As of October 2026. This is a translation; in case of doubt the German version prevails.
Protecting your data matters to us. We only process personal data to the extent necessary to run this website, answer your enquiry and handle your booking. This website sets no cookies for advertising or analytics and loads no external fonts or scripts.
1. Controller
Glemm Alpin GmbH, Hinterlengauweg 279, 5754 Hinterglemm, Austria
E-mail: info@glemm-alpin.com, phone: +49 162 2904115
We have not appointed a data protection officer as this is not required by law. For any questions about data protection, please contact us at the e-mail address above.
2. Visiting the website
Hosting: The website and the enquiry and booking functions are hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). The server functions run in the Frankfurt am Main data centre. When pages are accessed, Vercel processes technically necessary data (IP address, date and time, page requested, browser and operating system) in log files in order to deliver the website and protect it against attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). We have a data processing agreement with Vercel. A transfer to the USA cannot be ruled out; it takes place on the basis of the EU-US Data Privacy Framework or the EU standard contractual clauses.
Cookieless audience measurement: We use Vercel Web Analytics to find out which pages are visited how often and how many visitors reach, for example, the booking page. No cookies are set and no data is stored on your device; visitors are not tracked across websites, and we only receive aggregated figures. The legal basis is our legitimate interest in improving our offer (Art. 6(1)(f) GDPR).
Fonts and content: Fonts and images are loaded from our own server. No data is transferred to third parties.
3. Map (Google Maps)
The map on our website is only loaded once you activate it by clicking. Only then does your browser connect to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); your IP address and, where applicable, data relating to your Google account are transferred to Google, including to the USA. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future by reloading the page. Details: Google privacy policy.
4. Enquiries via form, e-mail, phone or WhatsApp
When you send us an enquiry, we process your details (name, e-mail address, phone number, travel dates, number of guests, message) in order to answer the enquiry and make you an offer. The legal basis is pre-contractual measures at your request (Art. 6(1)(b) GDPR). Enquiries via the form are not stored in a database but only forwarded to our mailbox by e-mail; you receive a copy. For sending e-mails we use IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany); we have a data processing agreement with IONOS. We delete enquiries that do not lead to a booking from our mailbox no later than 12 months after the last contact.
5. Booking and payment
Booking data: To handle your booking we process your name, e-mail address, phone number, travel dates, number of adults and children, your billing address, your message, the price, the payment method and the payment status. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). We store the booking data in a database at Supabase Pte. Ltd. (65 Chulia Street, #38-02/03, OCBC Centre, Singapore 049513), hosted in the Frankfurt am Main data centre. We have a data processing agreement with Supabase; where Supabase accesses data from third countries for operation and support, this is based on the EU standard contractual clauses.
Card payment via Stripe: If you pay by card (or another payment method offered by Stripe), you will be redirected to a payment page of Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). Stripe receives your name, e-mail address, the amount, the booking reference and your payment details; we do not receive your full card details. So that the balance can be collected automatically one month before arrival, Stripe stores the payment method with your consent at the time of payment. Stripe also processes data under its own responsibility, for example for fraud prevention and to comply with legal obligations, and may transfer data to Stripe, Inc. in the USA (EU-US Data Privacy Framework or standard contractual clauses). Details: Stripe privacy policy.
Bank transfer: If you pay by bank transfer, we process the details of your transfer (name, IBAN, amount, reference) to allocate your payment.
E-mails about your booking and stay: You will receive confirmations, payment information and reminders by e-mail. Around your stay we also send you information by e-mail (arrival with access code, tips during your stay, a reminder before departure). These messages are part of performing the contract (Art. 6(1)(b) GDPR); we do not send advertising. If you agreed when booking, we ask you once for a review after your departure (Art. 6(1)(a) GDPR); you can withdraw this consent at any time by e-mail to info@glemm-alpin.com.
Invoice: For the invoice we record your billing address. We keep invoices and the related booking data for seven years in accordance with tax law (§ 132 BAO, Art. 6(1)(c) GDPR).
Bookings via platforms: If you book via Airbnb, Booking.com or other platforms, their privacy policies also apply; we receive the details required for your stay from the platform.
Availability calendar: To avoid double bookings, we exchange only occupied periods with booking platforms – without names or any other personal data.
6. Legal obligations during your stay
As a landlord we are legally required to record certain data of our guests, in particular for guest registration under the Austrian Registration Act (Meldegesetz) and for the tourist tax. We collect the required details (e.g. name, date of birth, nationality, address, ID document details, length of stay) before or on arrival. The legal basis is compliance with legal obligations (Art. 6(1)(c) GDPR). Guest registration is carried out electronically via the online registration system in Saalbach-Hinterglemm.
7. Retention period
We keep booking and invoice data for as long as required by tax and commercial retention obligations (generally seven years from the end of the calendar year, § 132 BAO, § 212 UGB). Guest registration data is stored for the period prescribed by law. After that, the data is deleted. Abandoned card payments are automatically marked as cancelled once the payment deadline has expired.
8. Administration area
The administration area of this website is accessible to the owner only. A technically necessary cookie is set there for logging in. Guests do not come into contact with this area.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent given at any time with effect for the future. Simply contact us at info@glemm-alpin.com.
If you believe that the processing of your data violates data protection law, you can lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
10. Obligation to provide data
We need the details marked as mandatory in the enquiry and booking form to process your enquiry or booking. Without these details we cannot answer your enquiry or carry out the booking. There is no automated decision-making, including profiling.