Privacy Policy

Last updated: 19 June 2026

1. Controller

The controller under the GDPR is Alpenstuben GmbH & Co. KG, Alpseestr. 8, 87645 Hohenschwangau / Schwangau, Germany, phone +49 (0) 8362 / 98240, email Contact form.

2. General information

We process personal data only where this is necessary to operate the website, answer inquiries, handle bookings and shop orders, communicate with you, comply with legal obligations or where you have given consent. The legal bases include Art. 6(1)(a), (b), (c) and (f) GDPR.

3. Website access and server logs

When you visit the website, technical data such as IP address, date and time, requested URL, referrer, browser, operating system and status codes are processed. This is necessary for secure delivery, troubleshooting and protection against attacks. The legal basis is Art. 6(1)(f) GDPR.

4. Cookies and consent

We use technically necessary cookies and storage for sessions, cart, language, CSRF protection, consent preferences and form security. Optional analytics, marketing, chat, external media and online booking services are loaded only after your consent. Your choice is stored in the cookie_consent cookie. You can change it at any time: open cookie settings.

5. Contact and inquiry forms

If you contact us by form, email or phone, we process the details you provide, such as name, email address, phone number, travel dates, number of guests, topic and message. Processing is based on Art. 6(1)(b) GDPR where pre-contractual or contractual communication is concerned, otherwise on Art. 6(1)(f) GDPR.

6. vioma BOOKING - online bookings and booking requests

Our website uses vioma BOOKING technology provided by vioma GmbH, Industriestraße 27, 77656 Offenburg, Germany ("vioma"). We have concluded a data processing agreement with vioma.

The vioma booking technology is loaded only after you have consented to the "Online booking" cookie category or actively unblocked the booking service. Only then is a connection to vioma established; vioma may set its own cookies or process data to provide and document the booking service.

If you make an online booking or booking request through our website, we need your email address, travel dates, booked product, salutation, first and last name to process it. In individual cases, your phone number may also be requested so that we can contact you quickly if unforeseeable circumstances affect your booking.

To calculate the valid travel price, the stay dates, selected product, number of travellers and whether they are adults or children are required. If you travel with children, the children's ages are also requested. We also ask for the desired payment method. If advance payment applies, you may be forwarded to a payment service provider for secure payment processing. Further form details are voluntary.

Processing for online bookings and booking requests is based on Art. 6(1)(b) GDPR and serves contract performance or pre-contractual measures. Data is stored until the purpose no longer applies, subject to mandatory statutory retention periods.

7. Account, shop, payments and shipping

For customer accounts and shop orders we process master data, login data, billing and shipping addresses, order and payment data, cart and voucher data, communication data, return and withdrawal data and technical security data. The processing serves contract performance, account provision, payment and shipping, invoicing, legal obligations and handling warranty, return and withdrawal cases. Legal bases are Art. 6(1)(b), (c) and (f) GDPR.

If payment methods such as PayPal, Stripe or Amazon Pay are enabled and selected, the data required for payment is transmitted to the respective provider. For shipping and shipment tracking, address and shipping data may be transmitted to parcel service providers such as DHL.

8. Newsletter and promotional emails

We send newsletters only with consent or where legally permitted. Registration is usually confirmed by double opt-in. We store email address, time, IP address and confirmation status to document consent. You may unsubscribe at any time via the link in the email or by contacting us. The legal basis is Art. 6(1)(a) GDPR.

9. ALTCHA spam protection

We use ALTCHA to protect forms against spam and misuse. Verification is performed through a technical challenge and our own challenge endpoint. Technical data required to verify the request and prevent misuse is processed on the basis of Art. 6(1)(f) GDPR.

10. Maps, videos and external content

The website may display maps using OpenStreetMap data and CARTO map services. When maps or embedded content such as YouTube, Vimeo, Google Maps or Moving Pictures are loaded, technical data such as IP address and browser information may be transmitted to the provider. Depending on the integration, the legal basis is your consent or our legitimate interest in user-friendly presentation.

11. Analytics and marketing

If you consent and the services are configured, we may use Clicky, Google Analytics, Google Ads, Meta Pixel and Meta Conversions API. Usage and event data may include page views, product views, cart, checkout, purchase, registration, newsletter and contact events. These services are not loaded without consent.

12. Recipients, retention and rights

Recipients may include hosting and IT providers, vioma, payment providers, shipping providers, email providers, tax advisors, authorities, legal advisors and technical service providers. We retain data only as long as necessary. Contract, order, invoice and accounting data is usually retained for six to ten years under statutory rules.

You have rights of access, rectification, erasure, restriction, portability and objection under the GDPR. You may withdraw consent at any time with future effect. You may also complain to a supervisory authority, in particular the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.

13. Chatbot by mp moving-pictures gmbh

After your consent, our website may load a chat widget provided by mp moving-pictures gmbh, Am Flughafen 12A, 87766 Memmingerberg, Germany. The widget is integrated via https://chat.moving-pictures.de/widgets/chat-widget.js and uses the endpoint https://chat.moving-pictures.de/alpenstuben_hohenschwangau. Without consent to the "Chat" cookie category, the widget is not loaded.

If you use the chat, your chat messages, chatbot replies, timestamps, a technical session ID and technical connection data such as IP address and browser information may be processed. The widget may use local storage or session storage, for example to recognize the current chat session and display the chat window. Processing is carried out to provide the chatbot and answer your questions. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with future effect via the cookie settings.