Last updated: September 2026
The controller responsible for processing personal data on this website is:
Hotel Garni Hochgruber ***
Seilbahnstraße 5
I-39031 Brunico/Riscone, Italy
Telephone: +39 0474 548 013
Email: info@hochgruber.com
VAT no.: IT02382890214
When you visit this website, the web server processes connection data required for technical operation. This may include the IP address, date and time of access, requested page, volume of data transferred, referrer URL, browser type, operating system and access status. This processing is necessary to deliver the website, ensure its stability and security and investigate technical errors.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. The hosting provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Server logs are generally deleted after no more than 30 days, unless a security investigation or legal obligation requires longer retention.
The website uses technically necessary cookies or similar storage technologies. They store the selected language and your choice in the cookie banner. These include wp-wpml_current_language and cookies named cookielawinfo-*, CookieLawInfoConsent, cli_user_preference and viewed_cookie_policy. The language cookie lasts for the session; consent preferences may be stored for up to twelve months.
The legal basis for technically necessary cookies is Article 6(1)(f) GDPR together with the applicable rules governing access to terminal equipment. Optional cookies or tracking services are activated only after prior consent. You can change your choice at any time using “Cookie settings” in the footer.
After you give consent, we use Google Analytics 4, integrated through Google Site Kit, to evaluate use of the website. Information about the device and browser used, pages viewed, source of the visit, time of use and a shortened or otherwise processed IP address may be transmitted to Google. Google Analytics sets the cookies _ga and _ga_VYHS3928WN, which may be stored for up to two years. The legal basis is your consent under Article 6(1)(a) GDPR.
After you consent to the “Advertisement” category, we also use Google Ads conversion tracking, integrated through Google Site Kit. This allows us to determine whether a click on a Google ad leads to an enquiry or another defined action on our website. The visited page, time, device and browser information, IP address, and advertising and click identifiers may be transmitted to Google. Cookies with the prefix _gcl_ may store click information for up to 90 days. The legal basis is your consent under Article 6(1)(a) GDPR.
The provider in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC in the United States cannot be ruled out. Google relies on safeguards including the EU-US Data Privacy Framework and Standard Contractual Clauses for such transfers. Further information is available in Google’s Privacy Policy.
If you use the enquiry form, we process the data you provide, in particular your name, email address, requested travel dates, number and, where provided, age of accompanying children and your message. Required information is needed to process your enquiry. The data is used to answer your enquiry, check availability and, where applicable, prepare your stay.
The legal basis is Article 6(1)(b) GDPR for steps prior to entering into a contract or for performance of a contract. Voluntary additional information is processed for the same purpose. The website’s technical email log is automatically deleted after no more than 30 days. Messages in the business mailbox are deleted when they are no longer required to handle the enquiry; if a booking is made, statutory retention periods also apply.
Enquiries are forwarded to our business mailbox. We use Microsoft 365 for this purpose. The provider in the European Economic Area is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft may use affiliated companies and subprocessors. Where data is processed outside the European Economic Area, the transfer is based on an adequacy decision or appropriate safeguards under Article 46 GDPR.
We use Wordfence to protect the website against malware, unauthorised access and automated attacks. IP addresses and technical access data may be processed for this purpose. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the security of the website and the data processed on it. The provider is Defiant, Inc., 1700 Westlake Ave N, Suite 200, Seattle, WA 98109, USA. The provider makes Standard Contractual Clauses available for required international transfers.
The website contains links to external services, such as Facebook and tourism information portals. Data is transferred to the relevant provider only when you follow such a link. The respective provider is responsible for processing data on the external website.
Personal data is made available only to parties that require it for the purposes described above. These may include the hosting provider, email provider, technical service providers and internal staff required to handle a booking. We do not disclose personal data for advertising purposes.
Subject to the legal requirements, you have the right of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future. To exercise your rights, contact info@hochgruber.com.
You also have the right to lodge a complaint with a data protection authority. The competent authority in Italy is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy, www.garanteprivacy.it.
This website uses TLS encryption. We update this privacy policy when the services used or the legal requirements change.
Anfahrt
Impressionen