Privacy Policy
Here we inform you about which personal data is processed when you visit our website and use our services, for what purposes this is done, and what rights you have.
1. Controller and Contact
The controller responsible for the processing of your personal data is:
Gästeservice Anif
Brunngasse 10
5081 Anif, Austria
Telephone: +43 6246 72365
Fax: +43 6246 72365 50
Chairman: Daniel Dobranszky
E-Mail: office@anif.info
Website: https://anif.info/
For questions about data protection or to exercise your rights, you can contact the address provided above.
2. Provision of the Website, Hosting and Server Logs
When you access our website, the connection data required for transmission and display are processed. The web server access logs contain the full IP address, the time of access, the requested URL, the referrer, the user agent with information about the browser and operating system, and the HTTP status code.
This serves to provide the website, troubleshoot errors, and protect against misuse and attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of our online offering.
The content management system Bakehouse and the programming are maintained by Cookis GmbH, Franz-Xaver-Renn-StraĂźe 4, 6460 Imst, Austria. The project servers are operated by myNET gmbh, BruggfeldstraĂźe 5, 6500 Landeck, Austria, at the Innsbruck location. Backups are stored in Landeck; internal project backups by Cookis are kept in Imst.
Server logs are stored for 30 days, according to our technical service provider.
As part of the technical provision and support, Cookis and the involved infrastructure service providers may access the data required for this purpose. Individual services are provided via Hetzner in Germany or Finland; statistical processing is described in Section 6. The processing of technically required connection data is necessary for accessing the website. Without this data, the requested content cannot be delivered.
3. Contact
If you contact us by email, phone, or via a contact form, we process the contact details you provide, the content of your enquiry, and the information required to handle it. We use this data to respond to your request and, if necessary, to carry out pre-contractual measures you have requested.
If your enquiry relates to a contract with us or its preparation, the processing is based on Art. 6(1)(b) GDPR. Other enquiries are processed on the basis of Art. 6(1)(f) GDPR; our legitimate interest is to respond to the enquiries addressed to us.
Recipients are the employees responsible for your enquiry and our commissioned IT service providers. For our email mailboxes, we use Microsoft 365. This involves processing email addresses, message content, any attachments, and technical delivery information. Data will only be forwarded to an accommodation or other service partner if this is necessary for a referral you have requested and is legally permissible. We will inform you of the specific recipient in such cases.
The provision of your data is voluntary. However, without a reachable contact address and the necessary information to clarify your request, we may not be able to process it. Completed email enquiries and data received via website forms in the Bakehouse dashboard are deleted once a year by the Anif guest service.
4. Report an Event
Using our event form, you can submit events for inclusion in the event calendar. We process the organiser’s name, their email address, the event name, date and time, the event description, and any uploaded documents and personal data contained therein.
The recipient of the form submissions is the Anif guest service as the website operator. A responsible person at the Anif guest service reviews the submitted events before publication. The approved event information is then published. The form is used for submitting and processing event information.
Publicly visible information includes the event name, date, location, description, and photos. The contact email address will not be published. Publicly provided information is accessible worldwide and may be indexed by search engines.
Mandatory fields are marked in the form. Without this information, we cannot review the submission. Providing additional information is voluntary. Please only submit personal data and documents that you are legally permitted to provide for this purpose.
The form data received in the Bakehouse dashboard is deleted once a year by the Anif guest service. The event information transferred for publication remains on the website until the end of the event. Expired events are then deleted from the website. Recipients are our responsible employees, commissioned hosting/IT service providers, and, regarding the published information, the public.
5. Cookies, Browser Storage and Consent
We use functions for session management and storing your consent choices, as well as optional analytics and marketing services. These include Matomo, Google Analytics 4, and Meta Pixel. Google Maps is also only loaded after corresponding consent. Google Analytics 4 and Meta Pixel are not loaded before your consent or if you decline. Technically required connection data for the website arises regardless; see Section 2.
Where storage or access is absolutely necessary to provide a service explicitly requested by you or to transmit a message, this is based on the exception in § 165(3) TKG 2021. The legal basis for the subsequent processing of personal data depends on the respective purpose described in this statement.
We only activate optional services after your consent. The legal bases are § 165(3) TKG 2021 and, where personal data is processed, Art. 6(1)(a) GDPR. You can also use the website without consenting to optional services. Individual additional functions, such as embedded maps, may then not be available.
To manage and document your decision, we use the Bakehouse cookie popup from Cookis. According to Cookis, the selection is stored in cookies in the browser. Where this is necessary to document required consent, the processing is based on Art. 6(1)(c) in conjunction with Art. 7(1) GDPR.
You can change your selection at any time via the Disable Cookies button and withdraw any consent given with effect for the future. The lawfulness of the processing up to the withdrawal remains unaffected.
6. Usage Statistics with Matomo
After your consent, we use Matomo to statistically evaluate the use of our website and to improve our information offering. The statistics are operated via stats.bakehouse.at by Cookis/Bakehouse. The server is operated by Hetzner Online GmbH.
With each page call, the accessed URL, page title, referrer, time, browser and operating system, screen resolution, browser language, and a truncated IP address are recorded. Additionally, clicks on external links and downloads are evaluated.
According to Cookis, for IPv4 addresses, the last byte is removed, for example, 192.168.1.xxx. Based on the truncated IP address, IP2Location is used to determine the approximate location at country, region, and city level. Returning browsers are recognised via a random visitor ID in the _pk_id cookie. This identifier is pseudonymised and does not contain any directly specified name; this does not result in complete anonymity of the usage data.
The legal basis is your consent under Art. 6(1)(a) GDPR and, for non-essential storage access, § 165(3) TKG 2021. According to the communicated configuration, Matomo is only loaded when both “Statistics” and “Marketing” have been consented to in the cookie popup. You can revoke your consent via the privacy settings at any time with effect for the future.
The raw data of individual visits, including truncated IP address and visitor ID, are automatically deleted after 21 days; the check for data to be deleted is carried out daily.
7. Google Maps
On individual pages, you can activate interactive maps from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
After your consent, a connection to Google is established. In particular, your IP address, technical browser and device information, and details about the call and use of the map may be processed. If you are logged in to Google, Google may associate information with your account. Further processing by Google is governed by Google’s privacy policy.
We use the maps for the geographical display of accommodations, excursion destinations, and other locations. The legal basis for our integration is your consent under Art. 6(1)(a) GDPR and, where applicable, § 165(3) TKG 2021. Without consent, the map remains deactivated; you can find address information in the rest of the page content.
When using it, processing by companies of the Google Group may also take place outside the European Economic Area. For retention by Google, see Google’s information on data retention. You can revoke your consent via the privacy settings at any time with effect for the future.
8. Other Technical Services
Accessibility Features
We provide an accessibility widget from Cookis/Bakehouse, which you can use to adjust the display of the website. The widget is integrated via resource.bakehouse.at. The provider is Cookis GmbH, Franz-Xaver-Renn-StraĂźe 4, 6460 Imst, Austria. It is not used to track your usage behaviour; according to the operator, no additional data is collected via it. When retrieving the technical resources, the connection data required for transmission are processed.
AI Chat with Mistral
To answer your questions via the chat function, we use a service from Cookis/Bakehouse that uses the Mistral API. Your entered messages and the conversation content transmitted for response generation are processed.
According to Cookis, the technical processing of the Bakehouse service takes place at myNET in Austria; processing via the Mistral API takes place, according to this information, in EU countries. Access to the managed dashboard is granted, within the intended scope of authorisation, to Gästeservice Anif, Cookis, and the supporting agency Werbezimmer. Additionally, Mistral AI, 15 rue des Halles, 75001 Paris, France, receives the content transmitted for AI processing.
The use of your inputs for model training is disabled. The use of the chat is voluntary; you can alternatively contact us by email or phone. Please do not enter any sensitive information or unnecessary personal data for your request.
Fonts
The Google Fonts font files used are stored locally on the website server and are delivered from there. When loading these font files, no connection is made to the Google Fonts servers.
Google Analytics 4
Google Analytics 4
After your consent, we use Google Analytics 4 for the statistical evaluation of website usage. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Visits and sessions are assigned using browser identifiers. The cookies _ga and _ga_7HYZBD6JPB are specified for this project.
Standard GA4 events are recorded, as well as clicks on phone links (Click to Call), clicks on email links (Click to Mail), and the submission of a request. Google Signals is activated; the User-ID function is not used. For people who are logged into their Google account and have enabled personalised advertising, Google can establish cross-browser and cross-device connections and supplement reports with demographic characteristics and interests. Disabling the User-ID function does not prevent this processing by Google Signals.
Google Analytics 4 is not loaded before consent or upon refusal. The legal basis is your consent under Art. 6(1)(a) GDPR and § 165(3) TKG 2021. You can revoke this via the privacy settings at any time with effect for the future.
Retention: The retention period for user and event data in Google Analytics 4 is 2 months. Google deletes data whose retention period has expired in the monthly deletion run. The shortened setting also applies to data from logged-in Google users from Google Signals. Standard aggregated reports are not affected by this setting.
Google Tag Manager
We use Google Tag Manager for the technical management of the integrated tags. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The published container only includes Google Analytics 4; Google Ads and other marketing tags are not active in it. The GA4 tag is only loaded after your consent, not before and not upon refusal. The data processing by GA4 is described above.
9. External Links and Bookings with Partners
Our website contains links to accommodation businesses, booking offers, excursion destinations, and social networks. If you access such a link, you leave our website. The respective provider processes the data generated during the visit to its offer under its own responsibility. Please note its privacy notices.
Our website does not have an integrated booking system. Gästeservice Anif handles administrative tasks for individual businesses and, in this context, sometimes receives personal data.
10. Recipients and Transfers Outside the EEA
Access to personal data is granted to the persons responsible for the respective tasks and the service providers mentioned in this statement. To the extent that service providers process data on our behalf, this is done on the basis of corresponding agreements under Art. 28 GDPR. Authorities or other bodies receive data if there is a legal obligation or another permissible basis for doing so.
Transfers to countries outside the European Economic Area are indicated for the respective services. There you will find the recipients, the basis for the transfer, and, where applicable, information on how to obtain details of the guarantees used.
11. Your Rights
Under the statutory conditions, you have the right to information about the data processed about you, to the correction of incorrect data, to deletion, to the restriction of processing, and to data portability. These rights exist to the extent provided by law.
Objection: To the extent that we process your data on the basis of Art. 6(1)(e) or (f) GDPR, you may object at any time for reasons arising from your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims. You may object to processing for direct marketing purposes at any time without giving reasons; this also applies to profiling connected with such direct marketing.
Revocation: You may revoke any consent given at any time with effect for the future. This does not affect the lawfulness of the processing carried out before the revocation.
To exercise your rights, contact office@anif.info or the postal address provided above. If there are reasonable doubts about your identity, we may request additional information required for confirmation.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement. In Austria, you can reach the data protection authority at:
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Wien
E-Mail: dsb@dsb.gv.at
Website: https://dsb.gv.at/
12. Automated Decisions
In connection with the website processing described here, we do not make any solely automated decisions, including profiling, which have legal effects on you or similarly significantly affect you.
Status: November 2026