Privacy Policy
This privacy policy informs you about the nature, scope and purpose of the processing of personal data on this website. The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Arlmont GmbH
Am Alten Hof 1
6580 St. Anton am Arlberg, Tyrol (Austria)
Phone: +43 5446 42525
E-mail: welcome@arlmont.at
Website: www.arlmont.at
1. General information & legal bases
We always process personal data in accordance with the GDPR and the Austrian Data Protection Act (DSG). Depending on the purpose, the legal bases for processing are: your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual measures (b), compliance with a legal obligation (c), and our legitimate interest in the secure and needs-based operation of the website (f).
2. Hosting & server log files
When you access this website, the provider automatically collects information in server log files that your browser transmits: page accessed, date and time, volume of data transferred, referrer URL, browser type and operating system, and the IP address. This data is used for the technical provision, security and stability of the site on the basis of our legitimate interest (Art. 6(1)(f) GDPR) and is deleted or anonymised after a short period. The servers are operated by our hosting provider acting as a processor.
3. Cookies & consent management (consent banner)
Our website uses cookies and comparable technologies. Technically necessary cookies enable the basic operation of the site (Art. 6(1)(f) GDPR). Cookies for statistics and marketing are only set with your consent (Art. 6(1)(a) GDPR).
Using our consent banner you can grant or decline consent for the individual categories (necessary, statistics, marketing) and revoke or adjust it at any time with effect for the future. Your choice is stored locally in your browser. To control the Google services we use Google Consent Mode v2: without your consent, no cookies used for statistics/marketing are set and the corresponding tags are not triggered.
4. Contact & enquiry form
If you contact us via the contact or enquiry form, by e-mail or by telephone, we process the data you provide (e.g. name, contact details, travel period, number of persons, message) in order to handle your request and prepare offers. The legal basis is the performance of pre-contractual measures or the contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to enquiries (f). The data is deleted as soon as it is no longer required for the purpose and no statutory retention obligations apply.
5. Online booking (HotelNetSolutions – HNS)
For online bookings and requests we use the booking engine of HotelNetSolutions GmbH (Kurfürstendamm 226, 10719 Berlin, Germany). In the context of a booking we process the data required for this purpose (e.g. name, address, contact details, period of stay, room and board preferences, and where applicable payment information) in order to perform the accommodation contract. The legal basis is Art. 6(1)(b) GDPR (performance of a contract); for legally required records (e.g. registration of guests) Art. 6(1)(c) GDPR. HotelNetSolutions acts for us as a processor on the basis of a contract pursuant to Art. 28 GDPR.
6. Re:Guest (guest communication & offers)
To communicate with prospective guests and guests, to create individual offers and to handle enquiries, we use the Re:Guest platform operated by re:guest GmbH (South Tyrol, Italy). In doing so, the data required for communication (e.g. name, contact details, enquiry and stay information, message content) is processed. The legal basis is the performance of pre-contractual measures and the contract (Art. 6(1)(b) GDPR) as well as our legitimate interest in efficient guest communication (f); where consent is required, Art. 6(1)(a) GDPR. Re:Guest acts for us as a processor.
7. Newsletter
If you subscribe to our newsletter, we process your e-mail address and any other voluntary information in order to send you news and offers. Registration takes place using the double opt-in procedure: after signing up you receive a confirmation e-mail. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link in every newsletter or by contacting us.
8. Job applications
If you send us a job application, we process your application data solely for the purpose of the application procedure (Art. 6(1)(b) GDPR, § 11 DSG). After the procedure has been completed, the data is deleted unless you have consented to longer storage or statutory retention obligations exist.
9. Google Tag Manager
We use Google Tag Manager provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The Tag Manager is a tool for managing website tags and does not itself set any analytics cookies. It serves to trigger other services (e.g. Google Analytics, Meta Pixel) only after you have given consent via the consent banner. The legal basis for the consent-based use of the integrated services is Art. 6(1)(a) GDPR.
10. Google Analytics 4
Provided you consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies or comparable identifiers to analyse the use of the website statistically (e.g. pages visited, time spent, approximate location, device). Your IP address is processed by Google in a truncated/anonymised form. Data may be transferred to servers of Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the consent banner.
11. Meta Pixel (Facebook/Instagram)
Provided you consent, we use the Meta Pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland). The pixel makes it possible to measure the effectiveness of advertisements and to show you advertising tailored to your interests within the Meta services (Facebook, Instagram) (remarketing). In doing so, personal data may be transferred to Meta Platforms, Inc. in the USA. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the consent banner.
12. Links to social media
On our website we link to our profiles on social networks (e.g. Instagram, Facebook). You are only forwarded to the respective provider when you click the links; the provider's privacy policy then applies. The mere link does not result in any automatic transfer of data to the networks.
13. Your rights
You have the following rights regarding your personal data: the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21). You may withdraw any consent granted at any time with effect for the future (Art. 7(3) GDPR). To exercise these rights, a message to the contact details above is sufficient.
You also have the right to lodge a complaint with a supervisory authority. The competent authority in Austria is the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).
14. Storage period
We process and store personal data only for as long as is necessary for the respective purpose or as required by statutory retention periods (e.g. tax and commercial law obligations). Thereafter the data is deleted or anonymised.
15. Addendum – malibie collection
Insofar as you use or request offers or services of the malibie collection, the above provisions apply accordingly. Arlmont GmbH remains the controller; data is only passed on where this is necessary for the provision of the service.
16. Currency & changes
This privacy policy will be adapted where necessary to reflect changes in the legal situation or changes to our services. The current version published on this page applies in each case.