Privacy Policy

Protecting your personal data is important to us. We process your data exclusively in accordance with the applicable legislation (General Data Protection Regulation – GDPR, the Austrian Data Protection Act – DSG, and the Austrian Telecommunications Act 2021 – TKG). This privacy policy explains how we process personal data in connection with your visit to and use of this website.

1. Controller

The controller within the meaning of the GDPR is:

Hotel Trisanna GmbH
Dorfstraße 28, 6561 Ischgl, Austria
Management: Angelika Zangerl
Phone: +43 5444 5227
E-mail: hotel@trisanna.at

For any data protection questions or requests, please contact us using the details above. We are not legally required to appoint a data protection officer.

2. Legal bases

Depending on the purpose, we rely on one of the following legal bases:

• Art. 6(1)(a) GDPR – your consent (e.g. web analytics, external maps).
• Art. 6(1)(b) GDPR – initiation or performance of a contract (e.g. handling enquiries, online booking).
• Art. 6(1)(c) GDPR – compliance with legal obligations (e.g. commercial and tax retention duties).
• Art. 6(1)(f) GDPR – legitimate interest (e.g. secure, stable operation of the website).

3. Your rights

Under the GDPR you have, in particular, the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time with future effect (Art. 7(3) GDPR)

To exercise your rights, an informal message to hotel@trisanna.at is sufficient. If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, phone +43 1 52 152-0, dsb@dsb.gv.at, www.dsb.gv.at.

4. Hosting & server log files

This website is operated as a static website with the hosting provider A1 Telekom Austria AG (A1 Webhosting), Lassallestraße 9, 1020 Vienna, Austria. When you access the website, the provider automatically processes server log files on our behalf that your browser transmits – in particular your IP address, the date and time of access, the resource/file requested, the referrer URL, and your browser type and operating system (user agent). This processing serves the secure, stable operation of the website and the prevention of misuse and is based on our legitimate interest (Art. 6(1)(f) GDPR). The log files are deleted after a short period. A data processing agreement under Art. 28 GDPR is in place with the hosting provider; processing takes place within the EU/EEA.

5. Cookies & consent

We use cookies and comparable storage technologies (localStorage) only to the technically necessary extent and – following your express consent – for web analytics and external media. The storage of, or access to, information on your device that is not strictly necessary takes place only with your consent (Art. 6(1)(a) GDPR in conjunction with § 165(3) TKG 2021). On your first visit you make your selection in the consent banner; you can change or withdraw it at any time with future effect via the “Cookie settings” link in the footer. Details of all cookies and storage entries used can be found in our cookie policy.

6. Contact & enquiry form

When you contact us via the contact/enquiry form or by e-mail, we process the data you provide in order to handle your request. For the enquiry form, this includes in particular your salutation, name, address, phone number, e-mail address, desired arrival and departure dates, number of guests, room type and your message. Mandatory fields are those required to respond to your enquiry.

The form is processed on our server by our own script and the result is delivered to us by e-mail (hotel@trisanna.at). No content is transmitted to third-party form services; the e-mail is sent via our hosting provider's mail infrastructure. To prevent spam and misuse we use a hidden check field (honeypot), a brief minimum fill-time check and IP-based send rate limiting; for the latter your IP address is used only transiently and solely as a non-plaintext hash value for counting (deleted after at most one hour). No captcha service is used. The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in communicating with prospective and existing guests (Art. 6(1)(f) GDPR). The data is deleted as soon as it is no longer required for the purpose; statutory retention obligations remain unaffected.

7. Online booking (feratel Deskline)

For availability checks and online bookings we use the Deskline booking widget provided by feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck, Austria. For data protection reasons the widget is not loaded automatically: only when you actively open the booking tool (“Open booking tool”) is the external service from web5.deskline.net loaded and data – in particular your IP address – transmitted to feratel. Until then you only see a placeholder and no external request is made.

As part of a booking, feratel processes the data you enter (including travel dates, room/service selection, name and contact details and, where applicable, payment data) in order to handle the booking. The legal basis is the initiation or performance of the accommodation contract (Art. 6(1)(b) GDPR). feratel acts as our processor (data processing agreement under Art. 28 GDPR); processing takes place within the EU/EEA. Any online payment is handled by the payment service provider Datatrans AG, Kreuzbühlstrasse 26, 8008 Zurich, Switzerland; the data required for payment is transmitted directly to the payment service provider. An adequacy decision of the European Commission exists for Switzerland, so an adequate level of data protection is ensured. Further information can be found in the privacy notices of feratel and Datatrans.

8. Web analytics with Matomo

To analyse the use of our website statistically we use Matomo, an open-source web analytics tool that we host ourselves on a server in the EU (subdomain stats.trisanna.at). The analytics data is not transmitted to third parties such as Google. Matomo is loaded only after your express consent to the “Statistics” category (Art. 6(1)(a) GDPR). Without consent, Matomo is not loaded, no analytics cookies are set and no data is transmitted.

With your consent, pseudonymised usage data is processed (including pages viewed, time spent, referrer, approximate location, device/browser). The IP address is processed in truncated (anonymised) form, and your browser's Do-Not-Track signal is respected. Once consent is given, Matomo sets the cookies _pk_id (visitor recognition, stored for up to 13 months) and _pk_ses (session recognition, approx. 30 minutes). You can withdraw your consent at any time via the cookie settings.

9. Interactive map (Paznaun-Ischgl)

On the “Surroundings & Activities” and “Contact” pages we embed an interactive map from maps.paznaun-ischgl.com, provided via the Contwise Maps platform (general-solutions.eu). The map is loaded only after your consent to the “External media” category (Art. 6(1)(a) GDPR). When loaded, your IP address is transmitted to the provider and provider cookies may be set in order to display the map. Without consent you only see a placeholder with a load notice; no data is transmitted to the map provider. For more information see general-solutions.eu.

10. Fonts & icons

All fonts (including Jost, Lora, Oswald) and the icons used are served locally from our own server. No external font or icon CDNs (such as Google Fonts) are called, and therefore no related data is transmitted to third parties.

11. Search function

If you use the search function, your search term is transmitted to our server as part of the URL and may appear in the server log files (see section 4). No further storage or analysis of search terms takes place; no external search services are integrated.

12. Recipients & processors

Your data is transmitted only insofar as this is necessary to provide the functions described. Recipients and processors are in particular:

• A1 Telekom Austria AG (A1 Webhosting, Vienna, AT) – web hosting & e-mail.
• feratel media technologies AG (Innsbruck, AT) – online booking (only after you actively open the booking tool).
• Datatrans AG (Zurich, CH) – payment processing for online payments.
• Contwise Maps / general-solutions.eu – interactive map (only after consent).

Data processing agreements under Art. 28 GDPR are in place with our processors. Processing generally takes place within the EU/EEA; for payment processing in Switzerland an adequacy decision of the European Commission applies.

13. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

14. Data security

Data is transmitted in encrypted form via HTTPS/TLS. We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or manipulation, and review them on an ongoing basis.

15. Retention period

We store personal data only for as long as is necessary for the respective purposes. Enquiries are deleted once they have been fully dealt with, unless statutory retention obligations apply. Where booking or invoicing data is concerned, the commercial and tax retention periods apply (in particular seven years under § 132 BAO and § 212 UGB).

16. Changes to this privacy policy

We will amend this privacy policy as soon as changes to the website or the legal framework make this necessary. The current version published here applies in each case.