Data protection Skihütte Silberleiten

Skihütte Silberleiten - data protection

General information

The use of our pages is possible in a restricted form without providing personal data. Where personal data (e.g., name, address, date of birth, or email addresses) is collected on our pages or forms, this is always voluntary.

We would like to point out that data transmission over the Internet (e.g., when communicating by email) can have security gaps. A complete protection of data against access by third parties is not possible. We have implemented technical and organizational safeguards to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security procedures are regularly reviewed and updated to reflect technological progress.

We only process the personal data that we obtain from you voluntarily during your visit to our pages or through your other disclosures.

Hosting

Hosting provider: Worldsoft AG, Summelnweg 91, 8808 Pfäffikon SZ,Schweiz

General information & mandatory information

Note on the controller

The controller for the purposes of the General Data Protection Regulation (GDPR) is::

Lang UG (haftungsbeschränkt)
Lilienstraße 11
85283 Wolnzach
info@skihuette-oesterreich.com

Storage duration

In the event that no specific storage periods are stated in this privacy policy, we store your personal data for as long as necessary for the duration of the entire business relationship in accordance with the statutory retention periods and documentation obligations or for as long as a legitimate interest in processing persists. Legally required retention periods may also result from civil or commercial laws.

Legal bases for data processing

We process your data to fulfil contractual obligations (Art. 6(1)(b) GDPR), within the scope of your consent/registration (Art. 6(1)(a) GDPR), and where applicable to fulfil legal obligations (Art. 6(1)(c) GDPR). Additionally, we may process your data to safeguard legitimate interests (Art. 6(1)(f) GDPR) for advertising or market and public opinion research, insofar as you have not objected under Art. 21 GDPR. If you explicitly consent to transferring personal data to third countries, processing also rests on Art. 49(1)(a) GDPR.

BRights of data subjects

Withdrawal of consent / right to object to data collection (Art. 21) / right to lodge a complaint with the competent supervisory authority / right to data portability, access, rectification & deletion / right to restriction of processing

You are, among other things, entitled to (i) verify whether and which personal data we have stored about you and obtain copies of this data, (ii) request correction, supplementation, or deletion of your personal data that is incorrect or unlawfully processed, (iii) request us to restrict the processing of your personal data, and (iv) under certain circumstances object to the processing of your personal data or revoke prior consent for processing, (v) request data portability, (vi) know the identity of third parties to whom your personal data is disclosed, and (vii) file a complaint with the data protection authority responsible for the place of your ordinary residence, your workplace, or the location of the alleged violation.

For questions about personal data, you can contact us at the above address at any time.

Cookies & Server

Our pages use cookies in some cases. Cookies are small files that allow specific, device-related information to be stored on the user’s access device (PC, smartphone, etc.). Cookies do not harm your computer and do not contain viruses. They serve to improve user-friendliness of websites and thus for users (e.g., storing login data). They also serve to collect statistical data on website usage and analyze it to improve the offering. Users can influence the use of cookies.

Most cookies we use are so-called session cookies. They are automatically deleted at the end of your visit. Other cookies remain on your device until you delete them. These cookies allow us to recognize your browser on your next visit. You can configure your browser to notify you about cookies and to allow cookies only in individual cases, to reject cookies for certain cases or generally, and to automatically delete cookies when closing the browser. Disabling cookies may limit the functionality of our pages.

If cookies from third parties or for analysis purposes are used, you will be informed in this privacy policy or separately and, if necessary, asked for your consent.

The following cookies and their respective storage durations are present:

PHPSESSID – Session – 2 hours

Vc – Statistics – 30 days

wsw-logger-session-id – Statistics & Session – 2 hours

wbs_wdiget_session – Session / Forms – 2 hours

Contact form, email, telephone, fax, chatbot

If you submit inquiries to us by email or by other means, your information including the contact details you provided there and any attachments will be processed by us for the purpose of handling the inquiry and stored for 3 months for any follow-up questions, after which it will be deleted, unless a contractual relationship arises from it or you request deletion in advance or revoke your consent to storage. These data will not be disclosed without your consent.

Social Media

Facebook

Plugins of the Facebook social network are integrated on our pages. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. You can recognize Facebook plugins on our pages by the Facebook logo or the “Like” button (“Gefällt mir”). A summary of Facebook plugins can be found here: http://developers.facebook.com/docs/plugins/.

When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thereby receives information that you have visited our page with your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the contents of our pages to your Facebook profile. Facebook can associate your visit to our pages with your user account. We would like to point out that, as the operator of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information can be found in Facebook’s privacy policy at http://de-de.facebook.com/policy.php.

The data collected by this service are transmitted to a third country (USA). Your explicit consent forms the legal basis for this data transfer under Art 49(1)(a) in conjunction with Art 6(1)(a) GDPR. We have already informed you before your consent that the USA currently does not have a data protection level corresponding to EU standards. For this reason the European Court of Justice has declared the “Privacy Shield” (adequacy decision under Art 45 GDPR) invalid.

You may revoke your consent to data processing at any time.

If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account in advance.

You can find the agreement we concluded with Facebook regarding the provision of privacy information and the secure implementation of the Facebook tool on our website under https://www.facebook.com/legal/controller_addendum.

Data transfer to the USA is based on the EU standard contractual clauses.

For more information, see: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381

Ads & Conversion

Google Tag Manager

These pages use the Google Tag Manager. This service allows website tags to be managed via an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags that may collect data. However, the Google Tag Manager itself does not access this data. If a deactivation has been made at domain or cookie level, it remains in effect for all tracking tags that are implemented with the Google Tag Manager.

Google Analytics

These pages use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable analysis of how you use the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. More information on handling user data in Google Analytics can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

The data collected by this service are transmitted to a third country (USA). Your explicit consent forms the legal basis for this data transfer under Art 49(1)(a) in conjunction with Art 6(1)(a) GDPR. We have already informed you before your consent that the USA currently does not have a data protection level corresponding to EU standards. The European Court of Justice has therefore invalidated the Privacy Shield.

Browser Plugin as a Countermeasure to Data Processing

You can prevent cookies from being stored by adjusting the corresponding settings in your browser software, thereby preventing the collection of your data; however, please note that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Data Processing on Behalf

We have entered into a data processing agreement with Google and fully implement the strict requirements of data protection authorities when using Google Analytics.

IP Anonymization

We use the "IP Anonymization" feature on this website. This means that Google will shorten your IP address within states belonging to the European Union or within other European Economic Area member states. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

On behalf of the website operator, Google will use this information to analyze your use of the website, to compile reports on website activity, and to provide other services relating to website and internet usage to the website operator. The IP address transmitted by your browser within Google Analytics will not be combined with other data from Google.

By using this website, users consent to the processing of data collected about them by Google in the manner and for the purposes described above.

Data Transfer to the USA to Google is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

Further information can be found in Google’s Privacy Policy: https://policies.google.com/privacy?hl=en

Google Ads

These pages use Google Ads (formerly Google AdWords) as an online marketing measure to promote our products and services. As part of our advertising measures through Google Ads, we use conversion tracking from Google Inc. on our pages. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. This tracking tool enables us to better tailor our advertising to your interests and needs.

Our websites have a conversion tracking tag or code snippet integrated to better analyse user actions. When you click on a Google Ads ad, the ‘conversion’ cookie is stored on your computer (usually in your browser) or mobile device from a Google domain. Cookies are small text files that store information on your computer.

As soon as you complete an action on our website, Google recognises the cookie and stores your action as a so-called conversion. As long as you are browsing our website and the cookie has not yet expired, we and Google recognise that you found us via our Google Ads advertisement. The cookie is read and sent back to Google Ads with the conversion data. It is also possible that other cookies are used to measure conversions.

The data collected by this service is transferred to a third country (the USA). Your express consent forms the legal basis for this data transfer in accordance with Art. 49(1)(a) in conjunction with Art. 6(1)(a) GDPR. Even before you gave your consent, we informed you that the USA does not currently have a level of data protection that meets EU standards. For this reason, the European Court of Justice has declared the ‘Privacy Shield’ (adequacy decision pursuant to Art. 45 GDPR) invalid.

If you deactivate the Google conversion tracking cookie via your browser, you will block conversion tracking. In this case, you will not be included in the statistics of the tracking tool. You can change the cookie settings in your browser at any time. Further information can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.

Google Adsense

These pages use Google AdSense. This is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for the integration of advertisements. Google AdSense uses cookies. These are files that are stored on your computer and enable Google to analyse your use of our pages. Google AdSense also uses web beacons, invisible graphics that enable Google to analyse clicks on this website, traffic on this website and similar information.

The information obtained via cookies and web beacons, your IP address and the delivery of advertising formats are transmitted to a Google server located in the USA and stored there. Google may share this collected information with third parties if required by law or if Google commissions third parties to process the data.

The data collected by this service is transferred to a third country (USA). Your express consent forms the legal basis for this data transfer in accordance with Art. 49(1)(a) in conjunction with Art. 6(1)(a) GDPR. Even before you gave your consent, we informed you that the USA does not currently have a level of data protection that meets EU standards. For this reason, the European Court of Justice has declared the ‘Privacy Shield’ (adequacy decision pursuant to Art. 45 GDPR) invalid.

You can prevent the aforementioned cookies from being stored on your PC by adjusting the settings in your internet browser. However, this may mean that you will no longer be able to use the content of this website to the same extent.

Further information can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.

Google Conversion Tracking

These pages use the Google Ads service and, within this framework, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service provided by Google Inc., 600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you click on an ad placed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity, do not contain any personal data and therefore do not serve to personally identify you. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognise that you clicked on the ad and were redirected to this page. Each Google AdWords customer receives a different cookie. This means that it is not possible to track cookies across the websites of AdWords customers.

The information collected using the conversion cookie is used to generate conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.

The data collected by this service is transferred to a third country (the United States). Your express consent forms the legal basis for this data transfer in accordance with Art. 49(1)(a) in conjunction with Art. 6(1)(a) GDPR. Even before you gave your consent, we informed you that the United States does not currently have a level of data protection that meets EU standards. For this reason, the European Court of Justice has declared the ‘Privacy Shield’ (adequacy decision pursuant to Art. 45 GDPR) invalid.

You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You will then not be included in the conversion tracking statistics.

Furthermore, you can deactivate personalised advertising in the Google advertising settings. Instructions on how to do this can be found at https://support.google.com/ads/answer/2662922?hl=de. In addition, you can deactivate the use of cookies by third-party providers by visiting the Network Advertising Initiative's deactivation page at https://www.networkadvertising.org/choices/ and implementing the further information on opting out provided there.

Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/.

Facebook Pixel

Due to our legitimate interests in the analysis, optimisation and economic operation of our online offering, our website uses the ‘Facebook Pixel’ from the social network Facebook for these purposes. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

This feature allows us to track the actions of users after they have seen or clicked on a Facebook advertisement. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which we inform you about to the best of our knowledge. Facebook may link this data to your Facebook account and also use it for its own advertising purposes in accordance with Facebook's data use policy https://www.facebook.com/about/privacy/. You can allow Facebook and its partners to place advertisements on and outside of Facebook. A cookie may also be stored on your computer for these purposes.

The data collected by this service is transferred to a third country (the USA). Your express consent also forms the legal basis for this data transfer in accordance with Art. 49(1)(a) in conjunction with Art. 6(1)(a) GDPR. Even before you gave your consent, we informed you that the USA does not currently have a level of data protection that meets EU standards. For this reason, the European Court of Justice has declared the ‘Privacy Shield’ (adequacy decision pursuant to Art. 45 GDPR) invalid.

You have the option to revoke your consent to data processing at any time.

Data transfer to the USA is based on the EU standard contractual clauses.

Facebook Custom Audiences

Due to our legitimate interests in the analysis, optimisation and economic operation of our online offering, we use the ‘Facebook Custom Audience using pixel technology’ of the social network Facebook, provided by Facebook Inc. 1 Hacker Way, Menlo Park, California 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

You have the option to revoke your consent to data processing at any time.

Data transfer to the USA is based on the EU standard contractual clauses.

Newsletter & video

YouTube

Our website incorporates features from the YouTube video service. The provider is Google Inc., 600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When you visit one of our web pages that has YouTube integrated, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

Furthermore, YouTube may store various cookies on your device or use comparable technologies for recognition (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness and prevent fraud attempts.

If you are logged into your YouTube account, you enable YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of an optimal presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

The data collected by this service is transferred to a third country (USA). Your express consent also forms the legal basis for this data transfer in accordance with Art. 49(1)(a) in conjunction with Art. 6(1)(a) GDPR. Even before you gave your consent, we informed you that the USA does not currently have a level of data protection that meets EU standards. For this reason, the European Court of Justice has declared the ‘Privacy Shield’ (adequacy decision pursuant to Art. 45 GDPR) invalid.

You have the option to revoke your consent to data processing at any time.

Further information on this can be found at: https://policies.google.com/privacy?hl=de.

Vimeo

We use the functions of the Vimeo service provided by Vimeo, Inc., 555 West 18th Street, New York, New York 10011, among others, to publish videos.

When you visit one of our pages equipped with a Vimeo video, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.

Vimeo uses cookies or similar recognition technologies (e.g. device fingerprinting) to recognise website visitors.

Vimeo is used in the interest of optimising the presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on ‘legitimate business interests’.

You have the option to revoke your consent to data processing at any time.

Further information can be found at https://vimeo.com/privacy

Google Fonts

Our websites use the Google Fonts function. The provider is Google Inc., 600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The purpose is to provide the fonts required by the web browser to display the website. This data is only processed for the time required to select and transmit the fonts. The individual fonts are stored on the server of our technical provider.

The legal basis for data processing is, on the one hand, legitimate interest (technical necessity for the provision and delivery of our ‘website’) in accordance with Art. 6 (1) lit. f GDPR.

Insofar as Google Fonts may carry out further independent processing of the data, Google is solely responsible for this.

The data collected by this service may be transferred to a third country (USA). Your express consent also forms the legal basis for this data transfer in accordance with Art. 49(1)(a) in conjunction with Art. 6(1)(a) GDPR. Even before you gave your consent, we informed you that the USA does not currently have a level of data protection that meets EU standards. For this reason, the European Court of Justice has declared the ‘Privacy Shield’ (adequacy decision pursuant to Art. 45 GDPR) invalid.

Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/

Google Maps

Our pages use the Google Maps map service. The provider is Google Inc., 600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. When Google Maps is activated, Google may use Google Web Fonts for the purpose of uniform font display. When you access Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offerings and to ensure that the locations we have indicated on the website can be found easily. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

The data collected by this service is transferred to a third country (USA). Your express consent also forms the legal basis for this data transfer in accordance with Art. 49 para. 1 lit. a in conjunction with Art. 6 para. 1 lit. a GDPR. Even before you gave your consent, we informed you that the USA does not currently have a level of data protection that meets EU standards. For this reason, the European Court of Justice has declared the ‘Privacy Shield’ (adequacy decision pursuant to Art. 45 GDPR) invalid.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more information on how user data is handled, please refer to Google's privacy policy: https://policies.google.com/privacy?hl=de.

Google Recaptcha

Our websites use ‘Google reCAPTCHA’ (hereinafter ‘reCAPTCHA’). The provider is Google Inc., 600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

reCAPTCHA is used to check whether the data entered on these pages (e.g. in a contact form) is entered by a person or by an automated programme. To do this, reCAPTCHA analyses the behaviour of the visitor based on various characteristics. This analysis starts automatically as soon as the visitor accesses the website. reCAPTCHA evaluates various information for the analysis (e.g. IP address, length of time spent on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.

The storage and analysis of the data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and SPAM.

For more information about Google reCAPTCHA, please refer to Google's privacy policy and Google's terms of use at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

E-commerce & payment providers

Processing of customer and contract data

Within our company, your data will be received by those employees who need it to fulfil contractual, consented and legal obligations or legitimate interests. In addition, processors, partner companies and partners commissioned by us will receive your data if they need it to fulfil their respective contractual services. All processors and partners are contractually obliged to treat your data confidentially and to process it only within the agreed scope.

Some of the recipients mentioned (e.g. partners, processors) may be located outside your country or the EU or may process your personal data there. The level of data protection in other countries may not be the same as in your country. For example, companies in the USA are obliged to disclose personal data to security authorities without the data subjects being able to take legal action against this. We only transfer your personal data to such recipients for the purpose of fulfilling a contract. If you have expressly consented to the transfer of data to third countries, data processing is also based on Art. 49 (1) (a) GDPR. If the transfer of data is necessary for the performance of a contract, your data will be processed on the basis of Art. 6 (1) (b) GDPR.

In the event of a legal or regulatory obligation, public authorities and institutions may be recipients of your personal data.

Data may be used to analyse or predict the behaviour of users of our services. However, the data is not used for automated decision-making.