Privacy Policy

Status: 01.10.2026

Declaration on the duty to inform

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the legal regulations (DSGVO, TKG 2021). In this data protection information, we inform you about the most important aspects of data processing within the framework of our website.

When visiting our website, your IP address, start and end of the session are recorded for the duration of this session. This is technically necessary and thus represents a legitimate interest within the meaning of Art 6 Para 1 lit f DSGVO. Unless otherwise regulated below, this data is not further processed by us.

Storage of personal data

Personal data that you transmit to us electronically on this website, such as name, e-mail address, address or other personal details in the context of submitting a form, will only be used by us together with the time and the IP address for the purpose stated in each case, kept safe and not passed on to third parties.

We therefore use your personal data only for communication with those visitors who expressly wish contact and for the handling of the services and products offered on this website. We do not pass on your personal data without consent, but we cannot rule out that this data may be viewed in the event of unlawful conduct.

If you send us personal data by e-mail – thus away from this website – we cannot guarantee secure transmission and the protection of your data. We recommend that you never transmit confidential data unencrypted by e-mail.

Cookies

Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do no harm. We use cookies to make our offer user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognize your browser on your next visit. If you do not wish this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. If cookies are deactivated, the functionality of our website may be restricted.

For non-essential cookies (Google Tag Manager) we ask for your consent via a cookie banner. You can change or withdraw that choice at any time – the page reloads so your change takes effect immediately:

Web Analysis

We use Google Analytics from Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on this website to statistically evaluate visitor data. Google Analytics uses target-oriented cookies. The information generated by this is transferred to the provider's server and stored there.

You can prevent this by setting up your browser so that no cookies are stored. We have concluded a corresponding contract for order data processing with the provider. Your IP address is recorded, but pseudonymized immediately (e.g. by deleting the last 8 bits). This means that only a rough localization is possible.

More information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or at https://support.google.com/analytics/answer/6004245?hl=en.

We have concluded a direct customer contract with Google for the use of Google Analytics by accepting the "Amendment to Data Processing" in Google Analytics. You can find more about the amendment to data processing for Google Analytics here: https://support.google.com/analytics/answer/3379636?hl=en&utm_id=ad

Data processing takes place on the basis of the legal provisions of § 165 Para 3 TKG 2021 and Art 6 Para 1 lit a (consent) and/or f (legitimate interest) of the DSGVO. Our concern in the sense of the DSGVO (legitimate interest) is the improvement of our offer and our web presence. Since the privacy of our users is important to us, the user data is pseudonymized.

Instagram

We have integrated functions from Instagram on our website. Instagram is a social media platform of the company Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Instagram has been a subsidiary of Facebook Inc. since 2012 and belongs to the Facebook products. Embedding Instagram content on our website is called embedding. This allows us to show you content such as buttons, photos or videos from Instagram directly on our website. When you call up pages of our website that have an integrated Instagram function, data is transmitted to Instagram, stored and processed. Instagram uses the same systems and technologies as Facebook. Your data is thus processed across all Facebook companies. Instagram also uses the collected data for measurement and analysis purposes. We get summarized statistics and thus more insight into your wishes and interests. It is important to mention that these reports do not personally identify you. Instagram shares the information obtained between the Facebook companies with external partners and with people with whom you connect worldwide. Data processing takes place in compliance with its own data policy. Your data is distributed on Facebook servers all over the world, among other things for security reasons. Most of these servers are located in the USA.

YouTube

We have integrated YouTube videos on our website. So we can present you interesting videos directly on our page. YouTube is a video portal that has been a subsidiary of Google LLC since 2006. The video portal is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you call up a page on our website that has an embedded YouTube video, your browser automatically connects to the servers of YouTube or Google. Various data is transferred (depending on settings). Google is responsible for the entire data processing and thus Google's data protection also applies.

Newsletter and contact form (MailerLite)

For the newsletter (sign-up form in the footer and as a popup) and for the contact form on the "Contact" page we use the service MailerLite by MailerLite Limited, Ground Floor, 71 Lower Baggot Street, Dublin 2, D02 P593, Ireland. When you subscribe to the newsletter, you transmit your e-mail address and give us the right to contact you by e-mail. When you submit the contact form, your first and last name, e-mail address, phone number (optional) and your message are transmitted to MailerLite together with the time and your IP address and stored there as a contact, so that we can answer your enquiry and assign follow-up questions.

The legal basis is your consent (Art 6 para 1 lit a GDPR), which you give by submitting the respective form and can withdraw at any time – for the newsletter via the unsubscribe link in every e-mail, for the contact form informally by e-mail to us. After you unsubscribe we delete all stored registration data; contact enquiries are deleted once they have been dealt with and no statutory retention obligations apply.

The forms are provided by MailerLite: as soon as a form scrolls into your visible area, your browser loads MailerLite's form script and, for technical reasons, transmits your IP address; for the newsletter form, a view of the form (impression) is additionally reported to MailerLite. Your details themselves are only transmitted when you submit the form. This technical integration is based on our legitimate interest in working forms (Art 6 para 1 lit f GDPR). We have concluded a data processing agreement with MailerLite; according to MailerLite, the data is processed on servers in the EU and transfers to individual sub-processors outside the EU are safeguarded by EU standard contractual clauses. More information: MailerLite privacy policy and data processing agreement (DPA).

Google reCAPTCHA

To protect the contact form against spam and automated input we use Google reCAPTCHA by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA is loaded together with the contact form and checks whether the input comes from a human. For this, Google analyses your behaviour on the page (for example mouse movements and time spent), your IP address, browser and device information and cookies set by Google, and transmits this data to Google servers, including in the USA. The processing is based on our legitimate interest in the security of the form (Art 6 para 1 lit f GDPR). For transfers to the USA Google relies on the EU-US Data Privacy Framework and EU standard contractual clauses. More information: Google privacy policy and Google terms of service.

Google Fonts

We use Google Fonts on our website. No registration is required to use the fonts, and no cookies are stored. The files (CSS, fonts) are loaded via the domains fonts.googleapis.com and fonts.gstatic.com and are separated from other services according to Google. Google records the use of the fonts and stores this data. If you have a Google account, according to Google, account data is not transmitted when using Google Fonts.

Google Maps

We use Google Maps from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. With Google Maps we can show you locations better and thus adapt our service to your needs. By using Google Maps, data is transferred to Google and stored on the Google servers.

Your Rights

You essentially have the rights to information, correction, deletion, restriction, data portability, revocation and objection regarding your data stored by us. If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in a way, you can complain to us or the data protection authority.

  • Right to rectification (Article 16 DSGVO)
  • Right to erasure (Article 17 DSGVO)
  • Right to restriction of processing (Article 18 DSGVO)
  • Notification obligation regarding rectification or erasure (Article 19 DSGVO)
  • Right to data portability (Article 20 DSGVO)
  • Right to object (Article 21 DSGVO)
  • Right not to be subject to a decision based solely on automated processing (Article 22 DSGVO)

You can find the Austrian supervisory authority at https://www.dsb.gv.at/.

TLS encryption with https

We use https to transmit data tap-proof on the Internet (data protection through technology design Article 25 Paragraph 1 DSGVO). You can recognize the secure transmission by the lock symbol in the browser and by the use of https in our address.

Contact

Jürgen Stemberger
Bruggen 1, A-9962 St. Veit in Defereggen
M: +43 (0)664 4519280
office@weissspitzhuette.at