Privacy policy

Information under the EU General Data Protection Regulation (GDPR)

Thank you for your interest in our apartment. Protecting your personal data matters a great deal to us.

You can use our website without providing personal data. If you would like to use particular services such as an enquiry, processing personal data may become necessary. If processing is necessary and there is no legal basis for it, we always obtain your consent.

Personal data (for example name, address, email address or phone number) is always processed in accordance with the GDPR and Austrian data protection law.

With this privacy policy we would like to inform you about the nature, scope and purpose of the personal data we collect, use and process, and about your rights.

As the controller, Dili Appartement has implemented technical and organisational measures to protect the processed data as completely as possible. Nevertheless, internet based data transmission can have security gaps, so absolute protection cannot be guaranteed. You are therefore also welcome to send us personal data by other means, for example by phone or email.

1. Controller

Controller within the meaning of the GDPR:

Dili Appartement
Gartenweg 8
5541 Altenmarkt im Pongau
Austria

For enquiries please contact us by email (via diliappartement.at or the Booking.com channels) or WhatsApp.

2. Definitions

This privacy policy uses the terms of the GDPR (for example personal data, processing, controller, data subject). They are legally defined in Art. 4 GDPR and are used here with the same meaning.

3. Cookies

Our website may use cookies (for example for technical functionality, analysis or marketing). You can adjust your cookie settings in your browser and reject cookies. Technically necessary cookies are required for the site to work.

3a. Consent management and local storage

On your first visit we ask you, via a notice at the bottom of the screen, whether external content may be loaded. We store your decision only locally in your browser (localStorage, key dili_consent) together with the time of the choice. This information is not transmitted to us or to third parties and serves only to avoid asking you again on every visit. After six months we ask again.

You can change or fully withdraw your choice at any time via the cookie icon in the bottom left corner of every page. A withdrawal takes effect for the future.

When you submit a form we also set a technically necessary session cookie (dili_sess). It protects against abusive submissions, contains no personal content and is deleted when you close your browser. Technically necessary storage does not require consent under § 165 (3) of the Austrian Telecommunications Act.

Fonts, images and scripts are served entirely from our own server. There is no connection to Google Fonts.

3b. Google Maps

On the home page and the contact page we embed a map from the Google Maps service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is only loaded after you have explicitly agreed. Until then you only see a placeholder with a button in that position. No data is transmitted to Google beforehand.

If you agree, loading the map transmits your IP address and technical information about your browser and device to Google. Processing in the USA is possible. The legal basis is your consent under Art. 6 (1) (a) GDPR. You can withdraw this consent at any time via the cookie icon in the bottom left corner.

Further information can be found in Google's privacy policy: https://policies.google.com/privacy

3c. Availability calendar

The calendar in the enquiry form shows which days are already booked. To do this, our own server periodically retrieves the calendar files of our Booking.com and Airbnb accounts. The retrieval happens from the server, not from your browser. No data about you is transmitted to those platforms.

4. Collection of general data and information (server log files)

Each time our website is called up, the system automatically records general data and information, which is stored in the server log files. This may include:

  • Browser type and version used
  • Operating system of the accessing system
  • Referrer URL (previously visited page)
  • Sub-pages accessed
  • Date and time of access
  • IP address
  • Internet service provider
  • Other similar data used to avert danger

This data does not allow any conclusions to be drawn about you personally. It serves to deliver the content correctly, to optimise the website, to ensure functionality and to defend against cyber attacks. The anonymous data is stored separately from personal data.

5. Contact via the website / enquiries

When you contact us by email, contact form or via booking platforms (for example Booking.com), the data you provide (name, email, message, where applicable address and phone) is stored in order to handle the enquiry. It is only passed on to third parties where this is necessary for performing the contract (for example booking, cleaning, tax).

6. Transfer of data / processors

Data may be passed on to the following recipients where necessary for the purpose:

  • Booking platforms (for example Booking.com)
  • Payment service providers
  • Tax advisers / authorities (statutory obligation)
  • Service providers for website hosting, IT maintenance or cloud services (under data processing agreements)

7. Routine erasure and blocking of personal data

We process and store your data only for as long as necessary for the respective purpose or because of statutory retention periods (for example seven years for tax purposes). Afterwards the data is erased or blocked.

8. Rights of the data subject

You have the following rights at any time, provided the conditions are met:

  • Right of access to the data stored about you
  • Right to rectification of incorrect data
  • Right to erasure („right to be forgotten“)
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent given (with effect for the future)

To exercise these rights, please contact us by email or post. You also have the right to lodge a complaint with the Austrian data protection authority (www.dsb.gv.at).

9. Google Analytics / external services

If analysis tools or external services (for example Google Maps, fonts) are embedded on our website, this is done in accordance with the applicable data protection rules. IP addresses are anonymised where possible.

10. Changes to this privacy policy

We reserve the right to adapt this privacy policy where necessary, for example because of changes in the law or new features of the website. The current version can always be found on our website.

11. Your rights

You have the right to information, rectification, erasure, restriction of processing and data portability regarding your personal data. To exercise these rights, please contact us by email or post.

You are also welcome to contact us personally with any question or concern about data protection. We are always happy to help quickly and without formalities, which often resolves the matter before a formal request becomes necessary.

You also have the right to lodge a complaint with the Austrian data protection authority (dsb.gv.at).

Last updated: May 2026