Privacy Policy
1. Data Protection at a Glance
The protection of your personal data is very important to us. We therefore process your data exclusively on the basis of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Austrian Telecommunications Act (TKG).
In this privacy policy, we inform you about which personal data is processed in connection with this website, for what purposes this processing takes place, and what rights you have.
Controller within the meaning of the GDPR:
Familie Knaus – Bucheggerhof
Planaistraße 29
8971 Schladming
Austria
Contact:
Phone: +43 (0)664 9153525
Email: [info@bucheggerhof.at](mailto:info@bucheggerhof.at)
Website: [www.bucheggerhof.at](http://www.bucheggerhof.at)
2. General Information on Data Processing
We process personal data only if this is necessary to provide a functional website, process enquiries, handle bookings, comply with legal obligations, or safeguard legitimate interests.
Personal data means any information relating to an identified or identifiable person, such as name, address, email address, telephone number, IP address, or booking data.
Processing is carried out in particular on the following legal bases:
Art. 6(1)(a) GDPR – Consent Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures Art. 6(1)(c) GDPR – Legal obligation Art. 6(1)(f) GDPR – Legitimate interests
3. Access Data and Server Log Files
When you visit this website, technical access data is automatically processed by the web server. This may include in particular:
Name of the page accessed Date and time of access IP address Browser type and browser version Operating system used Referrer URL Amount of data transferred Notification of successful or unsuccessful retrieval
This data is technically necessary to deliver the website correctly, ensure the stability and security of the website, and trace possible errors or attacks.
Processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in the secure, stable, and technically error-free operation of the website.
Server log files are stored only for as long as necessary for technical and security-related purposes. They are generally deleted or anonymised after 14 days, unless longer storage is required to investigate security-related incidents.
4. Website Hosting
This website is hosted by an external hosting provider.
Hosting provider: Profihost Hildesheimer Str. 25, 30880 Laatzen, Germany
The hosting provider processes technical data, in particular server log files and connection data, as part of operating and providing this website.
Processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in providing our online services securely, quickly, and reliably.
Where required, a data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.
5. WordPress and Technical Website Functions
This website is based on the WordPress content management system and uses a custom-developed theme.
Technically necessary functions are used to operate the website, for example to display page content, manage forms, provide security, ensure the correct functioning of the website, and carry out technical administration.
Where personal data is processed in this context, processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in operating a technically secure, user-friendly, and reliable website.
This website does not use externally integrated tracking services such as Google Analytics or Meta Pixel unless they are expressly mentioned in this privacy policy.
6. Technical Scripts and jQuery
jQuery may be used for the technical display and functionality of this website. jQuery supports the usability and functionality of individual website elements.
If jQuery is hosted locally via WordPress or our own theme, no data is transmitted to external providers.
If jQuery or another technical library is loaded via a CDN, technical access data, in particular the IP address, may be transmitted to the respective CDN provider when the website is accessed. Further information can be found in the section “Content Delivery Network / CDN”.
7. Content Delivery Network / CDN
A Content Delivery Network may be used to improve the loading speed, stability, and security of this website.
CDN provider: Currently none
Static content such as images, stylesheets, JavaScript files, font files, or technical libraries may be delivered more quickly via a CDN. In doing so, technical connection data such as IP address, browser information, date and time of access, and requested files may be transmitted to the CDN provider.
The use of a CDN is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in providing the website quickly, securely, and reliably.
If the CDN provider processes data outside the European Union or the European Economic Area, this is done only on the basis of appropriate safeguards within the meaning of the GDPR, for example standard contractual clauses or adequacy decisions.
8. Fonts
Fonts may be used on this website to ensure a consistent and visually appealing presentation.
If fonts are hosted locally on the server of this website, no direct connection to external font provider servers is established when the fonts are loaded.
9. Cookies
This website uses cookies. Cookies are small text files that are stored on your device. They may be used to make a website technically functional, more secure, or more user-friendly.
We distinguish between technically necessary cookies and optional cookies.
Technically necessary cookies are required for the website to function correctly. These may include cookies for security, cookie settings, form functions, or booking processes. These cookies are used on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR and the applicable provisions of the Austrian Telecommunications Act.
Optional cookies for statistics, convenience functions, marketing, or external content are only set if you have actively consented beforehand.
You can change your cookie settings or withdraw your consent at any time via the cookie banner.
10. Cookie Banner / Consent Management
This website uses the CCM19 consent management tool to obtain, manage, and document any consent that may be required for optional cookies or external services.
Provider / Consent Management:
CCM19
When your cookie preferences are saved, technically necessary information may be processed, for example:
selected cookie settings time of consent or refusal technical browser information where applicable, shortened or anonymised IP address
Where technically necessary, processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR and for compliance with legal documentation obligations pursuant to Art. 6(1)(c) GDPR.
You can access and change your cookie settings at any time:
11. Contact and Contact Form
If you contact us via the contact form, by email, or by telephone, we process the data you provide in order to handle your enquiry.
This may include in particular:
Name Email address Telephone number Message / content of the enquiry Requested travel period or stay dates, where provided IP address and technical transmission data for form security
Processing is carried out to handle your enquiry and to take pre-contractual measures pursuant to Art. 6(1)(b) GDPR. If the enquiry is not aimed at entering into a contract, processing is additionally based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in communicating with website visitors.
The submitted data will not be passed on to third parties without your consent unless this is necessary to process your enquiry, handle a booking, or comply with legal obligations.
Enquiry data is generally stored for the duration of processing and for any follow-up questions. If the enquiry results in a booking or contractual relationship, the applicable statutory retention periods apply.
12. Online Booking and Enquiries via Easybooking
We use the Easybooking booking system for online bookings, booking enquiries, and, where applicable, online check-in.
Provider:
zadego GmbH
Easybooking department
Anton-Melzer-Straße 10
6020 Innsbruck
Austria
If you make a booking or enquiry via Easybooking on this website, the data you enter will be transmitted to Easybooking and/or the technical booking platform and processed there.
This may include in particular:
Name Address Email address Telephone number Arrival and departure date Number of guests Selected accommodation Booking details Message or special requests Payment and billing data, where required Technical data such as IP address, date, and time of the enquiry
Data processing is carried out to handle your enquiry, take pre-contractual measures, and perform an accommodation or rental contract pursuant to Art. 6(1)(b) GDPR.
Where statutory retention, registration, tax, or fiscal obligations apply, processing is additionally based on Art. 6(1)(c) GDPR.
Where required, a data processing agreement pursuant to Art. 28 GDPR has been concluded with Easybooking.
Please note that Easybooking may display additional privacy information during the booking process.
13. Payment Processing for Online Bookings
If online payment is offered as part of the online booking process, payment data may be transmitted to the respective payment service provider.
14. Koko Analytics
This website uses Koko Analytics, a privacy-friendly analytics plugin for WordPress.
Koko Analytics is used for anonymous analysis of website usage. We use Koko Analytics to understand which pages are visited most frequently and how our website is generally used.
Koko Analytics is operated in a data-minimising configuration. No personal user profiles are created and visitors are not tracked across websites. The statistical data remains on the server of this website and is not transmitted to external analytics services such as Google Analytics.
Processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in privacy-friendly statistical analysis of our website.
15. Google Search Console
We use Google Search Console, a service provided by Google, for technical monitoring and search engine optimisation of our website.
Google Search Console helps us check the visibility of the website in Google Search, identify technical errors, analyse indexing issues, and improve how the website appears in search results.
No separate tracking script for analysing visitor behaviour is embedded on this website for the use of Google Search Console, and no additional analytics cookies are set by the website for this purpose. The data is provided by Google within Search Console and is used for technical search engine optimisation.
The use of Google Search Console is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in the technical optimisation and visibility of our website.
16. Email Communication
If you contact us by email, your information will be processed in order to handle your enquiry and any follow-up questions.
Please note that email transmission may have security vulnerabilities. Complete protection of data during transmission cannot be guaranteed.
Depending on the content of the enquiry, processing is based on Art. 6(1)(b) GDPR for pre-contractual measures or performance of a contract and on Art. 6(1)(f) GDPR due to our legitimate interest in communicating with guests and interested parties.
17. SSL / TLS Encryption
For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection because the address bar of your browser begins with “https” and a padlock symbol is displayed.
When SSL or TLS encryption is enabled, data that you transmit to us generally cannot be read by third parties.
18. External Links
This website may contain links to external websites. If you click on an external link, you leave our website. The respective operator of the external website is responsible for the processing of data on that website.
We have no influence over which data external providers process. Please refer directly to the privacy policies of the respective external websites.
19. External Content and Services
External content or services may be integrated into this website if they are required for presentation, functionality, or user-friendliness, or if they are actively accessed by the user.
These may include maps, videos, booking widgets, fonts, external scripts, or other third-party content.
When external content is loaded, personal data, in particular the IP address, browser information, and the date and time of access, may be transmitted to the respective provider.
Non-essential external content is only loaded, where required, after you have given your consent via the cookie banner.
20. Image Sources and Media
Images and media used on this website may originate from our own production, private archives, or external image sources.
Image sources may include in particular:
Own production / private archive of Familie Knaus – Bucheggerhof Unsplash Schladming-Dachstein
Simply displaying images stored locally on our website does not result in a direct transfer of data to the original image source. If images, videos, or other media are embedded externally, data may be transmitted to the respective external provider. External content is only loaded, where it is not technically necessary, after the appropriate consent has been given.
21. Technical Website Support
This website is technically maintained and further developed by:
Web design & technical implementation: MAKINGstudio – Web Design & WordPress Websites from Schladming
As part of technical support, it may be necessary for the service provider to access technical systems, website data, contact form settings, or other technical information. This access is used exclusively for maintenance, troubleshooting, further development, and ensuring the proper operation of the website.
Processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in operating a secure, functional, and professionally maintained website.
22. Recipients of Data
Personal data may, where necessary, be disclosed to the following recipients or categories of recipients:
Hosting providers Technical service providers and website administrators CDN providers Easybooking / zadego GmbH Payment service providers, where online payment is active Tax advisors or accounting services Authorities, where required by law IT and security service providers Cookie banner and consent management providers
Data is only disclosed where this is necessary for the performance of a contract, processing of your enquiry, technical provision of the website, compliance with legal obligations, or on the basis of a legitimate interest.
23. Data Processors
We use external service providers for certain technical and organisational services. These providers process personal data only on our instructions and in accordance with legal requirements.
Where required, we conclude data processing agreements pursuant to Art. 28 GDPR with such processors.
Possible data processors include in particular:
Profihost Easybooking / zadego GmbH MAKINGstudio as technical website support CCM19
24. Storage Period
We store personal data only for as long as necessary for the respective purposes.
Data from contact enquiries is generally stored for the duration of processing and for any follow-up questions. Booking, contractual, and invoice data is stored in accordance with statutory retention periods. In Austria, accounting and invoice-related data must generally be retained for seven years.
Data processed on the basis of consent is stored until consent is withdrawn, unless another legal basis permits or requires further storage.
Server log files are generally stored only for a short period unless longer storage is required for security reasons.
25. Your Rights
Under the GDPR, you generally have the following rights:
Right of access Right to rectification Right to erasure Right to restriction of processing Right to data portability Right to object Right to withdraw consent Right not to be subject to a decision based solely on automated processing
If you would like to exercise any of these rights, please contact us at:
[info@bucheggerhof.at](mailto:info@bucheggerhof.at)
26. Withdrawal of Consent
If data processing is based on your consent, you may withdraw your consent at any time with effect for the future.
The lawfulness of processing carried out before the withdrawal remains unaffected.
You can change or withdraw your cookie consent at any time via the cookie banner or the cookie settings on this website.
27. Right to Lodge a Complaint with the Supervisory Authority
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the competent supervisory authority.
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
Phone: +43 1 52 152-0
Email: [dsb@dsb.gv.at](mailto:dsb@dsb.gv.at)
28. No Automated Decision-Making
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place via this website.
29. Changes to this Privacy Policy
We reserve the right to amend this privacy policy if legal, technical, or organisational changes occur.
The version currently published on this website shall apply.
Last updated: June 2026