Privacy policy
The German version of this text is authoritative. This translation is provided for convenience only.
Privacy information and cookie policy
Hotel Post Seefeld Betriebs GmbH, with registered office at Dorfplatz 25, AT-6100 Seefeld in Tirol (hereinafter Post Seefeld - Wellnesshotel Tirol), always strives to protect the online privacy of its users. This document has been drawn up in accordance with Art. 13 of EU Regulation 2016/679 (hereinafter the 'Regulation') so that you may learn about our privacy policy and understand how your personal information is handled when using our website, and, where applicable, so that you may give your express and informed consent to the processing of your personal data (valid only for persons aged at least 16). The information and data you provide or that we otherwise obtain when you use our services on the website (hereinafter the 'Services') are processed in accordance with the provisions of the Regulation and the confidentiality obligations affecting the activity of the controller.
In accordance with the provisions of the Regulation, the processing carried out by Post Seefeld - Wellnesshotel Tirol is based on the principles of lawfulness, fair processing, transparency, purpose limitation, storage limitation, data minimisation, accuracy, integrity and confidentiality.
INDEX
-
The controller
-
The personal data subject to processing
-
Navigation data
-
Special categories of personal data
-
Data provided voluntarily by the data subject
-
Cookies
-
Purpose of the processing
-
Legal basis and mandatory or optional nature of the processing
-
Recipients of personal data
-
Transfer of personal data
-
Storage of personal data
-
Rights of data subjects
-
Changes
-
The controller
The controller for the processing carried out on the website is Hotel Post Seefeld Betriebs GmbH, as specified above. For information about the processing of personal data by the controller, including the list of processors instructed to process the data, please write to the following address: info@post-seefeld.at
- The personal data subject to processing
We inform you that, as a result of your navigation on the website, the controller will process personal data which may consist of an identifier such as your name, an identification number, an online identifier, a postal address, an e-mail address, a telephone number (landline and/or mobile) or one or more elements of your physical, physiological, mental, economic, cultural or social identity, in order to identify the data subject or make them identifiable (hereinafter 'personal data').
The personal data processed via the website are the following:
- Navigation data
The computer systems and software procedures used to operate the website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the communication protocols of the internet. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and combination with third-party data, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's response (successful, error, etc.) and other parameters relating to the operating system and the computer environment. This data is used solely to obtain anonymous statistical information about the use of the website and to check that it functions correctly, to detect anomalies and/or misuse, and is deleted immediately after processing. The data may be used to establish liability in the event of hypothetical computer offences against the website or third parties. Apart from this possibility, the data collected on the website is deleted after a short time.
- Special categories of personal data
If you use our website for an application on your part (or send one to us by e-mail), personal data of yours may be transmitted which falls under the special categories of personal data pursuant to Art. 9 of the Regulation, literally the '[...] personal data revealing racial and ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the […] genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.' Please do not disclose such data unless it is strictly necessary. We expressly point out that, with regard to the transmission of special categories of personal data but in the absence of express consent to the processing of this data (you are of course permitted to send a CV), the controller can neither be held liable for anything whatsoever nor receive complaints of any kind, since in this case the processing is permitted because it relates to data manifestly made public by the data subject, in accordance with Art. 9(1)(e) of the Regulation. We nevertheless point out that it is important, as already mentioned above, to give express consent to the processing of special categories of personal data should you decide to transmit this information.
We also inform you that, for the purpose of selecting applicants, the controller may analyse social profiles that are freely accessible on the internet for professional purposes (e.g. LinkedIn).
- Data provided voluntarily by the data subject
If you use certain services on the website (e.g. the enquiry, contact or reservation form), we may process personal data of third parties which you send to the controller of the processing. In these cases you are the controller of the processing and assume all legal obligations and liabilities. In this sense you grant us the fullest possible indemnity in respect of any complaint, claim or claim for damages arising from the processing, etc., which the controller may receive from third parties whose personal data has been processed through use of the website's functions in breach of the applicable provisions on the protection of personal data. If, in the course of using the website, you provide or otherwise process personal data of third parties, you guarantee in any case that this particular case of processing is based on an appropriate legal basis pursuant to Art. 6 of the Regulation which legitimises the processing of the information concerned.
- Cookies
General information about cookies
Cookies are small text files that are placed on the hard drive of a client computer by a website via the browser in order to store small amounts of information from the website for a certain period. In general there are many different types of cookies. Some are essential for the functioning of the website, such as navigation or shopping-basket cookies. There are also so-called analytics cookies, which collect information – for example about the number of website visitors and the path visitors take to the website. Functional cookies allow the website to remember the choices you have made (e.g. selected filter settings or the automatic language preference of a website).
In addition there are cookies, so-called profiling cookies, which record the preferences and actions of the user. This information is used to create a user profile. This serves to combine advertising messages with the interests of users and thus enables more targeted advertising. In many cases these are third-party cookies which the website operator uses to display personalised advertising.
Consent requirement for cookies
Website visitors must actively consent to the setting of cookies that are not essential for the functionality of the website and additionally have the right to withdraw their consent at any time.
This website uses a technology called a CMP (consent management platform) to manage this right. When the website is accessed, a banner appears informing the website user about the use of cookies, offering various options for consent (consenting to all cookies, to individual categories of cookies or to each individual cookie separately) and providing detailed information about the various cookies. The CMP remembers the settings chosen by the website user and applies them again on the next visit to the website. Here the website visitor can exercise the right of withdrawal or adjust the settings.
Blocking cookies via browser settings
Firefox:
-
Click on the menu and then on Settings.
-
Go to the Privacy tab.
-
In the 'History' area, under 'Firefox will:' select 'Use custom settings for history'.
-
In the options that now appear, remove the tick next to 'Accept cookies'
-
Click the 'OK' button.
Detailed information can be found at: https://support.mozilla.org/de/kb/Cookies-blockieren
Google Chrome
-
Click on the menu and then on Settings.
-
At the very bottom, click on 'Show advanced settings'.
-
In the 'Privacy' area, click on 'Content settings…'.
-
In the Cookies area, select 'Block sites from setting any data'.
-
Click the 'Done' button.
Detailed information can be found at: https://support.google.com/chrome/answer/95647?hl=de
Internet Explorer
-
Under the 'Tools' menu item, open 'Internet options', or, if the menu bar is not displayed, click on the menu icon and then on 'Internet options'.
-
Click on the 'Privacy' tab
-
Using the slider you can choose between several levels of cookie processing. If the slider is at the very top, all cookies are blocked; if it is at the very bottom, all are allowed.
-
Click the 'OK' button.
Detailed information can be found at: https://windows.microsoft.com/de-de/windows7/block-enable-or-allow-cookies
Safari
-
In the settings, click on 'Privacy'
-
In the 'Accept cookies' area you can specify whether and when Safari should store website cookies. For further information click the Help button (marked with a question mark)
Detailed information can be found at: https://support.apple.com/kb/PH5042?locale=en_US
- Purpose of the processing
The processing that we wish to carry out (where necessary) with your express consent has the following purposes:
-
To enable the provision of the services you have requested
-
To respond to customer service requests, requests for information or reservations
-
Analysis of CVs and contacting applicants who have submitted their application
-
To fulfil all legal, accounting and tax obligations
-
Marketing purposes: subject to prior express and specific consent, the data provided may be processed for the sending of advertising and marketing communications, including the sending of newsletters and market research surveys, using automated (SMS, MMS, e-mail, push notifications) and non-automated (postal, call centre) systems. The legal basis for processing your data for these purposes is Art. 6(1)(a) of the Regulation. Consent to processing for direct marketing is optional and depends on your free decision, so that not giving your consent for this purpose does not affect the use of the services.
-
Legal basis and mandatory or optional nature of the processing
The legal basis for the processing of personal data for the purposes set out in section 3 (a-b-c) is Art. 6(1)(b) of the Regulation (performance of a contract), since the data processing is necessary for the provision of the services or for responding to requests from the data subject. The provision of personal data for these purposes is optional, but a failure to do so would make it impossible to activate the services provided by the website, to process enquiries or to evaluate CVs. With particular reference to purpose 3.c and the associated analysis of social media profiles of a professional nature made freely accessible on the internet in accordance with section 2.b, Art. 6(1)(f) of the Regulation constitutes the legal basis for the handling of the data, that is, the legitimate interest of the controller in examining possible risks regarding the applicant's suitability for filling the specific vacancy.
The purpose set out in section 3.d constitutes lawful processing of personal data within the meaning of Art. 6(1)(c) of the Regulation (compliance with a legal obligation). Once the personal data has been provided, the processing is indeed necessary in order to comply with a legal obligation to which the controller is subject.
The legal basis for the processing for the purposes set out in section 3.e is Art. 6(1)(a) of the Regulation (consent of the user). Without your consent, the controller may, in order to carry out the processing for the same purposes covering the direct sending of advertising material or direct selling or the conduct of market research or commercial communications relating to products or services of the controller similar to those purchased, use e-mail addresses and postal addresses in accordance with and within the limits permitted by Art. 130(4) of the Data Protection Code and the order of the Data Protection Authority of 19 June 2008. The legal basis for processing your data for this purpose is Art. 6(1)(f) of the Regulation (legitimate interest).
- Recipients of personal data
Your personal data may be disclosed for the purposes set out in section 3 to:
-
Entities that typically act as processors, namely: i) persons, companies or professional associations that provide the controller with assistance and advice on accounting, administrative, legal, tax, financial, debt collection, marketing and communication matters relating to the provision of the services; ii) entities with whom cooperation is necessary for the provision of the services (e.g. hosting providers); iii) entities entrusted with carrying out technical maintenance work (including the maintenance of network equipment and electronic communications networks) (jointly referred to as 'recipients');
-
Entities, bodies or authorities to whom your personal data must be disclosed by virtue of statutory provisions or orders of the authorities;
-
Persons authorised by the controller to process personal data that are necessary for carrying out activities relating to the provision of the services or for the other purposes set out in section 3, and who have undertaken to maintain confidentiality or are under an appropriate statutory obligation of confidentiality (e.g. employees of the controller).
-
Transfer of personal data
Some of your personal data will be passed on to recipients that may be located outside the European Economic Area. The controller of the processing ensures that the processing of your personal data by these recipients takes place in accordance with the Regulation. Transfers may indeed be based on an adequacy decision, on contractual clauses approved by the European Commission or on another appropriate legal basis. You can obtain further information from the controller at the following address: info@post-seefeld.at.
- Retention of personal data
Personal data processed for the purposes set out in section 3(a-b) is retained for as long as is strictly necessary to achieve those purposes. Since the data processing takes place for the provision of services, the controller will in any case process the personal data until the point in time provided for by Italian legislation for the safeguarding of interests (Art. 2946 ff. of the Civil Code). With regard to CVs submitted via the website or by e-mail in accordance with section 3.c, the personal data is retained for a period considered appropriate for the purpose for which the data was collected. This is without prejudice to the possibility for the controller to contact the applicant again shortly before the expiry of the stated period in order to request an extension of this retention period.
Personal data processed for the purposes set out in section 3.d is stored until the point in time provided for by the specific obligation or the applicable law.
Personal data processed for the purposes set out in section 3.e, on the other hand, is retained until consent is withdrawn by the data subject or, if no such withdrawal occurs, for a specified maximum period considered appropriate.
Further information about the retention period of the data and the criteria for determining this period can be obtained from the controller at the following address: info@post-seefeld.at.
- Rights of data subjects
In accordance with Article 15 ff. of the Regulation you have the right to ask the controller at any time for information about your personal data, to request that it be rectified or erased or to object to the processing. You have the right to request the restriction of processing in the cases provided for in Art. 18 of the Regulation and, in the cases provided for in Art. 20 of the Regulation, to receive the data concerning you in a structured, commonly used and machine-readable format.
Every request must be addressed in writing to the controller at the following address info@post-seefeld.at.
You have the right at any time to lodge a complaint with the competent supervisory authority (data protection authority) pursuant to Art. 77 of the Regulation if you consider that the processing of your personal data infringes applicable law.
- Changes
This privacy policy applies from 25 November 2025. The controller reserves the right to change or update the content in whole or in part, including as a result of changes in applicable legislation. The controller therefore encourages you to visit this section regularly in order to inform yourself about the latest and most up-to-date version of this privacy policy.