1. Who is responsible

When it comes to your data,we are your point of contact:

Just write to us if you want to know something. A real person will answer you – Pauline,Julia or Daniel.

2. Your booking

This is the reason why we have data from you at all.

When you enquire or book,we need your name,your address and contact details,the travel period,how many of you there are and how old – plus things like dogs travelling with you or roughly when you will arrive. Without these details we cannot reserve a hut for you. The legal basis is Art. 6 (1) (b) GDPR:we need them to fulfil our contract with you.

What your host receives

We only act as an intermediary – you conclude the rental contract directly with the hut owner. So that he can welcome you,we pass on to him exactly what relates to your booking. He does not receive more,and he may not use it for anything else either.

What we do not do:

• We do not pass on your data for advertising – neither to him nor to anyone else.
• We do not sell any data. Address dealers get nothing from us.
• Other hosts learn nothing about your enquiry or booking.
• Booking portals,review platforms and advertising networks likewise do not.

ID documents on arrival

Every host in Austria must register his guests – the law requires this,not him. That is why you bring valid ID documents on arrival,also for everyone who joins later. This takes place directly between you and him;we never get to see this data. The legal basis is Art. 6 (1) (c) GDPR.

Payment

You pay by bank transfer or,if you have agreed this beforehand,in cash on site. We do not offer card payment at all – so your credit card or direct debit data never ends up with us. With a bank transfer we only see what every bank sends along:name,IBAN,amount,payment reference. We need this to allocate and record your payment.

3. When you write to us or call us

Your message and your contact details stay with us until your matter is dealt with – and a little beyond that,in case you get back to us about it. None of it is passed on. The legal basis is Art. 6 (1) (b) GDPR when it concerns a booking,otherwise Art. 6 (1) (f) GDPR.

Via WhatsApp.If you write to us via WhatsApp,we process your phone number and the content of your message in order to answer your request. The provider is WhatsApp Ireland Limited,Merrion Road,Dublin 4,Ireland;data may be transferred to the USA in the process. Meta is certified under the EU-US Data Privacy Framework. If you are not comfortable with that,you can reach us just as well by email or phone – simply pick whichever you prefer.

4. When you are just browsing the site

Even then our server stores a few technical details:which browser and operating system you use,which page you came from,when you were here and your IP address. This is not tracking – without these details we could neither find faults nor fend off attacks. The legal basis is Art. 6 (1) (f) GDPR. We do not combine this with other data.

The connection to our site is encrypted. You can recognise this by the „https://“ and by the padlock symbol in the address bar of your browser.

5. Who else is involved

We do not do everything ourselves. For the operation of our website,our email inbox,the technical maintenance of the site and our booking system we work with specialised service providers.

All of them are contractually bound by our instructions – this is called processing on our behalf (Auftragsverarbeitung,Art. 28 GDPR). They may use your data exclusively for the task we give them. Not for their own purposes,not for advertising,not for reselling.

You want to know who exactly that is?Send us a short email and we will tell you.

6. Cookies – and what you say about them

A few cookies are technically necessary,otherwise the site does not work. We set these without asking,because it does not work without them (Art. 6 (1) (f) GDPR).

Everything else – statistics,maps,videos,advertising – stays off until you say yes. The legal basis is then your consent under Art. 6 (1) (a) GDPR and § 165 (3) TKG 2021.

For this selection we use TRUENDO,a consent tool of TRUENDO Technologies GmbH,Leonard-Bernstein-Straße 10,1220 Vienna. On your first visit it shows you the selection dialogue,remembers your decision and until then blocks everything that is not necessary. What is stored are your selection,a timestamp and technical details about your device – we need this as proof that you really consented (Art. 6 (1) (c) GDPR).

Changed your mind? No problem. Via the small icon at the bottom left of every page you can change your decision at any time. And in your browser you can in any case generally restrict or delete cookies – although then possibly not everything on our site will work any more.

7. What only runs if you say yes

These services remain blocked until you consent in the selection dialogue. You can revoke this at any time – the legal basis is always Art. 6 (1) (a) GDPR and § 165 (3) TKG 2021.

• Google Analytics 4(Google Ireland Ltd.,Dublin) – shows us which huts and pages are well received. Your IP address is shortened in the process.
• Google Tag Manager,Google Ads with remarketing and conversion tracking(Google Ireland Ltd.) – with this we deliver our advertisements and measure whether they achieve anything.
• Google Maps(Google Ireland Ltd.) – the maps on our hut pages,so you can see where you are headed.
• YouTube in extended privacy mode(Google Ireland Ltd.) – for embedded videos.
• Instagram(Meta Platforms Ireland Ltd.,Dublin) – for content from our profile.

Data to the USA.With Google and Meta your data may be transferred to the USA. Both companies are certified under the EU-US Data Privacy Framework;in addition,the standard contractual clauses of the EU Commission apply. For embedding Instagram we are jointly responsible with Meta (Art. 26 GDPR);you can find the agreement on this at facebook.com/legal/controller_addendum.

Fonts.Our fonts are stored locally on our own server. As a result,no connection to Google is established when the page loads.

8. Wishlist

If you save huts to your wishlist,this stays in your browser. Nothing is transmitted to us – so we do not know what is on your list.

9. How long we keep your data

• Bookings and invoices:7 years. Tax law requires this of us (§ 132 BAO). After that we delete or anonymise them.
• Enquiries without a booking:until your matter is dealt with.
• Server log files:only briefly,for operation and security.
• Your cookie decision:until you change or revoke it.

10. Your rights

It is your data – you decide about it. You can at any time:

• ask which data we have about you
• have it corrected if something is wrong
• have it deleted
• have the processing restricted
• take your data with you in a common format
• revoke a consent – this applies from that moment on,everything before remains lawful

Right to object

An email to info@urlaubshuetten.comis enough. You do not need a form for this,and no fees are charged either.

Automated decisions about you or profiling within the meaning of Art. 22 GDPR do not happen with us.

11. If something bothers you

Please tell us first – usually this is resolved with a phone call. However,you can also complain directly to the supervisory authority at any time;you do not need to ask us for that:

12. Advertising emails to us

Our contact details appear in the legal notice because the law requires it – not so that someone can send us unsolicited advertising. We expressly object to this use and reserve the right to take legal action.

Version:23.07.2026