Privacy Policy

Version: August 2026

​

1. Controller

The controller responsible for the processing of personal data on this website is:

​

Heimathaus Dengg Appartements
Mauterndorf
Austria

E-mail: info@heimathaus-dengg.at
Phone: +43 660 1900029

​

Further information can be found in our Legal Notice (Imprint).

​

2. General Information

We take the protection of your personal data seriously. We process personal data exclusively in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the relevant provisions of the Austrian Telecommunications Act 2021 (TKG 2021).

This Privacy Policy informs you which personal data we process when you use our website or contact us or make a booking, for what purposes this processing takes place and what rights you have.

​

3. Visiting Our Website and Technical Data

When you visit our website, technically necessary data is processed that is required to provide and securely operate the website.

This may include, in particular:

• IP address

• date and time of access

• pages visited

• referrer URL

• browser type and version

• operating system

• technical information about the device used

• amount of data transferred

• technical status and error information

This processing serves the technical provision, security and stability of our website.

The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in operating a secure and functional website.

​

4. Hosting and Technical Provision by Wix

Our website is created and technically operated using Wix.com.

Provider:

​

Wix.com Ltd.
40 Namal Tel Aviv St.
Tel Aviv 6350671
Israel

​

As part of the technical operation of the website, Wix may process personal and technical data of website visitors.

Wix uses technically necessary cookies and similar technologies for this purpose. The specific technical data processed may depend on the functions used on our website.

Where Wix processes personal data on our behalf, this is carried out on the basis of an appropriate data processing agreement.

Further information about data processing by Wix can be found in Wix's Privacy Policy.

​

5. Cookies and Consent Management

Our website uses cookies and similar technologies.

Cookies are small files that may be stored on your device. They are used in particular to ensure the technical functionality of the website and to save settings you have selected.

​

Technically Necessary Cookies

Technically necessary cookies or similar storage technologies may be used without prior consent where they are strictly necessary to provide the website or a function expressly requested by you.

​

Non-Essential Cookies and Services

For cookies and similar technologies that are not technically necessary, we obtain your consent before they are used via our cookie consent banner.

The Austrian Data Protection Authority states that consent is generally required for cookies that are not technically necessary and that such consent must be obtained before the cookie is set or accessed.

You can change or withdraw your consent at any time with effect for the future via the cookie settings on our website.

​

6. Contact by E-Mail or Telephone

If you contact us by e-mail or telephone, we process the personal data you provide.

This may include, in particular:

• name

• e-mail address

• telephone number

• content of your enquiry

• requested period of stay

• other information you voluntarily provide

The processing serves to handle your enquiry and, where applicable, to prepare or perform an accommodation contract.

The legal basis is Art. 6(1)(b) GDPR where processing is necessary for the performance of pre-contractual measures or a contract.

For other enquiries, processing is based on Art. 6(1)(f) GDPR, based on our legitimate interest in handling enquiries.

​

7. Contact Form

Our website provides a contact form.

When you use the contact form, the data you enter is transmitted to us.

This may include, in particular, your name, e-mail address, telephone number, requested period of stay and the content of your enquiry.

The processing serves to handle your enquiry and, where applicable, to prepare an accommodation contract.

The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to the preparation of a contract. Otherwise, processing is based on Art. 6(1)(f) GDPR.

The contact form is technically provided by Wix.

​

8. Online Bookings via Smoobu

We use the booking software Smoobu to manage and process online bookings.

Provider:

​

Smoobu GmbH
Pappelallee 78/79
10437 Berlin
Germany

​

Smoobu provides a software-as-a-service platform for managing holiday accommodation and bookings.

When you use our booking system, the following data may be processed in particular:

• first and last name

• address

• e-mail address

• telephone number

• period of stay

• number of guests

• booking and reservation data

• other information entered by you as part of the booking

The processing serves to handle booking enquiries, conclude and perform the accommodation contract and manage your reservation.

The legal basis is Art. 6(1)(b) GDPR.

Where legal obligations apply, processing is additionally based on Art. 6(1)(c) GDPR.

Smoobu processes the guest data provided by us as a processor within the scope of the agreed services.

Further information about data processing by Smoobu can be found in the Smoobu Privacy Policy.

​

9. Guest Data and Statutory Registration Requirements

In connection with a stay, we process the data of our guests that is necessary to perform the accommodation contract.

In addition, we are legally required to collect and retain certain guest data and, where applicable, transmit it to the competent authorities.

Where processing is necessary to comply with a legal obligation, the legal basis is Art. 6(1)(c) GDPR.

The relevant data is stored in accordance with the statutory retention periods.

​

10. Google Maps

We use Google Maps on our contact page to display our location and assist you in finding your way to us.

Provider:

​

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

​

Google Maps is not loaded automatically when you access the contact page.

Instead, a placeholder and consent button are initially displayed. A connection to Google, and therefore a possible transmission of personal data to Google, is only established when you expressly activate Google Maps.

This may include the transmission of your IP address and technical information about your device to Google.

Google Maps is activated on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).

You may refuse to activate Google Maps. The rest of the website can still be used without activating the map.

Further information about data processing by Google can be found in Google's Privacy Policy.

​

11. WhatsApp

Our website contains a link for contacting us via WhatsApp.

If you click this link, you leave our website and are redirected to WhatsApp.

From this point onwards, personal data is processed by the respective provider in accordance with its own privacy policy.

We have no complete control over the data processing carried out there.

Contacting us via WhatsApp is voluntary. Alternatively, you can contact us by e-mail or telephone.

​

12. Instagram and Facebook

Our website contains links to our profiles on Instagram and Facebook.

These links are integrated using functions provided by Wix.

No Instagram or Facebook content is automatically loaded on our website, and no social media plugin is used that establishes a connection to Instagram or Facebook when you merely visit our website.

Only when you click on one of these links do you leave our website and access the respective platform.

From that point onwards, the respective provider is responsible for the processing of your personal data.

The provider of these services is:

​

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

​

Further information can be found in Meta's and Instagram's respective privacy policies.

​

13. Recipients of Personal Data

Personal data may, where necessary for the respective purposes, be processed by the following service providers and recipients in particular:

• Wix.com Ltd. – technical provision and hosting of the website

• Smoobu GmbH – booking management and associated processing of guest data

• technical service providers engaged by us where necessary to provide our services

• tax advisers or other professional advisers, where applicable

• competent authorities where we are legally required to disclose data

Personal data will not be disclosed for advertising purposes without an appropriate legal basis.

​

14. Transfers to Third Countries

When using certain international service providers, personal data may be processed outside the European Union or the European Economic Area.

Any transfer of personal data to a third country is carried out in accordance with the requirements of Articles 44 et seq. GDPR.

Where required, appropriate safeguards are used for such transfers, such as an adequacy decision by the European Commission or appropriate Standard Contractual Clauses.

​

15. Data Retention

We generally retain personal data only for as long as necessary for the respective purpose.

In addition, statutory retention and documentation obligations apply, in particular under tax and commercial law.

After the applicable retention periods have expired, the data will be deleted unless there is another legal basis for continued storage.

​

16. Your Rights

Subject to the applicable legal requirements, you have the following rights in particular:

• right of access to your personal data

• right to rectification of inaccurate data

• right to erasure

• right to restriction of processing

• right to data portability

• right to object to certain processing activities

• right to withdraw consent with effect for the future

The lawfulness of processing carried out before withdrawal of consent remains unaffected.

To exercise your rights, you can contact us at any time using the contact details provided above.

​

17. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the competent data protection supervisory authority.

In Austria, this is:

​

Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria

​

Website: www.dsb.gv.at

​

18. Data Security

We implement appropriate technical and organisational measures to protect personal data against loss, destruction, manipulation, unauthorised access and other unauthorised processing.

However, despite appropriate security measures, the transmission of data over the Internet may involve security risks. Absolute protection cannot be guaranteed.

​

19. Updates to this Privacy Policy

We reserve the right to amend this Privacy Policy if legal requirements, technical circumstances or the services used on our website change.

The current version published on our website shall apply.

​