1. Personal data
Personal data means all data containing information about personal or factual circumstances, such as name, address, e-mail address, telephone number, date of birth, age, gender, social security number, video recordings, photos, etc. Please notify us if changes are made to your personal data.
We will collect, process and use your personal data only where this is necessary for the performance of the contract or is required by a legal obligation or if you voluntarily provide us with such data. We will obtain your consent before any further processing of your data. Processing may also take place without your consent where our legitimate interest in data processing outweighs your interest in data protection. We will use the data provided to us in particular for the purposes of performing the contract, initiating the contract, meeting legal obligations, etc.
As a rule we will collect your data directly from you. In the context of the contract, however, it may happen that we will collect your data from third parties, such as bookings made via tour operators or booking platforms and similar.
We would furthermore state that the provision of personal data is to a certain extent required by law (e.g. tax law) or may result from contractual provisions (e.g. information about the contracting party). Failure to provide the personal data may mean that the contract cannot be concluded.
2. Your rights
Under the provisions of the GDPR you have the right to receive information on any of your personal data that we store, as well as a right to correction, data transmission, objection, limitation of processing and blocking or deletion of incorrect or unlawfully processed data. You have the right to revoke your consent at any time.
If you believe that our processing of your personal data violates the applicable data protection law, you may make a complaint to the competent supervisory authority. The Data Protection Authority is the competent body for Austria.
3. Data security
Your personal data will be protected by appropriate organisational and technical precautions. These precautions in particular relate to protection against unauthorised, unlawful or accidental access, loss, processing, use or manipulation of data.
Please note that we do not accept any liability whatsoever for the disclosure of information owing to errors in data transmission and/or unauthorised access by third parties for which we are not responsible.
4. Transmission of data to third parties
In order to perform our contractual or legal obligations, it may be necessary to transfer your data to data processors or to other recipients, in particular to public authorities. Data processors will process your personal information according to strict guidelines and only to the extent necessary to perform such tasks. As an example, our data processors are external IT service providers, etc.
On the basis of our legitimate interests (i.e. our interest in the analysis, optimisation and business operation of our offer within the meaning of Art. 6 (1) (f) GDPR)), our offering will include third-party content or service offers in order to integrate content and services.
This assumes that your IP address will be transmitted to such third-party providers because the content cannot be sent to your browser without the IP address. The IP address is required to display this content. Third-party providers may also use so-called web beacons for statistical or marketing purposes. Web beacons can be used to evaluate information such as visitor traffic on the website. For this purpose a cookie may also be set that will contain technical information about your browser and operating system, the referring websites, time spent visiting and other information regarding the use of our website. The following provides an overview of some of our third-party providers:
- To provide certain fonts on the website, we use the Google Fonts service provided by Google, Inc. For more information on how Google Fonts handles your personal information see https://developers.google.com/fonts/faq.
We use browser push notifications from PushPanda.io. Browser push notifications are notifications that can be displayed on your terminal device without opening the website or the relevant app. No distinctive user data, such as IP addresses or similar, that could allow the user in question to be identified, are saved. If somebody registers for the notification distributor (opt-in process), only an identification code and the geographical IP information (country and state) of the user are sent to PushPanda.io and stored in its database. This code is issued by the respective browser provider (Google, Mozilla, Apple, etc.) and enables the notifications to be sent to the relevant browser later. Notifications are sent by the browser provider itself. If the opt-in for push notifications is withdrawn (opt-out), all data saved with PushPanda.io is deleted and the identification code will be invalid. You can find information about opting out of push notifications at https://www.pushpanda.io/de/links/abmeldung/. PushPanda.io is a service of Project K GmbH, with headquarters in Innsbruck, Austria.
We will only transfer your data to other recipients if you have given us or the recipient your consent to the transmission of data, or if the transmission of data is required to execute or perform the contract, or if we are legally obliged to transmit the data.
We transmit your personal data to recipients within the European Union or to countries for which the European Commission has determined that there exists an appropriate level of data protection. If this is not the case we will ensure, on the basis of suitable guarantees, that the data recipient complies with the GDPR.
Personally identifiable data and information will be transmitted by Google Analytics, the Facebook Plugin, Google Remarketing, Facebook Custom Audiences, Google AdWords, Google Fonts and DoubleClick to their respective providers in the USA. Such personal information will be stored and processed in the United States of America. There is no equivalent level of privacy in the USA; however, the data recipients have agreed to comply with European data protection standards under the EU-US Privacy Shield, thus ensuring the protection of your data. Such data may be in certain circumstances be shared with third parties.
5. Retention of data
a.) Retention in order to perform contractual or legal obligations:
We will retain your data for as long as is necessary to perform our contractual or legal obligations. We are thus for example required to keep our accounting records for a period of 7 years from the end of the calendar year in question.
When storing your data we will ensure that such data is only used to the extent necessary for the above-mentioned purposes.
b.) Retention on the basis of your consent:
Subject to your consent, we will store your data for as long as this is specified in your statement of consent or other agreement, for example in the context of a contract made with you.
c.) Retention based on legitimate interests:
We will also store your data for as long as is necessary to defend liability or other claims within the statutory limitation period. Under Austrian law such period is in principle 3 years from the time when the damage and the author of the damage became known.
We will store booking inquiries that do not lead to the conclusion of a contract for the purpose of internal analyses (such as analysing our offer) for a period of 24 months.
We will save documents relating to job applications for a period of 12 months.
d.) Obligations to delete data on the basis of the right to deletion:
Our obligations to delete data in the event of your exercising your right to deletion pursuant to Art. 17 GDPR will not be affected by the above paragraphs.
6. Collection of general data and information
Our website collects a series of general data and information on each visit. The browser, operating system, previously visited website, page visited, date and time of visit, IP address, internet service provider, amount of data transferred and other similar data and information may all be gathered. Such data will be used by us to maintain the website and to prevent dangers. In this regard we have a legitimate interest in the storage of log files within the meaning of Art 6 (1) (f) GDPR.
The anonymous data contained in server log files will be stored separately from all other personal data.
If you do not want this you can configure your browser so that it will inform you as regards the setting of cookies and you can allow this only in individual cases. Where the cookies we use are subject to, we will ask for your consent in advance. Disabling cookies may limit the functionality of our website.
8. Facebook Social Media Plugin
The plugin provider is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For each visit to this website where a Facebook plugin has been embedded, your browser is automatically prompted to download an image of the Facebook plugin. This technical process tells Facebook which specific subpage of our website is being visited. If you are logged into Facebook at the same time, Facebook will recognise which specific subpage is being visited. This information is collected and associated with the respective Facebook account by Facebook without your having to click on the plugin.
If you do not want to transmit such data to Facebook you can prevent it by logging out of your Facebook account.
For more information see https://de-de.facebook.com/privacy/explanation. Please contact us for more information if you wish to object to such data processing.
9. Facebook Custom Audiences
The provider of the advertising service is Facebook Inc., 1601 S California Ave, Palo Alto, CA, 94304, USA. Facebook Custom Audiences permits visitors to our website to receive targeted interest-based advertising. This is done by placing cookies on your device. These cookies can be used to analyse user behaviour when visiting the website, then used for targeted product recommendations and interest-based advertising.
If you do not want this you can opt out via the following link: https://www.facebook.com/settings/?tab=ads.
10. Google Analytics
The provider is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. Google Analytics is a service for gathering, collecting and analysing data on the behaviour of visitors to websites. Among other things, Google uses the data and information obtained to evaluate the use of our website and to provide other services related to the use of this website.
Google Analytics sets a cookie that enables Google to analyse the usage of our website. This cookie prompts the browser to send data to Google for the purpose of online analysis. As part of this technical process Google will receive such personal data as the IP address of the data subject, which among other things permits Google to track the origin of visitors and clicks and subsequently to allow the settlement of commissions.
We use the “_gat._anonymizeIp” feature for web analysis via Google Analytics. This feature means that the IP address will be shortened and anonymised by Google.
For more information see https://www.google.com/intl/de_de/analytics/ and https://www.google.com/intl/en/policies/privacy/. Please contact us for more information if you wish to object to such data processing. It is possible to opt out by installing the following plugin: https://tools.google.com/dlpage/gaoptout?hl=de.
11. Google Remarketing
The provider is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. Google Remarketing is a feature of Google AdWords that allows us to show you ads if you have previously visited our website.
Google Remarketing sets a cookie that will recognise you when you subsequently visit websites that are also members of the Google advertising network. The cookie is used to store personal information such as the websites visited. Whenever you visit a website that has the Google Remarketing service embedded, your browser automatically identifies itself with Google. As part of this technical process Google will receive such personal data as the user's IP address or browsing habits.
It is possible to opt out via the following link: https://adssettings.google.com/authenticated?hl=en. You can also configure your browser to prevent the use of third-party cookies.
12. Google AdWords
The provider is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. Google AdWords is an internet advertising service that allows advertisers to show ads in Google search engine results as well as on the Google advertising network.
If you have reached our website via a Google ad, a so-called conversion cookie will be placed on your system. The conversion cookie stores personal information such as the web pages visited. A conversion cookie will expire after 30 days and will not be used to identify you. The conversion cookie indicates whether you have visited certain subpages of our website, for example an online shop. The conversion cookie helps both us and Google to determine whether you have generated revenue. The data and information collected will be used by Google to provide visitor statistics for our website. Neither we nor any other advertisers using Google AdWords will receive any information that could identify you.
The provider is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. DoubleClick is an online marketing service that sets cookies in order to provide users with relevant ads. DoubleClick can also track so-called conversions using cookie IDs. This will happen for example if a user sees a DoubleClick ad and later visits the advertiser’s website using the same browser and buys something there. DoubleClick lets your browser automatically establish a direct connection to the Google server. If you are registered with a service provided by Google, Google may associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible for the provider to find and store your IP address.
You can disable the interest-based ads of providers that are part of the About Ads self-regulatory campaign via the link http://www.aboutads.info/choices; this setting will be deleted when you delete your cookies.
Our Newsletter will be sent with your consent or with legal permission. If you wish to receive our Newsletter, you need only provide your e-mail address, otherwise the Newsletter cannot be sent. Further information other than your e-mail address is optional and will only be used to personalise the offer (e.g. by selecting a topic to inform you about via the Newsletter). The data will be used for the purpose of sending advertising and will be deleted as soon as you revoke your consent to the sending of the Newsletter. Cancellations may be sent to us via the contact details below, or you can simply unsubscribe directly from the Newsletter.
In order to send you the Newsletter we need confirmation that you are the owner of the e-mail address (so-called double opt-in). This confirmation is required to ensure that you have actually signed up for the Newsletter. Registrations for the Newsletter will be logged in order to provide proof of the registration process, which includes both the storage of the registration and confirmation times, and of your IP address. Changes to your stored data will also be logged. You can cancel your subscription at any time via the cancellation option in the Newsletter.
When retrieving the Newsletter, a web beacon will collect technical information such as information about your browser and system as well as your IP address and the time of retrieval. This information is used for technical improvements to the services based upon the technical data or the target audience and reading behaviour or access times. These statistical surveys will also determine whether the Newsletters were opened, when they were opened and which links were clicked on. This information may for technical reasons be assigned to individual Newsletter recipients.
15. Contact form
If the contact form is used, the personal data you provide will automatically be saved. Different personal data may be required by mandatory fields according to the contact form used. If a mandatory field requires personal data, such data must be provided as part of the initiation or performance of the contract or on account of legal obligations.
This data will be stored for processing or contact purposes and will not as a matter of principle be disclosed to any third parties. If we cannot answer a particular request, it will be forwarded to the relevant tourist association (currently those of Zell-Gerlos, Wald-Königsleiten, or Krimml) for reply. We have concluded an order processing contract to ensure that your data will be properly protected.
The personal data you provide will be stored for as long as is necessary for the assertion and/or defence of claims or as required by the relevant legal obligations
The following data will be collected if you participate in a competition on our website: first name, last name, date of birth, e-mail address. Such data are necessary for the holding of the competition and will only be used for this purpose: in this respect, the data processing is legally justified upon the basis of the performance of a contract pursuant to Article 6 (1) (b) GDPR.
If you have given your consent, your name will be published on our social media channels. You may revoke this consent at any time; we will in this case delete the social media post.
You will receive information about vacancies in our company via our website. As part of the application process, you have the option of submitting your application documents electronically via e-mail, or by post. Your data will be used for evaluation purposes during the application process, for establishing contact during the application process and, where applicable, for establishing an employment relationship.
18. Contact details
Zeller Bergbahnen Zillertal GmbH & Co KG
FN 22212s, Innsbruck District Court
A-6280 Zell am Ziller
Tel.: 0043 5282 7165