Our Data Protection Statement
Information regarding the handling of your personal details when you visit our website is provided here. To make available the functions and services of our website, we need to gather personal details about you. We will clarify the data we gather about you afterwards, regarding why it is required and your rights with regard to your details.
The following party is responsible for processing your personal details on this website (cf. Imprint):
Hotel Sandhof, Familie Prodinger
6764 Lech am Arlberg
Tel.: +43 55832298
When you use this website, in any other way (e.g. for registration or use a contact form), details are transferred to us, and we gather the requisite technical details which are automatically transferred to our server, these details include:
• IP address
• Date and time of the enquiry
• Request content
• Access status/HTTP status code
• Browser type
• Language and browser software system
• Operating system
This is necessary in technical terms for us to present our website to you. We also use details to guarantee your safety and the stability of our website. The legal basis for collection is Art. 6 Para. 1 lit. f GDPR.
Most web browsers accept cookies automatically. Stored cookies can be deleted at any time via your web browser settings. You can also adjust the settings of your web browser so no cookies are stored. However, in some circumstances, not all of the functions of our website will be available.
You may make an application on our website and via e-mail. When you make an application, we gather and store the details that you enter in the form, or that you send to us via e-mail. We only process your details to process your application. They will not be forwarded. Legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Should we not offer you a position, we will store your details for 6 months at most after the end of the application process.
On our website you can enter personal details via a contact form. When you use the contact form, we gather and store your details that you enter in the form (e.g. surname, first name, e-mail address). Your details will not be forwarded to third parties.
Legal basis for processing is Art. 6 Para. 1 lit. a GDPR. Should your enquiry be used to prepare a conclusion of contract, Art. 6 Abs. 1 lit. b GDPR is an additional legal basis.
We use details solely to process and reply to any enquiry you make.
You can subscribe to a newsletter on our website. If you subscribe to the newsletter, we gather and store the details that you enter in the form (e.g. surname, first name, e-mail address). Your details will not be forwarded to third parties. Subscription to the newsletter is only possible with your consent. Legal basis for processing is Art. 6 Para. 1 lit. a GDPR. We only use your details to send our newsletter.
We use Google Analytics, to analyse the use of and improve our website.
Google Analytics is a web analysis service operated by Google Inc. ("Google"). Google Analytics uses "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally forwarded to a Google server in the USA and stored there. In the event of the activation of IP anonymization on this website, your IP address will be truncated by Google within European Union member states and within other contracting states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google will use this information to evaluate your use of the website, to compile reports about website activities and to provide additional services linked with the use of the website and the Internet. On behalf of the website operator, Google will use this information to assess your use of the website, to compile reports about website activities and to provide additional services pertaining to the website operator. Legal basis for the processing of details with Google Analytics is Art. 6 Para. 1 lit. a GDPR. The IP address transferred from your browser in the context of Google Analytics will not be associated with other data stored by Google.
You may refuse the installation of cookies by selecting the appropriate settings on your browser, we would however point out that in this case, the full functionality of this website may not be available to you. You may also prevent Google compiling details generated by the cookie and about your use of the website (incl. your IP address) by downloading and installing this browser plug-in at the following link:
We use Google Analytics with the ‘_anonymizeIp()’ extension. This truncates your IP address (IP masking). This rules out reference to specific people. Google participates in the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. In exceptional cases this provides an appropriate level of data protection for personal data transferred to Google in the USA.
Information about Google: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001
More information about Google usage conditions:
More information about data protection by Google:
This website uses Google Analytics for cross-device analysis. Each user receives a User ID for this. In your client account, under ‘My Details’, you can deactivate cross-device analysis of your ‘personal details’ about your use.
Google Adwords Conversion Tracking
We use Google Adwords to show you Google websites and other third party advertising. Using Conversion Tracking we are able to determine how successful individual advertising methods are. With the purpose being to show you advertising that is of interest to you and to make our website more interesting for you. Legal basis for processing your details is Art. 6 Para. 1 lit. f GDPR.
These cookies enable Google to recognise your Internet browser. In so far as a user visits specific pages of the website of an Adwords client and the cookie stored on their computer has not yet expired, Google and the client are able to ascertain that the user has clicked on the adverts and has been forwarded to this site. Each Adwords client has a different cookie. Cookies are not able to be tracked via the websites of Adwords customer. We collate data ourselves and do not process any personal details in the advertising methods stated. We only receive statistical evaluations from Google. With the help of this analysis we are able to determine which of the advertising media used have been particularly effective. We do not receive any further details about the use of advertising media and are not able to identify the user from this information.
Due to the marketing tools used, your browser automatically creates a direct link with the Google server. We have no influence on the scope and on any further processing of data by Google and are hereby informing you of our level of awareness. By integrating AdWords Conversion Tracking, Google receives information that you have called up the relevant section of our site, or that you have clicked on one of our adverts. If you are registered for a Google service, Google can attribute your visit to your account. Even if you are not registered on Google or are not logged in, there is the chance that the service provider may ascertain and store your IP address.
You can prevent the storage of cookies by making the relevant setting on your browser software; we would however point out that in this case, not all of the functions of this website will be able to be used in full. You can also prevent data being compiled for Google about your use of the website that is generated by the cookie (incl. your IP address), and ensure that Google does not process this data, by downloading and installing the browser plug-in available via the following link:
Google participates in the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Further information about data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy
For conversion measurement, our website uses the visitor action pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
This allows the behaviour of visitors to the site to be tracked after they have been forwarded to the provider's website by clicking on a Facebook advertisement. The effectiveness of the Facebook advertisements can then be analysed for statistical and market research purposes so that future advertising measures can be optimised.
The collected data is anonymous for us as operator of this website; we cannot draw any inferences about the identity of the users. However, the data are stored and processed by Facebook, so it is possible to link them to the respective user profile and Facebook can use the data for its own advertising purposes in accordance with the Facebook’s data use guidelines. Facebook can therefore enable the delivery of advertisements on Facebook pages and outside Facebook. We as the site operator cannot influence how the data is used.
You can also disable the “Custom Audiences” remarketing function in the settings for advertisements at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must log in to Facebook in order to do so.
If you do not have a Facebook account, you can disable use-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance:
Our website uses CleverReach to send newsletters. The service provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service which enables the organisation and analysis of newsletter forwarding. Details that you enter to subscribe to the newsletter (e.g. e-mail address) will be stored on CleverReach servers in Germany and Ireland.
Sending newsletters with CleverReach enables us to analysis the behaviour of the newsletter recipient. This enables analysis to be made regarding how many recipients have opened the newsletter message and how often certain links in the newsletter have been clicked on. Using so-called conversion tracking analysis can also be made as to whether upon clicking on a link in the newsletter a previously defined action has been effected (e.g. purchase of a product on our website).
More information about data analysis via CleverReach newsletter is available at:
Data is processed on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You may revoke your consent at any time by unsubscribing from the newsletter. The legality of data processing procedures that have already been carried out are not affected by any rescission.
If you do not want CleverReach analysis to be carried out you must unsubscribe from the Newsletter. We provide the relevant link for this in every newsletter message. In addition, you may also unsubscribe from the newsletter directly on our website.
We will store any data you provide for the purpose of subscribing to the newsletter until you unsubscribe, when it will also be deleted from our servers by CleverReach. Details which are stored by us for other purposes (e.g. e-mail addresses for the member area) will remain unaffected by this.
Please see the CleverReach data protection statement for further details:
Conclusion of a contract via order data processing
We have taken out a contract with CleverReach for order data processing and strict guidelines for the Austrian data protection authorities are fully adhered to in the use of CleverReach.
Integration of YouTube videos
We have embedded YouTube videos in our online offer which are stored on http://www.YouTube.com and that are directly playable from our website.
By visiting our website YouTube gets information that you have called up the respective subpage on our website. Log files are also transmitted. This happens irrespective of whether or not you have a user account, where you are logged in to or if you have no user account. If you are logged in at Google, your details are linked directly to your account. If you do not want YouTube to link you with your profile, you must log out before activating the button. YouTube stores your details as a user profile and uses them for the purposes of advertising, market research and/or requirements-oriented design of its website. Any such evaluation is carried out (even for users that are not logged-in) to display requirements-oriented advertising and to provide other social network users with details about your activities on our website. You have the right to object to the creation of a user profile, and to do this you have to contact YouTube.
Further information on the scope and extent of data collection and its processing is available in the Google data protection statement, where you will also get further information regarding your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.
Google also processes your personal details in the USA and is subject to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
More information about Google:
Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA
We use Google Maps on our website. With it, we are able to show you interactive maps directly on our website and facilitate convenient use of the map function. When you use Google Maps your details are transferred to Google in the USA, including your IP address.
Legal basis for processing your details is Art. 6 Para. 1 lit. f GDPR. Google participates in the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework
Information about Google:
Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA
More information about usage conditions at Google:
More information about data protection at Google:
More information about conditions of use for Google Maps:
Use of Google Fonts
Our website uses Google Fonts. This enables us to integrate specific fonts in our website. These fonts are made available by Google via servers in the USA. When our website is called up, the visitor’s web browser makes a direct connection with these servers. The visitor’s IP address is transferred to Google and stored there. Google participates in the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework
More information about Google: Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA
More information about data protection at Google:
We will only process an store your details as long as this is necessary for the processing and adherence to statutory duties. When these details are no longer required for the fulfilment of a purpose, your data will be blocked or deleted. If there are legal duties for retention, we block and delete your details upon expiry of the statutory storage period.
With regard to your personal details, you have the following legal rights:
1) Right to information
You have the right to ask for conformation as to whether we process personal details that concern you. If this is the case, you have the right to be informed about these personal details and to other information, e.g. processing purposes, recipients and the planned storage duration and criteria for determining duration.
2) Right of rectification and Completion
You have the right to request the immediate rectification of incorrect details. In consideration of the purposes of processing, you have the right to request the completion of incomplete details.
3) Right to deletion (‘Right to be forgotten’)
You have a right to deletion in so far as processing is not required. This is the case for instance when your details are no longer required for the original purpose, you have revoked your declaration of consent or your details have been wrongfully processed.
4) Right to restrict processing
You have the right to restrict processing, for instance if you are of the opinion that your personal details are incorrect.
5) Right to data portability
You have the right to receive personal data concerning you in a structured, current and machine-readable format.
6) Right of objection
You have the right, for whatever reasons that result from your specific situation, to object to the processing of specific data that concerns you.
In the case of direct advertising, you as the person affected, have the right to object to the processing of your personal details for the purposes of such advertising; this also applies to profiling, in so far as it is connected with direct advertising.
7) Right to withdraw your declaration of consent
You can withdraw your consent to the processing of your details at any time with future effect. The legality of processing carried out until this rescission will remain unaffected.
You may also raise objections at any time with a data protection authority, for instance (Austrian data protection authority, Wickenburgasse 8, 1080 Vienna, email@example.com), if you are of the opinion that data processing is not consistent with legal data protection provisions.