Privacy policy
Version: September 2026
Translation provided for your information – in the event of any discrepancy, the German version prevails.
1. Controller
Johann Brandauer, MSc, holiday apartment SONNWEIT, Nußbaumerweg 17/8, 9991 Dölsach, Austria, e-mail: anfrage@sonnweit.at
2. Visiting the website (hosting)
This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, and delivered via its network. When you visit the site, Cloudflare automatically processes technical access data (IP address, date and time, page accessed, browser type, referrer) in order to deliver the website and protect it against attacks and automated requests (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; standard contractual clauses also apply. Information on data protection at Cloudflare: cloudflare.com/privacypolicy.
3. Online booking via the calendar on this website
To display available dates, calculate prices and process bookings, we use the booking system of Smoobu GmbH, Pappelallee 78/79, 10437 Berlin, Germany. When you select dates in the calendar, our website queries availability and price from Smoobu via our own server at Cloudflare (see section 2); only the selected dates and the number of guests are transmitted – your browser does not connect to Smoobu directly. When you complete a booking via the form, we transmit the data you entered (name, address, e-mail address, telephone number, travel dates, number of guests, message) to Smoobu in order to create the reservation and send the booking confirmation and the further messages relating to the booking (payment link, arrival information) by e-mail; the details marked as mandatory are required for the booking. The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR) and statutory retention obligations (Art. 6 (1) (c) GDPR, 7 years pursuant to § 132 of the Austrian Federal Fiscal Code (BAO)). Smoobu processes the data on our behalf on the basis of a data processing agreement (Art. 28 GDPR). To protect against automated requests, the Cloudflare Turnstile service may be used, which evaluates technical characteristics of the browser without setting cookies. Information on data protection at Smoobu: smoobu.com/privacy-policy.
4. Payment
Payment is made via a payment link that you receive by e-mail after booking. The payment is processed by the payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). You enter your payment details (card or account details) directly on the payment page; they are not stored on our systems. We are only informed that payment has been made, and when. Stripe may transfer data to Stripe, Inc. (USA); Stripe is certified under the EU-US Data Privacy Framework. The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR). If you pay by bank transfer, we process the data contained in the transfer for accounting purposes (Art. 6 (1) (b) and (c) GDPR). Information on data protection at Stripe: stripe.com/privacy.
5. Guest registration
As an accommodation provider, we are obliged under the Austrian Registration Act 1991 (Meldegesetz) and the Tyrolean Visitors’ Tax Act 2003 to register all guests (Art. 6 (1) (c) GDPR). Before arrival you receive a pre-check-in link to the guest registration system of the Osttirol tourist board, which is operated by feratel media technologies AG, Innsbruck. The data entered there (name, date of birth, nationality, address, dates of arrival and departure, travel document details for foreign guests; name and date of birth of accompanying persons) are transmitted to the municipality of Dölsach as registration authority and to the Osttirol tourist board (visitors’ tax, Welcome Card). Provision of these data is required by law.
6. Contact by e-mail
If you write to us by e-mail, we process your details in order to handle your enquiry (Art. 6 (1) (b) or (f) GDPR). E-mails are deleted as soon as the enquiry has been dealt with and no statutory retention obligations prevent deletion.
7. External links
This website contains links to external services (e.g. Airbnb, Google Maps). When you click on them, the privacy policy of the respective provider applies. No content from these providers is loaded automatically.
8. Cookies, local storage and analytics
This website does not set cookies. Fonts are loaded from our own server. In your browser’s local storage we only remember whether you have closed the language notice; this value contains no personal data and is not transmitted to us.
For audience measurement we use Fathom Analytics (Conva Ventures Inc., Canada), a privacy-friendly analytics service. Fathom does not set cookies, does not store IP addresses and does not create user profiles; only anonymous, aggregated data is collected, such as pages viewed, country of origin, device type, referral source and anonymous events (e.g. “booking completed” with the booking value, without any personal reference). Processing takes place on servers in the EU (EU isolation). The legal basis is our legitimate interest in analysing and improving our offer (Art. 6 (1) (f) GDPR); consent is not required as nothing is stored on your device (§ 165 (3) Austrian Telecommunications Act 2021). Further information: usefathom.com/privacy.
9. Retention period
We retain booking and payment data for seven years (§ 132 Austrian Federal Fiscal Code) and the guest register for seven years (§ 10 Meldegesetz). E-mails are deleted once the enquiry has been dealt with and no retention obligation applies. Cloudflare stores access data for a limited period in accordance with its privacy policy.
10. Your rights
You have the right to access, rectification, erasure, restriction of processing and data portability. To exercise these rights, please contact the e-mail address given above. You may also lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
Right to object (Art. 21 GDPR): You may object at any time, on grounds relating to your particular situation, to processing that we base on our legitimate interest (Art. 6 (1) (f) GDPR – hosting, audience measurement). To do so, write to anfrage@sonnweit.at.