Privacy Policy
Controller for Data Processing
The controller responsible for the processing of your personal data on our website is:
HOTEL MADLEIN GmbH
Madleinweg 2, 6561 Ischgl
Tirol, Österreich
Telefon: +43 (0) 5444 5226
Telefax: +43 (0) 5444 5226 202
E-Mail: info@madlein.com
For more information, please refer to our Legal notice.
General Information on Data Processing
When you visit our website, personal data is processed only to the extent necessary for the technical operation of the website, for handling your enquiries, for providing the requested content and functions, or for fulfilling legal and contractual obligations.
We explain in the following sections which data is processed in detail, for what purposes this is done, and on which legal basis the processing is carried out.
Hosting & Web Server Logs
Our website is operated by a professional hosting provider. When our website is accessed, certain data is automatically processed and stored by the web server in so-called server log files:
This data is processed exclusively to ensure the stable operation of the website and for error analysis, and is automatically deleted after 30 days. This data is not combined with other data sources.
The legal basis for this processing is Art. 6(1)(f) GDPR based on our legitimate interest in the secure operation of our website.
SSL/TLS Encryption
Our website uses SSL or TLS encryption to ensure the security of data transmission. You can recognise an encrypted connection by the fact that "https://" and a padlock symbol are displayed in your browser's address bar.
Contact
If you contact us by email, telephone or by other means, we process the personal data that you provide to us in the course of your enquiry. This includes, in particular, your name, your contact details and the content of your message.
The processing is carried out for the purpose of handling your enquiry, further communication with you and, where applicable, for the implementation of pre-contractual measures.
The legal basis for the processing is Art. 6(1)(b) GDPR if your enquiry is aimed at the conclusion or performance of a contract, or Art. 6(1)(f) GDPR based on our legitimate interest in the efficient handling of enquiries.
The data will only be stored for as long as this is necessary to process your enquiry or as long as statutory retention obligations apply.
Cookies
We use cookies on our website. These are small text files that are stored in your device's browser. We distinguish between technically necessary cookies and optional cookies.
To manage and document your consent, we use the Cookies Manager of the Bakehouse CMS as a consent management tool (cookie banner). The provider is Cookis GmbH, Franz-Xaver-Rennstraße 4, 6460 Imst, Austria. It records whether and to which types of data processing you have given your consent. The processing is carried out for the purpose of managing, documenting and storing the consents granted on the basis of Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. The storage period depends on the respective session and the technically necessary settings of the cookie banner.
You can adjust your cookie settings and withdraw your consent at any time via the designated button or link. In addition, you can delete cookies in your browser at any time or prevent their storage.
Web Analytics with Matomo
For statistical evaluation of the use of our website, we use Matomo, a web analytics service. Matomo is operated on servers of Cookis GmbH, Franz-Xaver-Renn-Straße 4, 6460 Imst, Austria.
Cookies are used as part of the analysis to enable an analysis of how our website is being used. Information about the use of our website is processed in order to improve our online offering technically and in terms of content. Your IP address is anonymised before being stored.
The processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR via our cookie banner in the "Statistics" category.
No third-country transfer takes place, as the processing is carried out on servers in Austria.
You can withdraw your consent at any time with effect for the future via the settings of our cookie banner.
Further information on data protection at Matomo can be found at: matomo.org/privacy-policy
Recipients
For the technical provision and support of our website, we use Cookis GmbH as an external service provider. This concerns in particular hosting, maintenance, technical support and central functions in connection with the Bakehouse CMS.
A transfer of personal data to this service provider only takes place to the extent that this is necessary for the operation of the website, the handling of enquiries or the fulfilment of legal or contractual obligations.
If additional external services are used on our website, we provide information about this in the respective sections of this privacy policy.
Contact and Enquiry Forms
If you submit an enquiry to us via a contact or enquiry form on our website, we process the personal data you enter for the purpose of handling your enquiry and responding to any follow-up questions.
The specific data collected depends on the respective form. As a rule, this includes in particular your name, your email address, your telephone number, the content of your message and any other information you provide in the form.
Before submitting the form, confirmation of the relevant data protection notice by means of a checkbox is required. Without this confirmation, the enquiry cannot be submitted to us.
The legal basis for the processing is Art. 6(1)(b) GDPR if your enquiry is aimed at the conclusion or performance of a contract, or Art. 6(1)(f) GDPR based on our legitimate interest in the efficient handling and documentation of enquiries.
The personal data transmitted as part of the contact or enquiry form will be stored to the extent necessary for handling your enquiry, for further communication with you and for internal documentation purposes, provided that no statutory retention obligations prevent this.
Google Analytics
In addition to Matomo, we use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies to statistically analyse the use of our website and to further develop our online offering. In particular, information about the use of our website, interactions, devices used, browsers and technical access data may be processed. Google states that in Google Analytics 4, IP addresses of users from the EU are not logged or stored.
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR via our cookie banner in the "Statistics" category. You can withdraw your consent at any time with effect for the future via the settings of our cookie banner. An active consent is generally required for web analytics cookies.
In the context of the use of Google Analytics, personal data may also be transferred to third countries, in particular to the USA. The storage period depends on the configuration selected in the respective Google Analytics account. Further information on data processing by Google can be found at: policies.google.com/privacy
Google Maps
We integrate map material from the Google Maps service on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The integration takes place via an iFrame or a comparable technical embed solution. If you access a page with an embedded map, personal data may be processed by Google, in particular your IP address and technical usage data.
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR via our cookie banner. You can withdraw your consent at any time with effect for the future via the settings of our cookie banner.
The storage period depends on the systems used in each case and the configurations selected there.
In the context of the use of Google Maps, personal data may also be transferred to third countries, in particular to the USA. Further information on data processing by Google can be found at: policies.google.com/privacy
YouTube
We integrate videos from the YouTube service on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The integration takes place via an iFrame or a comparable technical embed solution in order to provide video content directly on our website. If you access a page with an embedded YouTube video, personal data may be processed by Google, in particular your IP address and technical usage data.
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR via our cookie banner. You can withdraw your consent at any time with effect for the future via the settings of our cookie banner.
The storage period depends on the systems used in each case and the configurations selected there.
In the context of the use of YouTube, personal data may also be transferred to third countries, in particular to the USA. Further information on data processing by Google can be found at: policies.google.com/privacy
Vimeo
We integrate videos from the Vimeo service on our website, a service provided by Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA.
The integration takes place via an embedded video player or a comparable technical embed solution in order to provide video content directly on our website. If you access a page with an embedded Vimeo video, personal data may be processed by Vimeo, in particular your IP address and technical usage data.
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR via our cookie banner. You can withdraw your consent at any time with effect for the future via the settings of our cookie banner.
The storage period depends on the systems used in each case and the configurations selected there.
In the context of the use of Vimeo, personal data may also be transferred to third countries, in particular to the USA. Further information on data processing by Vimeo can be found at: vimeo.com/privacy
Social Wall
We integrate a social media wall on our website through which content from social networks such as Instagram, Facebook and LinkedIn is displayed. The providers are Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, for Instagram and Facebook, and LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, for LinkedIn.
The integration is carried out in order to provide you with current content, posts and impressions from our social media channels directly on our website. If you access a page with an embedded social media wall, personal data may already be processed by the respective providers, in particular your IP address and technical usage data.
If you click on a post or link within the social media wall, you will be redirected directly to the respective platform. Any further processing of personal data is then carried out directly by the respective provider.
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR via our cookie banner. You can withdraw your consent at any time with effect for the future via the settings of our cookie banner.
The storage period depends on the systems used in each case and the configurations selected there.
In the context of the use of the social media wall and when being redirected to the respective platform, personal data may also be transferred to third countries, in particular to the USA.
Further information on data processing by the respective providers can be found at:
Communication via WhatsApp
For communication with customers, prospective customers and other third parties, we use WhatsApp, an instant messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If you communicate with us via WhatsApp, the content you transmit and the metadata generated in this context will be processed. This may include, in particular, your phone number, the time of communication and other technical and usage-related information. WhatsApp states that messages are end-to-end encrypted.
The processing is carried out for the purpose of enabling fast and straightforward communication with you. The legal basis for the processing is Art. 6(1)(f) GDPR based on our legitimate interest in efficient communication. Where communication via WhatsApp takes place in connection with the implementation of pre-contractual measures or a contract, the additional legal basis is Art. 6(1)(b) GDPR.
The communication content exchanged between you and us via WhatsApp remains with us until you request its deletion, the purpose for storing the data no longer applies, or statutory retention obligations prevent deletion.
In the context of the use of WhatsApp, personal data may also be transferred to third countries, in particular to the USA.
Further information on data processing by WhatsApp can be found at: whatsapp.com/legal/privacy-policy-eea
Applications via onboard
Our website gives you the opportunity to apply for open positions or submit a speculative application via an external application area. If you click on the relevant link, you will be redirected to the onboard application platform. The provider is onboard GmbH, Dr. J. Köllensperger Straße 10/B, 39011 Lana, South Tyrol, Italy.
If you submit an application there, the personal data you enter and the documents you upload will be processed for the purpose of carrying out the application process. This may include, in particular, your name, your contact details, information about the position applied for, details regarding your qualifications and uploaded application documents.
The processing is carried out for the purpose of handling and conducting the application process. The legal basis for the processing is Art. 6(1)(b) GDPR.
The storage period depends on the systems used in the respective application process, the configurations selected there, and statutory retention and documentation obligations.
Further information on data processing by onboard can be found at: onboard.org/privacy/beschaeftigte-bei-unserer-kundschaft
Reservations via OpenTable
We integrate a reservation widget from OpenTable on our website, which allows you to make table reservations. The provider is OpenTable. The legal representative in the EU is OpenTable GmbH, Warschauer Platz 12, 10245 Berlin, Germany.
If you access a page with an embedded OpenTable widget or make a reservation through it, personal data may be processed by OpenTable. This may include, in particular, your IP address, technical usage data and the data you enter as part of the reservation, such as your name, contact details, reservation time and other reservation-related information. In its privacy policy, OpenTable describes the processing of, among other things, contact details and reservation details.
The processing is carried out for the purpose of providing and handling restaurant reservations. Insofar as the widget is already loaded when the page is accessed, the processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR via our cookie banner. Insofar as you make a specific reservation via OpenTable, the further processing for the purpose of carrying out the reservation is additionally based on Art. 6(1)(b) GDPR. OpenTable also points out that guests agree to OpenTable’s Terms of Use and Privacy Policy as part of the reservation process.
The storage period depends on the systems used in each case and the configurations selected there.
In the context of the use of OpenTable, personal data may also be transferred to third countries. Further information on data processing by OpenTable can be found at: opentable.de/c/legal/privacy-policy
Online Ski Rental via WINTERSTEIGER Easyrent
Our website gives you the opportunity to reserve rental equipment via an external booking area. If you click on the relevant link, you will be redirected to the WINTERSTEIGER Easyrent booking platform. The provider is WINTERSTEIGER Sports GmbH, Wintersteigerstraße 1, A-4910 Ried im Innkreis, Austria. Easyrent is offered by WINTERSTEIGER as a software solution for rentals, reservations and the handling of rental transactions.
If you make a reservation or booking there, the personal data you enter will be processed for the purpose of handling and carrying out your reservation. This may include, in particular, the booking period, first name, last name, date of birth, height, weight, shoe size, skill level and, in order to finalise the booking, street, postcode, city, country, mobile phone number and email address.
Before completing the booking, confirmation of the relevant data protection notice by means of a checkbox is required. Without this confirmation, the booking cannot be completed or processed.
The processing is carried out for the purpose of handling and carrying out your reservation. The legal basis for the processing is Art. 6(1)(b) GDPR.
The data processed as part of the booking or reservation process is stored in accordance with statutory retention obligations and then deleted unless there is another legal basis for storage.
The reserved rental items are not shipped after the booking has been completed, but must be collected on site at the respective business location.
Further information on data processing by WINTERSTEIGER can be found in the provider’s privacy information.
Bookings via OnePageBooking
Our website gives you the opportunity to reserve or book rooms and suites via an external booking area. If you click on the relevant link, you will be redirected to the OnePageBooking booking platform. The provider is HotelNetSolutions GmbH, Genthiner Straße 8, 10785 Berlin, Germany.
If you make a booking or reservation there, the personal data you enter will be processed for the purpose of handling and carrying out your booking. This may include, in particular, your name, your contact details, stay-related data, booking details and, where applicable, further information required to process the booking.
The processing is carried out for the purpose of handling and carrying out your booking or reservation. The legal basis for the processing is Art. 6(1)(b) GDPR.
The data processed as part of the booking or reservation process is stored in accordance with statutory retention obligations and then deleted unless there is another legal basis for storage.
Further information on data processing by OnePageBooking and/or HotelNetSolutions can be found in the provider’s privacy information at: hotelnetsolutions.de/datenschutz
Locally Embedded Fonts
We use locally embedded fonts on our website, including fonts from Google Fonts.
The font files are loaded from our own web server. No connection to Google servers is established for the purpose of providing the fonts in this context. No personal data is transferred to third countries in this connection.
Adobe Fonts
We use Adobe Fonts on our website, a service provided by Adobe Inc., 345 Park Avenue, San Jose, CA 95110-2704, USA.
The integration is carried out in order to display fonts consistently and attractively on our website. When you access our website, the integration of Adobe Fonts may result in the processing of personal data, in particular technical usage data, the hostname of the accessed page and your IP address. Adobe states that the IP address is processed for the delivery of the fonts but is not stored.
Adobe also states that no cookies are set or used for the provision of Adobe Fonts for websites. The processing is carried out for the provision of the service as well as for error diagnostics, billing and compliance with contractual or licence-related requirements.
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR via our cookie banner. You can withdraw your consent at any time with effect for the future via the settings of our cookie banner.
The storage period depends on the systems used in each case and the configurations selected there.
In the context of the use of Adobe Fonts, personal data may also be transferred to third countries, in particular to the USA. Further information on data processing by Adobe can be found at: adobe.com/privacy/policies/adobe-fonts.html
Storage Period
As a general rule, we store personal data only for as long as this is necessary to fulfil the respective purposes or as long as statutory retention obligations apply.
If no separate storage period is specified in the individual sections of this Privacy Policy, personal data will be deleted as soon as the purpose of the processing no longer applies and there is no legal basis for further storage.
Where statutory retention periods, contractual obligations or legitimate interests – for example for the assertion, exercise or defence of legal claims – prevent deletion, the data will only be deleted after these periods have expired.
Your Rights
Under the applicable legal provisions, you have the following rights:
If you wish to exercise any of these rights, you may contact us at any time using the contact details provided in this Privacy Policy.
Right to Lodge a Complaint
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Austria, this is:
Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna, Austria
dsb.gv.at
Version of this Privacy Policy
Version: April 2026
We reserve the right to amend this Privacy Policy where necessary, in particular in the event of technical changes to our website or changes in legal requirements.