Privacy Policy

1. Controller

Controller within the meaning of the GDPR:

Reinhard Pirchmoser
Schmiedtal 10
AT-6335 Thiersee
info@pirchmoser.eu
+49 172 935 7631

2. What data we process

We only process data that you actively provide to us via the request form:

Name
Email address
Phone number (optional)
Date, number of guests, message / special requests
Language preference

This website uses no cookies, no tracking, and no analytics tools. No data is collected for advertising purposes.

When you access the website, our hosting provider (Cloudflare) processes technically necessary server log data such as IP address, date and time of access, and user agent. This data is used solely for the secure and stable operation of the website (Art. 6(1)(f) GDPR) and is not combined with other data.

3. Purpose and legal basis

Your data is processed to handle your request and to send a confirmation or rejection by email. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures / contract performance).

Providing your data is voluntary but necessary to process your request. Without this information we cannot handle your request.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

4. Processors (service providers)

To operate this website we use the following service providers who process personal data on our behalf:

Cloudflare, Inc.

101 Townsend St, San Francisco, CA 94107, USA

Cloudflare provides the hosting infrastructure (website hosting, serverless functions, message queue). Data is preferentially processed in European data centres; transfers to third countries are based on Standard Contractual Clauses (SCCs).

On the final step of the request form we use Cloudflare Turnstile to defend against spam and automated submissions. Technical signals of your browser (e.g. IP address, user agent, short-lived session cookie) are processed. Cloudflare Turnstile does not set advertising or tracking cookies. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protecting the form against abuse).

Neon, Inc.

548 Market St PMB 28132, San Francisco, CA 94104, USA

Neon operates the PostgreSQL database in which submitted requests are stored. Data is stored in an EU region. Transfers to third countries are based on Standard Contractual Clauses (SCCs).

Resend, Inc.

2261 Market Street #5039, San Francisco, CA 94114, USA

Resend is used for transactional email delivery (request receipt, acceptance or rejection). Your email address is only transmitted for the purpose of sending the respective notification. Transfers to third countries are based on Standard Contractual Clauses (SCCs).

5. Retention period

Requests and the bookings linked to them are deleted at the next end of calendar year, but no sooner than three months after the stay or last contact. Deletion is automated; on request your data can be removed earlier at any time.

Anonymous statistical aggregates (daily and per-room occupancy counts with no link to any individual) are retained beyond that period. These records do not allow identification of any individual.

6. Your rights

You have the following rights with respect to your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)

To exercise your rights, please contact info@pirchmoser.eu.

You also have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

Last updated: June 2026