics, Google Ads).

When you first visit our website, a consent banner asks for your consent. Cookies and services in the analytics and marketing categories are only activated after you have expressly given your consent. The legal basis for this is Art. 6(1)(a) GDPR in conjunction with Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). Your consent is voluntary and can be withdrawn at any time with effect for the future via the cookie settings on our website.

You can also set your browser to notify you when cookies are set, to decide on accepting them individually or to block cookies in general. If you do not accept cookies, the functionality of our website may be limited.

4) Contacting Us and Inquiry Forms

When you contact us (e.g. by email, by phone or via our inquiry forms), personal data is collected.

We offer the following forms on our website:
Vacation/room inquiry: name, phone number, email address, preferred arrival and departure dates, number of guests and your message.
Catering inquiry: the contact and inquiry details requested in the form.

We use this data exclusively to process and respond to your request and for the related technical administration. The legal basis is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your inquiry is aimed at concluding a contract (e.g. a booking or a catering order), Art. 6(1)(b) GDPR is an additional legal basis.

The data submitted via the forms is processed within our website platform (see section "Hosting and Website Platform"). Your data will be deleted as soon as your request has been fully processed, unless statutory retention obligations apply.

5) Booking Processing via the Online Booking System (iGumbi)

For direct bookings of rooms and apartments, we use the online booking system (internet booking engine) iGumbi. When you make a booking, the data required for this is processed, in particular your first and last name, address, contact details (email, phone), stay details (arrival and departure, room, number of guests) and the payment details required to guarantee and process the booking.

The purpose of the processing is to initiate, conclude and perform the accommodation contract. The legal basis is Art. 6(1)(b) GDPR. Where statutory retention and reporting obligations apply (e.g. guest registration and tax obligations, local tourist tax), the processing is based on Art. 6(1)(c) GDPR.

The booking system is provided by igumbi e.U., Erdbergstraße 10/47, 1030 Vienna, Austria, which processes the data on our behalf on the basis of a data processing agreement in accordance with Art. 28 GDPR.

6) Channel Manager (HotelSpider)

To manage availability and bookings across various sales channels and booking portals, we use a channel manager (HotelSpider). Booking-related data is synchronized via this system to the extent necessary to process and manage bookings.

The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and our legitimate interest in efficient booking and occupancy management in accordance with Art. 6(1)(f) GDPR. The HotelSpider platform is provided by Tourisoft Sàrl, Route de Champ-Colin 18, CH-1260 Nyon (VD), Switzerland. Processing is carried out on the basis of a data processing agreement in accordance with Art. 28 GDPR. The provider is based in Switzerland; the European Commission has issued an adequacy decision for Switzerland, which ensures an adequate level of data protection.

7) Payment Processing (Stripe)

For online bookings paid by card (Mastercard, VISA, American Express), payments are processed by the payment service provider Stripe. The data required for payment (in particular payment method and transaction data) is transmitted to Stripe.

The legal basis is Art. 6(1)(b) GDPR, insofar as this is necessary for processing the payment for your booking. The provider is Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Data may be transferred to Stripe, Inc. (USA); such transfers are safeguarded by the European Commission's standard contractual clauses and certification under the EU-U.S. Data Privacy Framework. For more information, please see Stripe's privacy policy at https://stripe.com/at/privacy.

8) Google Tag Manager

This website uses Google Tag Manager. This tool allows website tags to be managed centrally. Google Tag Manager itself does not set any cookies and does not collect any personal data; it triggers other tags (e.g. Google Analytics, Google Ads), which may in turn collect data. Tags that require consent are only triggered after you have given your consent via the consent banner. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

9) Google Analytics 4

If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies that enable an analysis of how you use the website. The information generated about your use of this website is usually transferred to a Google server and stored there. IP addresses are shortened or anonymized so that no direct personal reference can be established.

The legal basis is your consent in accordance with Art. 6(1)(a) GDPR. Data may be transferred to Google LLC (USA); such transfers are safeguarded by the European Commission's standard contractual clauses and Google's certification under the EU-U.S. Data Privacy Framework.

You can withdraw your consent at any time with effect for the future via the cookie settings on our website. For more information on data protection at Google, please see https://policies.google.com/privacy. The data sent from your device as part of Google Analytics is automatically deleted after the retention period we have set.

10) Google Ads Conversion Tracking and Remarketing

If you have given your consent, we use Google Ads services, in particular conversion tracking and remarketing, to measure the success of our online advertising and to show you interest-based ads. Cookies or similar technologies are used for this purpose. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis is your consent in accordance with Art. 6(1)(a) GDPR. Transfers to Google LLC (USA) are safeguarded by the European Commission's standard contractual clauses and the EU-U.S. Data Privacy Framework. You can withdraw your consent at any time with effect for the future via the cookie settings.

11) Google Maps

If you have given your consent, we embed maps from the Google Maps service on our website to show you our location and make it easier for you to find us. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you use Google Maps, your IP address may be transmitted to Google.

The legal basis is your consent in accordance with Art. 6(1)(a) GDPR. Transfers to Google LLC (USA) are safeguarded by the European Commission's standard contractual clauses and the EU-U.S. Data Privacy Framework. For more information, please see https://policies.google.com/privacy.

12) Hosting and Website Platform

Our website is hosted by a service provider and provided via a website platform. The data processed when you use the website (in particular server log files and data submitted via forms) is processed on the servers of these service providers.

Hosting/domain: World4You Internet Services GmbH, Hafenstraße 35, 4020 Linz, Austria.
Website platform: Weblium.

This processing is carried out to provide a functional and secure website on the basis of our legitimate interest in accordance with Art. 6(1)(f) GDPR. Where necessary, data processing agreements in accordance with Art. 28 GDPR have been concluded with these service providers.

13) Your Rights as a Data Subject

You have the following rights with regard to your personal data:
the right of access in accordance with Art. 15 GDPR to the data processed about you;
the right to rectification of inaccurate or incomplete data in accordance with Art. 16 GDPR;
the right to erasure in accordance with Art. 17 GDPR, provided the legal requirements are met;
the right to restriction of processing in accordance with Art. 18 GDPR;
the right to data portability in accordance with Art. 20 GDPR;
the right to object to processing in accordance with Art. 21 GDPR;
the right to withdraw consent given in accordance with Art. 7(3) GDPR with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

Right to object: Where we process your personal data on the basis of legitimate interests in accordance with Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority. The competent authority in Austria is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria, phone: +43 1 52 152-0, email: ta.vg.bsd%40bsd, www.dsb.gv.at.

14) Retention Period of Personal Data

The retention period of personal data depends on the respective legal basis, the purpose of processing and, where applicable, the respective statutory retention period (e.g. retention periods under commercial and tax law).

If data is processed on the basis of consent (Art. 6(1)(a) GDPR), it is stored until you withdraw your consent. If statutory retention periods apply to data processed in the context of contractual obligations (Art. 6(1)(b) GDPR), this data is deleted after the retention periods have expired, provided it is no longer required to perform the contract. If data is processed on the basis of legitimate interests (Art. 6(1)(f) GDPR), it is stored until you exercise your right to object, unless we can demonstrate compelling legitimate grounds for the processing. In all other cases, stored personal data is deleted once it is no longer necessary for the purposes for which it was collected or processed.

Last updated: July 2026. We reserve the right to update this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services.