Privacy Policy
Protecting your personal data matters to us. We process your data exclusively in accordance with the applicable law (GDPR and the Austrian Data Protection Act).
Controller
Horst Elbe, Hinterlibitsch 5, 9150 Bleiburg, Austria. Email: office@ferienhaus-huber.at
Hosting and server logs
This website is hosted by Cloudflare. When you access it, technically necessary data (e.g. IP address, date and time, page requested) is processed to ensure the delivery and security of the website (Art. 6(1)(f) GDPR). These server logs are deleted after no more than 14 days.
Inquiry and booking form
When you contact us via the form, we process the data you provide (e.g. name, email address, travel dates, message) in order to handle your request (Art. 6(1)(b) GDPR). Delivery is handled by the service provider Brevo (Brevo/Sendinblue, France); the data is sent to our email inbox. Inquiry data that does not lead to a booking is deleted no later than 6 months after the correspondence ends. Data that becomes part of a contract and is relevant for tax purposes is retained for 7 years in accordance with § 132 of the Austrian Federal Fiscal Code (BAO).
Prize draw and guest feedback
If you take part in our prize draw via the guest feedback form (QR code in the apartment), we process your email address and star rating, optionally your free text, as well as the apartment number transmitted via the QR code and the language. The legal basis for running the draw and notifying the winner is Art. 6(1)(b) GDPR. Participation requires your consent to receive advance offers from Ferienhaus Huber (approx. 1 to 2 times per year by email); the legal basis for this is your consent under Art. 6(1)(a) GDPR. Further details are set out in the terms of participation. Before you are entered, you confirm your email address via a confirmation link (double opt-in). Emails are sent via the service provider Brevo (Brevo/Sendinblue), a provider based in the EU (France); a data processing agreement is in place. You can withdraw your consent at any time with effect for the future: via the unsubscribe link in every email, our unsubscribe form, or at office@ferienhaus-huber.at. Entry data is stored until the draw concludes, and the email address for advertising until you withdraw; after that the data is deleted, unless statutory retention obligations apply.
Spam protection (Cloudflare Turnstile)
To protect the form from automated abuse we use Cloudflare Turnstile. Turnstile works without tracking cookies and processes technical data to distinguish human from automated access (Art. 6(1)(f) GDPR).
Cookies
We use only a single, strictly necessary cookie: “NEXT_LOCALE” stores your chosen language (German or English). It serves solely the function you requested and therefore does not require consent. The cookie has a lifetime of one year. In addition, we store your consent for embedded content (Vimeo, OpenStreetMap) in your browser's local storage (localStorage) – solely for your convenience and without any transmission to us. On the “Book” page, the embedded feratel booking widget additionally stores strictly necessary functional data (e.g. a session ID and your selected currency) in your browser's local storage; this data serves solely to operate the booking process and does not require consent. We do not use any analytics or tracking cookies. A cookie banner is therefore not required.
Anonymous usage and performance statistics
To improve our website, we collect anonymous usage and performance statistics with Cloudflare Analytics Engine. We record only aggregated, non-personal information: pages viewed, approximate time on page, scroll depth, links clicked, coarse device, browser and operating-system category, the country, as well as technical performance measurements (Core Web Vitals) and any errors that occur. No cookies are set, no IP addresses are stored, and no attributes are used to recognise individual visitors. This makes it impossible to attribute the data to a specific person, which is why no consent is required. The legal basis is our legitimate interest in a secure, stable and user-friendly website (Art. 6(1)(f) GDPR). The raw data is stored at Cloudflare for 90 days; beyond that we retain only anonymous, aggregated summaries.
Fonts
The fonts used are served locally from our own server (self-hosting). No connection to Google servers is made when you visit the website.
Embedded content
We only load external content after you click – i.e. with your consent (Art. 6(1)(a) GDPR). Until then you only see a placeholder. Video from Vimeo (Vimeo Inc., USA): loading it transfers your IP address to Vimeo. Map from OpenStreetMap (OpenStreetMap Foundation, UK): loading it transfers your IP address to OpenStreetMap. Your consent is stored locally in your browser and applies to future visits; you can withdraw it at any time via “Withdraw consent” on the respective content. On the “Getting Here” and “Car-free holiday” pages we also embed a timetable and ticket widget by ÖBB (ÖBB-Personenverkehr AG, Austria), which loads automatically when the page opens; this transfers your IP address to ÖBB within the EU. The legal basis is our legitimate interest in providing convenient travel and timetable information (Art. 6(1)(f) GDPR). On the “Book” page we embed a search and booking widget by feratel (feratel media technologies AG, Austria), which loads automatically when the page opens; this transfers your IP address to feratel within the EU. The legal basis is initiating and handling your booking (Art. 6(1)(b) GDPR).
Transfers to third countries (USA)
Some of the services we use are operated by providers in the USA: Cloudflare (hosting and the Turnstile spam protection) and Vimeo (the video on the “Tour” page). This may involve transferring personal data to the USA (Art. 44 et seq. GDPR). Such transfers are safeguarded by the EU-US Data Privacy Framework, where the respective provider is certified, and additionally by the EU Standard Contractual Clauses (SCC) as well as data processing agreements concluded with the providers. The map on the “Getting Here” page is provided by the OpenStreetMap Foundation (United Kingdom); an adequacy decision by the EU Commission exists for the United Kingdom.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. To exercise these rights, contact office@ferienhaus-huber.at. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).
Last updated: May 2026