Privacy policy

Controller

Hotel Mondschein GmbH, Hannes Schneider Promenade 9, 6762 Stuben am Arlberg, Austria. Managing director: Markus Kegele. Phone +43 5582 511, email hotel@mondschein.com.

Information we collect

We collect two types of data and information from users.

Non-personal information: aggregated and technical information about the use of the Site, such as the type of browser and operating system, language preference, access time, pages viewed and clicks. Without consent we only count daily totals on our own servers: pages viewed, availability searches and booking steps, without cookies, without storing your IP address and without a visitor ID. We only use Google Analytics with your consent (see the cookie statement below).

Personal information: information that identifies you or can identify you. We receive it when you provide it yourself, for example when you fill in a form or make a booking, and when you use the Site:

• Device information: when you visit the Site, our hosting provider processes your IP address, the time and the page requested, so the Site can be delivered and protected against attacks and abuse.
• Newsletter: your email address and language, and the proof of your consent (date, time and the text you agreed to). You confirm your subscription with a link in an email (double opt-in).
• Contact form: your name, email address, phone number (optional) and your message.
• Bookings: when you book a room, your name, contact details, country, number of guests, dates of stay and the payment details you enter in the secure payment form of our booking system. We never see or store your full card number.

Using information

We use your information:

• to answer your enquiry and to prepare and manage your booking and stay (legal basis: contract and pre-contractual steps, Art. 6(1)(b) GDPR);
• to send you our newsletter, only if you subscribed and confirmed it (consent, Art. 6(1)(a) GDPR, which you can withdraw at any time with the link in every newsletter);
• to measure the use of the Site and the success of our Google ads, only with your consent (Art. 6(1)(a) GDPR);
• to keep the Site and our forms secure and to prevent spam and abuse (legitimate interest, Art. 6(1)(f) GDPR);
• to comply with legal obligations, such as accounting, tax and the Austrian guest registration (Art. 6(1)(c) GDPR).

Advertising

We do not show third-party advertisements on the Site. If you consent to "Marketing" in the cookie settings, Google Ads measures which of our ads led to a booking or an enquiry.

Marketing

We may use your email address ourselves or by using our third-party subcontractors for the purpose of providing you with promotional materials concerning our services, which we believe may interest you. We only send you our newsletter if you subscribed and confirmed your subscription.

Out of respect to your right to privacy, we provide you within such marketing materials with means to decline receiving further marketing offers from us. If you unsubscribe, we will remove your email address from our marketing distribution lists.

Please note that even if you have unsubscribed from receiving marketing emails from us, we may send you other types of important email communications, such as booking confirmations or administrative notices.

Sharing information

We do not rent, sell, or share users' information with third parties except as described in this privacy policy. We may share your personal information in a limited number of circumstances, including the following.

Legal and regulatory authorities: we may share your personal information with legal and regulatory authorities or other third parties when it is required by law, necessary to permit us to exercise our legal rights, to comply with our legal obligations, or necessary to take action regarding illegal activities or to protect the safety of any person.

Business transitions: if all or part of our company is sold, merged or otherwise transferred, we may transfer your personal information as part of that transition.

Third-party service providers: we work with the following service providers, who process data only on our behalf and under a data processing agreement. Where a provider is located in the USA, the transfer is based on the EU-US Data Privacy Framework or on the standard contractual clauses of the European Commission.

• Vercel Inc. (USA): hosting of the Site, served from the data centre in Frankfurt, Germany.
• Supabase (database in Frankfurt, Germany), operated for us by our technology partner Vertize: storage of enquiries, newsletter subscriptions, website content and the anonymous visit statistics (daily totals only).
• Resend (USA): sending emails, such as the newsletter confirmation and the forwarding of your enquiry to our team.
• Cloudbeds (USA): our hotel management and booking system, including the secure payment form for online payments.
• Google Ireland Ltd. and Google LLC (USA): Google Analytics, Google Tag Manager, Google Ads measurement and Google Maps, only with your consent.

User rights

To exercise your rights, write to hotel@mondschein.com. You also have the right to lodge a complaint with a supervisory authority, in Austria the Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

You may request to:

• receive confirmation as to whether or not personal information concerning you is being processed, and access your stored personal information, together with supplementary information;
• receive a copy of personal information you directly volunteer to us in a structured, commonly used and machine-readable format;
• request rectification of your personal information that is in our control;
• request erasure of your personal information;
• object to the processing of personal information by us;
• request to restrict processing of your personal information by us;
• withdraw a consent at any time, without affecting the lawfulness of processing before the withdrawal.

Retention

We will retain your personal information for as long as necessary to provide our services, and as necessary to comply with our legal obligations, resolve disputes and enforce our policies. In particular:

• Enquiries via the contact form: 24 months, then deleted automatically.
• Newsletter: as long as you are subscribed. An unconfirmed subscription is deleted after 7 days. After you unsubscribe, your email address is replaced by an irreversible code after 30 days, so we can still prove that you unsubscribed without keeping your address.
• Booking and invoice data: 7 years, as required by Austrian tax law (§ 132 BAO).
• Hosting logs (IP address, time, page): only for a short time for security reasons.

Security

We take great care in implementing and maintaining the security of the Site and your information. We employ industry standard procedures and policies to ensure the safety of the information we collect and retain, and prevent unauthorized use of any such information, and we require any third party to comply with similar security requirements, in accordance with this privacy policy.

Cookie statement

A cookie is a small piece of information which is sent to your browser while you are viewing a website and is placed on your device (computer, tablet or smartphone).

You can change or withdraw your choice at any time via "Cookie settings" at the bottom of every page. The fonts of the Site are stored on our own server, so no data goes to Google Fonts. The live webcam image of Stuben is loaded through our own server, so no data goes to the webcam provider.

When you first visit the Site, we ask for your choice. Nothing from Google is loaded before you agree. The Site uses:

• Necessary: stores your cookie choice for 12 months and protects our forms against bots. Always on.
• Statistics (only with consent): Google Analytics counts visits and booking steps, without storing your IP address and without identifying you personally.
• Marketing (only with consent): Google Ads measures which ads lead to bookings.
• External media (only with consent): maps from Google Maps load directly on the page.

Further information

We reserve the right to periodically amend or revise this privacy policy; material changes will be effective immediately upon the display of the revised privacy policy. The last revision is shown below.

If you have any general questions about the Site or the information we collect about you and how we use it, you can contact us at hotel@mondschein.com.

Last modified: 26 October 2026.