Privacy Policy 2026 – Gorfion Family Hotel

(Complete Privacy Policy 2026, GDPR-compliant, status 2025/2026)

Note: This Privacy Policy informs you about the nature, scope and purpose of the processing of personal data in connection with the use of our website and our online services.

1. Controller
   The controller within the meaning of the General Data Protection Regulation (GDPR) is:
   Gorfion Family Hotel – Hotel Gorfion Anstalt
   Stubistrasse 8, 9497 Triesenberg, Liechtenstein
   T +423 265 90 00
   info@gorfion.li
   www.gorfion.li
2. Data Protection Officer / Data Protection Contact
   Legacon Treuhand Anstalt
   Tanja Viragh
   Landstrasse 99, P.O. Box 532
   9494 Schaan, Liechtenstein
   T +423 236 19 11
   info@legacon.li
3. General Information on Data Processing
   The use of our website is generally possible without providing personal data. Where personal data are processed, this is always done in accordance with the GDPR and the applicable data protection regulations of the Principality of Liechtenstein.
4. Cookies and Consent Management
   Our website uses cookies and similar technologies. We use a cookie consent tool provided by vioma GmbH, which allows you to choose, on your first visit, which categories of cookies you wish to consent to.
   Technically necessary cookies are set without consent. Statistics and marketing cookies are processed exclusively on the basis of your consent. You can withdraw or change your consent at any time via the cookie settings on our website.
5. Hosting and Server Log Files
   Our website is hosted by vioma GmbH, Industriestrasse 27, 77656 Offenburg, Germany. When you access our website, information is automatically stored in so-called server log files (e.g. IP address, browser type, date and time of access). This data is used to ensure the stable and secure operation of the website.
   Legal basis: Art. 6(1)(f) GDPR.
6. Online Bookings, Offers and Vouchers (vioma)
   For offer requests, online bookings, voucher purchases and feedback surveys, we use the software solutions vioma OFFER, vioma BOOKING, vioma VOUCHER and vioma BAROMETER. In this context, personal data such as name, contact details, travel data and payment information are processed.
   The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (compliance with legal obligations).
   A data processing agreement has been concluded with vioma.
7. Newsletter
   If you subscribe to our newsletter, we will use your email address exclusively for sending the newsletter. Registration takes place using the double opt-in procedure. You may unsubscribe from the newsletter at any time.
   Legal basis: Art. 6(1)(a) GDPR.
8. Google Analytics 4 (GA4)
   Our website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Dublin, Ireland. Use takes place exclusively on the basis of your consent via the vioma consent tool. IP addresses are not stored permanently.
   Data transfers to third countries (in particular the USA) cannot be ruled out. Google uses standard contractual clauses pursuant to Art. 46 GDPR.
9. Google Ads
   We use Google Ads, including conversion tracking. Cookies are set to measure the effectiveness of our advertising campaigns. Processing takes place exclusively on the basis of your consent.
10. Social Media
    Our website integrates content from the following social networks:
    - Facebook & Instagram (Meta Platforms Ireland Ltd.)
    - TikTok (TikTok Technology Limited)
    - LinkedIn (LinkedIn Ireland Unlimited Company)
    - Pinterest (Pinterest Europe Ltd.)
    - YouTube (Google Ireland Limited)
    When you visit our website, personal data may be transmitted to these providers, in particular if you are logged in to the respective platform. Processing takes place exclusively on the basis of your consent. Data transfers to third countries cannot be ruled out.

11. OpenStreetMap
    We use OpenStreetMap in a self-hosted version via vioma. No cookies are set and no personal data are stored permanently.
12. Job Applications
    If you apply for a position with us, we process your data exclusively for the purpose of carrying out the application procedure. Application data will be deleted no later than 6 months after completion of the application process, unless a longer storage period has been agreed.
13. Rights of Data Subjects
    You have the right at any time to request access, rectification, erasure, restriction of processing, data portability, to object to processing, and to withdraw any consent you have given.
    You also have the right to lodge a complaint with the Data Protection Authority of the Principality of Liechtenstein, Städtle 38, 9490 Vaduz.
14. Validity
    This Privacy Policy is valid as of January 2026 and will be amended as necessary to comply with legal requirements.