Personal data is only collected if you voluntarily provide it to us (e.g. when registering for our newsletter, making an inquiry via the website, an online booking, etc.). No personal data is collected beyond this.

Personal data that you submit electronically on this website, such as your name, email address, address, or other personal details, will only be used by us for the specified purpose, securely stored, and not shared with third parties. The provider automatically collects and stores information on the web server such as the browser used, operating system, referring page, IP address, time of access, etc. These data cannot be assigned to specific individuals without checking additional data sources, and we do not further analyse these data unless there is unlawful use of our website.

The EU General Data Protection Regulation, the Data Protection Act 2000, and the Data Protection Amendment Act 2018 serve to protect the right to personal data privacy. We process your data exclusively based on the legal provisions (GDPR, Data Protection Act 2018, Telecommunications Act 2003).

We are particularly committed to protecting and securely storing all personal data you entrust to us. This document provides you with detailed information on how we use and process your personal data.

1. We require the collected personal data to fulfil contracts, process billing, assert contractual claims, provide customer service, and for advertising purposes. The data is collected, stored, processed, and used for these purposes.

1. Your information, including personal data provided through our contact form, will be transmitted to us via our own mail server for processing your inquiry, further processed, and stored by us. This data will not be collected or shared without your consent. Without this data, we cannot process your requests.

2. Data processing is carried out based on the legal provisions of § 96 para. 3 TKG as well as Art. 6 para. 1 lit. a (consent) GDPR.

1. You can subscribe to our newsletter on the website via a double opt-in process. After registering, you will receive an email asking you to confirm your subscription. Without providing this confirmation, we cannot send you our newsletter. You can unsubscribe at any time by clicking the unsubscribe link at the bottom of each newsletter.

2. We commission processors to send our newsletter. They have committed to complying with applicable data protection regulations. A data processing agreement has been concluded in accordance with Article 28 GDPR.

3. Data processing is based on the legal provisions of § 96 para. 3 TKG as well as Article 6 para. 1 lit. a (consent) GDPR.

1. Cookies, other tracking technologies, and features of the web analytics service Google Analytics (for more information, see below) may be used on our website in various ways.

2. Cookies are small text files that enable the recognition of users and the analysis of your use of our websites. The information generated is transmitted to the provider's server and stored there. They help make our online presence more user-friendly, effective, and secure overall. Additionally, cookies are used to measure page visit frequency and for general navigation.

We use the "Google Tag Manager" from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) on our website. The "Google Tag Manager" is a solution that allows website tags and other third-party elements to be managed via an interface.

To tailor our website optimally to user interests, we use "Google Analytics", a web analytics service provided by Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; Google, LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Analytics uses so-called cookies, which are stored on your device for recognition purposes, as well as similar tracking methods to identify devices such as tracking pixels, device fingerprinting, and programming interfaces (e.g., APIs and SDKs) to process information from your device. For this purpose, your device is assigned a randomly generated identification number (cookie ID/device ID). Using these technologies, Google processes the information generated about your use of our website and access data for statistical analysis – for example, viewing a specific webpage, number of unique visitors, entry and exit pages, duration of stay, click, swipe and scroll behaviour, button presses, newsletter sign-ups, bounce rate, and similar user interactions. It can also be determined whether different devices belong to you or your household. Access data includes in particular the IP address, browser and device information, cookie ID/device ID, the previously visited website, as well as the date and time of the server request.

In Google Analytics 4 systems, individual IP addresses are neither logged nor stored. At the moment the IP address is captured by Google in special local data centres within the EU, your IP address is used to determine location information. Afterwards, the IP address is deleted before the access data is stored in a data centre or on a server for Google Analytics. Google Analytics does not provide precise geographic location data.

We use the web analytics service "Google Analytics" together with Google's remarketing feature "Google Analytics Advertising" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Analytics Advertising employs technologies such as "cookies", "tracking pixels", and "device fingerprinting" to track specific user behaviour on websites. This also involves processing information stored on users' devices. Using embedded "tracking pixels" on websites and "cookies" stored on users' devices, Google processes the information generated about the use of our website by users' devices and access data for the purpose of statistical analysis — for example, that a particular webpage was accessed or a newsletter subscription was made — and for the purpose of displaying personalised advertising based on this data. For these purposes, it can also be determined whether different devices belong to you or your household. The additional feature "Google Analytics Advertising" enables the creation of audiences based on specific cookies or mobile advertising IDs, which can later be used for renewed personalised advertising. Audience criteria may include, for example: users who viewed products but did not add them to a shopping cart, users who added items to a cart but did not complete the purchase, or users who purchased certain items. Each audience consists of at least 100 users. Using the "Google Ads" tool, interest-based ads can then be displayed in search results. This allows users of websites to be recognised on other websites within the Google advertising network (in Google Search or on "YouTube", so-called "Google Ads" or on other websites) and targeted accordingly.

This website uses Google Maps to display map information. When using Google Maps, Google also collects, processes, and uses data about how visitors use the Maps features on the website. For more information about data processing by Google, please refer to Google's privacy policy at www.google.at/intl/de/policies/privacy/. There, you can also change your settings in the privacy centre to manage and protect your data.

Our website uses so-called social plugins ("plugins") from the bookmarking service AddThis, operated by AddThis LLC, Inc., 8000 Westpark Drive, Suite 625, McLean, VA 22101, USA ("AddThis"). These plugins are usually marked with an AddThis logo, for example, a white plus sign on an orange background. An overview of the AddThis plugins and their appearance can be found here: www.addthis.com/get/sharing. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the AddThis servers. The content of the plugin is transmitted directly from AddThis to your browser and embedded into the page. By embedding the plugin, AddThis receives information that your browser has accessed the corresponding page on our website and stores a cookie on your device to identify your browser. This information (including your IP address) is transmitted directly from your browser to an AddThis server in the USA and stored there.

AddThis uses this data to create anonymised user profiles, which serve as the basis for personalised and interest-based advertising to visitors of websites with AddThis plugins. Please refer to the AddThis privacy policy for the purpose and scope of data collection and the further processing and use of data by AddThis: www.addthis.com/privacy/privacy-policy. If you wish to object to data collection by AddThis in the future, you can set an opt-out cookie, which you can download at the following link: www.addthis.com/privacy/opt-out

Our website integrates plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. You can recognise the Facebook plugins by the Facebook logo or the "Like Button" ("Like") on our site. An overview of the Facebook plugins can be found here: developers.facebook.com/docs/plugins/. When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thereby receives the information that you have visited our site with your IP address.

If you click the Facebook "Like Button" while logged into your Facebook account, you can link the content of our pages on your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. Please note that as the provider of the pages, we do not receive any knowledge about the content of the transmitted data or its use by Facebook. Further information can be found in Facebook's privacy policy at www.facebook.com/policy.php. If you do not wish Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

Our website includes features from the Instagram service. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account. Please note that as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by Instagram. For more information, please refer to Instagram's privacy policy at www.instagram.com/about/legal/privacy/.

Our website integrates features from the YouTube service. These features are provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The embedded videos place cookies on users' computers when the website is accessed. Users who have disabled cookie placement for Google's advertising programme will not receive such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. To prevent this, you must block cookies in your browser settings.

1. If your consent is required for the processing of your data, we will only process it after your explicit approval.

2. As a rule, we do not process data of minors and are not authorised to do so. By giving your consent, you confirm that you are at least 14 years old or that you have the consent of your legal guardian.

3. You can revoke your consent at any time by contacting us at the following email address: info@cresta.at. In such a case, the data stored about you will be anonymised and subsequently used only for statistical purposes without personal reference. The legality of the processing carried out based on your consent until the revocation remains unaffected by the withdrawal.

CRESTA.ALPIN.SPORT.HOTEL**** employs technical and organisational security measures to protect stored personal data against accidental or intentional manipulation, loss, destruction, and unauthorised access. Our security measures are continuously improved in line with technological advancements.

You have the right at any time to obtain information about the personal data stored about you, their origin and recipients, as well as the purpose of storage.

1. You have the right at any time to request information from the controller regarding the personal data concerned. If there is no legal obligation to retain the data, you have the right to have this data deleted and to object to its processing. Furthermore, you have the right to rectification of the data, restriction of processing, data portability, and to lodge a complaint with the Austrian Data Protection Authority (Wickenburggasse 8-10, 1080 Vienna, email: dsb@dsb.gv.at).

2. Please contact us regarding your rights at info@cresta.at or write to:

CRESTA.ALPIN.SPORT.HOTEL****
Family Weissengruber
Oberlech 170
6764 Lech | Arlberg | Austria

If you have any questions regarding this privacy policy, please contact us. You can find the contact address here. You may inquire at any time whether and which of your data is stored with us. Furthermore, you can send us requests for information, deletion, and correction, as well as suggestions, by email or letter.