Data privacy statement
Hotel Albona Nova
Hotel Albona – Nova GmbH & Co KG, Haus 217, 6763 Zürs, FN 28567 k, (hereinafter referred to as “AlbonaNova”) requires certain personal data in order to provide its hotel and catering services, which it obtains from you as a (future) guest during the reservation and during your stay as a (future) guest. The protection of this data and your personal rights are very important to us. Therefore, we adhere to the latest security standards to ensure the protection of data and use (i.e., in particular, process or transmit) your data exclusively within the framework of the statutory provisions, insofar as this is necessary for the provision of the contractual services or within the framework of your consent. The data used is always treated as strictly confidential by us.
Responsible party: Hotel Albona – Nova GmbH & Co KG, Haus 217, 6763 Zürs; email: office@albonanova.at; phone: +43 5583 2341. For data protection concerns, you can reach us at office@albonanova.at (subject: “Data protection”).
Hotel Albona - Nova GmbH & Co KG uses the following (personal data) in particular: Registration data (address), phone number(s) and e-mail address(es), dates of birth, gender (title), vehicle registration number. In order to improve our service, we also note relevant guest requests in the restaurant (such as table preferences, allergies, intolerances) and at the bar (such as favorite drinks) as well as at the reception (such as special room requests), but these are only used for the hotel's own purposes .
Note: Information about allergies/intolerances is health data within the meaning of Art. 9 GDPR and is processed exclusively on the basis of your express consent (Art. 9 (2) (a) GDPR), strictly for the purpose of food preparation/safety, not for marketing, and stored for a short period of time (see storage periods).
We use our guests' personal data for the following purposes:
-
Reservations and reservation confirmations Reporting to registration authorities
-
Mailings such as postal mailings, hotel information by email, and offers
-
To create a personal “feel at home” experience for our guests by providing advance information to the various hotel departments concerned, your preferences, wishes, and similar information are noted under ‘Notes’ and “Traces” in your personal guest file and in a guest request list .
-
Creation of ski passes, ski school registration, massage appointments, babysitting services
· For quality assurance purposes and within the framework of the Customer Alliance, we also use your data beyond the duration of your stay and transfer it to (external) users (such as printers, Skipool Arlberg, tax advisors, Zürs ski school) who enjoy our trust and who have been obliged by us to comply with the relevant data protection regulations -
Internal classification into categories (e.g., female/male and age groups) in order to plan customized offers and transmit information (by mail or electronically). For this purpose, the title (i.e., gender) and date of birth are also processed
Transparency in accordance with Art. 13 GDPR (overview by purpose):
Booking/accommodation/billing: Data categories (master data, booking/payment data); legal basis Art. 6 (1) b (contract), Art. 6 (1) c (legal obligations, e.g., registration/tax law); recipients: Processors (websLINE/IT/hotel software/hosting/payment service), own controllers (tax advisors, authorities); storage period: 7 years (BAO/UGB) for accounting documents; third country transfer: no.
Legal notifications: Legal basis Art. 6 (1) c; recipients: registration/security authorities; storage period: according to special laws; third country transfer: no.
Service preferences in the hotel: General preferences: Art. 6 (1) b/f; allergies/intolerances: Art. 9 (2) a (express consent); recipients: internal departments/IT (AV); storage period: allergies only during stay + up to 14 days, otherwise preferences max. 2 years from last stay or until objection; third country transfer: no.
Newsletter/electronic direct marketing (email/SMS/push): Art. 6 (1)a (consent) in conjunction with § 165 TKG 2021 (AT); if applicable, soft opt-in only for similar own offers to existing customers with clear opt-out option; recipient: CleverReach (AV) ; storage period: until revoked, DOI protocols 3 years; third country transfer: if applicable, via EU-US DPF/SCCs + measures.
Postal advertising/target group planning: Art. 6 (1) f (legitimate interest in direct advertising); recipients: printing companies/letter shops (AV); storage period: until objection; third country transfer: no.
Provision of external services (ski passes, ski school, massage, babysitter): Art. 6 (1) b (on request, pre-contractual/contractual), Art. 6 (1) a if special information is disclosed; Recipients: Skipool Arlberg, Skischule Zürs, partners (own controllers); Storage period: until fulfillment; Third country transfer: no.
Web analysis/marketing tags/consent management: Art. 6 (1) a in conjunction with § 165 TKG 2021 (opt-in before setting non-essential cookies); Recipients: Tool providers (some own controllers) and IT/hosting (AV); storage period: according to cookie category (see Cookiebot); third-country transfer: possible (USA) with EU-US DPF/SCCs + supplementary measures.
All information will of course be treated confidentially. Our IT system is secured by two passwords (login password and personal code for individual receptionists and management). 27.02.2018 Albona/GDPR / 8 / AC
We implement appropriate technical and organizational measures in accordance with Art. 32 GDPR, including access restrictions/role and authorization concepts, transport encryption (TLS) and – where appropriate – encryption at rest, logging/monitoring, data minimization/pseudonymization, AV contracts, deletion/retention concepts, and awareness training.
By clicking on the consent button on our homepage, signing the declaration of consent, or reserving a room online, you confirm that you have read and understood the content of this privacy policy and give your express consent to the processing of your personal data mentioned above or entered in the registration form for the purposes stated in point 3. .
In addition, by clicking on the consent button and the registration button, you give your express consent to the transfer/transmission of the above-mentioned data to the above-mentioned recipients for the respective purposes.
Note: Consent is voluntary and not a prerequisite for the hotel contract (except for data required for contract/registration purposes). Consent can be revoked at any time with effect for the future (Art. 7 (3) GDPR).
I hereby authorize Hotel Albona-Nova GmbH & Co KG to process, store, and evaluate process, store, and evaluate data received from me in connection with my stay in accordance with the applicable data protection regulations. We process contract and billing data for the purpose of fulfilling the contract (Art. 6 (1) b); legal obligations according to Art. 6 (1) c).
I agree to receive emails and text messages from Albona Nova GmbH & Co KG for advertising purposes (maximum of 4 mailings per year as well as topic-specific newsletters) and authorize them to do so.
I agree to receive emails and SMS messages from Albona Nova GmbH & Co KG for advertising purposes (maximum of 4 mailings per year and topic-specific newsletters) and authorize them to transfer my data required for this purpose to processors (external service providers). Electronic direct advertising is based on your consent (Art. 6 (1) a in conjunction with § 165 TKG 2021); double opt-in is logged; an unsubscribe link is included in every message; soft opt-in only for similar own offers to existing customers with opt-out upon collection and in every message.
These consents to the use of personal data and to receiving advertising information can be revoked individually or collectively at any time. Please send revocations to: by mail: Hotel Albona-Nova GmbH & Co KG, Haus 217, 6763 Zürs by email: office@albonanova.at by phone 0043 – 5583 - 2341 by fax: 0043 – 5583 – 2341 112
Revocation (Art. 7 (3) GDPR) applies to all consent-based processing (e.g., newsletters, cookies/analysis, YouTube/Spotify, allergies). You can object (Art. 21 GDPR) to processing based on legitimate interest (e.g., postal advertising, segmentation). Simply send your revocation/objection to office@albonanova.at.
Recipient roles: Processors: websLINE (booking engine), IT/hosting/hotel software, CleverReach (newsletter), printers/letter shops, consent management (Cookiebot/Usercentrics), payment services if applicable. Own controllers: tax advisors/auditors, authorities/registration authorities, Skipool Arlberg, Zürs Ski School, other mediated service partners, platform providers (e.g., Google/Meta/Spotify/YouTube/HERE/Microsoft) insofar as they process data independently.
Storage periods: Contract/billing documents 7 years (BAO/UGB); registration data according to special laws; newsletter master data until revocation, DOI/consent certificates 3 years; general service preferences up to 2 years from last stay or until objection; allergies/intolerances: stay + up to 14 days, then deletion.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc., to enable analysis of the use of the website. The information generated by use of Google Analytics, about your use of this website (including your IP address) will be transmitted to and stored by Google Inc. in the USA. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage .
Google will not associate your IP address with any other data held by Google. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site.
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies,” which are text files placed on your computer, to help the website analyze how users use the website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google will also may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf.
Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser ; however, please note that if you do this, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
An excerpt of detailed information according to the Austrian Chamber of Commerce in accordance with
We use Google Analytics 4 (GA4) with consent mode. Non-essential cookies/requests are only made after your consent (Art. 6 (1) a in conjunction with § 165 TKG 2021). IP addresses are not stored permanently ; pseudonymous event data is processed. You can change/revoke your consent at any time in the cookie banner (Cookiebot). Possible transfers to the USA are made – depending on the provider certification – on the basis of the EU-US Data Privacy Framework (DPF) or Standard Contractual Clauses (SCCs) plus supplementary protective measures.
Our website uses several plugins from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. You can recognize these plugins either by the blue “F” from Facebook or by the fact that this plugin is marked with the word “Facebook”. When you visit our website, these plugins establish a connection to Facebook's servers and transmit data. On the one hand, the information you see is transferred directly from the servers to your browser and displayed there; on the other hand , information about your visit to our website is transmitted to Facebook.
If you are logged in to Facebook, the transmitted information can be directly assigned to your account. When interacting with the functions of the plugin, e.g., pressing the “Like” button, this information is sent directly from your browser to Facebook and stored there .
Facebook is responsible for the further processing of this information; please refer to Facebook's privacy policy for the relevant terms and conditions and settings options. If you want to avoid personal data being transmitted to Facebook, log out of Facebook before visiting our website.
Meta/Facebook plugins are only loaded after you have given your consent via the consent banner (2-click solution). Any transfers to third countries (USA) are secured via EU-US DPF or SCCs .
Google Tag Manager
We use this service on our website.
The service enables us as marketers to manage website tags via an interface. The tool that implements the tags is a cookieless domain and does not collect any personal data itself. The service triggers other tags, which in turn may collect data. The service does not access this data. If deactivation has been carried out at the domain or cookie level, this remains in place for all tracking tags implemented with the service.
Provider:
Google Ireland Limited
Google Building Gordon House
Barrow St
4 Dublin
Ireland
https://policies.google.com/privacy?hl=de&gl=en
Google Tag Manager does not set any cookies itself and does not process any personal data for its own purposes; tags that are not necessary are only loaded after consent has been given.
Newsletter - Cleverreach
We use this service on our website.
We use this service to send our newsletter. For this purpose, the data you provided when registering for the newsletter will be passed on to the provider. The provider uses the data to send and statistically evaluate the newsletters on our behalf. The newsletter emails contain web beacons or tracking pixels for this purpose. These are one-pixel image files that are stored on our websites. This allows your user behavior to be tracked, in particular whether you have opened the newsletter email or which hyperlinks in the email you have clicked on. The provider can also perform conversion tracking , i.e., determine whether a previously desired action was taken after clicking on the hyperlink in the newsletter email. In addition, technical information such as the time of retrieval, your IP address, data about your web browser, and operating system is collected. This data is collected exclusively in pseudonymized form.
The data is not linked to other personal data. This means that it cannot be directly linked to a specific person .
We use the service for optimization purposes, in particular to improve the use of our website for you and to make its design more user-friendly.
If you have given us your consent, the legal basis is Art. 6 (1) (1) (a) GDPR. Otherwise, the legal basis is Art. 6 (1) (1) (f) GDPR.
Provider:
CleverReach GmbH & Co. KG
CRASH Building
Schafjückenweg 2
26180 Rastede
Germany
Section 165 TKG 2021 applies to electronic direct advertising. We use double opt-in; each message contains an unsubscribe link. Soft opt-in only for similar own offers to existing customers with the option to object.
HERE Maps
We use HERE Maps on our website. The provider of this service is HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, Netherlands
HERE Maps is used in the interest of an appealing presentation of the online offers we provide on our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
For more information on how user data is handled, please refer to the HERE Maps privacy policy:
https://legal.here.com/de-de/privacy/policy
The policy on cookies and personalized advertising can be found here:
https://legal.here.com/de-de/privacy/cookie-policy
HERE content is only loaded after consent has been given for non-essential categories; the legal basis is then Art. 6 (1) a in conjunction with § 165 TKG 2021.
YouTube
We use this service on our website.
When you visit a website that contains media content from this provider, data is transferred to a server belonging to the provider and stored there. If you have a user account with the provider and are registered, the provider can assign the visit to your user account. The provider stores this data as usage profiles and uses it for advertising, market research, and/or the needs-based design of its websites. Such evaluation is carried out in particular (even for users who are not logged in) to display needs-based advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles. Please contact the provider directly for this purpose.
We integrate the provider's content into the web pages of our website in order to make this content directly available to you without you having to call up the content separately on the provider's website. This allows us to improve our offering and the user experience for you and make it more interesting.
The legal basis is Art. 6 (1) (a) GDPR (consent).
Provider: Google Ireland Limited
Google Building Gordon House
Barrow St
4 Dublin
Ireland
Tel. +353 1 543 1000
https://policies.google.com/privacy?hl=de&gl=de
YouTube is only loaded after active consent (2 clicks). Possible transfers to the USA are protected by EU-US DPF/SCCs.
Spotify
This website incorporates features of the Spotify music service. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden.
You can recognize the Spotify plugins by the green logo on this website. An overview of the Spotify plugins can be found at: https://developer.spotify.com.
This allows a direct connection to be established between your browser and the Spotify server when you visit this website via the plugin .
Spotify receives the information that you have visited this website with your IP address. If you click on the Spotify button while you are logged into logged into your Spotify account, you can link the content of this website to your Spotify profile. This allows Spotify to associate your visit to this website with your user account.
Please note that when using Spotify, cookies from Google Analytics are used, which means that your usage data when using Spotify may also be passed on to Google. Google Analytics is a tool from the Google group for analyzing user behavior, based in the USA.
Spotify is solely responsible for this integration. As the website operator, we have no influence on this processing.
The storage and analysis of the data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the appealing acoustic design of its website. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent covers the storage of cookies or access to information in the user's terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
Further information on this can be found in Spotify's privacy policy : https://www.spotify.com/de/legal/privacy-policy/.
If you do not want Spotify to associate your visit to this website with your Spotify user account, please log out of your Spotify user account.
Instead of TDDDG, § 165 TKG 2021 applies in Austria. Spotify integrations are only loaded after consent (cookie banner; 2-click). Third-country transfers are secured via EU-US DPF/SCCs; revocation at any time in the cookie banner.
Microsoft Clarity
Our website uses Microsoft Clarity, an analytics tool from Microsoft Corporation, to better understand the usage behavior of our visitors and to optimize our online offering. Clarity records certain interactions, including mouse movements, clicks, scrolling behavior, and other navigation patterns. These insights enable us to improve the user-friendliness and functionality of our website in a targeted manner.
The collected data is processed on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR, as the analysis helps to make our content more user-friendly. Microsoft may also process the collected data for its own purposes.
Cookies and similar technologies are used for this purpose, among other things. Further information on data processing by Microsoft and your rights and settings options for protecting your privacy can be found in Microsoft's privacy policy.
If you wish to object to analysis by Microsoft Clarity, you can do so via Microsoft's opt-out options or by adjusting your browser settings to disable cookies.
Clarity is only loaded after consent (Art. 6 (1) a in conjunction with § 165 TKG 2021) ; no cookies/requests beforehand. Objection pursuant to Art. 21 remains unaffected.
Online booking/request via the website
Description and scope of data processing
Our website offers the option of booking and/or requesting rooms and offers. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored.
This may include: title, first name, last name, email address, telephone number, address, number of fellow travelers, requests, date, time, room selection, offers, price. address, number of fellow travelers, requests, date, time, room selection, offers, price.
If you make an online booking via our website, this is done via the online reservation system of websLINE Internet- & Marketing GmbH, Sägewerkstrasse 24, 83395 Freilassing, Germany. All booking data entered by you will be transmitted in encrypted form. websLINE is committed to handling your transmitted data in accordance with data protection regulations. It takes all organizational and technical measures to protect your data.
In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the booking and for communication.
websLINE acts as a processor; payment service/bank as its own controller; tax advisor as its own controller.
Legal basis for data processing
The legal basis for the processing of data is the conclusion of an accommodation contract with the user.
In addition, legal obligations (Art. 6 (1) c) apply to registration data/taxes.
Purpose of data processing
The processing of personal data from the input mask serves us solely for the purpose of processing the booking request and handling payment transactions.
For additional services arranged (ski passes/ski school/massage/babysitter), we process/transmit data at your request (Art. 6 (1) b); if necessary, consent (Art. 6 (1) a) for further information.
Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collection. In the case of a contractual relationship, we will delete the data received as soon as national, commercial law, statutory or contractual retention requirements have been fulfilled.
Accounting documents/invoices: 7 years (BAO/UGB); registration data: according to special laws; booking requests without contract: 6 months; service preferences: up to 2 years or until objection; allergies: stay + up to 14 days.
Right to object and right to erasure
The user has the right to object to the processing of their personal data at any time. We would like to point out that in the event of an objection, the booking cannot be completed or the conversation cannot be continued.
For consent-based processing (newsletter, cookies/analysis, YouTube/Spotify, allergies), the right of revocation applies (Art. 7 (3)). For processing based on legitimate interest (e.g. postal advertising), the right to object applies (Art. 21). Contact: office@albonanova.at.
Rights of data subjects (Art. 15–22 GDPR): You have the right to information, correction, deletion, restriction, data portability, objection, and revocation of consent. To exercise your rights, please contact us at office@albonanova.at (subject: “Data protection”).
No automated individual decisions with legal effect are made.
Right to lodge a complaint: You can lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, Tel. +43 1 52 152- 0, dsb@dsb.gv.at, www.dsb.gv.at.
Status & Changes: This privacy policy is valid from November 6, 2025 and will be updated as necessary. The current version can be found on our website.