Skip to content
Hallstatt.tours

Privacy

We take the protection of your personal data seriously. This statement explains, in line with the GDPR, what data we process when you visit our website or contact us.

1. Controller

Post Now e.U., Ali Aktas, BSc, Strubergasse 49, 5020 Salzburg, Austria · book@hallstatt.tours · +43 670 3084907

2. Hosting & server log files

This website is served as static files via Firebase Hosting (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). When you access it, server log files are processed automatically (IP address, date/time, page requested, browser type) to operate and deliver the site securely (legitimate interest, Art. 6(1)(f) GDPR). Delivery uses a global content delivery network; data may be transferred to the USA, safeguarded by the EU-US Data Privacy Framework. Fonts and images are self-hosted — no connection is made to external font or image CDNs.

3. Contacting us

If you contact us via the enquiry form, email, phone or WhatsApp, we process the data you provide (e.g. name, email, phone, travel dates, message) to answer your enquiry and arrange your tour (Art. 6(1)(b) and (f) GDPR).

  • Enquiry form & chat: your details are processed on our own infrastructure (Google Cloud Functions, Google Ireland Ltd., hosted in the EU / region europe-west1) and delivered to us by email via our Austrian email provider (easyname GmbH, Vienna). The data is not stored permanently on the server and is not shared with third parties. To protect against spam and abuse we use Google reCAPTCHA Enterprise (Google Ireland Ltd.) on submission; it only loads once you actually use the form or chat (legitimate interest, Art. 6(1)(f) GDPR).
  • WhatsApp: if you message us on WhatsApp, Meta Platforms Ireland Ltd. processes the data under its own privacy terms.

4. Google Maps (only with consent)

On some pages we embed Google Maps (Google Ireland Ltd.). The map loads only after your explicit consent via our cookie notice. Only then is data (including your IP address) transferred to Google and cookies may be set (Art. 6(1)(a) GDPR). Without consent, no connection to Google is made.

5. Cookies, Google Analytics, Microsoft Clarity & advertising

The only technically necessary storage is your cookie choice, kept locally in your browser (localStorage). Analytics and advertising cookies are set only after your explicit consent via the cookie notice (Art. 6(1)(a) GDPR):

  • Google Analytics 4 and Google Ads (Google Ireland Ltd.): reach and conversion measurement. Data is transferred to Google — including to the USA, safeguarded by the EU-US Data Privacy Framework. We use Google Consent Mode: without consent, no analytics or advertising cookie is set.
  • Microsoft Clarity (Microsoft Ireland Operations Ltd.): usage analysis via heatmaps and session recordings (e.g. clicks, scrolling, mouse movement) to improve our website. Input into form fields is masked. Data may be transferred to the USA, safeguarded by the EU-US Data Privacy Framework. See Microsoft’s privacy statement for details.

You can withdraw your choice at any time via “Cookie settings” in the footer.

6. Retention

We keep enquiry data for as long as needed to handle your request and meet statutory retention obligations, after which it is deleted.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and to withdraw consent. Contact book@hallstatt.tours. You may also lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

Last updated: September 2026