Privacy policy

Data controller

Martin & Christine Wechner, Apart Arera
Mahren 639, AT-6555 Kappl
arera@kappl.at · +43 650 211 55 87

General

Protecting your data matters to us. This website uses no analytics or advertising services, no social media plug-ins and no fonts or scripts from third-party servers. We process your data solely in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). We do not use automated decision-making or profiling.

Hosting and server logs

This website is hosted by our provider myNET in Landeck (Tyrol); the servers are located in Austria. When you visit the website, the provider processes technically necessary data: IP address, date and time, page requested, browser and operating system. These logs are used for secure operation and are kept by the provider only for as long as necessary for that purpose.
Failed login attempts to the administration area of this website are stored together with the IP address for 24 hours to prevent password guessing.

Legal basis: legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR).

Enquiry form

If you contact us via the form, we process your details to reply to your enquiry and send you an offer. Required are your travel dates, number of adults, preferred apartment, first and last name and email address – without them we cannot answer your enquiry. Number of children, phone number and message are optional.
Your enquiry is delivered to us by email; its content is not stored in the website’s database. To prevent mass submissions we store an encrypted short value (hash) of your IP address together with the time of sending and delete it after 24 hours.

Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR); for the hash of your IP address our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

Email, copy for technical monitoring and phone

Enquiries sent via the form reach our mailbox arera@kappl.at. A copy of each enquiry also goes to our web administrator so he can check that delivery works; he does not answer enquiries and deletes the copies after 30 days. His mailbox is operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland); processing by Google LLC in the USA is possible. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR).
If you email or call us directly, we process your details only to deal with your request.

Legal basis: Art. 6(1)(b) GDPR or our legitimate interest in replying (Art. 6(1)(f) GDPR); for the copy our legitimate interest in reliable delivery (Art. 6(1)(f) GDPR).

Online booking

Online booking is handled by Booking.com (Booking.com B.V., Herengracht 597, 1017 CE Amsterdam, Netherlands). Booking.com’s website only opens when you click “Book”; its privacy notice applies there. If you book there, Booking.com sends us the data needed for your stay (name, contact details, travel dates, guests, price), which we use to provide your stay.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Cookies

During a normal visit this website sets no cookies at all, including none for analytics or advertising – which is why there is no cookie notice. Only when you send the enquiry form do we set a technically necessary session cookie (PHPSESSID). Until the next page view it remembers whether your enquiry was sent and, if there was an error, your input so you do not have to type it again. The cookie is deleted when you close your browser.

Legal basis: technically necessary (§ 165(3) Austrian Telecommunications Act 2021, Art. 6(1)(f) GDPR).

Weather, events and map

Weather data (Open-Meteo) and events (Austrian National Tourist Office) are fetched and cached by our own server – your browser does not connect to any third-party service. The “Show on map” link only opens Google Maps when you click it; Google’s privacy policy then applies.

Guest registration

During your stay we are legally required to record your details in the guest register (Registration Act, Tyrolean Visitor Tax Act). These data are not collected via the website. We pass them to the municipality of Kappl as registration authority and, for the visitor tax, to the Paznaun – Ischgl tourist board.

Legal basis: legal obligation (Art. 6(1)(c) GDPR).

Recipients

Your data are only received by those who need them for the purpose concerned: our hosting and email provider myNET (Landeck, Austria), our web administrator and Google for the copy of your enquiry (see above), Booking.com as an independent controller if you book, and the municipality of Kappl and the Paznaun – Ischgl tourist board for guest registration. Apart from the copy at Google, which may be processed in the USA, we do not transfer data to countries outside the EU.

Retention

Enquiries that do not lead to a booking are deleted no later than three years after our last contact; the copies held by our web administrator after 30 days. Booking records and the guest register are kept for as long as the law requires (usually seven years).

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object. Just send us an email. If you believe we are not processing your data lawfully, you can lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).

Last updated: October 2026