Our Privacy Policy

Here you will find information about how we handle your personal data when you visit our website. In order to provide the features and services of our website, we need to collect personal data about you. Below, we explain what data we collect about you, why this is necessary, and what rights you have regarding your data.

, Rosenhof Hotel GmbH & Co.KG, is responsible for the processing of personal data on this website.
A - 6993 Mittelberg, Kleinwalsertal, Vorarlberg
Tel. +43 (0) 5517 - 51940
Fax +43 (0) 5517 - 658540
info@rosenhof.com

Informational Use of
If you use this website without otherwise providing us with data (e.g., by registering or using the contact form), we collect technically necessary data that is automatically transmitted to our server, including:

• IP address
• Date and time of the request
• Details of the Request
• Access Status/HTTP Status Code
• Browser Type
• Language and Version of the Browser Software
• Operating System

This is technically necessary in order to display our website to you. We also use the data to ensure the security and stability of our website. The legal basis for the collection of this data is Article 6(1)(f) of the GDPR.

Use of Cookies
We use the consent management tool “consentmanager” provided by Consentmanager AG (Sweden). The consent banner allows users of our website to grant consent for specific data processing activities or to revoke consent that has already been granted. In addition, Consentmanager helps us provide proof that consent has been granted. To this end, Consentmanager processes information regarding the granting of consent and other log data related to this consent.

By clicking the "Accept All" button, you give us your consent to process the selected cookie categories. You can view details about individual cookies under "Additional Settings" or "Cookies." The legal basis is Article 6(1)(a) of the GDPR. You can withdraw your consent by clicking the “Change Consent” button below.

All cookies in the "Essential" category are technically necessary for the operation of our website and therefore do not require your explicit consent.

Your consent applies to the following domains: www.rosenhof.com

You can change your cookie settings here:

Change Consent

Job ApplicationYou can apply on our website or via email. When you apply, we collect and store the data you enter into the application form or send to us via email. We process your data solely for the purpose of reviewing your application. Your data will not be shared with third parties. The legal basis for this processing is Article 6(1)(b) of the GDPR. If we are unable to offer you a position, we will store your data for no longer than 6 months after the end of the application process.

Contact Form On our website, you can enter personal data via a contact form. When you use the contact form, we collect and store the data you enter into the form (e.g., last name, first name, email address). The data will not be disclosed to third parties.
The legal basis for processing is Article 6(1)(a) of the GDPR in cases where consent has been given. If your inquiry is for the purpose of preparing to enter into a contract, Article 6(1)(b) of the GDPR serves as an additional legal basis.
We use the data exclusively to process and respond to your inquiry.

NewsletterYou can subscribe to a newsletter on our website. When you subscribe to the newsletter, we collect and store the data you enter in the form (e.g., last name, first name, email address). This data is not shared with third parties. Subscription to the newsletter is only possible with your consent. The legal basis for processing is Article 6(1)(a) of the GDPR. We use the data exclusively for sending newsletters.

DialogShift Chat Application on our website
Our website uses the chat application provided by DialogShift GmbH, Rheinsberger Str. 76/77, 10115 Berlin. This application processes and stores data for the purposes of web analytics, operating the chat application, and responding to inquiries.

To enable the chat feature, chat messages are stored and a cookie with a unique ID is set—this is used to recognize you as a customer.

A cookie is a small text file that is stored locally in the cache on your device. This cookie allows our application to recognize your device and retrieve past chat logs. This cookie is stored for 90 days after its last use. You can disable cookies in your browser settings. However, the chat feature will not work without cookies.

The disclosure of information such as your name, email address, or phone number is voluntary and implies your consent to the temporary use and storage of this data for the purpose of establishing contact until the end of that contact. This personal data will be deleted after 90 days.

The legal basis for data processing is Article 6(1)(f) of the GDPR, based on our legitimate interest in providing effective customer service, conducting statistical analyses of user behavior, and optimizing our offerings.

DialogShift provides additional information athttps://www.dialogshift.com/datenschutz regarding the collection and use of data, as well as your rights and options for protecting your privacy.

Tracking Proxy
To ensure the lawful use of tracking services, such as analytics and marketing services, we use the Tracking Proxy solution provided by Tracking Garden GmbH (Ritterfelddamm 225e, 14089 Berlin, Germany). With the help of the Tracking Proxy solution, we can prevent the third-party providers we use from directly accessing users’ devices and ensure full control over individual data parameters when communicating with websites by imposing access restrictions on third-party providers and setting conditions for the transfer of data to them. For these purposes, we use so-called cookies, which are stored by the Tracking Proxy on your device for recognition purposes and can process information from your device. To this end, your device is assigned an identification number (cookie ID/device ID) randomly generated by the Tracking Proxy.

With the help of the tracking proxy, we process the information generated about your device’s use of our website, as well as access data, for the purposes of statistical analysis and audience measurement—for example, visits to a specific web page, the number of unique

Visitors, entry and exit pages, time spent on the site, clicks, swipe and scroll behavior, button clicks, bounce rate, and similar user interactions on our website (events), e.g., whether a user has subscribed to the newsletter or

a product was added to the shopping cart or purchased. Access data includes, in particular, browser and device information, the tracking proxy’s cookie ID, and the date and time of the server request. The tracking proxy processes your data

exclusively on servers in Germany.

Your IP address is not stored (or, in one configuration option, is stored on our servers only as an SHA256-encrypted value). The IP address is not shared with third parties without your consent; only general location information is shared.

such as the region and city where the device is located, which are derived from the IP address. Due to the tracking proxy solution, additional user data is transmitted to [...], for the purpose of analyzing and measuring the reach of user behavior on our website.

transmitted to third parties exclusively in pseudonymous form. To ensure effective pseudonymization, the tracking proxy generates artificial data parameters for the browser identifier (user agent), for the third-party cookie IDs, and, if applicable,

Order numbers and other browser and device information that could enable re-identification. The tracking proxy cookie used to recognize users' devices is stored for a maximum of 24 months.

Google Analytics (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) also processes some of the data in the United States. There is no adequacy decision by the European Commission regarding data transfers to the United States. Standard contractual clauses have been agreed upon with the European Commission to ensure that Google Ireland Ltd. maintains an adequate level of data protection.

The legal basis for the processing is our legitimate interest pursuant to Article 6(1), first sentence, subparagraph (f) of the GDPR. Our legitimate interest consists in analyzing and measuring the reach of our website, which enables us to optimize and improve our digital offerings

and correct errors. You may object to the processing. Your right to object applies in the following cases:

Reasons arising from your specific situation. You can exercise your right to object by clickingthe opt-out link here

Google Analytics Remarketing
Our websites use the features of Google Analytics Remarketing in conjunction with the cross-device features of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This feature allows the advertising audiences created with Google Analytics Remarketing to be linked to the cross-device features of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages—which have been tailored to you based on your previous usage and browsing behavior on one device (e.g., a cell phone)—can also be displayed on another of your devices (e.g., a tablet or PC).
If you have given your consent, Google links your web and app browsing history to your Google Account for this purpose. This allows the same personalized advertising messages to be displayed on any device on which you sign in with your Google Account.
To support this feature, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data to define and create audiences for cross-device advertising.
You can permanently opt out of cross-device remarketing/targeting by disabling personalized ads in your Google Account; to do so, follow this link: https://www.google.com/settings/ads/onweb/.

matelso
Our website uses a service provided by matelso GmbH, Stuttgart. When you call a phone number provided by matelso on our behalf, information about the call is transmitted to a web analytics service we use (e.g., Google Analytics). matelso also reads cookies set by our analytics service or other parameters from the website you visited, such as referrer, document path, and remote user agent. The relevant information is processed by matelso in accordance with our instructions and stored on servers in the EU. For more information, please visit: www.matelso.com/privacy. You can prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all features of this website to their full extent.

Facebook Pixel
Our website uses the Facebook Visitor Action Pixel, provided by Facebook, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), to measure conversions.
This allows us to track the behavior of website visitors after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows us to evaluate the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising campaigns.
The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, allowing a link to the respective user profile and enabling Facebook to use the data for its own advertising purposes in accordance with the Facebook Data Use Policy. This enables Facebook to display ads on Facebook pages as well as outside of Facebook. As the website operator, we have no influence over this use of the data.
The use of Facebook Pixel is based on Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in effective advertising measures, including those on social media.
You can find further information regarding the protection of your privacy in Facebook’s Privacy Policy:
https://de-de.facebook.com/about/privacy/.​
You can also disable the “Custom Audiences” remarketing feature in the settings for
ads at
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged into Facebook.
If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website:
http://www.youronlinechoices.com/de/praferenzmanagement/.

Social Plugins
We currently use the following social media plugins: Facebook and Pinterest. When you click a button, personal data is transmitted to the respective plugin provider and stored there.

The respective plug-in provider stores the data collected about you as usage profiles and uses this data for advertising, market research, and/or to tailor its website to your needs. In particular, this analysis is conducted (even for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact the respective plug-in provider. Through the plug-ins, we offer you the opportunity to interact with social networks and other users, enabling us to improve our services and make them more interesting for you as a user. The legal basis for the use of the plug-ins is Article 6(1)(f) of the GDPR.
Data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider’s service, the data we collect about you is directly associated with your existing account with that provider. In the case of U.S. providers, data is transferred to the United States; these providers have submitted to the EU-U.S. Privacy Shield:
www.privacyshield.gov/EU-US-Framework
For further information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the privacy policies of these providers provided below. There you will also find further information regarding your rights in this regard and the settings available to protect your privacy:

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
www.facebook.com/policy.php

Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA
https://about.pinterest.com/de/privacy-policy

Embedding YouTube Videos
We have embedded YouTube videos in our online content that are stored at http://www.YouTube.com and can be played directly from our website.
When you visit the website, YouTube receives the information that you have accessed the corresponding page on our website. In addition, log files are transmitted. This occurs regardless of whether you are logged in to a YouTube user account or do not have a user account. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this data to be associated with your YouTube profile, you must log out before clicking the button. YouTube stores your data as user profiles and uses them for advertising, market research, and/or to tailor its website to your needs. Such analysis is conducted in particular (even for users who are not logged in) to deliver targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube directly.
For more information on the purpose and scope of data collection and its processing by YouTube, please refer to Google’s Privacy Policy. There you will also find further information about your rights and settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy.
Google also processes your personal data in the U.S. and has complied with the EU-U.S. Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
Further information about Google:
Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA
Samera
To process inquiries and bookings, the personal data entered in the forms, as well as the cookie ID and IP address, are transmitted to the data processor Klar & Leiter GesbR, Maria-Theresien-Straße 21, 6020 Innsbruck, Austria (“samera”).

Payment via Klarna
On our website, you can pay via the payment service provider Klarna. In this process, payment data is transmitted to Klarna in order to process the payment. The legal basis for the processing of your data is Art. 6(1)(f) of the GDPR.
Klarna collects information about the transaction, as well as other information related to the transaction, such as information about goods/services, financial information, information about your interaction with Klarna, merchant information (including details about payment methods), device-related information, and location data.
Klarna uses this data, among other things, to process payments, conduct credit checks, and monitor and improve its services.
Details regarding data processing and the purposes of processing can be found in Klarna’s Privacy Policy:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
Klarna shares your data with a number of third parties, including other companies within the Klarna Group, credit bureaus, service providers, and subcontractors. For details, please see Klarna’s Privacy Policy:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
For more information about Klarna:
Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

Sofortüberweisung
On our website, we offer, among other options, payment via “Sofortüberweisung.”
This payment service is provided by Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter “Sofort GmbH”). Using the “Sofortüberweisung” process, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin fulfilling our obligations.
If you have chosen the “Sofortüberweisung” payment method, you will provide Sofort GmbH with your PIN and a valid TAN, which it uses to log in to your online banking account. After logging in, Sofort GmbH automatically checks your account balance and executes the transfer to us using the TAN you provided. It then immediately sends us a transaction confirmation. After logging in, your transaction history, your overdraft limit, and the existence of other accounts and their balances are also automatically checked. In addition to the PIN and TAN, the payment details you enter as well as your personal information are transmitted to Sofort GmbH. Your personal information includes your first and last name, address, phone number(s), email address, IP address, and, if applicable, other data required for payment processing. The transmission of this data is necessary to verify your identity beyond a doubt and to prevent fraud.
The transmission of your data to Sofort GmbH is based on Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (processing necessary for the performance of a contract). You have the option to withdraw your consent to data processing at any time. Withdrawal does not affect the lawfulness of data processing operations that took place in the past.
For details on paying with Sofortüberweisung, please refer to the following links:
https://www.klarna.com/sofort/datenschutz/ and https://www.klarna.com/sofort/

Retention PeriodWe process and store your data only for as long as is necessary for processing or to comply with legal obligations. Once the purpose of processing no longer applies, your data will be blocked or deleted. If there are additional legal obligations regarding data retention, we will block or delete your data upon expiration of the statutory retention periods.

Your Rights
You have the following legal rights with respect to your personal data:
1) Right of Access
You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to access this personal data as well as to receive further information, such as the purposes of processing, the recipients, and the planned duration of storage or the criteria for determining that duration.
2) Right to Rectification and Completion
You have the right to request the immediate rectification of inaccurate data. Taking into account the purposes of the processing, you have the right to request that incomplete data be completed.
3) Right to erasure (“right to be forgotten”)
You have the right to erasure provided that the processing is not necessary. This is the case, for example, if your data is no longer necessary for the original purposes, if you have withdrawn your consent under data protection law, or if the data has been processed unlawfully.
4) Right to restriction of processing
You have the right to restriction of processing, e.g., if you believe that the personal data is inaccurate.
5) Right to data portability
You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.
6) Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you.
In the case of direct marketing, you, as the data subject, have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
7) Right to Withdraw Your Consent Under Data Protection Law
You may withdraw your consent to the processing of your personal data at any time with future effect. However, this does not affect the lawfulness of the processing carried out prior to the withdrawal.
In addition, you may lodge a complaint with a data protection supervisory authority at any time, for example, if you believe that the data processing is not in compliance with data protection regulations.