LEGAL
Privacy.
Which data we process for contact, booking and online check-in – and which rights you have.
01
Controller
Wilderer Chalets Tirol GmbH, Am Anger 14, 6100 Mösern, Austria. Phone: +43 664 147 91 23 · Email: servus@wilderer.tirol.
This entity is responsible for the processing of personal data in connection with this website and the rental of Landhaus Moritz.
02
General information
We process personal data on the basis of Art. 6(1) GDPR – for performance of a contract and pre-contractual measures (lit. b), due to legal obligations (lit. c), based on consent (lit. a) or to safeguard legitimate interests (lit. f).
03
Visiting the website and hosting
When you visit the website, we process technically necessary data that your browser transmits: IP address, date and time, page requested, status code, amount of data transferred, referrer, browser and operating system. This is required to deliver the website in a stable and secure manner (Art. 6(1) lit. f GDPR).
The website runs on infrastructure of Amazon Web Services (AWS) in Frankfurt; AWS processes the data on our behalf (Art. 28 GDPR). We generally store server log data for 30 days.
04
No cookies, no web analytics
This website sets no cookies for analytics or advertising purposes and does not use web analytics. The fonts are hosted on our own server. For the booking process, the website stores a technically necessary session identifier (cookie, 15 minutes) and your entries in the storage of the browser tab, so that nothing is lost if you reload the page.
05
Contact form, email and WhatsApp
If you write to us via the form, by email or via WhatsApp, we process your details (name, email, optionally phone number, travel dates and message) in order to answer your enquiry (Art. 6(1) lit. b or f GDPR). We store enquiries until processing is completed, but no longer than 12 months, unless a retention obligation applies.
The form transmits your details to our server in encrypted form; we send the confirmation via Microsoft 365 (processing on our behalf). You only leave for WhatsApp (WhatsApp Ireland Ltd.) when you click the link; the WhatsApp privacy policy applies there.
06
Booking and payment (Odoo, Stripe)
If you book online, we process your name, email, phone number, country, travel dates, number of guests and dogs, chosen rate, additional services and notes in order to perform the contract (Art. 6(1) lit. b GDPR) and for invoicing and retention (lit. c). We manage bookings and invoices in Odoo.
Payment is made via a Stripe payment link. Card data are processed directly by Stripe; we only receive the payment status and transaction reference. Stripe may transfer data to the USA; standard contractual clauses or the EU-U.S. Data Privacy Framework apply to such transfers.
07
Online check-in and guest card
For the legally required guest registration (Tyrolean Tourist Tax Act, Austrian Registration Act), we collect the main guest’s address, ID details, date of birth and nationality, as well as the names and dates of birth of fellow travellers, in the online check-in (Art. 6(1) lit. c GDPR). Your signature is added to the guest registration form.
If you activate the digital guest card, we transmit the data required for it to the card system of the Seefeld Tourist Board (Feratel) – only with your consent (Art. 6(1) lit. a GDPR), which you can withdraw at any time. We only send the newsletter with your express consent.
08
Images and videos (Cloudinary)
Images and videos on this website are delivered by Cloudinary (Cloudinary Ltd., Israel/USA). In doing so, your browser transmits technically necessary data such as your IP address (Art. 6(1) lit. f GDPR). For Israel there is an adequacy decision of the European Commission; for the USA, standard contractual clauses apply.
09
Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). You can withdraw consent at any time with effect for the future.
To do so, write to us at servus@wilderer.tirol. You can lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna.
10
Data security and version
We transmit content in encrypted form (TLS) and protect data with technical and organisational measures. We update this policy as soon as the processing or the legal situation changes. Version: October 2026.