Privacy Policy

Controller:
Hans Peter Wechner, Apart Stella Bianca
Grubegg 626
6555 Kappl, Austria
Phone: +43 664 32 111 44
Email: info@stella-bianca.at

1. General Information

Protecting your personal data is particularly important to us. We process your data solely on the basis of the statutory provisions (GDPR, Austrian Data Protection Act, Telecommunications Act 2021). This website uses no analytics or advertising services, no social media plug-ins and no fonts or scripts from third-party servers. We do not use automated decision-making or profiling.

2. Contacting us and enquiry form

If you contact us via the form, by email or by phone, we process your details to handle your enquiry and any follow-up questions. In the enquiry form, arrival, departure, number of adults, accommodation, first and last name and email address are required – without them we cannot answer your enquiry. Number of children, phone number and message are optional. The enquiry is delivered to us by email; it is not stored in the website’s database. It is only passed on to the parties listed under “Recipients”.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps), Art. 6(1)(f) GDPR (legitimate interest in replying)

3. Sending emails and copy for technical monitoring

Enquiries sent via the form go to our mailbox info@stella-bianca.at. They are sent through our web administrator’s Gmail account, where a copy remains so he can check that delivery works. He does not answer enquiries and deletes the copies after 30 days. Gmail is operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland); processing by Google LLC in the USA is possible. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR). The emails are transmitted in encrypted form.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps); for sending and the copy our legitimate interest in reliable delivery (Art. 6(1)(f) GDPR)

4. Booking

The “Check availability” button takes you to the bookingandmore booking system. You only leave our website when you click it; simply visiting our pages does not transfer any data to bookingandmore. We use the data entered when you book to provide your stay; bookingandmore’s privacy notice applies to the booking site itself.

Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment)

5. Hosting and server logs

Our website is hosted by our provider myNET in Landeck (Tyrol); the servers are located in Austria. When you visit the website, the provider processes technically necessary data: IP address, date and time, page requested, browser and operating system. These logs are used for technical provision and security and are kept by the provider only for as long as necessary for that purpose.
Failed login attempts to the administration area of this website are stored together with the IP address for 24 hours to prevent password guessing.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interests)

6. Cookies

Visiting our website does not set any cookies – neither for analytics nor for advertising or any other purpose. That is why there is no cookie notice. A technically necessary session cookie (PHPSESSID) is only created when logging in to the administration area and is deleted when you close your browser.

Legal basis: strictly necessary (§ 165(3) Austrian Telecommunications Act 2021), Art. 6(1)(f) GDPR

7. Fonts and icons

The fonts “Quicksand” and “Lato”, the icons (Font Awesome) and all scripts are stored on our own server and loaded from there. No connection to Google or other third-party servers is made.

8. Guest Registration (Registration Act)

As an accommodation provider we are required to collect certain guest data under §§ 5 and 10 of the Austrian Registration Act and the Tyrolean Visitor Tax Act. We pass them to the municipality of Kappl as registration authority and, for the visitor tax, to the Paznaun – Ischgl tourist board:

  • Name, date of birth, gender, nationality
  • Country of origin, address
  • For foreign guests: travel document data
  • Arrival and departure date

This data is stored for 7 years and transmitted to authorities when required.

Legal basis: Art. 6 para. 1 lit. c GDPR (legal obligation)

9. Recipients and transfers to third countries

Your data are only received by those who need them for the purpose concerned: our hosting provider myNET (Landeck, Austria), our web administrator and Google for sending and copying your enquiry (see section 3), bookingandmore for bookings, and the municipality of Kappl and the Paznaun – Ischgl tourist board for guest registration where we are legally required to do so. Apart from Gmail, which may be processed in the USA, we do not transfer data to countries outside the EU.

10. Retention period

We store your data only as long as necessary for the respective purpose:

  • Contact inquiries: 3 years after completion of communication
  • Copies of enquiries: 30 days (copies held by our web administrator)
  • Booking data: 7 years (legal retention obligation)
  • Guest registration: 7 years (Registration Act)

11. Your rights

You have the following rights with regard to your personal data. An informal message to info@stella-bianca.at is sufficient:

  • Right to information (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7 para. 3 GDPR)

12. Right to lodge a complaint

You have the right to complain to a data protection supervisory authority about our processing of personal data.

Competent authority in Austria:
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at

13. Data security

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in accordance with technological development.

14. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always corresponds to current legal requirements or to implement changes to our services in the privacy policy.

Last updated: October 2026