Where are the Zimmerhofer apartments?

In Steinhaus in the Ahrntal Valley, around 150 metres from the Klausberg cable car.

Is an enquiry already a confirmed booking?

No. A booking becomes final only after written confirmation from the Zimmerhofer family.

Privacy policy | Zimmerhofer Appartements

Data controller

Zimmerhofer Appartements Deluxe – Zimmerhofer Paul KG, Zimmerhofer family, Klausbergstraße 53, I-39030 Steinhaus, Ahrntal Valley, South Tyrol, Italy. E-mail: info@zimmerhofer.com, telephone+39 3482535431.

Principle

This website is built on the principle of data minimisation. We process only the information needed to run the site and to handle contact that you initiate.

Enquiries and booking requests

When you send an enquiry or booking request, we process the travel, occupancy and contact details you provide, the age of any children on arrival, your chosen apartment and any message. Children’s ages are needed to calculate the statutory tourist tax correctly. Processing serves to check availability, calculate the price, reply personally and, if you decide to book, prepare and perform the accommodation contract. Legal basis: pre-contractual steps at your request and performance of a contract (Art. 6(1)(b) GDPR).

Enquiries are stored in the protected administration area and forwarded by email to the Zimmerhofer family; they are not yet a binding booking. General enquiries are deleted automatically after 24 months at the latest; other data are deleted once no longer needed, unless statutory retention duties apply (e.g. tax or public-security obligations for registered guests).

Server logs and hosting

When you visit the website, the hosting provider may process technically necessary connection data such as IP address, time, requested file and browser information. Legal basis: legitimate interest in operating the website securely (Art. 6(1)(f) GDPR).

Technical cookies and abuse protection

A technically necessary session is used to submit forms securely; it ends when you close the browser. To protect the forms and the administration area, repeated or failed requests are counted for a limited time using a checksum that cannot be read directly. If enabled, the Cloudflare Turnstile bot check may process technical device data to detect automated access.

Your rights

Within the statutory limits you have the right of access, rectification, erasure, restriction of processing, data portability and objection (Arts. 15–21 GDPR), and you may withdraw any consent at any time. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it). To exercise your rights, email info@zimmerhofer.com.

Our data-minimised website statistics

On our own web server we compile statistics about visits, page views, language, broad device category, source type, and completed enquiries and booking requests. We also count whether Google Analytics consent was granted during a visit. In the enquiry form and booking process we record only steps reached, technical outcomes, grouped time, progress, lead-time and stay-length categories, repeated searches, and the field name and broad error type, never the value entered.

Our counter does not set a cookie and uses only a random identifier in browser localStorage, renewed after 30 minutes of inactivity. Only its non-reversible SHA-256 hash is stored in the database. Requested overnight dates are stored solely as daily totals without any link to individual guests. We do not store IP addresses, full user agents, names, contact details, messages or form contents. A country is recorded only if the server already provides a broad two-letter country code. Statistical events are deleted after 72 months, allowing comparisons across five complete years including the preceding-year baseline.

Google Analytics with Consent Mode v2

We load Google Analytics 4, provided by Google Ireland Limited, on every page in Advanced Consent Mode. Until consent is granted, analytics and advertising storage remain denied. Google may receive cookieless measurement signals. Analytics storage is activated only after consent.

We measure page views, visits and clicks to the booking and enquiry pages, availability outcomes, booking steps, submission attempts, and successfully sent enquiries and booking requests. We do not send names, email addresses, telephone numbers, postal addresses, message contents, internal enquiry codes or exact travel dates.

Consent is stored locally in the browser and can be withdrawn through the cookie settings. Rejection is not stored permanently and the choice is offered again on a later visit. We use property 250893132 and measurement ID G-REXQYBKWCM.

Privacy policy