Privacy policy
This policy informs you, in accordance with Art. 13 of the General Data Protection Regulation (GDPR), which data we process, for what purpose, on what legal basis and for how long.
This English version is a translation provided for your convenience. In case of any discrepancy, the German original (Datenschutzerklärung) prevails.
Controller
Sonja Moosmann, Übermellen 14, 6881 Mellau, Austria
Email: office@appartementmoosmann.at, phone: +43 664 42466561
Please contact this address with any questions about the processing of your data and to exercise your rights.
Visiting this website
When you open a page, your browser transmits technically necessary data to the server: the address requested, date and time, the amount of data transferred, browser type and operating system, and your IP address. These access data are stored in server logs and serve the secure, trouble-free operation of the website and the defence against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technical operation of the website. The logs are deleted automatically after a short time.
All components of this site — texts, images, fonts, stylesheet and script — are delivered by the same server. Merely visiting the website therefore does not send any data to other recipients.
Hosting
The website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany. The host processes the access data mentioned above on our behalf. The data remain within the European Union; they are not transferred to a third country.
Storage in your browser
When you switch between the winter and summer view, your browser keeps this choice locally (localStorage) so that it is still there the next time you open a page. Only the selected view is stored. This information does not leave your device and is not read by us. As it serves a function you have expressly requested, no consent is required under § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). You can delete the entry at any time in your browser settings.
Enquiries and bookings
When you send the enquiry form, your entries are transmitted to our web server in encrypted form and delivered from there as an email to our mailbox. The connection to the mail server is encrypted as well (TLS). The details are stored only in that mailbox — we do not keep a database.
To protect the form against misuse, we log every submission with its time and a pseudonymised identifier of your IP address. The IP address itself is not stored, only a check value that cannot be reversed; its sole purpose is to recognise a flood of automated enquiries. We delete these entries after 24 hours. The legal basis is our legitimate interest in a working contact channel that is safe from misuse (Art. 6(1)(f) GDPR).
If you send us an enquiry — via the form, by email or by phone — we process the data you provide: name, contact details, travel dates, number and ages of travellers, details of pets and meals, and your message. The purpose is to answer your enquiry and to prepare or perform the accommodation contract. The legal basis is Art. 6(1)(b) GDPR.
If an enquiry does not lead to a booking, we delete the data after six months at the latest. If a booking is made, we keep the records relevant for accounting for seven years (§ 132 of the Austrian Federal Fiscal Code, Bundesabgabenordnung).
Guest register and tourist tax
As an accommodation provider we are required by law to complete a registration form for every guest and to keep a guest register (§§ 5 and 10 of the Austrian Registration Act 1991, Meldegesetz). It contains first name and surname, date of birth, sex, nationality, address, dates of arrival and departure and, for guests from abroad, the details of the travel document. The registration authority may inspect this register. The register must be kept for seven years.
For the tourist tax we report the number of overnight stays to the Municipality of Mellau (Vorarlberg Tourism Act). The legal basis for both is Art. 6(1)(c) GDPR. Providing these data is required by law; without them we cannot accommodate you.
Recipients of your data
Your data are received, in each case only as far as necessary, by: our host for operating the website, the Municipality of Mellau and the registration authority on the basis of the legal obligations mentioned, our tax adviser for bookkeeping, and our bank for processing payments. Your data are not passed on beyond this.
Bookings via portals
If you book via a portal such as Booking.com or Airbnb, the respective provider first processes your data under its own responsibility; for the Kanisfluh Apartment this is Airbnb Ireland UC. The portal’s privacy terms apply. We receive from it only the data we need for your stay and for invoicing, and process them as described above.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to object to processing based on legitimate interests (Art. 21). An informal message to office@appartementmoosmann.at is sufficient.
If you believe that the processing of your data infringes data protection law, you can lodge a complaint with the supervisory authority under Art. 77 GDPR:
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42, 1030 Vienna, Austria
Phone +43 1 52 152-0, email dsb@dsb.gv.at
dsb.gv.at
This policy was last updated on 7 September 2026.