Data Privacy Charter & GDPR Statement

Effective Date: January 1, 2026 • Compliant with Regulation (EU) 2016/679 (GDPR) & Austrian DSG

1. General Principles & Data Controller

At Mingleboxbackstag, operated under the registered legal entity Mingleboxbackstag Alpine Hospitality GmbH (Commercial Register No. FN 589421 m, Handelsgericht Wien, located at Herrengasse 14, Top 8, 1010 Wien, Austria), we are steadfastly committed to safeguarding the personal data and confidentiality of visitors to our alpine retreat directory.

This Privacy Policy describes in exhaustive detail how personal information is collected, processed, stored, and protected when you access our digital portal, interact with our 3D spatial rendering modules, or submit formal reservation inquiries to our Alpine Concierge desk.

2. Categories of Data Collected

We collect and process personal information under the following categories:

Direct Inquiries & Reservation Dossiers: Full legal name, email address, direct phone or messaging contact, preferred travel itineraries, guest party sizes, dietary specifics, and personalized concierge requests submitted via our contact UI.
Technical & Telemetry Data: Anonymized Internet Protocol (IP) addresses, device hardware identifiers, browser user-agents, WebGL graphics rendering support capabilities (for the Alpine 3D spatial canvas), screen resolutions, and referral URLs.
Interactive & Behavioral Metrics: Page response times, click paths through our Mountain Lodge and Lakeside portfolios, duration of review per retreat property, and interaction states with interactive UI elements.

3. Legal Bases for Processing Under GDPR (Article 6)

We process your personal information strictly under verified legal grounds recognized under the General Data Protection Regulation (GDPR):

Contractual Pre-Conditions (Art. 6(1)(b) GDPR): Processing inquiries and establishing reservation dossiers with partner lodges and chalet operators across Austria.
Legitimate Interests (Art. 6(1)(f) GDPR): Ensuring network security, enhancing the stability of high-performance WebGL graphics, preventing fraudulent reservation requests, and optimizing content delivery.
Explicit User Consent (Art. 6(1)(a) GDPR): Voluntary consent provided through our persistent cookie banner regarding analytical and preference telemetry.
Statutory Compliance (Art. 6(1)(c) GDPR): Compliance with Austrian commercial code (UGB) and tax retention requirements.

4. Data Storage, Retention & International Transfers

All reservation dossiers and inquiry records are encrypted in transit using TLS 1.3 encryption and stored within secured data centers situated exclusively inside the European Economic Area (EEA). We maintain an absolute data minimization protocol:

Inquiry records for completed bookings are retained for statutory commercial audit periods (7 years under Austrian § 132 BAO).
Unfulfilled reservation inquiries are automatically expunged from active concierge servers within 180 calendar days.
Analytical telemetry logs are anonymized and aggregated at 30-day intervals.

5. Your Statutory Rights Under EU GDPR

As a data subject within the European Union or accessing our platform globally, you maintain uninhibited rights regarding your personal records:

Right of Access (Art. 15 GDPR): Request a full copy of all personal dossiers associated with your email identifier.
Right to Rectification (Art. 16 GDPR): Prompt correction of outdated or inaccurate personal information.
Right to Erasure ('Right to be Forgotten' - Art. 17 GDPR): Permanent deletion of all stored inquiries, subject to statutory tax laws.
Right to Restrict Processing (Art. 18 GDPR) & Data Portability (Art. 20 GDPR): Receiving structured, machine-readable exports of provided data.
Right to Lodge a Complaint: You maintain the unconditional right to lodge a formal complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Wien, [email protected]).

6. Data Protection Officer & Concierge Contact

To exercise any statutory data rights or inquire regarding our digital security architecture, contact our Data Protection Officer at:

Data Protection Officer
Mingleboxbackstag Alpine Hospitality GmbH
Herrengasse 14, Top 8, 1010 Wien, Austria
Email: [email protected] • [email protected]