Note on language – Only the German version is legally binding. This translation is provided for your convenience only. Go to the German version
Controller
The party responsible for data processing on this website is the operator named in the legal notice (Pfenninger Alm GmbH). Contact: office@pfenninger-alm.at, tel. +43 660 4461554.
Hosting and server log files
When the website is accessed, the hosting provider processes technically necessary data (IP address, date/time, page requested, browser/operating system) in server log files in order to deliver and secure the website (Art. 6(1)(f) GDPR). [Enter hosting provider, server location and log retention period here.]
No cookies, no tracking
This website does not set any cookies and does not use any analytics, advertising or tracking services. All fonts and images are delivered by the website itself (no external fonts, no CDNs). If you use the light/dark switch, your browser stores your choice locally (local storage, entry “pa-theme”); this information does not leave your device. The language is determined solely by the address (/en/, /it/) and is not stored.
Map (OpenStreetMap)
The map is only loaded when you click “Show map”. Your browser then connects to openstreetmap.org (OpenStreetMap Foundation); among other things, your IP address is transmitted. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR). Without a click, no transmission takes place. The “Route in Google Maps” link only opens Google Maps in a new tab after you click it.
Contact by telephone or email
If you call or write to us, we process the data you provide in order to handle your enquiry (Art. 6(1)(b) or (f) GDPR).
Online reservation, party enquiry and voucher order
When you submit a form, we process the data you enter (name, telephone number, email address, date/time, number of guests, notes; for vouchers additionally amount, recipient name, dedication) in order to carry out your reservation or order (Art. 6(1)(b) GDPR). The data is stored in the website database and sent to the business by email. To protect against misuse, a honeypot field and a limited number of requests per hour per connection are used; for this, an anonymised hash of your IP address is cached for one hour at most. [Define retention period, e.g. delete reservation data after X months; booking and payment records are subject to statutory retention periods.]
Payment service provider (only if activated)
If online payment is activated for deposits or vouchers, you will be redirected to Stripe Checkout (Stripe Payments Europe, Ltd., Ireland). You enter your payment details directly with Stripe; we only receive the information whether the payment was successful. Stripe’s privacy policy applies. If online payment is not activated, payment is made by bank transfer or on site. [Keep what applies, check Stripe contract/data processing agreement.]
Social media, sharing, newsletter/channel, Google profile
The website only contains simple links to Instagram, Facebook and, where applicable, a WhatsApp channel or newsletter as well as to the Google business profile – no embedded plugins. Data is only transmitted to the respective provider once you click a link. The “Share” buttons for specials are likewise simple links or functions of your browser. The social media image is created exclusively in your browser.
Posts from Instagram and Facebook (“Events” page)
On the “Events” page we show – if activated – the latest posts from our own Instagram account and, where applicable, from our Facebook page. Our server retrieves these posts (image, text, date and link) at regular intervals via the interface of Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland) and stores the images as a copy on our web server. When you open the page, your browser therefore does not connect to Instagram, Facebook or Meta, and no data about you is transmitted to Meta. Only when you click on a post or “View on Instagram” does the provider’s page open; its privacy policy then applies (Instagram, Facebook). The legal basis for displaying the posts is our legitimate interest in presenting our offer in an up-to-date way (Art. 6(1)(f) GDPR).
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent given at any time. You can also lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).
As of: October 2026 (draft).