Who publishes this site
This website is published by Kaiserhof Alpen Casino Hotel, a mountain hotel with a land-based casino floor in its old ballroom wing. The site is a description of the property and nothing more: the rooms, the two kitchens, the weekly programme, the Felsenbad and the Adlersaal. Anything to do with privacy or data protection goes to [email protected], marked for the data protection contact, and the hotel answers it.
What this website deliberately does not do
Nothing on these pages reserves a room, opens an account or takes money. No card number is asked for, no identity document is uploaded and no copy of one is stored. There is also no gambling: no games, no stakes, no deposits, no withdrawals. A room or a table is arranged by email or over the telephone, away from this site, and the age check that matters happens at the Adlersaal door in front of a person.
What is actually collected
- Nothing at all, if you only read. Browsing these pages asks nothing personal of you, and there is no form to fill in.
- Two answers, left on your device. The age question and the cookie question each leave one short value in the local storage of the browser you are using. Both stay on the machine in front of you. No copy reaches us, and we have no way to look them up.
- Server records. Our hosting provider logs each request: the IP address it came from, the moment it arrived, the page asked for, the browser string and the referring page. Every web server does this, and these records exist so that the site stays available and so that abuse can be traced.
- Whatever is in your email. Write to the address above and your message, your name and your return address sit in our mailbox until the question is settled, and afterwards for as long as a reservation needs a paper trail.
- Measurement, but only after you agree. If you accept analytics or advertising cookies, Google Analytics 4 and Google Ads receive the usual technical and behavioural signals described in the Cookie Policy.
Analytics and advertising
We advertise this hotel online, mostly in the weeks before the season opens, and we want to know which advertisements actually bring somebody up the valley. That is the only reason the site can load Google Analytics 4 and Google Ads tags. Both arrive switched off: Google Consent Mode v2 is set to denied for advertising storage, advertising user data, advertising personalisation and analytics storage before any tag runs. Nothing changes until you press a button on the cookie banner. If you choose essential only, no analytics or advertising tag is activated for your visit, and the measurement simply does not happen.
The lawful bases we rely on
- Consent for analytics cookies and advertising measurement. You give it on the banner and you can take it back at any time through the cookie settings link in the footer.
- Legitimate interest for keeping the site online, secure and reasonably fast, which is what the server logs serve.
- Legitimate interest, and the steps before a contract for answering an email you have sent us about a stay, a table or a private dinner.
- Legal obligation where accounting or tax rules require a record of a booking to be kept for a set number of years.
How long things are kept
- Your two browser values stay until you clear your browser storage, or until the browser decides to clear them.
- Server logs are rotated by our hosting provider and deleted within twelve months.
- Email correspondence about an enquiry that did not become a stay is deleted after twelve months.
- Records tied to an actual reservation are kept for the period our accounting rules demand, and then destroyed.
- Analytics data follows the retention setting in our Google Analytics property, which is fourteen months.
Who else can see any of it
Our hosting provider, which stores the files and the logs. Our email provider, which carries and stores the messages. Google, where you have consented to analytics or advertising measurement. That is the whole list. We do not sell personal data, we do not rent out an email list, and we do not pass guest details to third parties for their own marketing. Where a provider processes data outside your own country, the transfer rests on the standard contractual clauses or on an adequacy decision, as applicable.
Your rights
Ask us for a copy of what we hold on you, for a correction to it, for its deletion, for a pause on what we do with it, or for it in a form you can carry elsewhere. You may also object where we have relied on legitimate interest. One email to [email protected] starts any of that, and the answer comes inside a month. Should it not satisfy you, the supervisory authority in your own country will hear the complaint.
Children
These pages are adult material and are not addressed to anyone under 18. We do not knowingly hold personal data about a child. That is precisely what the question on the first page is for, and the doorman applies the identical rule one floor up. Should a child have sent us something anyway, tell us and it goes in the bin the same day.
Changes to this policy
When the site changes, this page changes with it, and the review date at the top is updated. Material changes will be summarised here rather than quietly absorbed into the text. The version you are reading is the one that applies today.