Privacy statement

We are very pleased about your interest in our company.

Data protection is of particular importance for Höchsmann GmbH
Use of the website of Höchsmann GmbH is generally possible without providing personal data. For a particular person who has a service, the person of a participant is interested in a particular place. Is the processing of personal data necessary.

The processing of personal data, e-mail address or telephone number of a certain person, takes place in accordance with the basic data protection regulation and in accordance with the country-specific data protection regulations applicable for the Höchsmann GmbH.

By means of this Privacy Policy we would like to consider the public, to determine the scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed of their rights under this privacy policy.

1. Scope

This privacy policy applies to Höchsmann GmbH and its websites, offers, services, marketing measures, business relations, application processes and all other services in which personal data is processed.

All these areas are called services. Customers and suppliers alike are referred to as business partners.

2. Responsible

When using our services, we process personal information only to the extent necessary to provide functions, services or services.

Responsible for the processing of your personal data according to Art. 4 No. 7 GDPR is the

Höchsmann GmbH
Ramsau am Dachstein 271

A-8972 Ramsau am Dachstein

Tel: +43 (0) 3687 81523



As an affected person, you can contact us at any time with any questions and suggestions regarding data protection.

3. General information about data processing

data Categorization

The following personal data are recorded as follows.

  • Surname, first name, main residence, address, e-mail address, mobile, telephone and fax numbers, professional and private contact details including contact persons and their function, place of birth, date of birth, customer number, language and license plate number
    data in identity documents (eg travel document, identity card, driving license, etc., including the issuing authority and duration, nationality)
  • Arrival and departure date and duration, room number
    requested services and personal preferences that are announced, as well as allergies, intolerance, special needs and customer or special requests,
  • Date and type of services used and consumed, including special categories of data
    the data on payment methods and in connection with payments, in particular with debit cards, credit cards and bank cards
  • Customer feedback
  • Data with picture / sound recording

We store, process and, as appropriate, third parties to cooperate with us to provide the most effective and best possible service to our customers for our services, including third-party service providers, software engineers, and third parties. and agency services and similar organizations.

a) Provision of personal data

For the use of our services or the recording, execution and termination of a business relationship, we process different personal data depending on the process. In the survey process, you will be informed and required fields are marked as mandatory. For these required data, non-provisioning means that we can not fully provide our services.

b) Consent

Insofar as you have given us consent to the processing of personal data with the processing described below for specific purposes, the legality of this processing is based on your consent. A given consent can be revoked at any time.

c) Hosting

The data processing is realized on behalf of Höchsmann GmbH by external hosting service providers. For all of the functionalities listed below, personal data may be transmitted to hosting service providers to fully comply with our services.

This guarantees us a secure provision of our services according to Art. 6 para. 1 p. 1 f) DSGVO i.V.m. Art. 28 GDPR.

The service providers process data either exclusively in the EU / EEA or under the c. conditions of admissibility guarantee an adequate level of data protection.

d) Transmission to state authorities

In the context of taking advantage of our services and services, it may happen in exceptional cases that we are obliged under Article 6 paragraph 1 c) GDPR to forward personal data to state authorities.

This may also happen if it is required under Art. 6 (1) (f) GDPR to assert, exercise or defend legal claims and claims.

e) Deletion routines and blocking of personal data

As soon as the purpose of storage is eliminated and no other justification facts apply, the personal data is routinely and in accordance with the statutory provisions blocked or deleted.

f) Legal basis of processing

According to Art. 6 para. 1 lit. b DSGVO personal data may be processed to fulfill a contract. This is the case, for example, when services are offered or the data is required to provide a service. Pre-contractual services are included here such as Inquiries about our offers.

According to Art. 6 para. 1 lit. c DSGVO, processing is possible if there is any other legal obligation to do so, such as in the storage of personal data for tax law reasons.

Art. 6 para. 1 lit. d DSGVO allows the processing of personal data to protect the vital interests of the data subjects or another natural person.

Art. 6 para. 1 lit. f DSGVO finally allows processing if this is necessary for the legitimate interests of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not predominate. Such an interest may, for example, be affirmative in the case of an existing customer relationship. Our interest in processing in these cases is that we want to do business for the benefit of our company, our employees and our shareholders.

It follows from the aforementioned regulations that the storage of personal data, e.g. may be required by law or is necessary because otherwise a contract can not be executed. Affected parties can contact us in individual cases and we clarify on what grounds the respective personal data is held by us or processed in any other way.

4. Call our website

When calling our website and the use of our services, acc. Art. 6 para. 1 f) DSGVO of us and our commissioned provider, even if you are not logged in, automatically processes access data. This protects business processes and prevents the misuse of our systems.

In particular, we point out that the transmission of access data to external content providers is inevitable due to the technical functioning of information transmission on the Internet. The third party providers are themselves responsible for the privacy-compliant operation of the IT systems they use. The decision on the storage duration of the data is up to the service providers.

5. contact

We offer various communication options for making contact, such as accessibility via e-mail, post or telephone as well as other communication platforms. If an affected person contacts us directly or via one of the aforementioned media, the data transmitted by the data subject, in accordance with Art. Art. 6 para. 1 b, processed for the purpose of processing.

6. Request, conclusion, execution or termination of a contract

For the inquiry, the contract conclusion, the execution or the termination of a contract we process data from the data categorization, payment data for the purpose of the identification, the establishment of contact, the conclusion of the contract, the order processing, the processing of payment transactions and the provision of our services acc. Art. 6 para. 1 b), c) GDPR.

7. Post and goods dispatch

For the execution of some business and measures, acc. Art. 6 para. 1 b) DSGVO, address data required for delivery to shipping service providers.

8. Newsletter and marketing offers

The consent to the various newsletters is optional and can be revoked at any time.

Important news from the industry and the company Höchsmann can also be sent in other ways. For this reason, address data required for delivery can be handed over to shipping service providers. If you do not want this, you can always object.

9. Applications by mail or in the online process

In the application process, we collect and process personal master data, address data, contact data, as well as documents and images provided by you. This only serves to carry out the application process (identification of the applicant, contacting and checking the fit). The storage follows to avoid false and multiple applications acc. Art. 6 para., 1f) GDPR. Other legitimate interest in this sense, for example, a burden of proof in a procedure under the General Equal Treatment Act (AGG).

10. Google Maps

This website uses the Google Maps product of Google Inc. By using this website, you consent to the collection, processing and use of the data collected by Google Inc., its agents and third parties.

You can find the terms of use of Google Maps under “Terms of Use of Google Maps”.

11. Cookies

We use cookies on our website. These are text files that are stored and stored on a computer system via an Internet browser. By using cookies, we can provide users of this website with more user-friendly services that would not be possible without cookies. Cookies are used on many websites. They often contain a so-called cookie ID, a unique identifier. Internet pages or servers can thus distinguish the individual browser of the affected user from other browsers that contain other user-specific cookies.

By means of cookies, the information and offers on our website can be optimized for the benefit of the users. Cookies allow us to recognize the users of our site. The purpose of recognition is to make it easier for users to use our site.

Affected parties can prevent the setting of a cookie through our website at any time by means of the corresponding setting in the browser used. Almost all browsers provide this feature. In addition, already set cookies can be subsequently deleted again by the system of the persons concerned. If a user deactivates the acceptance of cookies by the browser, not all functions of our website may be fully exploited.

12. Youtube

Our website contains plugins from Youtube that make it quick, easy and uncomplicated to publish videos. If you visit a page from our services that contains such a plugin, your browser establishes a direct connection to the servers of the respective provider. The content of the plugin is transmitted by the provider directly to your browser and integrated into the page. Through this integration, the provider receives the information that your browser has accessed the corresponding page, even if you do not have a profile with this provider or are currently not logged in there. This information (including your IP address) is transmitted by your browser directly to a server of the provider (usually in the US) and stored there. If you are logged in with the provider, he can immediately allocate the visit to our website to your profile. If you interact with the plugins, for example, press a button or leave a comment, this information is also transmitted directly to a server of the provider and stored there. The respective provider may publish this information on your profile or show your contacts.

If you do not want the providers to directly match the data collected through our website to your profile in the respective social network, you must log out of the respective network before visiting our website.

Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA

13. Rights of the person concerned

Each data subject has the right to information under Article 15 of the GDPR, the right to a correction under Article 16 GDPR, the right to cancellation under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object to Article 21 GDPR and the right to data portability under Article 20 GDPR. With regard to the right to information and the right to erase, the restrictions under §§ 34 and 35 BDSG apply. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 DSGVO i.V.m. § 19 BDSG). You may revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent, which were given to us before the validity of the GDPR, ie before May 25, 2018. Please note that the revocation only works for the future. Processing that occurred before the revocation is not affected.