Privacy policy

Draft – to be legally reviewed before publication.

This is a translation for your convenience. Only the German version is legally binding: German version.

The key points in brief

This website sets no cookies, uses no analytics or advertising services and loads no content from third-party servers. The only exception is our booking service Smoobu: your browser only loads it once you expressly tap “Check availability”, “Load calendar and booking” or “Load booking tool”. Your browser remembers this consent until you withdraw it.

Controller

WertReal IFX GmbH
Graben 5a
3003 Gablitz
Austria

Email: info@das-wetterstein.at
Telephone: +43 676 355 04 99 or +43 676 697 03 70

Hosting and server log files

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you open a page, the server processes technically necessary data: your IP address, the date and time, the page requested, the amount of data transferred, your browser and operating system, and the page you visited before.

We need this data to deliver the website, to operate it securely and to find errors. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). STRATO processes the data on our behalf; for this purpose we have concluded a data processing agreement with STRATO in accordance with Art. 28 GDPR. STRATO stores the IP addresses for a maximum of seven days in order to detect and fend off attacks.

Availability and booking via Smoobu

We manage available dates and bookings with Smoobu, a service of Smoobu GmbH, Pappelallee 78/79, 10437 Berlin, Germany.

On the apartment pages and on “Prices and booking”, there is at first only a notice. Only when you tap “Check availability”, “Load calendar and booking” or “Load booking tool” does your browser load the occupancy calendar from login.smoobu.com and the booking tool from booking.smoobu.com. In the process, Smoobu receives your IP address and technical information about your browser. Smoobu delivers the booking tool via Cloudflare (Cloudflare, Inc., USA): Cloudflare also receives your IP address in the process, protects the booking tool against attacks and measures loading times; for this, your browser loads a script from static.cloudflareinsights.com. For the transfer to the USA, Cloudflare relies on the EU-U.S. Data Privacy Framework. A small helper script that adjusts the height of the booking window is stored on our own server. The legal basis is your consent given by this click (Art. 6(1)(a) GDPR).

So that you do not have to tap again on every page, your browser remembers your consent in its local storage (not a cookie). The calendar and booking tool then load directly on the other pages and on later visits as well. You can withdraw your consent at any time with effect for the future: below the booking tool with “Stop loading Smoobu automatically” or with this button.

When you book, we and Smoobu process your details – such as your name, email address, telephone number, postal address, travel dates, number of guests, your message to us and payment details – in order to perform the contract (Art. 6(1)(b) GDPR) and to comply with legal obligations, for example guest registration and the retention of invoices (Art. 6(1)(c) GDPR). Smoobu processes this data on our behalf; the data processing agreement in accordance with Art. 28 GDPR is part of our contract with Smoobu.

Contact by email or telephone

If you write to us or call us, we process your details in order to answer your enquiry (Art. 6(1)(b) GDPR for questions about a booking, otherwise Art. 6(1)(f) GDPR). We delete them as soon as we no longer need them and there is no statutory obligation to retain them.

Contact via WhatsApp

You can also write to us via WhatsApp, a service of WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The “Message on WhatsApp” link only opens WhatsApp when you tap it; no data is transferred to WhatsApp before then.

If you write to us via WhatsApp, we process your telephone number, your profile name and your messages in order to answer your enquiry (Art. 6(1)(b) GDPR for questions about a booking, otherwise Art. 6(1)(f) GDPR). We delete them as soon as we no longer need them and there is no statutory obligation to retain them. The messages themselves are end-to-end encrypted; however, WhatsApp receives information such as your telephone number and the time of the message and also processes it in the USA. For this, WhatsApp relies on the EU-U.S. Data Privacy Framework and on standard contractual clauses. You can find more about this in WhatsApp’s privacy policy. If you do not want this, you can reach us by telephone or email.

Fonts, icons and map

Fonts, icons and the map on “Location and area” are stored on our own server. No data is transferred to third parties for them.

Links to other services

The links to Instagram, Facebook, Google Maps (“Plan your route”) and OpenStreetMap (source credit below the map on “Location and area”) only open the respective service when you tap them. From then on, that service’s privacy policy applies.

Your rights

You have the right of access, the right to rectification, erasure and restriction of processing, the right to data portability and the right to object (Art. 15–21 GDPR). You can withdraw any consent at any time with effect for the future. To do so, write to info@das-wetterstein.at.

Complaints

If you believe that we are not processing your data lawfully, you can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

Last updated: November 2026