Privacy policy

The controller responsible for the processing of personal data on this website is:

Reinhard Horngacher GmbH – Hotel Restaurant Hexenalm
Stampfanger 16
A-6306 Söll, Tyrol, Austria

Email: info@hexenalm-soell.at
Telephone: +43 5333 5544
Company Register Number: FN 316031b
Company Register Court: Innsbruck Regional Court
VAT Identification Number: ATU 64434400

If you have any questions regarding data protection or wish to exercise your rights, please contact us at info@hexenalm-soell.at.

We process personal data exclusively in accordance with applicable legal requirements, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz – DSG).

Personal data means any information that can directly or indirectly identify you. This includes, for example, your name, address, email address, telephone number, booking details and technical information relating to your use of our website.

We process personal data primarily to provide our website, respond to enquiries, manage bookings and reservations and, where you have given your consent, send newsletters and analyse website usage.

When you visit our website, certain information is processed for technical reasons and transmitted by your browser to our web server. This may include your IP address, the date and time of access, the pages visited, browser type, operating system and technical connection data.

This processing is necessary to ensure the secure and reliable operation of our website.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in the secure operation of the website).

The data is stored only for as long as necessary for the relevant purpose or as required by statutory retention obligations. The specific retention period and hosting provider must be confirmed based on the actual website configuration.

If you contact us via a contact form, email or telephone, we process the information you provide to handle your enquiry and respond to any follow-up questions.

For holiday enquiries, this may include your first and last name, contact details, address, arrival and departure dates, information about accompanying guests and any additional information you voluntarily provide.

Data submitted through contact forms on our website is used to process your enquiry and, where applicable, prepare a booking.

Legal basis:

• Article 6(1)(b) GDPR, where the enquiry relates to pre-contractual measures.
• Article 6(1)(f) GDPR, for other enquiries and legitimate communication purposes.
• Article 6(1)(a) GDPR, where consent is required for a specific processing activity and has been obtained.

The data will be deleted once it is no longer required to process your enquiry, unless statutory retention obligations or other lawful grounds require further storage.

We use Seekda as our online booking system for accommodation reservations. When you make a booking through our website, the data required to process the booking is collected and transmitted to the service provider used for the booking process.

Depending on the booking, this may include your name, contact details, length of stay, information about accompanying guests and other information necessary to complete your reservation.

We use this information to process your booking, communicate with you and fulfil the accommodation contract.

Legal basis: Article 6(1)(b) GDPR (performance of a contract and pre-contractual measures). Where statutory retention obligations apply, processing is also based on Article 6(1)(c) GDPR.

The retention period depends on the purpose of processing, statutory retention obligations and, where applicable, the need to establish, exercise or defend legal claims.

Seekda’s specific role under data protection law, its contact details, the contractual arrangements and any potential transfers of data to third countries must be verified against the booking configuration and the relevant agreements.

You can subscribe to our newsletter to receive information about our hotel, current offers, news and events.

We use iris-newsletter to distribute our newsletter. When you subscribe, your email address is processed. Additional information is processed only if you voluntarily provide it.

Newsletter subscriptions are based on your consent. Where a confirmation procedure is used, you will receive an email asking you to confirm your subscription.

Legal basis: Article 6(1)(a) GDPR, together with the applicable legal requirements governing electronic direct marketing.

You may withdraw your consent at any time with effect for the future. You can do so by using the unsubscribe link in the newsletter or by contacting info@hexenalm-soell.at.

After you unsubscribe, your data will no longer be used to send you newsletters. Information required to demonstrate your consent or to comply with statutory obligations may be retained to the extent necessary.

The specific retention period, the newsletter provider’s contact details, its role under data protection law and any potential transfers of data must be verified against the actual configuration and contractual arrangements.

Our website uses cookies and similar technologies. These may be necessary to provide essential website functions, store preferences or analyse website usage.

We distinguish between technically necessary technologies and those used for purposes such as statistics or marketing.

Non-essential cookies and similar technologies are activated only after you have given your consent, where such consent is legally required.

You can change your selection or withdraw your consent at any time with effect for the future via the cookie settings on our website.

The cookies actually used, their providers, purposes and retention periods must correspond to the technical configuration of the cookie consent tool.

According to the website privacy review, Google Tag Manager is integrated into our website. This service is used to manage and implement website tags. These tags may load additional services that process personal data.

The services actually integrated, their purposes, the categories of data processed and the recipients of the data must be verified against the technical configuration.

Google Analytics

If Google Analytics is used, the service may process information about how visitors use our website in order to generate statistical reports and improve our online services.

Meta Pixel

If the Meta Pixel or similar marketing technologies are used, information about website visits and interactions may be processed to evaluate advertising campaigns.

Legal basis for non-essential analytics and marketing technologies: Article 6(1)(a) GDPR and the applicable legal requirements governing cookies and similar technologies.

These services may only be activated once the required consent has been obtained. You can withdraw your consent at any time through the cookie settings.

Before publication, the services actually in use and whether the required consent is correctly enforced must be technically verified.

When certain external services are used, personal data may be transferred to countries outside the European Economic Area, particularly the United States.

Such transfers take place only where the legal requirements of the GDPR are met. Possible legal mechanisms include an adequacy decision by the European Commission or appropriate safeguards such as Standard Contractual Clauses.

Where the EU–US Data Privacy Framework is relied upon, it must be verified that the relevant US company is appropriately certified for the data processing concerned.

The service providers that actually transfer data to third countries and the applicable legal grounds must be identified by reviewing the systems in use and the relevant contracts.

Personal data is stored only for as long as necessary for the relevant processing purpose or as required by statutory retention obligations.

The following general principles apply:

• Server log files: retained in accordance with technical requirements and security needs.
• Contact enquiries: retained until the enquiry has been fully handled, unless further retention is necessary.
• Booking and accounting data: retained in accordance with statutory retention obligations and the periods required for contract administration.
• Newsletter data: retained until consent is withdrawn or the subscription is cancelled; necessary evidence of consent may be retained for longer.
• Analytics and marketing data: retained in accordance with the settings of the services used and the consent provided.

Specific retention periods must be established for each system and aligned with actual operational procedures.

Subject to the applicable legal requirements, you have the following rights:

• The right to access your personal data
• The right to rectify inaccurate data
• The right to request the erasure of your data
• The right to restrict processing
• The right to data portability
• The right to object to certain processing activities
• The right to withdraw consent with effect for the future

To exercise your rights, please contact us at:

Email: info@hexenalm-soell.at
Telephone: +43 5333 5544

If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with the competent supervisory authority.

Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna, Austria
Website: https://dsb.gv.at/

We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other unlawful forms of processing.

Data transmitted between your browser and our website is encrypted where technically supported.

We reserve the right to amend this Privacy Policy if our data processing activities, the technical systems we use or the applicable legal requirements change.

The version published on our website at any given time shall apply.

Last updated: October 2026