Privacy policy
This notice explains how personal data is processed when you use our website, make an enquiry or booking, or subscribe to our newsletter.
1. Controller and contact
Sporthotel Kitz GmbH
Raiffeisenstraße 8, 5671 Bruck an der Großglocknerstraße, Austria
Phone: +43 6545 60444
Email:
Please use these contact details for privacy enquiries and to exercise your rights.
2. Website operation and hosting
When you visit this website, technical connection data is processed, including your IP address, access time, requested page or file, HTTP status, transferred data volume, browser and operating system information and, where transmitted, the referring page. This enables delivery of the website, troubleshooting and protection against abuse. Our legal basis is our legitimate interest in secure and reliable operation under Article 6(1)(f) GDPR.
Technical support and hosting are provided through fullmarketing.at GmbH, Grubhof 57, 5092 Lofer, Austria. Technical service providers have access where necessary for operation, maintenance and security. Logs are retained only as needed for those purposes; a specific security incident may require longer retention for investigation or legal claims.
3. Contact and holiday enquiries
When you contact us by form, email or phone, we process the details you provide, such as your name, email address, telephone number, travel dates, number of guests and message. Processing to prepare or perform a booking is based on Article 6(1)(b) GDPR. For other enquiries, our legitimate interest in responding is the basis under Article 6(1)(f) GDPR.
Enquiry functions use TourismusNETZ by fullmarketing.at. Required fields are necessary to handle your request. Optional details help us provide individual advice. Please do not provide sensitive information that is unnecessary for your enquiry.
4. Online bookings via Smartpms / Bookpage
Our booking links take you to sporthotelkitz.bookpage.io, the Smartness booking engine. A connection to this external service is made when you open it. Travel, contact and, where applicable, payment information is processed to manage your reservation under Article 6(1)(b) GDPR. Statutory retention and reporting obligations are based on Article 6(1)(c) GDPR.
Please also read the privacy information and booking terms within the booking engine. Payment providers process payment details according to the payment method selected there. Newsletter consent is not a requirement for booking.
5. Newsletter via Smartconnect
If you subscribe, we process your email address, any first and last name provided, and your chosen language. We use Smartconnect by Smartness to manage subscriptions and send Sporthotel Kitz news and offers. Your subscription is transmitted through a server-side interface. The legal basis is your voluntary consent under Article 6(1)(a) GDPR together with applicable Austrian telecommunications law.
You can withdraw consent at any time using the unsubscribe link in a newsletter or by contacting
6. Cookies and your choices
Cookies and similar technologies store or read information on your device. Necessary technologies, such as storing your privacy choices, support the functions you request. Non-essential statistics, marketing and external media functions require consent under section 165(3) of the Austrian Telecommunications Act 2021 and, where personal data is processed, Article 6(1)(a) GDPR.
You can open and change your choices through Cookie settings. You can reject optional categories and continue using the website. Browser settings also allow you to delete or block cookies, which may remove saved preferences. The locally operated YOOtheme Consent Manager stores your choices in the “yootheme_consent” cookie.
7. External content and social networks
This website uses content or functions from HolidayCheck (hotel reviews), Matterport (virtual tour), Elfsight (sharing functions) and OpenStreetMap (maps). When such content loads, providers may receive your IP address, browser details, visited page and access time, and may use their own cookies or similar technologies. Further information is available from the providers:
- HolidayCheck privacy information
- Matterport privacy policy
- Elfsight privacy policy
- OpenStreetMap Foundation privacy policy
Facebook and Instagram links lead to external platforms with their own privacy policies. If you are logged in there, the provider may associate your visit with your account.
8. Recipients and international transfers
Recipients may include hosting, IT, communications, newsletter and booking service providers, as well as public authorities where required for the stated purposes or by law. Providers processing data on our behalf must be engaged in accordance with Article 28 GDPR.
External providers may process data outside the European Economic Area. Transfers require the conditions of Articles 44 et seq. GDPR, for example an applicable adequacy decision or appropriate safeguards such as EU standard contractual clauses. Contact us for information about specific recipients and safeguards.
9. Retention
Personal data is retained for as long as necessary for its purpose. Enquiry records are deleted after handling unless other legitimate or statutory retention reasons apply. Booking and invoice records are subject to statutory retention periods, including generally seven years for tax records. Open claims or proceedings may require longer retention. Newsletter data is used until consent is withdrawn or the mailing purpose ends, subject to necessary evidence retention.
10. Your rights
Subject to the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may withdraw consent for the future. You may object to processing based on legitimate interests on grounds relating to your situation, and object to direct marketing at any time.
You may lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, email
11. Updates
Last updated: 12 November 2026. This notice will be adapted when the website or services change.
12. Audience measurement with Matomo
After you consent to Statistics, we use Matomo through analytics.tourismusnetz.com, technically maintained by fullmarketing.at GmbH. It processes page views, access times, referring pages, links and downloads, and browser, device and connection information including IP addresses. Matomo may use cookies to recognise visits. Reports help us improve the website. The legal basis is your consent under Article 6(1)(a) GDPR and section 165(3) of the Austrian Telecommunications Act 2021. You may withdraw consent for the future in the cookie settings. Further information: Matomo privacy policy.
13. Google Ads
The Google Ads tag loads after you consent to Marketing. It supports measurement of advertising effectiveness and our online advertising. Cookie identifiers, IP addresses, device and browser information, visited pages and interactions may be processed and transferred to Google. For users in the European Economic Area the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google companies in the United States is possible. The legal basis is consent under Article 6(1)(a) GDPR; access to your device is based on consent under section 165(3) of the Austrian Telecommunications Act 2021. You may withdraw consent for the future in the cookie settings. Processing and retention details: Google privacy policy and Google cookie information.
14. YouTube videos
Some pages include YouTube videos. The provider in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Videos load only after you consent to YouTube in the cookie settings. Google may receive your IP address, device and browser details and information about the video viewed. If you are signed into a Google account, this may be associated with your account. The legal basis is consent under Article 6(1)(a) GDPR and section 165(3) of the Austrian Telecommunications Act 2021. You can withdraw consent at any time in the cookie settings. Further information: Google privacy policy.
