General information Hotel & Residence Der Heinrichshof has drawn up these Internet data protection guidelines with the intention of approaching visitors to the website as their trustworthy partner, who respects and guarantees your personal right to confidentiality. Within the meaning of GDPR 2016/679 Michael Schwellensattl is the holder of the right to administration and processing of the personal data, which may be collected on this website. The rights holder administrates or processes these personal data, which may be collected on the website (www.heinrichshof.com), under the conditions set out below.
Type of data collection and purpose of processing Hotel & Residence Der Heinrichshof processes solely those data, which the visitor to the website has provided of his own free will. It is not possible to navigate on the website without providing personal data and information. Each visitor is free to make personal data available on a restricted basis, in order to benefit from only specified services. We collect and store personal data solely for the services described in the information we provide. Visitors to the website may transfer their data:
to subscribe to our newsletter
to register for events
to send their CV
to obtain information on services or products, offers, room availability, quotations
to book stays and holidays
to purchase services, products or vouchers
Transfer to third parties Personal data are not transferred to other companies. In addition, the personal information will be passed, if that provide legal regulations or judicial authority or other bodies and institutions require it. It is not the intention of Hotel & Residence Der Heinrichshof to collect sensitive or judicially relevant personal data on its website. Sensitive data within the meaning of Article 4 GDPR 2016/679 are personal details concerning sex, ethnic origin, religious, philosophical or other views, political opinions, membership of political parties, unions, associations or organisations with a religious, philosophical or trade union background and details on health or sexual orientation. Within the meaning of Article 4 GDPR 2016/679 judicially relevant data are those personal details, which may lead to inferences that the data subject is subject to measures based on Article 3 (1) from a) to o) and from r) to u) of the D.P.R. No. 313 of 14 November 2002 on the criminal record, the register of Administrative Offences in consequence of criminal offences or associated legal proceedings or to the data subject being the accused or suspect within the meaning of Articles 60 and 61 of the Code of Criminal Procedure. We recommend that you do not supply such information to our website. Should this be unavoidable (for example in the case of classification of groups of protected persons, in the provision of a curriculum vitae for employment purposes, in response to an offer of employment or as an expression of interest in an appointment with our company), we request that you send to us by post the specific declaration available in the "Despatch of Curriculum Vitae" section of this website. In this we request you to give your written consent to the processing of the aforementioned sensitive personal data.
Involvement of third party services and contents and data transfer to third countries
Google Analytics, Google-IP-Locator, Google Maps, Google Maps Distance Api, Google reCAPTCHA Proprietor: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
YouTube-Contents Proprietor: Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA
Facebook social network Proprietor: Facebook Inc., Menlo Park, California, USA
Instagram social network Proprietor: Facebook Inc., Menlo Park, California, USA
Twitter social network Proprietor: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Irland
Vimeo Proprietor: Vimeo Inc., 555 West 18th Street, New York, New York 10011
Hotjar Proprietor: Hotjar Ltd, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta
Additional external content can be loaded via widgets and iframes. To get access to complete list, an e-mail must be sent to .
Links to third party Internet sites We advise you that the website, www.heinrichshof.com contains links to other websites, which are not managed within the meaning of the foregoing data protection directives.
Retention and erasure of the data The information and personal data collected on this website, including those provided voluntarily by the visitor for the receipt of information material or other consignments when he writes to the addresses given in the Contact Request, „Newsletter“, „Jobs“ and „Enquiry/Online Booking“, are retained solely for the purposes of providing the desired service and only for the period of time absolutely necessary to fulfil this purpose. Once the service has been provided, in accordance with the data protection guidelines of Hotel & Residence Der Heinrichshof, the data are erased, subject to requirements from governmental agencies or legal retention requirements.
Exercise of your rights In accordance with Article 15 GDPR 2016/679 the data subject has the right at any time to receive information on his personal data collected on this website; he may have them rectified, updated or erased or he may assert other rights accorded to him by law. For this purpose it is necessary to contact the controller of the data processing or the processor by e-mail at .
Data Security All the technical and organisational security measures required to protect the personal data from loss and abuse are taken by Hotel & Residence Der Heinrichshof. Hotel & Residence Der Heinrichshof protects your personal data by means of internationally recognised standards, which make the following impossible:
unauthorised access
unauthorised use and dissemination
unauthorised amendment
loss and inadvertent or unlawful destruction of data
Cookies/advertisements Cookies are small text files, which are deposited in your computer, if you visit certain websites. This website, including its sub-domains, uses cookies; the consent of the user is always requested, where this is expressly required by law or other applicable provisions. The use of cookies facilitates navigation on the website and allows the information transmitted to the user to be personalised. In addition, systems are used for security and statistical purposes to collect information on the user, such as his IP address, the browser and operating system used and/or the websites visited by a user. Cookies will not damage your computer, tablet or Smartphone. The cookies generated by www.heinrichshof.com contain no personal data, which could be used to identify the user; they contain only encrypted data.
Specific use of personal data In the following you will find specific notes on how specified sections of this website function:
Contact Request section The Contact Request section on this website offers the opportunity to make enquires about rooms, availability, offers, participation in events and courses. If you decide to send us your personal data, these data shall be processed exclusively for the purposes referred to above by persons specifically authorised so to do and in accordance with the routine in-house management procedures.
Enquiry/Online booking area The Enquiry/Online booking area on this website offers the opportunity to obtain information on offers and availability of stays and holidays and to book or purchase holidays/stays or other services from us (e.g. wellness). If you decide to send us your personal data, these data shall be processed exclusively for the purposes referred to above by persons specifically authorised so to do and in accordance with the routine in-house management procedures.
Section Newsletter If the visitor to our website would like to receive our newsletter, he must enter his personal data in the appropriate form in the Register for Newsletter section. The data collected serve for the despatch of the newsletter within the meaning of the declaration in the footnote to the form.
Jobs section The Jobs section on this website offers the opportunity to express interest in employment in our company and/or to respond to a job advertisement for vacant or newly-created posts. If you decide to send us your personal data, these data shall be processed exclusively for the purposes referred to above by persons specifically authorised so to do and in accordance with the routine in-house management procedures.
Under-age visitors (16 years) The Hotel & Residence Der Heinrichshof website, which is regulated by the foregoing data protection provisions, is not intended for the use of minors. We are aware of the necessity for protecting data, which concern minors, in particular in the online environment. Therefore we do not collect and store, except inadvertently, any data from under-age visitors. ADDITIVE Online Marketing
Beside our website we do also operate optimized landingpages. To process your request, reservation, order, activation, registration or the transmission of other contact forms on our website as well as to save and store your data we use cloud services, CRM systems and software provided by ADDITIVE s.n.c., 39011 Lana (BZ), Italy (“ADDITIVE”). Through the use of these services and systems your data will be processed and stored, at least in part, also outside of the EU or the EEC. The adequate level of data protection is based on an adequacy decision taken by the European Commission (“Privacy Shield”) or on data processing agreements with the respective company. Our landingpages use Google Analytics, a web analytics service provided by Google Inc. (“Google”). For this functions cookies are used to analyse the use of the website. The information generated through the use of these cookies is transmitted to and stored by Google on its servers. If you do not wish to accept these cookies you can change the settings of your browser in order to prevent the saving of cookies or to get a notification anytime cookies are used, so you will be able to allow cookies in individual cases. Your IP address is collected but immediately anonymised (for example by deleting the last 8 bits). As a result the geolocation data is less accurate. The connection to the web analytics service provider Google is based on an adequacy decision taken by the European Commission (“Privacy Shield” in case of the USA). You can prevent the saving of cookies by changing the respective settings of your browser software. You can also prevent data collection connected to your use of our online services through cookies and the processing of this data by Google, by installing the browser-plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. Our landingpages also use functions provided by ADDITIVE for the multi-channel monitoring of the use of our websites as well as marketing and distribution strategies like landingpages, newsletter and social media presence. ADDITIVE has an insight into data gathered through Google Analytics. This data will be used only to analyse the use of our websites and to evaluate our marketing and distribution strategies. The data processing takes place in accordance with the requirements of art. 6 para. 1 lit f (legitimate interests) of the GDPR. Our objective in accordance with the GDPR (legitimate interests) is the improvement of our products and services and our web presence through the analysis of the use of our website as well as marketing and distribution strategies. Our landingpages also use remarketing functions provided by Google Inc. (“Google”) and by Facebook Inc. (“Facebook”). Therefore, Facebook and Google will know that you have visited our website. This way visitors of our website and of our landingpages will find ads adapted to their interests on Google’s advertising platforms and on the social media platforms Facebook and Instagram. The data processing takes place in accordance with the requirements of art. 6 para. 1 lit a (consent) of the GDPR. When you visit our landingpages a banner will inform you about the use of cookies for remarketing functions. If you continue using the website or click on the respective button you consent to the use of cookies. You can deny your consent anytime, by visiting the page containing the cookie information and denying the use in the banner that will be displayed.
ADDITIVE+ VOUCHERS On our website you have the possibility to buy vouchers by using the integrated voucher software. To process your purchase and to save and store your data we use software provided by ADDITIVE s.n.c., 39011 Lana (BZ), Italy (“ADDITIVE”) in the context of voucher marketing. Through the use of these services and systems your data will be processed and stored in the EU.
The data you provide is required to fulfil the contract or to carry out pre-contractual measures. Without this data we cannot conclude a contract with you. The data will not be transferred to an outside third party, except for your credit card data which will be transferred to the payment provider and to our tax accountant to fulfil our tax obligations.
The data processing takes place in accordance with the requirements of art. 6 para. 1 lit a (consent) and/or lit b (processing necessary for the performance of a contract) of the GDPR.