Data Protection

Christian Sölle e.U. (Sölle Homes)
Sonnenalpe Nassfeld 5, 9620 Hermagor, Austria
Telephone: +43 (0) 676 843 555 721 · E-mail: homes@soelle.at
Company register number: FN 395240 k · VAT ID: ATU26708701

Version dated: 19 October 2026

This privacy policy applies to the website soelle-homes.at. For online booking on the linked booking site, the privacy information shown to you there applies.

• Analytics only with consent: Google Tag Manager loads Google Analytics only once you agree in the cookie banner; withdraw at any time through “Cookie settings”. We use no advertising services.
• No third-party content when a page opens: fonts and images come from our own server
• YouTube only after a click: your browser loads a video only when you start it
• 360° tour only after a click: your browser loads the tour from Kuula only when you start it
• Newsletter: only after you sign up and confirm (double opt-in), sent via Ghost with data stored in the EU

You may request information about the data we store about you and – where the legal requirements are met – request that it be corrected, erased or that its processing be restricted. You may object to processing and request data portability where these rights apply (Art. 15 to 21 GDPR).

If you have given us your consent, you may withdraw it at any time with effect for the future. Processing carried out before withdrawal remains lawful.

To exercise your rights, write to homes@soelle.at or by post to the address above; we reply within one month. You may also lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, telephone +43 1 52 152-0, e-mail dsb@dsb.gv.at, www.dsb.gv.at (opens in a new tab).

When you visit soelle-homes.at, your browser sends technical data to our server. This includes your IP address, the date and time of access, the address requested, the page you came from (referrer), the status code and information about your browser and operating system.

• Why? To operate the website, keep it secure, and identify and defend against attacks.
• Legal basis: our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).
• How long? Log files are deleted after 7 days.
• Where and by whom? Proplex GmbH, Seestraße 21, 9500 Villach, Austria (development, hosting and technical support; data processing agreement under Art. 28 GDPR). The servers are run by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, as Proplex GmbH’s sub-processor; the servers are located in data centres in Germany. No data is transferred outside the EU for hosting.

We manage the content with the content management system Payload CMS, self-hosted on the same servers; no data is sent to its maker.

On soelle-homes.at we use cookies and similar technologies that require consent only with your consent in the cookie banner (see “Analytics and advertising”). Without consent we only store what is strictly necessary (§ 165(3) TKG 2021):

• Your cookie choice: the entry “soelle-consent” in your browser storage (local storage) with your choice, its date and the version of the settings – so that the banner does not ask on every page and we can prove your consent. It never leaves your device and is valid for 12 months; then we ask again. You can change or withdraw your choice at any time through “Cookie settings” at the bottom of every page.
• Notice windows (pop-ups): once a notice window (for example about opening hours) has appeared, your browser remembers this in its session storage (entry “site-popup-closed:…”) so that it does not appear again in this tab. The entry holds no personal data, never leaves your device and is deleted when you close the tab.
• Login to the content management system: only when staff sign in to the admin area is a login cookie (“payload-token”) set. It is never used for visitors.

Only when you start a YouTube video with a click may YouTube set cookies or store entries in your browser (see “YouTube videos”).

On soelle-homes.at we use analytics and advertising services only with your consent in the cookie banner. The legal basis is your consent (Art. 6(1)(a) GDPR; for storing and reading information on your device § 165(3) TKG 2021). Without consent none of these services loads and your browser does not connect to Google. The services are loaded through Google Tag Manager, and only those of the categories you allowed; we also pass your choice to Google through its “Consent Mode”.

Withdrawal: you can change or withdraw your consent at any time with effect for the future – through “Cookie settings” at the bottom of every page. The services then stop loading from the next page on, and their cookies on our domain are deleted. Cookies on the providers’ domains (such as google.com, doubleclick.net, facebook.com) you delete in your browser or with the provider.

Proof: we store your choice in your browser (entry “soelle-consent” in local storage) with its date and the version of the settings; after 12 months, or when the services change, we ask again.

Google Tag Manager

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
• Category in the cookie banner: loads with Analytics or Marketing
• Purpose: Loads the analytics and marketing services of this website – only after consent and only those of the allowed categories. Sets no cookies itself; when it loads, Google receives the IP address and browser and device details.
• Cookies and storage: none
• Recipients and transfers: Google Ireland Limited. Data may be transferred to Google LLC in the United States. Google LLC is certified under the EU–US Data Privacy Framework (DPF) (adequacy decision of the European Commission of 10 July 2023).
• Retention: According to Google, the data sent when it loads is kept only briefly in server logs.
• Privacy policy of Google Ireland Limited (opens in a new tab)

Google Analytics 4

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
• Category in the cookie banner: Analytics
• Purpose: Analytics: which pages are visited, how often and for how long, where visitors come from and which device they use – pseudonymously, with a truncated IP address. We use it to improve our pages.
• Cookies and storage: _ga (our domain, 2 years): Random ID that recognises your browser on later visits.; _ga_ (our domain, 2 years): Stores the state of the current session (time, page views).
• Recipients and transfers: Google Ireland Limited. Data may be transferred to Google LLC in the United States. Google LLC is certified under the EU–US Data Privacy Framework (DPF) (adequacy decision of the European Commission of 10 July 2023).
• Retention: Usage data is deleted in Google Analytics after 14 months [OPEN: check the retention setting of the GA4 property].
• Privacy policy of Google Ireland Limited (opens in a new tab)

We load fonts, images and program code exclusively from our own server – not from Google Fonts or other content delivery networks. Opening our pages does not connect your browser to any third party – analytics and advertising services only once you agree in the cookie banner.

We do not embed Google Maps. Links to Google Maps, to our profiles on Facebook, Instagram and YouTube, and to booking and partner sites are plain links: no data is transferred until you click. After the click, the respective provider’s privacy policy applies.

Some pages show videos from YouTube. We embed them with a two-click solution: at first you only see a preview image from our own server and a notice. Only when you click “Play video” does your browser load the player in privacy-enhanced mode from youtube-nocookie.com.

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (responsible for YouTube).
• Data after the click: your IP address, information about your browser and device, the page the video is embedded in and your use of the player. YouTube may set cookies and store entries in your browser; if you are signed in to Google, Google may link the visit to your account.
• Legal basis: your consent given by the click (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). Nothing is loaded without the click; the consent covers only this video and this page view.
• Third country: Google may transfer data to the United States. Google LLC is certified under the EU–US Data Privacy Framework (adequacy decision, Art. 45 GDPR).
• Details: Google’s privacy policy (opens in a new tab).

Videos we upload ourselves are played by our own player from our own server; no data is transferred to third parties.

You can view our apartments in a 360° tour from the service Kuula. We embed it with a two-click solution: at first you only see a preview image from our own server and a notice. Only when you click “Start the 360° tour” does your browser load the tour from kuula.co.

• Provider: Kuula Inc. [OPEN: confirm the address and registered office of Kuula Inc.]
• Data after the click: your IP address, information about your browser and device, the page the tour is embedded in and your use of the tour. Kuula may set technically necessary cookies (load balancing). On a phone, the tour may use your device’s motion sensors so that you can look around by turning the device.
• Legal basis: your consent given by the click (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). Nothing is loaded without the click; the consent covers only this tour and this page view.
• Third country: Kuula may process data outside the European Union, in particular in the United States. [OPEN: confirm the transfer mechanism (Data Privacy Framework or Standard Contractual Clauses)]
• Details: Kuula’s privacy policy (opens in a new tab).

You book our apartments on an external booking site that we link to (soellehomesnassfeld.bookpage.io). Our website transfers no data in doing so; only when you follow the link does the operator of the booking site process your details, and the privacy information shown there applies. We process the booking data we receive from there to handle your stay (Art. 6(1)(b) GDPR) and keep invoice data for 7 years from the end of the relevant calendar year (§ 132 BAO). [OPEN: provider of the booking site and data processing agreement]

If you contact us by e-mail (homes@soelle.at) or phone (+43 (0) 676 843 555 721), we process your details and the content of your message to answer your enquiry. The website itself has no contact form.

• Legal basis: preparing or performing a contract (Art. 6(1)(b) GDPR), otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
• How long? Until your enquiry has been fully dealt with, and then for no more than 6 months, unless statutory retention obligations apply or a dispute requires us to retain the information for longer.

We send our newsletter using Ghost (Ghost(Pro), EU region). The provider is Ghost Foundation Ltd, 160 Robinson Road #14-04, SBF Center, Singapore 068914. The data are stored in data centres within the EU. Access from third countries in connection with support and maintenance cannot be ruled out; such access is protected by Standard Contractual Clauses. A data processing agreement is in place. [OPEN: confirm that the data processing agreement with Ghost also covers the Sölle Homes newsletter]

For our newsletter we need your e-mail address and your consent (checkbox in the form). If you sign up on soelle-homes.at, our server forwards your e-mail address directly to Ghost; it does not store it. After subscribing, you will receive an e-mail with a confirmation link. You will receive the newsletter only after confirming (double opt-in).

• Purpose: sending our newsletter with news and offers from Sölle Homes.
• Legal basis: your consent (Art. 6(1)(a) GDPR, § 174 TKG 2021).
• Subscription and confirmation data: Ghost stores the time and IP address of the sign-up and of the confirmation so that we can prove your consent and investigate abuse.
• Opens and clicks: our newsletters may contain tracking pixels and personalised links. They show us whether and when an e-mail was opened and which links were clicked, so that we can tailor our content to readers’ interests. If you do not want this, you can unsubscribe from the newsletter.
• How long? Until you unsubscribe or withdraw your consent. Afterwards your e-mail address stays on a suppression list so that you receive no further newsletters.
• Unsubscribing and withdrawal: at any time via the link in every newsletter e-mail or by writing to homes@soelle.at. Processing before the withdrawal remains lawful.

Protection of the sign-up form against abuse

Our form protects itself against automated sign-ups without cookies, picture puzzles or third-party services: your browser solves a small computing task in the background (ALTCHA, on our own server), plus a field invisible to people and a minimum time to fill in the form. Each connection can sign up at most 5 times in 10 minutes and each e-mail address 3 times per hour; for this, a hash of the IP or e-mail address is kept in our server’s memory for at most one hour. Our server stores no sign-up data; its logs contain only the outcome (for example “signed up” or “refused”), no e-mail or IP address. The legal basis is our legitimate interest in a form that cannot be abused (Art. 6(1)(f) GDPR).

Search: the search on this website also understands whole questions. For this, an AI model (a language model that turns texts into numbers for searching by meaning) runs on our own server. It processes only the text you type into the search field, in memory, to find matching sections of our pages. The search text is not stored, not logged, not used for training and not sent to third parties; we answer the same query from memory for up to one minute, without any link to you. To prevent abuse, each connection can search at most 120 times per minute; for this, a hash of the IP address is kept in memory for about one hour at most. The legal basis is our legitimate interest in a working search that cannot be abused (Art. 6(1)(f) GDPR).

Apart from that, we do not use artificial intelligence to process data of visitors to this website; there is no chatbot. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. More on this, and how AI was used to build the website, on our AI transparency page.

This website can only be reached encrypted (HTTPS/TLS). Data you send to us is therefore protected from third parties on its way between your browser and our server. Our pages allow the browser to load content only from our own server and, after your click, from the YouTube player (Content Security Policy).

We update this privacy policy when our services, the tools we use or legal requirements change. The version published on this page applies. This English version is a courtesy translation; the German version is legally binding.