Privacy policy

This is a courtesy translation. Only the German version is legally binding.

Protecting your personal data matters to us. We process your data on the basis of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). This policy explains which data are processed when you visit this website and when you contact us, for what purpose, on what legal basis, who receives them and what rights you have.

1. Controller

Rocket Immo & Management GmbH
Business: Black Eagle Appartements
Einfahrt Mitte 422b, 6290 Mayrhofen, Austria
Email: info@blackeagle-appartements.com
Phone: +43 681 20202920

2. Hosting and server log data

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open the website, your browser sends technically necessary data to the server, in particular your IP address, the date and time of the request, the page requested, and your browser and operating system. Vercel processes these data as our processor to deliver the website and protect it against misuse. We do not analyse these data or combine them with other data. They are deleted as soon as they are no longer needed for these purposes.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, working website).

Transfers to third countries: Vercel may process data in the USA. Vercel is certified under the EU-U.S. Data Privacy Framework; the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR).

The connection to our website is encrypted with TLS.

3. No cookies, no analytics tools

We do not use cookies or any analytics, statistics or advertising tools on this website. No usage profiles are created.

So that the WhatsApp note at the bottom of the page does not pop up again on every page, the website saves small entries in your browser's storage: in sessionStorage, the start of your visit (be-wa-start) and which notes have already been shown (be-wb-seen); these are deleted when you close the browser tab. If you close a note that opened by itself, or open WhatsApp from it, the time is saved in localStorage (be-wa-quiet) so that no notes open by themselves for 14 days. These entries contain no information about you, are not sent to us or anyone else, and you can delete them in your browser settings at any time.

4. Fonts, images and map

Fonts, photos and graphics are loaded from our own server. Opening the website makes no connection to Google Fonts or any other third-party provider.

The map on our website is a graphic we made ourselves from OpenStreetMap data. No data are sent to third parties when the map is shown.

5. Availability calendar

When you open the date selection in the booking box on our home page, your browser loads the free days and prices from our booking service, which is also hosted by Vercel (see section 2). Only the requested period and the number of guests are sent, together with the technical data listed in section 2; no name and no contact details. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in showing you available dates and prices).

6. Booking through Smoobu

The booking buttons take you to the booking page of our booking and channel management system Smoobu (Smoobu GmbH, Berlin, Germany). Our website passes no data to Smoobu when you do so. We process the data you enter on the booking page to carry out your booking and your stay (Art. 6(1)(b) GDPR); Smoobu acts as our processor. The booking terms and privacy information shown on the booking page also apply there.

7. Contact by email, phone and WhatsApp

If you contact us by email, phone or WhatsApp, we process the details you give us (e.g. your name, email address or phone number and the content of your message) to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a booking, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We keep these data for as long as we need them to handle your enquiry; if it leads to a booking, the statutory retention periods apply.

Email: We run our mailboxes (@blackeagle-appartements.com) on Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google acts as our processor. Google may transfer data to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

WhatsApp: The WhatsApp button on our website is a simple link. Only when you click it does WhatsApp open with a prepared message to us; no data are sent to WhatsApp before that. If you write to us on WhatsApp, WhatsApp Ireland Limited (Ireland) processes your phone number and the metadata of the communication under its own privacy policy; the content is end-to-end encrypted. WhatsApp may transfer data to Meta Platforms, Inc. in the USA; Meta is certified under the EU-U.S. Data Privacy Framework. If you prefer not to use WhatsApp, you can always reach us by email or phone.

8. Guest reviews

On our website we show a selection of guest reviews published on Booking.com, Google and Airbnb, with the first name shown there and, where available, the month, the apartment and the type of trip (e.g. "travelled as a couple"). The reviews are stored as text on our server; showing them makes no connection to these platforms. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in informing future guests). If you wrote a review and do not want us to show it, write to us and we will remove it.

9. Links to other websites

Our website contains links to Google Maps, Instagram, Facebook, WhatsApp and the websites of local businesses. These are simple links: only when you click a link are you taken to the provider's page, and the provider then processes your data under its own privacy policy.

10. Who receives your data

Your data are received only by the service providers named in this policy (Vercel, Smoobu, Google Workspace) as our processors, and by WhatsApp if you write to us there. We do not pass on data for advertising purposes.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on our legitimate interest (Art. 21). To exercise these rights, write to us at the address given in section 1.

If you believe that the processing of your data breaches data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, email: dsb@dsb.gv.at, web: www.dsb.gv.at.

12. Changes

We update this privacy policy when our website or the legal situation changes. The version published here applies.

Last updated: 13 November 2026