Privacy
Privacy policy
This policy explains which data we process when you visit the Köckenhof holiday house website or send us an enquiry. It is based on the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
At a glance
- This website sets no cookies and uses no tracking or analytics tools.
- Fonts, images and videos are served from our own server. Third-party content is not loaded automatically.
- When you use the enquiry form, a small program at our hosting provider Cloudflare receives your details and immediately emails them to our mailbox at Hetzner in Germany.
- You can also email or call us directly. In that case, nothing goes through the form.
Who is responsible?
Theresia Moser
Köckenhof holiday house (brand: “Hechenegg · Tyrolean farmhouse”)
Scheffachberg 2, 6235 Reith im Alpbachtal, Tyrol, Austria
Phone: +43 650 6520555
Email: [email protected]
Please contact us at this email address with any questions about privacy.
Visiting the website and hosting
The website is hosted by Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you access a page, the server processes technically necessary data: your IP address, date and time, the page requested, browser type and the address of the page you came from. This data is recorded in server log files so the site can be delivered and protected against misuse. We do not analyse these logs ourselves.
The legal basis is our legitimate interest in a secure and stable website (Article 6(1)(f) GDPR). We cannot display the site without this processing.
Cloudflare acts as our processor and delivers the site through servers in many countries, including the USA. Cloudflare is certified under the EU-US Data Privacy Framework, so transfers to the USA are covered by an adequacy decision of the European Commission. Cloudflare determines how long it retains log data. For more information, see the Cloudflare privacy policy.
Cookies, tracking and third-party content
We set no cookies and store nothing in your browser to recognise you on a later visit. We therefore do not need a cookie banner. There are no analytics tools, advertising pixels, social media plugins or automatically embedded maps or video platforms.
Fonts and videos are loaded from our own server. No connection is made to Google Fonts, YouTube or similar services.
External links
This site contains links to Google Maps (directions), Airbnb, Booking.com and alpbachtal.at. Data such as your IP address is only transferred to the relevant provider when you click one of these links. That provider’s privacy policy then applies. If you book through Airbnb or Booking.com, the platform’s rules apply to that booking.
On “Location & Contact”, you can also load a Google Maps map. A connection to Google is made only when you click “Load map”, transmitting data including your IP address. “Close map” removes the embedded map. The map is not loaded automatically when you visit the page again.
Enquiries through the form
Which data: The form asks for your name, email address and message. Your phone number, arrival and departure dates, number of guests, number of dogs and how you heard about Köckenhof are optional. Please do not include sensitive data (such as health information) in your message unless it is necessary for your enquiry.
Purpose: We use your details to answer your enquiry, check availability and prepare a booking. The legal basis is taking steps towards and performing a contract (Article 6(1)(b) GDPR). For general questions without an intention to book, our legitimate interest is to answer questions from prospective guests (Article 6(1)(f) GDPR). By ticking the box in the form, you also confirm your consent (Article 6(1)(a) GDPR). You may withdraw it at any time with effect for the future by sending us an email.
Service providers: The form sends your details to a small program running at our hosting provider Cloudflare (see above). It checks your details and immediately emails them to [email protected]. It does not store them. Our email mailbox is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Data processing agreements under Article 28 GDPR are in place with Cloudflare and Hetzner.
Transfers to third countries: Hetzner processes our emails in Germany. The information above applies to Cloudflare: certification under the EU-US Data Privacy Framework.
Retention: Your enquiry is then held only in our email mailbox. We delete enquiries that do not lead to a booking six months after the last message. If a booking is made, we retain the documents for as long as tax law requires, generally seven years in Austria.
Without the form: You do not have to use the form. Email us at [email protected] or call us on +43 650 6520555. If you contact us through WhatsApp, WhatsApp’s privacy policy also applies. We use your details for the same purposes and retain them for the same periods described above.
Without the required details (name, email address and message), we cannot reply to you. We do not carry out automated decision-making or profiling.
No online shop or payment
You cannot buy or pay for anything on this website. Bookings are arranged through an enquiry. We therefore do not process payment data here.
Who receives your data?
The only recipients are the service providers named above: Cloudflare for delivering the website and receiving form submissions, and Hetzner for our email mailbox. We do not disclose your data to other parties or sell it unless we are legally required to disclose it, for example to public authorities.
Your rights
Under the GDPR, you have the right to:
- access your stored data (Article 15)
- rectify inaccurate data (Article 16)
- erasure (Article 17)
- restriction of processing (Article 18)
- receive your data in a commonly used format (Article 20)
- object to processing based on our legitimate interest (Article 21)
- withdraw consent with effect for the future (Article 7(3))
To exercise these rights, email us at [email protected].
If you believe we are processing your data unlawfully, you may lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at, email: [email protected].
Changes
We update this policy when the website changes. The current version is always available here.
Last updated: November 2026