Privacy Policy
SKI plus CITY Pass STUBAI INNSBRUCK ASSOCIATION
Chair:
Axamer Lizum GmbH & Co. KG
Lizum 6
6094 Axams, Austria
T: +43 5234 68240
M: info@ski-plus-city.com
We strive to provide services of outstanding quality. To ensure this continues in the future and to offer you the best possible service and performance, we collect and process data and activity information from inquiries, bookings, gift card purchases, or when you visit our website. We process your data exclusively in accordance with legal requirements (GDPR, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing in connection with our website.
What data do we collect?
Website: When you use this website, we collect technically necessary data that is automatically transmitted to our server, including IP address, date and time of the session, type of device, access status/HTTP status code, browser type, language, and version of the browser software, as well as operating system.
This is technically necessary to display our website to you. We also use this data to improve the website in line with your expectations and to ensure the security and stability of the website. The legal basis for this data collection is Article 6(1)(f) of the GDPR.
Forms: When you contact us via a form on the website or by email, submit an inquiry, or make a reservation, you provide us with personal data (e.g., name, mailing address, email address, phone number, interests, etc.) for processing, which we need to handle your request. We store and process this data. We do not share it with third parties. Exceptions are companies that act as data processors on our behalf and with whom we have entered into an agreement stipulating that they handle your data with the same legally required due diligence as we do. These companies are listed below in this Privacy Policy.
Cookies
Our website uses cookies. These are small text files that are stored on your device via your browser. They do not cause any harm.
We need cookies to make our website user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser the next time you visit.
If you do not wish this to happen, you can configure your browser to notify you when cookies are set and to allow them only on a case-by-case basis.
If you disable cookies, not all features of our website may be available.
Web Analytics – Google Analytics
We use Google Analytics on our website to analyze and improve the use of our website.
Google Analytics is a web analytics service provided by Google Inc. Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable an analysis of how the website is used. The information generated by cookies regarding your use of this website is typically transmitted to a Google server in the United States and stored there. However, if IP anonymization is enabled on this website, your IP address will be truncated by Google beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The legal basis for processing data using Google Analytics is Article 6(1)(f) of the GDPR. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.
We have entered into a corresponding data processing agreement with the provider.
You can prevent this by configuring your browser so that no cookies are stored. However, please note that in this case, you may not be able to use all features of our website to their full extent. In addition, you can prevent the transmission of data generated by cookies and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
We use Google Analytics with the “_anonymizeIp()” extension. This truncates IP addresses (so-called IP masking), thereby preventing any association with specific individuals. Google participates in the EU-U.S. Privacy Shield, www.privacyshield.gov In exceptional cases where Google transfers personal data to the U.S., the EU-U.S. Privacy Shield framework ensures an adequate level of data protection.
Information about Google: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001
Further information on Google’s Terms of Service:
www.google.com/analytics/terms/de.html
Further information on Google’s privacy policy:
www.google.com/intl/de/analytics/privacyoverview.html
Google AdWords Conversion Tracking
We use Google AdWords to display ads to you on Google websites and those of other third parties. We use conversion tracking to measure the effectiveness of individual advertising campaigns with the aim of showing you ads that are relevant to you and making our website more interesting for you. The legal basis for processing your data is Article 6(1)(f) of the GDPR.
The ads are delivered by Google via “ad servers.” To do this, we use cookies that allow us to measure certain parameters to determine success, such as the display of ads or clicks by users. If you reach our website via a Google ad, Google AdWords will store a cookie on your computer. These cookies generally expire after 30 days and are not intended to identify you personally. The following analytical data is typically stored in connection with this cookie: the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions), and opt-out information (an indicator that the user no longer wishes to be targeted).
These cookies enable Google to recognize your web browser. If a user visits specific pages on an AdWords customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can determine that the user clicked on the ad and was redirected to that page. Each AdWords customer is assigned a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. We ourselves do not collect or process any personal data in connection with the aforementioned advertising measures. We only receive statistical reports from Google. Based on these reports, we can determine which of the advertising measures used are particularly effective. We do not receive any further data resulting from the use of these advertising materials; in particular, we cannot identify users based on this information.
Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s servers. We have no influence over the scope and further use of the data collected by Google and are informing you based on the information available to us: Through the integration of AdWords Conversion Tracking, Google receives the information that you have visited the relevant section of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider may determine and store your IP address.
You can prevent cookies from being stored by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all features of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as from processing this data, by downloading and installing the browser plugin available at the following link:
http://www.google.com/settings/ads/plugin
Google participates in the EU-U.S. Privacy Shield, www.privacyshield.gov/EU-US-Framework.
For more information on Google’s privacy practices, please visit: www.google.com/intl/de/policies/privacy
Google AdWords Remarketing
We use Google AdWords Remarketing. Through this service, ads from us may be displayed to you on other websites after you visit our website. This is done using cookies stored in your browser, which Google uses to track and analyze your browsing behavior when you visit various websites. This allows Google to identify your previous visit to our website. According to Google’s own statements, the data collected as part of remarketing is not combined with your personal data, which may be stored by Google. In particular, Google states that pseudonymization is used for remarketing.
Social Media Plugins
We use the following social media plugins on our website: Facebook, Instagram, Twitter, and YouTube. You can recognize these by the icons specific to social media channels or terms such as “Like,” “Gefällt mir,” etc. In this process, personal data is transmitted to the respective plugin provider and stored there.
The respective plugin provider stores the data collected about you as usage profiles and uses this data for advertising, market research, and/or to tailor its website to your needs. Such analysis is carried out in particular (even for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact the respective plug-in provider. Through the plug-ins, we offer you the opportunity to interact with social networks and other users, enabling us to improve our services and make them more interesting for you as a user. The legal basis for the use of the plug-ins is Article 6(1)(f) of the GDPR.
Data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect about you is directly associated with your existing account with that provider. In the case of U.S. providers, data is transferred to the United States; these providers have complied with the EU-U.S. Privacy Shield:
www.privacyshield.gov/EU-US-Framework
For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the privacy policies of these providers. There you will also find further information on your rights and options for adjusting settings to protect your privacy:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
Google Inc. (Google+ and YouTube), 1600 Amphitheater Parkway, Mountain View, California 94043, USA
www.google.com/policies/privacy/partners/?hl=de
Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA
Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, integrated,
http://instagram.com/about/legal/privacy/
Newsletter
When you make a reservation with us, make a purchase, submit an inquiry, or request information or promotional materials, we process your personal data in accordance with Article 6(1)(b) and (f). You can subscribe to our newsletters on our website. We use the double opt-in procedure for registration. In our newsletters, we inform you about updates to our products/services, current events, and interesting topics—to the extent possible and known to us—tailored to your interests and vacation preferences. You will also receive our newsletters if you provided us with your email address when making a reservation. To send the newsletters, we collect and store the data you enter in the form or provided during your reservation or any other type of inquiry (e.g., last name, first name, email address, mailing address) and supplement this with interests we know from your vacation preferences.
We use your data for direct marketing pursuant to Art. 6(1)(f) of the GDPR, Recital 47, and, when you subscribe, pursuant to Art. 6. (1), sentence 1, letter a of the GDPR, to provide you with tailored information about our services. Your data will not be shared with third parties. You may object to this use now or at any time with future effect. To do so, please send an email to info@ski-plus-city.com.
You can easily revoke your consent to direct marketing emails and the newsletter at any time using the unsubscribe feature in the newsletter you receive.
We use the “NumBirds” service provided by Sports and Tourism Digital Services GmbH, 6020 Innsbruck, Brixnerstraße 3/3, to produce the newsletter. To ensure the confidentiality of your personal data, we have entered into a data processing agreement with the company.
Data Protection for Job Applications and the Application Process
The data controller collects and processes applicants’ personal data for the purpose of conducting the application process. Processing may also take place electronically. This is particularly the case when an applicant submits the relevant application documents to the data controller electronically, for example via email or through the web form on the website. If the data controller enters into an employment contract with an applicant, the data provided will be stored for the purpose of administering the employment relationship in accordance with legal requirements. If the data controller does not enter into an employment contract with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests of the data controller preclude such deletion. Other legitimate interests in this context include, for example, the burden of proof in proceedings under the General Equal Treatment Act (GIBG).
Retention Period
We process and store your data only for as long as is necessary for processing or to comply with legal obligations. Once the purpose of processing no longer applies, your data will be blocked or deleted. If there are additional legal obligations to retain the data, we will block or delete your data upon expiration of the statutory retention periods.
Our Measures to Protect Your Personal Rights
As mentioned at the beginning, we take the protection of your personal data very seriously and use it exclusively to stay in touch with you, optimize our services, and tailor them to your wishes and needs.
We take appropriate measures to prevent unauthorized access to stored data, as well as theft, disclosure, alteration, or destruction.
Our employees are appropriately trained and are obligated to maintain confidentiality and to use your data in compliance with the law.
We have entered into agreements with service providers to whom we transfer personal data for communication purposes (newsletters, mailings, etc.) or for business purposes (bookkeeping, accounting, booking systems, data management systems, etc.) to ensure the confidentiality of your personal data. Data Processing Agreements Have Been Entered Into
Our website contains links to third-party websites, some of which are embedded as iFrames. We are not responsible for these providers’ compliance with the provisions of the GDPR. We therefore recommend that you also review these companies’ privacy policies.
Your Rights
In particular, the GDPR grants you the following rights regarding your personal data: the right of access (to know whether and what data we store, the purposes of processing, the duration of storage), the right to rectification and completion, the right to erasure, the right to restrict processing, the right to data portability, the right to object, and the right to withdraw consent under data protection law.
You have the right to request confirmation from us as to whether personal data concerning you is being processed. If you wish to exercise this right to confirmation, you may contact our Data Protection Officer at any time.
You have the right to receive, free of charge, information from us at any time regarding the personal data we have stored about you. Furthermore, European legislative bodies have granted you the right to information regarding the purposes of processing, the categories of personal data being processed, the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly in the case of recipients in third countries or international organizations; if possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining that duration; regarding the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR, and—at least in such cases—meaningful information about the logic involved, as well as the scope and intended effects of such processing on you. If the personal data was not collected from you, you have the right to obtain all available information regarding the origin of the data.
Furthermore, you have the right to be informed whether personal data has been transferred to a third country or to an international organization. If this is the case, you also have the right to receive information about the appropriate safeguards in connection with the transfer.
You have the right to request the immediate rectification of inaccurate personal data concerning you.
You have the right to request that we erase personal data concerning you without undue delay if any of the following grounds apply and provided that the processing is not necessary:
- The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
- The data subject withdraws their consent on which the processing was based pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
- The data subject objects to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
- The personal data has been processed unlawfully.
- The erasure of the personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.#
- The personal data was collected in connection with information society services offered pursuant to Article 8(1) of the GDPR.
If any of the above reasons apply and you wish to request the erasure of personal data stored by us, you may contact our Data Protection Officer at any time. Our Data Protection Officer or a staff member designated by him or her will ensure that the erasure request is complied with without delay.
If we have made the personal data public and our company, as the controller, is obligated to erase the personal data pursuant to Article 17(1) of the GDPR, we will take reasonable measures, including technical measures, taking into account available technology and implementation costs, to notify other data controllers who process the published personal data that you have requested that these other data controllers delete all links to your personal data or any copies or replicas of your personal data, provided that the processing is not necessary. Our Data Protection Officer or an employee designated by him or her will take the necessary steps on a case-by-case basis.
You have the right to request that we restrict processing if any of the following conditions apply:
- You contest the accuracy of the personal data, for a period that allows us, as the data controller, to verify the accuracy of the personal data.
- The processing is unlawful, you object to the erasure of the personal data, and instead request the restriction of its use.
- We, as the data controller, no longer need the personal data for the purposes of processing, but you, as the data subject, need it to assert, exercise, or defend legal claims.
- You have objected to the processing pursuant to Art. 21(1) of the GDPR, and it has not yet been determined whether our legitimate interests outweigh those of you, the data subject.
If any of the above conditions apply and you wish to request the restriction of the personal data we have stored, you may contact our Data Protection Officer at any time. Our Data Protection Officer or a staff member designated by him or her will arrange for the restriction of processing.
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, as the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) of the GDPR or Art. 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as the controller.
Furthermore, when exercising your right to data portability pursuant to Art. 20(1) of the GDPR, you have the right to have the personal data transmitted directly from one controller to another, provided that this is technically feasible and does not adversely affect the rights and freedoms of others.
To exercise your right to data portability, you may contact our Data Protection Officer at any time.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.
If you have any questions about this statement or the processing of your personal data by our company, please contact us by email at info@ski-plus-city.com.
Innsbruck, May 31, 2019