Privacy policy

This translation is provided for your information. The German version is legally binding.

Controller

The controller responsible for data processing on this website is:

HMS Hütten-Miet-Service GmbH
Villacher Ring 19
A-9020 Klagenfurt am Wörthersee
Phone: +43 463 55 0800
Email: info@huetten.com

Data Protection Officer

Daniel Marold
Rosentaler Straße 150
A-9020 Klagenfurt
Phone: +43 660 5599099
Email: dm@streamdiver.com

Overview

This website itself does not set any cookies. In your browser, it only remembers the language in which you are reading it (see the Language settings section). The booking module only loads when you click “Load booking calendar”. It then sets two cookies for the duration of your visit and loads measurement services from Google and XQueue. Through these measurement services, Google may additionally set cookies of its domain doubleclick.net (see the Online booking section). Fonts, images and videos are hosted on our own server. We process personal data when you access the pages (server log files, audience measurement), when you use the booking module or when you write to us. The following sections explain in detail what happens in each case.

Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The server is located in Frankfurt am Main.

Each time you access the site, your browser automatically transmits technical information that the server stores in log files: IP address, date and time, page accessed, browser and browser version, operating system and the previously visited page (referrer). We do not combine this data with other data sources.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely, without errors and quickly. The log files are deleted as soon as they are no longer required for these purposes.

Language settings

This website is available in several languages. On your first visit to a German page, your browser checks which languages you prefer in its settings and opens the matching language version. If none of them matches, it asks our server which country your IP address comes from. To do this, the server compares the IP address with a country list stored on our own server (based on the public allocation lists of the internet registries RIPE NCC, ARIN and APNIC). The IP address is not passed on to any other service, and we do not store the result. The section on server log files applies to the server's access logs. We do not redirect search engines.

Your browser stores the language detected, or chosen by you in the language menu, in its local storage (localStorage) under “aaf_sprache”. This means you land in your language again on your next visit, and detection does not run again. The entry contains only the language code, is not transmitted to us and remains until you delete the website data in your browser. After an automatic switch, a note is also briefly stored in session storage (sessionStorage) so that audience measurement can count the switch. It is deleted on the next page view.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in showing guests from other countries the pages in their own language straight away. You can change the language at any time at the top of the page; your choice then applies instead of the detection.

Audience measurement with Plausible Analytics

To understand which pages are read and where visitors come from, we use Plausible Analytics from Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible does not set cookies and does not store anything in your browser. The script merely reads whether the entry “plausible_ignore” is set in your browser, which can be used to switch off measurement.

We load the script from our own server. Your browser also sends the measurement data to our server, which forwards it to Plausible. Your IP address and browser identifier (user agent) are transmitted in the process. Our server does not store this measurement data; the section on server log files applies to its access logs. Plausible creates a daily changing identifier from the IP address and browser identifier and, according to its own information, stores neither the IP address nor the browser identifier. Data recorded includes, for example, pages viewed, referring page, country, device type, page language and language switches, clicks on phone numbers, email addresses and booking buttons, and the submission of a form (without its content). This produces statistics that do not allow any conclusions to be drawn about individuals.

According to Plausible, the data is stored on servers in the EU. The statistics remain stored for as long as we maintain them for this website. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in improving our offering on the basis of anonymous usage statistics. You can object to this processing at any time, see Right to object.

Contact form, email and telephone

If you contact us via the contact form, by email or by phone, we process your details (for example name, email address, phone number and message) in order to answer your enquiry and for any follow-up questions. Mandatory fields are marked with an asterisk in the form; without them we cannot process your enquiry. All other information is voluntary. We do not pass on this data without your consent, except to the service providers named below.

The legal basis is Art. 6(1)(b) GDPR, insofar as your enquiry relates to a contract or steps prior to entering into a contract, otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in processing the enquiries addressed to us. The data remains with us until the purpose no longer applies (for example once processing is complete) or you request deletion. Statutory retention periods remain unaffected.

Transmission of form enquiries

Enquiries from the forms on this website are delivered to us by email via a forwarding service operated by Späth & Weiße Digital Solutions GbR, Wackerstraße 13A, 77652 Offenburg. For this purpose, our web server transmits your form details to this service. Späth & Weiße provides technical support for our website, processes the data exclusively on our behalf and keeps a copy of every enquiry so that no enquiry is lost.

The forwarding service runs on Google Workspace (Google Apps Script and Gmail). The contractual partner is Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2, Ireland. Data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (DPF), an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Further information: Google LLC's certification under the Data Privacy Framework.

The legal basis is Art. 6(1)(b) GDPR, insofar as your enquiry relates to the initiation or performance of a contract, otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in the reliable delivery of your enquiry. The storage period with us is as described above for enquiries. As long as Späth & Weiße supports our website, the copy remains stored there. It is deleted when the collaboration ends.

Online booking with vioma BOOKING

For bookings and booking enquiries, we use vioma BOOKING from vioma GmbH, Scheerbünd 4, 77654 Offenburg. A data processing agreement is in place with vioma. The booking module only loads when you click “Load booking calendar” on the “Book now” page or on a chalet's page. Before that, your browser does not connect to vioma. After the click, your browser loads the booking module from vioma's servers, and your IP address is transmitted in the process. Further booking calendars on the same page (such as the other categories under “Book now”) then load without another click. The booking module also retrieves files from www.huetten.com, the HMS booking portal.

For a booking, the booking module asks for your form of address, first and last name, address, email address and phone number, plus travel dates, the chosen chalet and the number of travellers. We use the phone number to reach you quickly in the event of unforeseen changes. Mandatory fields are marked with an asterisk in the module; further details such as title, address supplement or requests are voluntary. The module currently offers invoice as the payment method.

The booking module sets two cookies, which are deleted when you close your browser: vcst_session for the booking process and vri_tracking_consent. This second cookie records whether the booking module may load the measurement services named below. vioma sets it to “allowed” on its own initiative when the booking module loads.

The legal basis for the booking is Art. 6(1)(b) GDPR (contract or pre-contractual measures). According to the booking module, booking data is deleted 24 months after the departure date. Statutory retention periods remain unaffected.

In the booking module, you can voluntarily tick a box to say you are interested in offers and news by newsletter. The legal basis for this is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, for example with a short email to info@huetten.com.

Measurement services in the booking module

Together with the booking module, vioma loads measurement services from its servers that we use for huetten.com. This happens immediately after you click “Load booking calendar”, not only when you make a booking. We point this out next to the button.

Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, in the older Universal Analytics version (ID UA-25888499-1): Google Analytics records usage data such as pages viewed, time and information about the browser and device, and in the case of a booking also its key data (e-commerce measurement). Your IP address is shortened in the process. Google Analytics does not store its own cookies in the booking module. The advertising features of Google Analytics are also switched on: your browser sends a further request to Google's advertising service DoubleClick (stats.g.doubleclick.net), which allows Google to evaluate visits for advertising purposes as well, for example for demographic analyses and audiences. With this request, Google may read or set cookies of its domain doubleclick.net, insofar as your browser allows this. Data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (see the section Transmission of form enquiries).

Maileon Tracking from XQueue GmbH, Christian-Pless-Str. 11-13, 63069 Offenbach am Main, Germany: Maileon is an email marketing service; its measurement script records the loading of the booking module. Your IP address is transmitted to XQueue in the process.

The legal basis for these measurement services is your consent (Art. 6(1)(a) GDPR, § 165(3) of the Austrian TKG 2021), which you give by clicking “Load booking calendar”. Without this click, none of these services load. You can withdraw your consent at any time with effect for the future: if you reload the page, the booking module remains closed until you click again. You can also delete the booking module's cookies in your browser. Without the booking module, you can reach us by phone, by email or via the contact form.

Whether the booking module loads these measurement services is controlled by the cookie mentioned above vri_tracking_consent. How long Google and XQueue store the data depends on the settings of these services. Further details on Google Analytics and Maileon can be found in the huetten.com privacy notice.

Links to other websites

Links to Facebook, Instagram, YouTube, Google Maps, huetten.com, the Fageralm webcam (feratel) or Schladming-Dachstein are simple links without embedded content. Only when you click on such a link does your browser connect to the respective provider. That provider is responsible for the data processing there.

Encryption

This website uses TLS encryption. You can recognise it by “https://” and the padlock symbol in the address bar. This means that data you send to us cannot be read by third parties.

Your rights

You have the right at any time to access your stored data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20): on request, you will receive data that we process automatically on the basis of your consent or a contract in a common, machine-readable format. You can withdraw any consent you have given at any time with effect for the future (Art. 7(3)). Processing carried out up to that point remains lawful.

For all of this, a message to info@huetten.com or to our Data Protection Officer is sufficient.

Right to complain

You can lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is the Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

Right to object under Art. 21 GDPR

If we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. The legal basis for each processing operation is stated in the relevant section of this privacy policy. Following an objection, we will no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. A message to info@huetten.com is sufficient to object.

Updated: October 2026