Privacy notice
This website is deliberately quiet with data. We run nothing for analytics or advertising until you agree to it, and fonts are served from our own server rather than from Google. Some things happen regardless: our host keeps standard server logs, and the booking form, which Previo runs for us, sets its own cookies and runs Previo's own measurement, described below. What follows describes every place data leaves your browser, and how to change your mind.
Who is responsible
BKS Hotels GmbH, Kötschachtal 15, 5640 Bad Gastein, Österreich. Telephone +43 664 5407 737, e-mail info@stubnerhof.at. Full operator details are in the legal notice.
When you visit the site
Our host, ORSYS s.r.o. (Czech Republic), records standard server log data (IP address, time, requested file, browser and referring page) for delivery and security. The servers stand in Prague, so none of this leaves the European Union. This is our legitimate interest in operating a working, secure website (Art. 6(1)(f) GDPR). ORSYS acts as our processor.
Cookie choices
The banner at the bottom of the page offers three categories. Necessary is always on: it stores your choice in your browser. The booking form is Previo's and sets its own cookies, described below; our banner cannot switch them off. Analytics and Marketing are off until you switch them on, with Accept all or under Settings. If you choose Reject all, our site requests nothing from Google or Meta, ever (the booking form, run by Previo, is the exception described below). Only when you allow at least one of the two do we load Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which then starts only the services you allowed.
Analytics, only with your consent
With Analytics we use Google Analytics (Google Ireland Limited). We learn which pages are viewed, in which language, how visitors arrived (from a search engine, another website or one of our advertisements) and whether they clicked a booking button, a telephone number or an e-mail address. From the booking form we receive the steps of a reservation with the dates, room type and price, and once it is completed, the reservation number. We never receive your name, e-mail address, telephone number or anything else you type into the form; the numbers and addresses you click are recorded only by a label such as “reception” or “booking”.
Google Analytics stores cookies in your browser (_ga, _ga_…) for up to two years so that a returning browser is recognised; it does not store your IP address. We keep the collected data for 14 months.
Advertising, only with your consent
With Marketing we use Google Ads (Google Ireland Limited) and the Meta pixel (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, for Facebook and Instagram). They tell us whether one of our advertisements led to a visit or a booking, and let us show our advertisements to people who have visited this website. For that, Google and Meta receive the address of the page, the booking steps and the reservation value described above, your IP address and details of your browser. Cookies are set in your browser for up to 90 days (_gcl_… from Google, _fbp and _fbc from Meta), and Google sets its own cookie IDE on doubleclick.net for up to 13 months. Third-party vendors, including Google and Meta, use these cookies to show our advertisements on other websites and apps based on your earlier visits to this website. If you are logged in to Facebook or Instagram, Meta can connect the visit to your account. Apart from switching off Marketing here, you can turn off personalised advertising in Google's ad settings, in your Facebook or Instagram ad preferences, or at youronlinechoices.eu.
Google uses the data for Google Ads as an independent controller. For collecting the data on our site and passing it to Meta, we and Meta Platforms Ireland Limited are joint controllers (Art. 26 GDPR). Under our agreement with Meta (its controller addendum) we tell you about this processing, and Meta answers requests for access, correction, erasure and the other rights in Art. 15–20 GDPR for the data it stores; if you send such a request to us, we pass it to Meta within seven days. What Meta does with the data afterwards is Meta's own responsibility, described in its privacy policy.
Legal basis, transfers and withdrawal
Analytics and advertising rest on your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). Google and Meta may process data in the United States; Google LLC and Meta Platforms, Inc. are listed under the EU–US Data Privacy Framework. You can change or withdraw your choice at any time with Cookie settings at the bottom of every page; from that moment nothing more is measured, and the cookies this website can reach for the categories you switched off are deleted from your browser.
When you check availability or book
The booking form is not ours. It is an embedded frame operated by Previo s.r.o. (Czech Republic), our reservation system. When you use it, the dates, room choice and the contact details you type go to Previo and to us as the hotel, so that we can hold and honour your reservation. That is the performance of a contract at your request (Art. 6(1)(b) GDPR). Previo processes this on our behalf under Art. 28 GDPR.
Loading a page that contains the booking form also transmits your IP address to Previo, because the frame has to be fetched from their servers.
Inside the frame Previo also runs its own measurement: Google Tag Manager and Google Analytics for Previo's own statistics. It sets cookies on booking.previo.app (_ga, _ga_…) and sends Google your IP address, details of your browser and the steps you take in the form. This starts as soon as the frame loads and does not follow your choice in our banner, because our page cannot reach into Previo's frame. Previo decides on it and uses the data for its own statistics.
The map
The maps on the home and contact pages are embedded from OpenStreetMap, run by the OpenStreetMap Foundation in the United Kingdom. Loading it sends your IP address to them. OpenStreetMap sets no cookies here and does no advertising or profiling; we embed it because a guest needs to find the house (Art. 6(1)(f) GDPR). See the OSMF privacy policy.
Video
Where a news article contains a video, nothing is requested from YouTube until you click play. Until then the page shows only our own button. If you do click, the video is loaded from youtube-nocookie.com and Google receives your IP address and device data. This is then based on your consent, which you give by clicking (Art. 6(1)(a) GDPR).
Writing to us
If you e-mail or telephone us, we keep what you send for as long as it takes to answer you and to meet our commercial and tax record-keeping duties. This site has no contact form.
Your rights
You may ask us for access to your data, and for correction, erasure, restriction, portability, or you may object to processing based on legitimate interests (Art. 15–21 GDPR). Consent you have given can be withdrawn at any time, with effect for the future (Art. 7(3) GDPR). Write to info@stubnerhof.at. You also have the right to complain to the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at).
Last updated: 2026-10-06