Last updated: 30 September 2026

1. Controller

The controller responsible for processing personal data on this website is:

quartier39
Simone Stampfer
Hinterkaiserweg 39B
6380 St. Johann in Tirol
Austria
Phone: +43 664 1664601
Email: info@quartier39.tirol

2. General information

Protecting your personal data is important to us. Personal data means any information that can be used to identify you directly or indirectly. This includes your name, contact details, IP address and information connected with an enquiry or booking.
We process personal data only where this is necessary to provide the website, respond to enquiries, take steps before entering into a contract, perform a contract, comply with legal obligations or act on the basis of your consent.
The relevant legal bases include:
• Article 6(1)(a) GDPR for processing based on your consent
• Article 6(1)(b) GDPR for pre-contractual measures and performance of a contract
• Article 6(1)(c) GDPR for compliance with legal obligations
• Article 6(1)(f) GDPR for the purposes of legitimate interests
• Section 165(3) of the Austrian Telecommunications Act 2021 for storing information on your device or accessing information stored on it

3. Hosting and website provision by Wix

This website was created with Wix and is provided through the Wix platform.
The provider is:

Wix.com Ltd.
Yunitsman 5 St
Tel Aviv
Israel

EU representative:

Wix Online Platforms Limited
1 Grant’s Row
Dublin 2, D02HX96
Ireland

When you access the website, Wix processes technical information required to deliver the website and ensure its security and stability. This information may include:
• IP address
• date and time of access
• page or file requested
• referring URL
• browser type and version
• operating system and device type
• language settings
• technical error and security information
The purpose of the processing is to provide a secure, stable and technically functional website. The legal basis is Article 6(1)(f) GDPR. Where processing is required to initiate or perform a booking, Article 6(1)(b) GDPR also applies.
Wix processes data on our behalf as a processor. Wix may process information in Israel, Ireland, the United States and other countries. The European Commission has issued an adequacy decision for Israel. For other international transfers, Wix states that it uses recognised transfer mechanisms such as the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
Further information:
https://www.wix.com/about/privacy

4. Server log data

When you visit the website, server log information may be processed automatically. This can include your IP address, browser type, operating system, access time, requested content, transferred data volume and referring URL.
This information is used to deliver the website, identify technical errors, prevent attacks and protect our systems. The legal basis is Article 6(1)(f) GDPR.
The information is deleted when it is no longer required for these purposes unless statutory retention duties or specific security requirements justify a longer period.

5. Cookies and consent management

This website uses cookies and similar technologies. Some are necessary for the technical operation of the website. Others provide functionality, measure website use or display external content.
The cookie banner distinguishes in particular between:
• strictly necessary cookies
• functional cookies
• analytics cookies
• marketing cookies
Strictly necessary cookies are used on the basis of Article 6(1)(f) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021 where they are required to operate the website, protect its security or store your privacy choices.
Functional, analytics and marketing cookies or similar technologies are used on the basis of your consent under Article 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021, unless another legal basis applies.
You can change or withdraw your consent at any time with effect for the future by selecting “Cookies” in the footer of the website. Processing carried out before the withdrawal remains lawful.
Wix may record your consent decision together with technical information such as your IP address, the time of your decision and the categories selected. This serves as evidence of the consent given or refused. The legal basis is Article 6(1)(c) GDPR or Article 6(1)(f) GDPR.
Further information about cookies used by Wix:
https://support.wix.com/en/article/cookies-and-your-wix-site

6. Google Tag Manager

This website uses Google Tag Manager. For users in the European Economic Area, the provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Tag Manager is used to manage and trigger other website tags. It does not normally analyse user behaviour itself. However, loading the service may transmit technical information to Google, particularly your IP address, browser and device information and details of the page requested.
Google Tag Manager is used, among other things, to manage Google Analytics. Tags that are not technically necessary must not be activated until the corresponding cookie consent has been provided.
The legal basis for the processing is your consent under Article 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021.
Further information:
https://policies.google.com/privacy?hl=en

7. Google Analytics 4

This website uses Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The measurement ID used is G-3FZYYM253V.
Google Analytics helps us understand how visitors use the website. The following information may be processed:
• pages and content viewed
• clicks and other interactions
• date and time of access
• session duration
• referring URL
• approximate location
• browser, operating system and device type
• language and screen resolution
• technical identifiers and cookie information
• IP address during technical transmission
The information is used to evaluate the reach, use and technical performance of the website and to improve our services.
Google Analytics is used on the basis of your consent under Article 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021. You can withdraw your consent at any time through the cookie settings.
Google may process information in the United States. Google states that relevant transfers are based on the EU-US Data Privacy Framework and, where required, the European Commission’s Standard Contractual Clauses.
The retention period depends on the settings configured in our Google Analytics account. Aggregated statistical information may be retained for longer if it no longer directly identifies an individual.
Further information:
https://policies.google.com/privacy?hl=en
https://support.google.com/analytics/answer/6004245

8. Google reviews and Certified Code

Google reviews are displayed on this website through the Wix app “Google Reviews”. The app is provided by Certified Code.
When the review module loads, your IP address, browser and device information, the page requested and other technical information may be transmitted to Certified Code, its technical service providers and, where applicable, Google. Review content and ratings may be retrieved from Google and displayed on our website.
The integration is based on your consent under Article 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021.
Certified Code and participating technical providers may process information outside the European Economic Area. Depending on the provider, international transfers may be based on an adequacy decision or Standard Contractual Clauses.
Further information:
https://www.certifiedcode.us/legal/privacy-policy
https://policies.google.com/privacy?hl=en

9. Instagram content and links to Instagram and Facebook

The homepage displays content from the quartier39 Instagram account. Instagram and Facebook are provided by:

Meta Platforms Ireland Limited
Merrion Road
Dublin 4, D04 X2K5
Ireland

When embedded Instagram content is loaded, a connection to Meta’s servers may be established. Meta may process your IP address, browser and device information, access time, the page requested and, where applicable, cookie or account information. If you are signed in to Instagram or Facebook, Meta may be able to associate your visit with your account.
Embedded content is loaded on the basis of your consent under Article 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021.
The website also contains ordinary links to Instagram and Facebook. A normal link does not transfer information to the relevant provider until you open it. From that point onward, the privacy policy of the external provider applies.
Meta may process information in the United States and other countries outside the European Economic Area.
Further information:
https://privacycenter.instagram.com/policy
https://www.facebook.com/privacy/policy

10. Availability, prices, online bookings and enquiries through easyGuestmanagement

We use embedded easyGuestmanagement modules for availability searches, pricing information, bookings and booking enquiries.
The provider is:

easyGuestmanagement GmbH
Baurenhof 7a
6632 Ehrwald
Austria
Phone: +43 664 1652271
Email: info@easyguest.management

The modules may process the following information:
• requested travel dates
• selected apartment
• number and age of guests
• title, first name and surname
• date of birth
• address, postcode, town and country
• email address and telephone number
• booking and pricing information
• special requests and voluntary messages
• technical connection and log information
The information is used to display availability and prices, respond to your enquiry, prepare an offer, prepare or complete a booking and send booking-related communications.
The legal basis is Article 6(1)(b) GDPR. Where statutory retention or reporting duties apply, processing is also based on Article 6(1)(c) GDPR. Voluntary information is processed on the basis of your consent under Article 6(1)(a) GDPR where it is not required to handle your request.
easyGuestmanagement processes the information as part of the contractually agreed service. Depending on the booking process, information may also be provided to other necessary recipients, including registration authorities, tourism associations, payment providers or other organisations involved in handling the booking.
Booking and accounting information is retained in accordance with statutory retention duties. Other enquiry and communication information is deleted when it is no longer required, unless statutory duties or legitimate interests require further retention.
Further information:
https://www.easyguestmanagement.at/web/documents/dataPrivacyRegulation.php?lang=2

11. Europäische Reiseversicherung

During the online booking process, you may be offered the option of taking out travel insurance.
The provider is:

Europäische Reiseversicherung AG
Kratochwjlestraße 4
1220 Vienna
Austria

If you request an insurance offer or purchase insurance, the booking, travel, contact and payment information required for this purpose may be transferred to Europäische Reiseversicherung. The insurance company processes this information under its own data protection responsibility.
Processing takes place to prepare or perform the insurance contract requested by you in accordance with Article 6(1)(b) GDPR. Voluntary additional information may be processed on the basis of your consent under Article 6(1)(a) GDPR.
Further information:
https://www.europaeische.at/rechtliches/datenschutz

12. Contact by email or telephone

If you contact us by email or telephone, we process the information you provide. This may include your name, contact details, the content of your message and information about a requested trip or booking.
The purpose is to respond to your enquiry. Where your enquiry concerns a possible or existing booking, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed on the basis of our legitimate interest in appropriate communication under Article 6(1)(f) GDPR.
The information is deleted when it is no longer required to deal with your enquiry, unless statutory retention duties or legitimate interests require further retention.

13. Wix Chat

A Wix chat function is embedded on the website. If you open the chat or send a message, the following information may be processed:
• the content of your message
• contact details provided voluntarily
• uploaded files
• date and time of the communication
• IP address and browser or device information
The purpose is to communicate with prospective and existing guests. Booking-related enquiries are processed on the basis of Article 6(1)(b) GDPR. General enquiries are processed on the basis of Article 6(1)(f) GDPR.
Please do not submit sensitive information through the chat unless it is necessary for your enquiry.
Information submitted through the chat may be stored within the Wix system. It is deleted when the communication has been completed unless statutory retention duties or legitimate interests require further retention.

14. Communication through WhatsApp

The website contains a link allowing you to contact us through WhatsApp. For users in the European Economic Area, the provider is:
WhatsApp Ireland Limited
Merrion Road
Dublin 4, D04 X2K5
Ireland

If you contact us through WhatsApp, WhatsApp processes information including your telephone number, profile information, communication data, technical information and metadata. WhatsApp states that the content of personal messages is protected by end-to-end encryption.
We process the information you send to respond to your enquiry. Booking-related communication is processed under Article 6(1)(b) GDPR. Other communication is processed under Article 6(1)(f) GDPR.
WhatsApp may transfer information to affiliated companies and recipients outside the European Economic Area.
Further information:
https://www.whatsapp.com/legal/privacy-policy-eea

15. Appointment and information link through Boards

The “Termin vereinbaren” button leads to an external service provided by:

Boards.com Ltd.
Savion 4
Tel Aviv-Yafo 6993004
Israel

EU representative:

Thomas Rickert Rechtsanwaltsgesellschaft mbH
Colmantstraße 15
53115 Bonn
Germany

The Boards service is not operated within our website. When you open the link, you leave our website. Boards may process your IP address, browser and device information, usage data, approximate location, cookie identifiers and any information you voluntarily provide.
The European Commission has issued an adequacy decision for Israel. Boards may use additional service providers and recipients in other countries.
Further information:
https://www.boards.com/privacy
https://www.boards.com/cookies

16. Wix Blog, comments, likes and member profiles

A Wix Blog is available on this website. It may display view counts and offer comment and like functions. A public member profile may also be displayed.
If you use these functions or create a member account, the following information may be processed:
• name or username
• email address
• profile picture and profile details
• comments and likes
• date and time of an activity
• IP address and browser or device information
• login and account information
Comments, usernames, profile images and other information marked as public may be visible to other visitors. Do not publish personal information relating to other people or sensitive information.
The processing is required to provide the requested blog and member functions under Article 6(1)(b) GDPR and to moderate content, prevent misuse and protect the platform under Article 6(1)(f) GDPR.
You may request the deletion of your account or personal content unless statutory requirements or overriding legitimate interests prevent deletion.

​17. Wix Store, shopping cart and orders

Wix Store and shopping cart functions are technically available on the website. If you add a product to the shopping cart or start or complete an order, the following information may be processed:
• name and contact details
• billing and delivery address
• products and quantities ordered
• price, tax and delivery information
• payment method and transaction status
• IP address and browser or device information
• time and progress of the order
Processing takes place to prepare and perform the order under Article 6(1)(b) GDPR. Information relevant for tax and commercial law is stored in accordance with statutory retention periods under Article 6(1)(c) GDPR.
When you make a payment, information may be transferred to the payment service provider identified during checkout. Payment providers may process payment and account information under their own data protection responsibility. The payment methods and providers available at the time are displayed during checkout.
Certain information may be processed for fraud prevention, system security and the establishment or defence of legal claims under Article 6(1)(f) GDPR.

18. External links and third-party services

The website contains links to external services, including Google Maps, the interactive Kitzbühel Alps map, Gastfreund, Giggle.Tips, Sport Patrick, Yapadu, Instagram, Facebook and other information or booking services.
Displaying an ordinary link does not normally load content from the destination website. When you open the link, you leave our website. The relevant provider may then process your IP address, browser information, referrer data, cookie identifiers and other usage information.
The relevant provider is responsible for processing carried out on the external website. Please review that provider’s privacy information.

19. RINGANA partner link

The website contains a partner link to RINGANA. If you open this link, you leave our website and are taken to an external RINGANA service.
The link may contain an affiliate identifier. RINGANA may therefore recognise that you accessed its service through our partner link. Cookies or similar technologies may be used on the destination website to attribute a visit or order.
Processing on the external service takes place under RINGANA’s responsibility. Further information is available in the privacy and cookie information provided on that website.

20. Recipients of personal data

We disclose personal data only where this is necessary to perform a contract, respond to your enquiry, comply with a legal obligation, act on the basis of your consent or pursue a legitimate interest.
Possible recipients include:
• hosting, website and IT service providers
• booking and accommodation management providers
• payment providers
• insurance companies
• tax and accounting advisers
• tourism associations and statutory registration bodies
• authorities and courts where legally required
• providers of embedded analytics, communication and content services
Where required, data processing agreements are concluded with processors under Article 28 GDPR.

21. International transfers

Some providers used on this website are located outside the European Economic Area or use subcontractors in other countries. These countries may provide a lower level of data protection.
Information is transferred only where the relevant legal requirements have been met. The transfer may be based on an adequacy decision by the European Commission, a valid certification under the EU-US Data Privacy Framework, the European Commission’s Standard Contractual Clauses or your express consent.

22. Retention periods

We retain personal data only for as long as it is required for the relevant purpose.
Booking, contract, invoice and payment information is subject to statutory tax and commercial retention periods. Enquiry and communication information is deleted when the enquiry has been completed unless statutory duties or legitimate interests require further retention.
Information processed on the basis of consent is generally retained until consent is withdrawn or the processing purpose no longer applies. Technical security information may be retained for a limited period to investigate misuse or attacks.

23. Your rights

Subject to the statutory requirements, you have the right to:
• obtain access to personal data under Article 15 GDPR
• have inaccurate or incomplete information corrected under Article 16 GDPR
• obtain erasure under Article 17 GDPR
• restrict processing under Article 18 GDPR
• receive information in a portable format under Article 20 GDPR
• object to certain processing under Article 21 GDPR
• withdraw consent under Article 7(3) GDPR
A withdrawal takes effect for the future. It does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, contact info@quartier39.tirol.

24. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority in Austria is:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at

25. Data security

This website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” and the lock symbol in your browser’s address bar.
We use appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access and other misuse. Completely risk-free transmission over the internet cannot, however, be guaranteed.

26. Automated decision-making

We do not use solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

27. Changes to this Privacy Policy

We may update this Privacy Policy if the website, the services used or the legal requirements change. The version published on this website at the relevant time applies.