Privacy policy

The German version is legally binding.

Controller

The controller responsible for data processing on this website is:

HMS Hütten-Miet-Service GmbH
Villacher Ring 19
A-9020 Klagenfurt am Wörthersee
Phone: +43 463 55 0800
Email: info@huetten.com

Data Protection Officer

Daniel Marold
Rosentaler Straße 150
A-9020 Klagenfurt
Phone: +43 660 5599099
Email: dm@streamdiver.com

Overview

This website itself does not set any cookies. Only when you load the online booking does the booking module set two cookies for the duration of your visit and load measurement services from Google and XQueue (see the Online booking section). Fonts, images and videos are hosted on our own server. We process personal data when you access the pages (server log files, audience measurement), when you use the booking module or when you write to us. Your browser remembers your choice of language (see Language settings). The following sections explain in detail what happens in each case.

Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The server is located in Frankfurt am Main.

Each time you access the site, your browser automatically transmits technical information that the server stores in log files: IP address, date and time, page accessed, browser and browser version, operating system and the previously visited page (referrer). We do not combine this data with other data sources.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely, without errors and quickly. The log files are deleted as soon as they are no longer required for these purposes.

Audience measurement with Plausible Analytics

To understand which pages are read and where visitors come from, we use Plausible Analytics from Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible does not set cookies and does not store anything in your browser. The script merely reads whether the entry “plausible_ignore” is set in your browser, which can be used to switch off measurement.

We load the script from our own server. Your browser also sends the measurement data to our server, which forwards it to Plausible. Your IP address and browser identifier (user agent) are transmitted in the process. Our server does not store this measurement data; the section on server log files applies to its access logs. Plausible creates a daily changing identifier from the IP address and browser identifier and, according to its own information, stores neither the IP address nor the browser identifier. Data recorded includes, for example, pages viewed, referring page, country, device type, clicks on phone numbers, email addresses and booking buttons, the page language and any language switch, and the submission of a form (without its content). This produces statistics that do not allow any conclusions to be drawn about individuals.

According to Plausible, the data is stored on servers in the EU. The statistics remain stored for as long as we maintain them for this website. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in improving our offering on the basis of anonymous usage statistics. You can object to this processing at any time, see Right to object.

Language settings

This website is available in several languages. If you choose a language, or the website detects it on your first visit, your browser stores it in its local storage (localStorage, entry aaf_sprache). This means you get the pages in your language straight away on your next visit.

After an automatic switch, the browser remembers that a switch took place until you close the tab (sessionStorage, entry aaf_sprache_wechsel), so that we can count the switch without any link to you personally (see Audience measurement). Both entries stay on your device, and you can delete them at any time in your browser settings.

For detection, the website first uses your browser's language setting. If none of our languages matches, your browser asks our own server once which country your IP address comes from.

To do this, the server only compares the address with a country list stored on our server (the public allocation list of the RIPE NCC); it does not store the address or pass it on to anyone. Only the matching language is returned. The section on server log files applies to the server's access logs.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in showing you the website in your language. Storage in the browser is permitted without consent under § 165(3) of the Austrian TKG 2021, because it is strictly necessary to display the website in your language as you requested.

Contact form, email and telephone

If you contact us via the contact form, by email or by phone, we process your details (for example name, email address, phone number and message) in order to answer your enquiry and for any follow-up questions. Mandatory fields are marked with an asterisk in the form; without them we cannot process your enquiry. All other information is voluntary. We do not pass on this data without your consent, except to the service providers named below.

The legal basis is Art. 6(1)(b) GDPR, insofar as your enquiry relates to a contract or steps prior to entering into a contract, otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in processing the enquiries addressed to us. The data remains with us until the purpose no longer applies (for example once processing is complete) or you request deletion. Statutory retention periods remain unaffected.

Transmission of form enquiries

Enquiries from the forms on this website are delivered to us by email via a forwarding service operated by Späth & Weiße Digital Solutions GbR, Wackerstraße 13A, 77652 Offenburg. For this purpose, our web server transmits your form details to this service. Späth & Weiße provides technical support for our website, processes the data exclusively on our behalf and keeps a copy of every enquiry so that no enquiry is lost.

The forwarding service runs on Google Workspace (Google Apps Script and Gmail). The contractual partner is Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2, Ireland. Data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (DPF), an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Further information: Google LLC's certification under the Data Privacy Framework.

The legal basis is Art. 6(1)(b) GDPR, insofar as your enquiry relates to the initiation or performance of a contract, otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in the reliable delivery of your enquiry. Our own storage period is as described above for enquiries. The copy held by Späth & Weiße is retained for as long as they provide technical support for our website and is deleted when the collaboration ends.

Online booking with vioma BOOKING

For bookings and booking enquiries, we use vioma BOOKING from vioma GmbH, Scheerbünd 4, 77654 Offenburg. A data processing agreement is in place with vioma. The booking module only loads when you click “Load online booking”. Before that, your browser does not connect to vioma. From the click onwards, your browser connects to vioma's servers, and your IP address is transmitted in the process. The booking module also retrieves files from www.huetten.com, the HMS booking portal.

Your browser remembers your click in session storage (entry vioma-zustimmung) until you close the tab. Until then, the booking module loads on other pages of this website without another click. The entry never leaves your browser.

For a booking, the booking module asks for your form of address, first and last name, address, email address and phone number, plus travel dates, the chosen accommodation, the number of travellers and whether any pets are coming along. We use the phone number to reach you quickly in the event of unforeseen changes. Mandatory fields are marked with an asterisk in the module; further details such as title, address supplement or requests are voluntary. The module currently offers invoice as the payment method.

The booking module sets two cookies, which are deleted when you close your browser: vcst_session for the booking process and vri_tracking_consent. This second cookie records whether the booking module may load the measurement services named below. vioma sets it to “allowed” on its own initiative when the booking module loads. As the booking module only loads after your click, the measurement services also only load with your consent.

The legal basis for the booking is Art. 6(1)(b) GDPR (contract or pre-contractual measures). According to the booking module, booking data is deleted 24 months after the departure date. Statutory retention periods remain unaffected.

In the booking module, you can voluntarily tick a box to say you are interested in offers and news by newsletter. The legal basis for this is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, for example with a short email to info@huetten.com.

Measurement services in the booking module

Together with the booking module, vioma loads measurement services from its servers that we use for huetten.com. This happens as soon as the booking module loads, i.e. immediately after you click “Load online booking”, not only when you make a booking.

Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, in the older Universal Analytics version (ID UA-25888499-1): Google Analytics records usage data such as pages viewed, time and information about the browser and device, and in the case of a booking also its key data (e-commerce measurement). Your IP address is shortened in the process. Google Analytics does not store its own cookies in the booking module. The advertising features of Google Analytics are also switched on: your browser sends a further request to Google's advertising service DoubleClick (stats.g.doubleclick.net), which allows Google to evaluate visits for advertising purposes as well, for example for demographic analyses and audiences. With this request, Google may read or set cookies of its domain doubleclick.net, insofar as your browser allows this. Data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (see the section Transmission of form enquiries).

Maileon Tracking from XQueue GmbH, Christian-Pless-Str. 11-13, 63069 Offenbach am Main, Germany: Maileon is an email marketing service; its measurement script records the loading of the booking module. Your IP address is transmitted to XQueue in the process.

The legal basis for the measurement services is your consent (Art. 6(1)(a) GDPR, § 165(3) of the Austrian TKG 2021), which you give by clicking “Load online booking”. You can withdraw it at any time with effect for the future: close the tab or click here on Block online booking again. The booking module will then only load again after a new click. If your browser restores your previous tabs the next time it starts, it keeps the entry and the two booking module cookies. In that case, delete them in your browser settings (site data and cookies). Processing carried out up to that point remains lawful. Without consent, you can reach us by phone or via the contact form to make a booking.

Blocked: the booking module will only load on this website again after a new click on “Load online booking”.

Whether the booking module loads these measurement services is controlled by the cookie mentioned above, vri_tracking_consent. How long Google and XQueue store the data depends on the settings of these services. Further details on Google Analytics and Maileon can be found in the huetten.com privacy notice.

Links to other websites

Links to Facebook, Instagram, YouTube, Google Maps or huetten.com are simple links without embedded content. Only when you click on such a link does your browser connect to the respective provider. That provider is responsible for the data processing there.

Encryption

This website uses TLS encryption. You can recognise it by “https://” and the padlock symbol in the address bar. This means that data you send to us cannot be read by third parties.

Your rights

You have the right at any time to access your stored data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20): on request, you will receive data that we process automatically on the basis of your consent or a contract in a common, machine-readable format. You can withdraw any consent you have given at any time with effect for the future (Art. 7(3)). Processing carried out up to that point remains lawful.

For all of this, a message to info@huetten.com or to our Data Protection Officer is sufficient.

Right to complain

You can lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is the Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

Right to object under Art. 21 GDPR

If we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. The legal basis for each processing operation is stated in the relevant section of this privacy policy. Following an objection, we will no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. A message to info@huetten.com is sufficient to object.

Updated: October 2026