Data Protection Declaration

Responsible authority in terms of data protection laws:

Lachtal Lodge
Susanne und Michael Bubla
Schönberg-Lachtal 435
A 8831Schönberg-Lachtal

Tel. +43 664 15 23 378

Data Protection Officer as per GDPR: Susanne and Michael Bubla,

Data collection when visiting our website

When you visit our website, we collect the data automatically transmitted by your browser (logfiles) to our web server, including the IP address, the URLs of the websites from which you came to our websites, the browser used, the browser language, the operating system used and the interface, the device used to access the services, the date and time of access, the pages accessed and the time you spend on our websites. The legal basis for the processing of this data is our legitimate interest in accordance with Art. 6 (1f) GDPR, which follows from the purposes listed below. We use this information to: facilitate access to the website; continuously improve the website and services and further adapt them to the needs of our users; perform internal quality controls; detect, correct and prevent errors, malfunctions and possible misuse. The data is stored for a period of one year and then automatically deleted.


Like almost all service providers, we use cookies, web beacons or similar processes when you visit our websites or use our services.

Cookies are small text files that are stored by your browser on your computer or mobile device. They enable the recognition of your computer or device, if necessary, across different websites. The cookies do not contain any personal information. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our affiliates to recognize your browser on your next visit (persistent cookies).

You can prevent the use of cookies by setting your browser software accordingly. However, it is possible that certain areas of the sites or offers may not work as intended.

Web beacons are small graphics files (“pixels”), integrated into our website. They can be used to record user behaviour. Similar procedures include Flash cookies, HTML5 cookies or other local (browser or device) storage methods in which ‒ similar to cookies ‒ data can be stored in your browser or on your device in order to recognize your browser or device on the next visit.

The use of cookies and similar methods enables us to collect information about users in order to make the use of the websites easier, more comfortable and to enable certain offers.

We use cookies for web analytics, retargeting and conversion tracking services (see below).

Contact form

If you contact us through the available contact options, some of your personal data (e.g. name, address, contact and communication data like telephone number and email address) will be collected, so that we can process and respond to your request as well as follow up on any other questions you might have. Data processing takes place in accordance with Art. 6 (1b) GDPR. We only store personal data that we process as part of a general contact request by email or contact form as long as necessary for the respective correspondence ‒ usually a period of [one year] after answering your request.

Direct booking option and booking requests on the hotel website

Personal data that we collect related to a room reservation will only be stored for as long as is necessary for the execution of the contract and any subsequent contract-related correspondence (usually one year) or in the case of commercial and/or tax-relevant documents containing personal data, as long as the statutory periods of the Commercial Code and the Tax Code provide for the retention of these documents (usually 6 to 10 years). Legal basis for the processing of personal data in connection with a room reservation: The processing of personal data is necessary to fulfil the relevant contract in connection with a room reservation (Art. 6 (1b) GDPR). In addition, we process booking data in accordance with Art. 6 (1f) GDPR on the basis of our legitimate interests for fraud prevention, the enforcement of our legal claims, accounting purposes and risk management, as well as pursuant to Art. 6 (1c) GDPR for the fulfilment of legal obligations, e.g. to comply with commercial and tax law retention obligations or to fulfil obligations to publish data on the basis of a final court order or official order.

Use of Google analytics

This website uses Google Analytics, a web analytics service provided by Google LLC (in the following: Google). The legal basis is our legitimate interest in the analysis and evaluation of the use of our website as per Art. 6 (1f) GDPR.

Google Analytics uses so-called “cookies”; these are text files that are stored on your computer and that enable the analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, since IP anonymisation is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies via your browser settings; however, please note that if you do this, you may not be able to use this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing this browser plug-in: The current link is

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link: Deactivate google analytics

An opt-out cookie will be installed on your device. This will prevent data collection by Google Analytics on this website and for this browser in the future, as long as the cookie remains installed in your browser.

Google automatically deletes personal information associated with cookies, user ID or promotional ID (e.g. DoubleClick cookies, Android Advertising ID, Apple’s promotional ID) after 14 months.

Google also processes your personal information in the US and is subject to the EU-US Privacy Shield,

Use of Google webfonts

For the purpose of the needs-based design and optimization of our pages, we use external, embedded fonts from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA (“Google”) based on Art. 6 (1f) GDPR. In doing so, your Internet browser automatically establishes a connection to Google’s servers to transfer the information listed under section Data collection. If you have an account with Google and you are logged in to Google, your data may be associated with your account by Google. We have no control over this data transfer and the further processing of data by Google.

For more information on the purpose and scope of Google’s data collection and processing, your rights, and privacy preferences, please visit Google also processes your personal data in the US and is subject to the EU-US Privacy Shield,

Use of Google maps

For the purpose of the needs-based design of our website, we use the “Google Maps” component provided by Google in accordance with Art. 6 (1f) GDPR.

Each time Google Maps is accessed, Google sets a cookie to process user settings and data when viewing the page that has the Google Maps component integrated. This cookie is usually not deleted by closing the browser, but will expire after a certain amount of time unless it is manually deleted by you.

When you visit the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the information listed in Data collection is transferred to Google by your browser. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you are logged in to Google, your data will be assigned directly to your account. If you do not wish the information to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or needs-based website design. Such an evaluation takes place in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about your activities on our website. You have a right to object to the formation of these user profiles; you must forward this objection directly to Google.

For more information on the purpose and scope of Google’s data collection and processing, your rights, and privacy preferences, please visit Google also processes your personal data in the US and is subject to the EU-US Privacy Shield,

Social plug-ins

We use sharing features on our website with the following social media providers:

Facebook: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA,

For more information about data collection: and

Facebook is subject to the EU-US Privacy Shield,

Google+: Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA,

Google is subject to the EU-US Privacy Shield,

Instagram: Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA,

Instagram is subject to the EU-US Privacy Shield,

Through the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our site and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 (1f) GDPR.

We use the so-called two-click solution. When you visit our site, no personal information is passed on to the provider of the plug-ins initially. The provider of the plug-in can be identified by its initial letter or logo on the button. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only after you click on the marked field and activate it does the plug-in provider receive the information that you have accessed the corresponding website of our online service. In addition, the log data mentioned above is transferred. This includes, for example:

–  the address of the website where the activated link is located,
–  the date and time of the visit to the website and the activation of the link,
– information about the browser and the operating system used,
– the IP address

By activating the plug-in, personal data will be transmitted by you to the respective plug-in provider and stored there (with American providers in the USA).

If you are registered with and logged in to the respective social media provider at this time, the provider can assign the visit to our website and your interaction with the social media element (e.g. clicking the “Like” button) to your user profile (e.g. to your Facebook account).

We have no control over the data collected or the processing of that data, nor are we aware of the full extent of the data collection, the purpose of the processing or the retention periods. We also have no information on the deletion of the data collected by the social media provider. For more information on the purpose and scope of the data collection and its processing by the social media provider, please refer to the privacy policies of that provider (see links above). You will also find further information about your rights and settings options for the protection of your privacy.

The servers of social media services are located in the US and other countries outside the European Union. The data can therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to a data protection law which generally does not protect personal data to the same extent as is the case in the Member States of the European Union.

External links

On our website you will find links to external third-party websites, over whose content we have no influence. The respective operator of the pages is responsible for the content of the linked pages. At the time of linking, no illegal content was recognizable, but permanent monitoring of the content of the linked pages is not possible.

Your rights

In addition to the right of revocation of your consent granted to us, you have the right of access to information according to Art. 15 GDPR, the right to rectification according to Art. 16 GDPR, the right to erasure according to Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR, the right to object according to Art. 21 GDPR and the right to data portability according to Art. 20 GDPR. You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1f) GDPR (Art. 21 (1) GDPR). Where we process your personal data based on Art. 6 (1f) GDPR for direct marketing purposes, you have the right to object at any time to such processing without giving a reason (Art. 21 (2) GDPR).In addition, you have the right to lodge a complaint with a supervisory authority according to Art. 77 GDPR.


Questions about data privacy
If you have questions about privacy, please contact us by email: