Protecting your personal data is important to us. We process your data exclusively on the basis of the applicable legal provisions (GDPR, Austrian Data Protection Act, Telecommunications Act 2021). In this privacy statement we inform you about the most important aspects of data processing on our website.
Controller
The controller responsible for data processing on this website is
Auenhotel KG
Lanersbach 340
6293 Tux, Austria
Phone: +43 5287 87488
E-mail: info@auenhotel.at
Web: www.auenhotel.at
For any questions regarding data protection, you can reach us at any time using the contact details above.
Your rights
In principle, you have the rights to information, correction, deletion, restriction, data portability, revocation and objection. You can withdraw any consent you have given at any time with effect for the future. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you may lodge a complaint with us or with the supervisory authority.
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at · Web: www.dsb.gv.at
Hosting and server log files
Our website is hosted by web-crossing gmbh, Eduard-Bodem-Gasse 9, 6020 Innsbruck, on servers in Austria. The host processes data on our behalf under a data processing agreement.
When you visit our website, technical access data is automatically stored in server log files, such as the page visited, date and time, the amount of data transferred, browser and operating system and your IP address. This data is used solely for the secure and stable operation of the website and for error analysis and is not combined with other data sources. Log files are deleted after six weeks at the latest. The legal basis is our legitimate interest in a technically flawless operation (Art. 6(1)(f) GDPR).
Cookies and local storage
We do not use cookies for tracking, analytics or advertising. Our own website only stores your choice between light and dark display in your browser’s local storage. This setting never leaves your device and only serves the display you requested (§ 165(3) Austrian Telecommunications Act 2021). The booking system on the booking page may set technically necessary cookies so that your booking works (see below). You can set your browser to notify you when cookies are set and to decide individually whether to accept them.
Fonts
The fonts used on this website are loaded locally from our own server. No connection to third-party servers (such as Google Fonts) is established and no data is passed on to third parties.
Enquiry form and contact
If you contact us via the enquiry form, by e-mail or by phone, we process your details (such as name, contact details, travel dates, number of guests and your message) to answer your enquiry and prepare an offer. When you submit the form, we also store the date, time and IP address as proof and to prevent misuse. The legal basis is taking steps prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering your request (Art. 6(1)(f) GDPR).
Enquiries that do not lead to a booking are deleted no later than twelve months after the last contact. If you book, we keep the necessary data for as long as tax and commercial retention obligations require (usually seven years, § 132 Austrian Federal Fiscal Code).
Bookings via Seekda
Our booking page directly embeds the booking system of our service provider seekda GmbH (Vienna, Austria). When you open this page, a connection to Seekda’s servers is established and your IP address is transmitted for technical reasons. This is necessary to provide the booking function you have requested. The data you enter during the booking process (such as name, dates of stay, contact and payment details) is processed by Seekda on our behalf to handle your booking.
The legal basis is the initiation and performance of the accommodation contract (Art. 6(1)(b) GDPR). Further information can be found in Seekda’s privacy policy.
Embedded third-party content
On some pages we show content from third-party providers. It is only loaded once you click on it. Until then, no connection to the provider is established. By clicking, you consent to the content being loaded and the provider receiving your IP address, among other data (Art. 6(1)(a) GDPR, § 165(3) Austrian Telecommunications Act 2021). We have no influence on the processing that takes place there. The following services are used.
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to show our videos. We use the privacy-enhanced mode (youtube-nocookie.com). Privacy: policies.google.com/privacy
- Google Maps (Google Ireland Limited, address as above) for the location map. Privacy: policies.google.com/privacy
- Panomax (Panomax GmbH, Landesstraße 23, 5302 Henndorf, Austria) to show the live panoramas on our webcam page. Privacy: panomax.com/de/datenschutz
Google may also transfer data to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR).
Newsletter
If you subscribe to our newsletter, we first send you an e-mail with a confirmation link (double opt-in). You are only subscribed once you click it. As proof of your consent we store your e-mail address, your first name if provided, the chosen language, the time of subscription and confirmation, your IP address and the wording of the consent. The legal basis is your consent (Art. 6(1)(a) GDPR, § 174 Austrian Telecommunications Act 2021).
We send the newsletter via Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France), which processes the data on our behalf on servers within the EU. Brevo records whether a newsletter was delivered and opened and which links were clicked, so that we can improve our content. Privacy: brevo.com/de/legal/privacypolicy
You can unsubscribe at any time using the link at the end of every newsletter or by sending us a short message. We then remove your address from the mailing list. We keep the proof of your consent for another three years so that we can demonstrate it in case of dispute.
Storage period
Unless a specific period is stated above, we only store personal data for as long as necessary for the respective purpose or as required by statutory retention periods. The data is then deleted.
Last updated: September 2026. We will adapt this privacy statement whenever our website or the legal requirements change.