Privacy

The protection of your personal data matters to us. This website processes as little personal data as possible. It uses no tracking or analytics services (e.g. Google Analytics), no external fonts (all fonts are served from our own domain) and no advertising networks.

Controller

Wolfgang Vigl
Antlas 11
39054 Ritten (BZ)
Italy
Email: loading …
Phone: loading …

Hosting and server log data

This website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). When you visit the site, Cloudflare, acting as our processor, automatically processes technically necessary connection data in server log files:

  • shortened or anonymised IP address,
  • date and time of access,
  • page/file requested,
  • amount of data transferred,
  • browser type and operating system (user agent),
  • where applicable, the previously visited page (referrer).

This processing serves the technical delivery, stability and security of the website. The legal basis is our legitimate interest in secure and efficient operation (Art. 6(1)(f) GDPR). A data processing agreement is in place with Cloudflare; any transfer to the USA is safeguarded by the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.

Cookies and local storage

This website sets no tracking or marketing cookies. We use only a technically necessary functional cookie that stores your language choice (preferred_lang), plus a small helper marker for the one-time language hint (lang_hint_shown). These serve solely the function you requested (displaying the site in your language) and are strictly necessary; no consent is required for them. You can delete cookies at any time in your browser settings.

Spam protection: Cloudflare Turnstile

To protect our forms (contact form and online check-in) from misuse and spam we use Cloudflare Turnstile. In doing so, technical information (including IP address, browser/device information and interaction data) is transmitted to Cloudflare in order to verify that the input comes from a human. Turnstile deliberately avoids tracking for advertising purposes. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

Contact form

If you send us an enquiry via the contact form, we process the data you provide (name, email address, phone number where applicable, travel period or number of guests, and your message) in order to handle your enquiry. Transmission takes place by email via our hosting/mail provider ALL-INKL.COM – Neue Medien Münnich (Hauptstraße 68, 02742 Friedersdorf, Germany) to our mailbox. The legal basis is the initiation or performance of a contractual relationship (Art. 6(1)(b) GDPR) and our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). The data is deleted once your enquiry has been dealt with conclusively and no statutory retention periods apply.

Online check-in (guest registration data)

As an accommodation provider in Italy, we are required by law to report the details of all guests to the competent authorities (Art. 109 of the Italian Consolidated Public Security Act, “TULPS”). If you use our online check-in form, we process for this purpose the personal details of all travellers (first and last name, date of birth, gender, nationality, country of birth, postal code and country of residence) as well as the identity document details of the main guest (document type, document number, validity date, issuing country). The legal basis is compliance with our legal registration obligation (Art. 6(1)(c) GDPR); the recipients of the registration data are the competent Italian authorities.

In addition, we ask for an email address in order to send you the RittenCard included with your booking. The legal basis for this is the performance of the contract (Art. 6(1)(b) GDPR).

The data you enter is not stored on the website; it is transmitted once by email to our mailbox (sent via Cloudflare, mailbox hosted by ALL-INKL.COM – see above) and used exclusively for the purposes stated. Using the online form is voluntary; alternatively, you can provide the details on paper on arrival, as before. We delete the data once these purposes have been fulfilled and no statutory retention periods apply.

Availability calendar

The availability shown is merged server-side from the booking portals’ calendars and contains only date ranges – no personal data.

Maps (Google Maps)

On the “Directions and location” page we embed a map from Google Maps (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA). The map is loaded only after your explicit consent: at first only a placeholder with a “Load map” button is shown. Only when you click it is the map loaded from Google, transmitting technically necessary data – in particular your IP address as well as browser/device information – to Google, where applicable also to the USA (safeguarded by the EU–US Data Privacy Framework). Before you click, there is no connection to Google. The legal basis is your consent (Art. 6(1)(a) GDPR). Your consent is stored locally in your browser (entry gmap_consent) so that the map loads directly on future visits (valid for around one month, after which we ask again); you can withdraw it at any time with effect for the future by clearing the website data in your browser. For more information see Google’s privacy policy (policies.google.com/privacy).

Our site contains links to external third-party websites (e.g. ritten.com). We have no influence over their content or data protection practices; the privacy policies of the respective providers apply.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). To exercise these rights, please use the contact details above.

You also have the right to lodge a complaint with a data protection supervisory authority – in Italy with the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Status

This privacy policy is dated July 2026. We will update it if the website or the services used change.