Privacy Policy
Last updated: April 2026
1. Data Controller
Monika & Christian Rietzler
Kelleweg 20
6533 Fiss
Austria
Contact:
Email: urlaub@4jahreszeiten.info
Phone: +43 5476 20123
2. General Information
The protection of your personal data is of particular concern to us. In this privacy policy, we inform you about the processing of personal data when using our website.
3. Own Analytics System
We use our own, fully GDPR-compliant analytics system that does not set cookies and does not store personal data on our servers.
Data collected:
- Country (determined via an external GeoIP service, see below); no IP address is stored on our servers
- Browser type and version
- Operating system
- Device type (Desktop, Mobile, Tablet)
- Pages visited and time spent
- Referrer (origin only, no query parameters)
GeoIP service (ip-api.com)
To determine the country, we use the external service ip-api.com. Your IP address is transmitted to this provider; it is not stored on our servers. The provider may process the IP in accordance with its privacy policy. Further information: ip-api.com privacy policy
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in statistical evaluation of website usage)
Storage period: 14 months, then automatic archiving and deletion
Cookies: No cookies are set. The system uses in-memory tracking and Beacon API.
For bot detection, only technical identifiers (bot type, bot name) are stored, not the full user agent.
Right to object (opt-out)
You may object to the processing pursuant to Art. 21(1) GDPR and disable collection for this device by clicking the following link. The setting is stored in your browser (localStorage):
4. Google Maps
On our contact page, we use Google Maps to display interactive maps.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data transfer: USA (Google LLC) - Standard Contractual Clauses
Data transmitted: IP address, location data, cookies (various Google cookies)
Legal basis: Art. 6 para. 1 lit. a GDPR (consent)
Privacy Policy: Google Privacy Policy
5. YouTube
YouTube videos are embedded on our website.
A preview image is loaded from YouTube for display; the video only plays after you have given your consent.
Provider: Google Ireland Limited (for EU) / Google LLC (USA)
Data transfer: USA (Google LLC) - Standard Contractual Clauses
Data transmitted: IP address, device information, usage data, cookies
Legal basis: Art. 6 para. 1 lit. a GDPR (consent)
Privacy Policy: YouTube Privacy Policy
6. Easy-Booking (Booking System)
For booking inquiries, we use the Easy-Booking booking system.
Data processed: Name, email, phone, booking data (arrival, departure, number of persons), possibly other inquiry data
Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment or contract initiation)
Data processor: Easy-Booking acts as a data processor. A written data processing agreement (DPA) has been concluded with Easy-Booking.
7. Web Hosting
This website is hosted on servers of a hosting provider.
Server logs: IP address (temporary), access time, page accessed, referrer URL, browser information
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in providing the website)
Storage period: Depending on the hosting provider, usually 7-30 days
8. SSL Encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the browser address line changes from "http://" to "https://" and by the lock symbol in your browser line.
9. Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Austrian Data Protection Authority::
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
Phone: +43 1 52 152-0
10. Withdrawal of Consent
You can withdraw your consent to data processing at any time. This applies in particular to consent for Google Maps, YouTube and the booking form. You can simply choose not to load these embedded contents or leave the respective pages to prevent further processing.
You can withdraw stored consent via your browser settings (clear website data).
11. Storage of Consent (localStorage)
To comply with the legal obligation to demonstrate consent (Art. 7(1) GDPR), we store your consent to load Google Maps, YouTube or the booking form in your browser's local storage (localStorage). Only technical identifiers (e.g. apart4_consent_maps) and a timestamp of consent are stored. No personal data is transmitted to our server.
Purpose: To demonstrate that you have consented to loading the respective content.
Storage duration: 12 months; after that the stored consent expires automatically and you will be asked for consent again.
Withdrawal: You can withdraw the stored consent at any time by clearing the website data or local storage for this site in your browser settings, or by no longer loading the embedded content on the respective pages.
12. Contact
If you have any questions about data protection, you can contact us at any time: urlaub@4jahreszeiten.info