1. General Information

The protection of your personal data is of particular concern to us. Therefore, we would like to inform you below about the collection, processing, and use of your personal data on our website www.arl-one.com.

2. Data Controller

The responsible party for processing your personal data is:

ARL ONE Gastro GmbH
Owner: Mario Matt
Address: Dengertstraße 625, 6580 St. Anton am Arlberg
Email: info@arl-one.com
Phone: +43 (0)5446 30297

3. Collection and Processing of Personal Data

We collect and process personal data only when permitted by law or when you have given your consent. Personal data includes, for example, name, email address, telephone number, IP address, and any other information you voluntarily provide to us.

3.1. Data We Collect Automatically When using our website, the following data is automatically collected by our web server:

• IP address
• Date and time of access
• Referrer URL (previously visited page)
• Browser type and version
• Operating system
• Amount of data transferred
• Access status (e.g., whether the request was successful)

This data is necessary to technically provide the website and ensure its functionality.

3.2. Data You Provide Voluntarily If you contact us, e.g., via a contact form or email, we collect the data you provide, such as:

• Name
• Email address
• Message content

4. Purpose of Data Processing

We process your personal data for the following purposes:

• Provision and improvement of the website
• Communication with you (e.g., for inquiries or bookings)
• Compliance with legal obligations
• Processing of orders or reservations
• Sending marketing information (only with your consent)

5. Legal Basis for Data Processing

The processing of your data is based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): If you give us consent to process your data (e.g., subscribing to our newsletter or using the contact form).
• Contract performance (Art. 6(1)(b) GDPR): When processing is necessary to fulfill a contract, such as bookings or reservations.
• Legal obligation (Art. 6(1)(c) GDPR): To fulfill legal obligations, such as tax and accounting duties.
• Legitimate interests (Art. 6(1)(f) GDPR): When processing is necessary to protect our legitimate interests, e.g., improving our services or website security.

6. Data Sharing

We only share your personal data with third parties in the following cases:

• If necessary to fulfill a contract (e.g., sharing with payment service providers or booking platforms).
• If we are legally required to do so.
• With service providers supporting us in providing our website and services (e.g., web hosting providers, IT service providers), acting under a data processing agreement.

7. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience and functionality. Cookies are small text files stored on your device. You can disable cookie storage in your browser settings or delete cookies afterward. However, please note that disabling cookies may limit the website’s functionality.

Further details on the cookies used and their purpose can be found in our Cookie Policy.

8. Data Retention Period

We retain your personal data only as long as necessary for the respective purposes. Afterward, the data is either deleted or anonymized unless legal retention obligations exist (e.g., tax or commercial retention obligations).

9. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You have the right to request information about your personal data processing.
• Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data unless legal retention obligations exist.
• Right to restriction of processing (Art. 18 GDPR): You can request the restriction of processing your data.
• Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format and transfer it to another controller.
• Right to object (Art. 21 GDPR): You may object to the processing of your personal data if it is based on legitimate interests.
• Right to withdraw consent (Art. 7(3) GDPR): If you have given us consent to process your data, you can withdraw it at any time with future effect.

To exercise any of these rights, please contact us using the provided contact details.

10. Data Security

We implement technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. These security measures are regularly reviewed and adapted to technological advancements.

11. Changes to This Privacy Policy

We reserve the right to modify this privacy policy at any time to reflect legal or technical changes. The latest version is always available on our website.

12. Contact

If you have any questions about the collection, processing, or use of your personal data or wish to exercise your rights, you can contact us at the following details:

ARL ONE Gastro GmbH
Email: info@arl-one.com
Phone: +43 (0)5446 30297