Privacy Policy

Last updated: November 30, 2025

This Privacy Policy describes how Schlitten House (“we”, “us”, or “our”) collects, uses, and protects your information when you visit our website. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable Austrian data protection laws.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Company (referred to as either “the Company”, “We”, “Us” or “Our”) refers to Schlitten House, Oberdorf 233, 5753 Saalbach, Austria.
  • Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing details of Your browsing history on that website.
  • Country refers to Austria.
  • Device means any device that can access the Service such as a computer, mobile device or tablet.
  • Personal Data means any information relating to an identified or identifiable natural person as defined by GDPR (EU) 2016/679.
  • Service refers to the Website and the cocktail bar establishment.
  • Third-Party Service means services provided by third parties, including but not limited to Google Analytics and Instagram.
  • Usage Data refers to data collected automatically through the use of the Service or from the Service infrastructure itself.
  • Website refers to Schlitten House’s website.
  • You means the individual accessing or using the Service.

Data Controller

Schlitten House, located at Oberdorf 233, 5753 Saalbach, Austria, is the data controller responsible for your Personal Data.

Information We Collect

Automatically Collected Information

When you visit our Website, we automatically collect certain information through:

Google Analytics

We use Google Analytics to understand how visitors use our website. This service collects:

  • IP address (anonymized)
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on pages
  • Geographic location (country/city level)
  • Referral source

This data is collected and stored by Google in accordance with their privacy policy.

Server Logs

Our hosting provider (InMotion Hosting) automatically collects standard server log information including:

  • IP addresses
  • Browser type
  • Access times and dates
  • Pages requested

This information is stored for a standard retention period for security and technical purposes.

Third-Party Embeds

Instagram

We embed Instagram content on our website to showcase our posts and connect with our community. When you view these embeds, Instagram may collect information about your visit according to their privacy policy. We do not control or have access to any data collected by Instagram.

We process your data based on the following legal grounds:

  • Legitimate Interests (Article 6(1)(f) GDPR): To analyze website usage, improve user experience, and maintain website security.
  • Consent (Article 6(1)(a) GDPR): Where you provide consent for cookies and analytics through our cookie banner.

How We Use Your Information

We use the collected information solely for:

  • Analyzing website traffic and user behavior
  • Improving our website and user experience
  • Maintaining website security and preventing abuse
  • Understanding our audience demographics

Data Sharing and Third Parties

We do not directly share, sell, or rent your personal information to third parties. However, the following third-party services process data as part of their services:

Google Analytics

  • Purpose: Website analytics
  • Data Collected: Usage data, anonymized IP addresses, device information
  • Privacy Policy: Google Privacy Policy
  • Data Location: Google’s servers (compliant with GDPR)

Instagram (Meta)

  • Purpose: Social media content embedding
  • Data Collected: Controlled by Instagram/Meta
  • Privacy Policy: Instagram Privacy Policy
  • Note: We do not have access to data collected by Instagram

InMotion Hosting

  • Purpose: Website hosting
  • Data Collected: Server logs, access data
  • Data Location: InMotion Hosting servers
  • Retention: Standard retention period per hosting provider policy

Data Retention

  • Analytics Data: Retained by Google Analytics according to their retention policies
  • Server Logs: Retained by InMotion Hosting for standard security and technical purposes
  • Cookies: Session cookies are deleted when you close your browser; persistent cookies remain until expiration or deletion

We do not store personal data on our own systems beyond what is automatically collected by our hosting provider.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. We have implemented a cookie consent manager that allows you to control which cookies are placed on your device.

When you first visit our website, you will see a cookie consent banner that allows you to:

  • Accept all cookies: Grants consent for all cookies, including analytics
  • Reject all cookies: Only essential cookies will be used
  • Manage preferences: Choose which categories of cookies to accept or reject
  • Change your preferences: You can update your cookie preferences at any time by clicking the cookie settings button

Your cookie preferences are stored locally in your browser and will be remembered for future visits.

Types of Cookies We Use:

  • Essential Cookies: Necessary for website functionality and cookie consent preferences (Always enabled)
  • Analytics Cookies: Google Analytics cookies to understand usage patterns (Optional - requires your consent)

Essential Cookies

  • cc_cookie: Stores your cookie consent preferences
  • Duration: 6 months
  • Purpose: Remembers your cookie choices

Analytics Cookies (Google Analytics)

  • _ga, _gid, _gat: Google Analytics tracking cookies
  • Duration: Varies (up to 2 years)
  • Purpose: Website traffic analysis and user behavior tracking
  • Privacy Controls: Only activated with your explicit consent

Managing Cookies

You can control cookies in multiple ways:

  • Cookie Consent Manager: Use our cookie banner to manage your preferences
  • Browser Settings: Most browsers allow you to refuse cookies or delete existing cookies
  • Google Analytics Opt-out: Install the Google Analytics Opt-out Browser Add-on

Note: Disabling essential cookies may affect basic website functionality. Disabling analytics cookies will prevent us from understanding how visitors use our website, but will not affect your browsing experience.

Data Security

We take data security seriously and implement appropriate technical and organizational measures:

  • HTTPS encryption for all website communications
  • Secure hosting with InMotion Hosting
  • Limited data collection: We only collect what is necessary
  • No direct storage: We do not directly store personal information

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

Your Rights Under GDPR

As a data subject in the EU, you have the following rights:

Right to Access (Article 15)

You have the right to request access to your personal data.

Right to Rectification (Article 16)

You have the right to request correction of inaccurate personal data.

Right to Erasure (Article 17)

You have the right to request deletion of your personal data under certain conditions.

Right to Restrict Processing (Article 18)

You have the right to request restriction of processing your personal data.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used format.

Right to Object (Article 21)

You have the right to object to processing of your personal data based on legitimate interests.

Right to Withdraw Consent (Article 7(3))

Where processing is based on consent, you have the right to withdraw consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) if you believe your data protection rights have been violated.

Austrian Data Protection Authority:

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA) by third-party services (Google, Instagram). These transfers are protected by:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions where applicable
  • Privacy Shield or equivalent frameworks

Children’s Privacy

Our Service is not intended for individuals under 18 years of age (legal drinking age in Austria). We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your GDPR rights, or have concerns about how your data is handled, please contact us:

Schlitten House

For GDPR-related inquiries, please clearly state your request and provide sufficient information for us to verify your identity.

Our website may contain links to third-party websites (such as Instagram, Google). We are not responsible for the privacy practices or content of these external sites. We strongly advise you to review the privacy policy of every site you visit.

Third-party services we link to:

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the “Last updated” date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us: