:focal())
:focal())
I. General
(1) Here you will find information about how we handle your personal data when you visit our website. In order to provide our services, it is necessary for us to process personal data relating to you.
(2) Personal data means any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
(3) We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.
(4) Please note that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
II. Controller
The controller responsible for data processing on this website is:
IG Skipass Kleinwalsertal-Oberstdorf
Walserstraße 77
6991 Riezlern
Austria
Tel.: +43 8322 9600-0
Email: info@ok-bergbahnen.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).
III. Rights of the Data Subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis the controller:
(1) Right of Access (Art. 15 GDPR)
You have the right to request confirmation from the controller as to whether personal data concerning you is being processed. If such processing is taking place, you have the right to request information about the following:
the purposes for which the personal data is processed;
the categories of personal data that are processed;
the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
the planned duration of storage of the personal data concerning you or, if specific information cannot be provided, the criteria used to determine the storage period;
the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing;
the existence of a right to lodge a complaint with a supervisory authority;
all available information about the source of the data if the personal data was not collected from the data subject;
the existence of automated decision-making, including profiling, pursuant to Art. 22 para. 1 and 4 GDPR and, at least in these cases, meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject.
(2) Right to Rectification (Art. 16 GDPR)
You have the right to request the rectification and/or completion of your personal data if the processed personal data concerning you is inaccurate or incomplete.
(3) Right to Erasure (Art. 17 GDPR)
You have the right to request that the controller erase personal data concerning you without undue delay. The controller is obliged to erase this data without undue delay if one of the statutory grounds for erasure applies.
(4) Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request that the controller restrict processing if one of the statutory requirements for restriction is met.
(5) Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format.
(6) Right to Object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
(7) Right to Withdraw Consent
You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
(8) Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
IV. Data Security
When you visit our website, we use the widely used SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead.
You can tell whether an individual page of our website is transmitted in encrypted form by the closed key or padlock symbol displayed in the status bar of your browser.
We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
V. Disclosure of Data
Your personal data will not be disclosed to third parties for purposes other than those listed below. We only disclose your personal data to third parties if:
you have given your express consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR;
disclosure is necessary pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed;
there is a legal obligation to disclose the data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR; or
disclosure is legally permissible and necessary pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR for the performance of contractual relationships with you.
VI. Cookies
(1) We use cookies on our website. These are small files that your browser automatically creates and stores on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain viruses, Trojans or other malware.
(2) The cookie stores information that arises in connection with the specific end device being used. However, this does not mean that we thereby obtain direct knowledge of your identity.
(3) On the one hand, cookies are used to make the use of our website more convenient for you. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website.
(4) We also use temporary cookies to optimise user-friendliness. These are stored on your end device for a defined period. If you visit our website again to use our services, the system automatically recognises that you have visited us before and remembers the entries and settings you made, so that you do not have to enter them again.
(5) On the other hand, we use cookies to statistically record the use of our website and evaluate it for the purpose of optimising our services. These cookies allow us to automatically recognise that you have already visited our website when you return. These cookies are automatically deleted after a defined period.
(6) The processing of data through cookies is necessary for the stated purposes to safeguard our legitimate interests and those of third parties pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.
(7) Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a notification is displayed before a new cookie is created. Completely disabling cookies may, however, mean that you cannot use all functions of our website.
VII. Contact Form
(1) If you send us an enquiry via the contact form, the information you provide in the enquiry form, including the contact details you enter there, will be stored by us for the purpose of processing your enquiry and in case of follow-up questions.
(2) We do not disclose this data without your consent.
(3) The processing of the data entered into the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You may withdraw this consent at any time. An informal notification by email is sufficient for this purpose. The lawfulness of data processing carried out before the withdrawal remains unaffected.
(4) The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
VIII. Newsletter
(1) With your consent, you can subscribe to our newsletter, which we use to inform you about our current and interesting offers.
(2) We use the so-called double opt-in procedure to register for our newsletter. This means that after registering, we send an email to the email address you provided asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your data will be blocked and automatically deleted after one month. In addition, we store the IP addresses used and the date and time of registration and confirmation. The purpose of this procedure is to provide evidence of your registration and, if necessary, to clarify any possible misuse of your personal data.
(3) The only mandatory information required to send the newsletter is your email address. Providing additional information is voluntary and is used to address you personally.
(4) The newsletter is sent on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You may withdraw your consent at any time. An informal notification by email is sufficient, or you can unsubscribe using the “unsubscribe” link contained in the newsletter. The lawfulness of data processing already carried out remains unaffected by the withdrawal.
(5) The data you provide to us for the purpose of receiving the newsletter will be stored until you unsubscribe from the newsletter and will then be deleted. Data that has been stored by us for other purposes remains unaffected.
IX. Hosting
(1) We use a hosting provider to operate and provide our website. Our website is stored on the provider's servers and made available for access via the Internet (hosting). The provider may process data transmitted via the browser you use and generated when using our website. This includes, in particular, your IP address, which the provider needs to deliver our online services to your browser, as well as any data you enter via our website. In addition, the date and time of access to our website, the time zone difference from Greenwich Mean Time (GMT), the access status (HTTP status), the amount of data transferred, the Internet browser and operating system used to access our online services, and the website previously visited may be collected.
(2) The processing of log data is based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in providing our online services on professionally operated server infrastructure in order to ensure the reliable availability of our website and to improve and optimise our online services.
(3) To oblige the hosting provider to process the transmitted data exclusively in accordance with our instructions and in compliance with applicable data protection regulations, we have concluded a data processing agreement with the provider where required.
(4) We use Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, to host our website.
Hetzner provides hosting and server infrastructure from data centres within the European Union. According to Hetzner, for non-cloud products, data is processed and stored exclusively within the EU. For cloud products, the location depends on the data centre selected for the respective product. We use a server location within the EU for our website. (docs.hetzner.com)
(5) In particular, the following data may be processed as part of the technical operation of our website:
IP address of the visitor;
name of the website or file accessed;
date and time of access;
amount of data transferred;
notification of successful or unsuccessful access;
browser type and version;
operating system used;
previously visited website (referrer URL).
(6) Log data is processed only to the extent necessary for the secure and reliable operation of our website, for example to detect and analyse technical faults, misuse or security incidents. The storage period is limited to what is necessary for these purposes. The data is subsequently deleted unless statutory retention obligations or other legitimate reasons require longer storage.
(7) Hetzner processes personal data only to the extent necessary to provide the hosting and infrastructure services and in accordance with the applicable data processing agreement. According to Hetzner, support access is generally carried out by teams within the EU. (docs.hetzner.com)
(8) Where your consent is required for certain processing activities, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and, where applicable, § 25 para. 1 TDDDG. You may withdraw your consent at any time.
Provider: Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany
https://docs.hetzner.com/de/general/company-and-policy/data-protection-at-hetzner/
X. Adobe Fonts
We use this service on our website.
This service enables us to use external fonts. When you access our website, the required font is loaded by your web browser into the browser cache. This is necessary so that your browser can display our texts with the intended visual appearance. If your browser does not support this function, a standard font installed on your computer will be used instead.
The integration of these fonts involves a server request to a server operated by the provider. This transmits information about which of our web pages you have visited to the server. The IP address of the browser on your end device is also transmitted to and stored by the provider. We have no influence over the scope or further use of the data collected and processed by the provider through the use of this service.
We use the service for optimisation purposes, in particular to improve your experience when using our website and to make its design more user-friendly.
The service may transmit personal data to the USA. The EU Commission has adopted an adequacy decision for this country (EU-US Data Privacy Framework, DPF). The service participates in the DPF.
The legal basis is Art. 6 para. 1 lit. a GDPR (consent).
You can also prevent the storage of cookies generated by this service by changing the appropriate settings in your web browser. Please note that in this case you may not be able to use all functions of our website.
Provider: Adobe Systems Software Ireland Limited
4–6 Riverwalk
Citywest Business Campus
Dublin 24
Dublin
Ireland
Tel. +353 1 242-6700
Fax +353 1 242-6711
XI. Storyblok
We use Storyblok as our Content Management System (CMS) to manage and publish the content of our website.
Storyblok is a headless Content Management System that enables us to manage and provide the content of our website. When you use our website, personal data such as your IP address, browser data, device data and technical information about your visit may be processed to the extent necessary for the technical provision and operation of the website.
We use Storyblok to efficiently manage, publish and technically provide the content of our website. Processing is necessary to ensure the proper and secure operation of our website.
Where personal data is processed by Storyblok or service providers engaged by Storyblok, this is carried out in accordance with applicable data protection regulations. Where legally required, appropriate data processing agreements have been concluded. Storyblok states that it uses Amazon Web Services, among others, as an infrastructure and hosting provider for its services. (storyblok.com)
Where your consent is required for the use of certain services or functions, processing is carried out exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. In other cases, processing is based on Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest lies in the secure, reliable and efficient provision and management of our website.
Provider: Storyblok GmbH
Peter-Behrens-Platz 2
4020 Linz
Austria
https://www.storyblok.com/
https://www.storyblok.com/legal/privacy-policy
XVIII. Google Analytics
We use this service on our website.
We use the service to analyse the use of our website and to continuously improve individual functions, services and the user experience. By statistically evaluating user behaviour, we can improve our services and make them more interesting for you as a user. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
The service uses cookies, i.e. small text files that are stored on your end device and enable an analysis of your use of our website. The information generated by the cookie about your use of our website is transmitted to a server operated by the provider within the EU and stored there. The IP addresses are shortened on these servers. A corresponding pseudonymised dataset may be transmitted to the USA.
The service may transmit personal data to the USA. The EU Commission has adopted an adequacy decision for this country (EU-US Data Privacy Framework, DPF). The service participates in the DPF.
You can prevent the storage of cookies generated by this service by changing the appropriate settings in your web browser. Please note that in this case you may not be able to use all functions of our website.
If you wish to prevent the collection of data generated by the cookie and relating to your use of our website (including your IP address), as well as the processing of this data by the service provider, you can also download and install the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en
To oblige the provider of this service to process the transmitted data exclusively in accordance with our instructions and in compliance with applicable data protection regulations, we have concluded a data processing agreement with the provider.
The legal basis is Art. 6 para. 1 lit. a GDPR (consent).
Provider: Google Ireland Limited
Google Building Gordon House
Barrow St 4
Dublin
Ireland
Tel. +353 1 543 1000
Fax +353 1 686 5660
XIX. Google Dynamic Remarketing
We use this service on our website.
This service enables us to display our advertisements to you after you have visited our website while you continue to browse the Internet. This is done using cookies stored in your browser, through which your browsing behaviour when visiting various websites is recorded and evaluated by the provider. This enables the provider to determine that you have previously visited our website.
According to the provider, the data collected in the context of remarketing is not merged with personal data that may already be stored by the provider. According to the provider, pseudonymisation is used in particular for remarketing.
We use the service for marketing and optimisation purposes, in particular to display relevant and interesting advertisements to you, improve our services, make our website more interesting for you as a user and avoid irrelevant advertising.
The service may transmit personal data to the USA. The EU Commission has adopted an adequacy decision for this country (EU-US Data Privacy Framework, DPF). The service participates in the DPF.
The legal basis is Art. 6 para. 1 lit. a GDPR (consent).
Provider: Google Ireland Limited
Google Building Gordon House
Barrow St 4
Dublin
Ireland
Tel. +353 1 543 1000
Fax +353 1 686 5660
XX. Google Tag Manager
We use this service on our website.
As a marketing tool, this service enables us to manage website tags via a user interface. The tool used to implement the tags operates on a cookie-free domain and does not itself collect any personal data. The service triggers other tags which may, in turn, collect data under certain circumstances. The service does not access this data. If deactivation has been implemented at domain or cookie level, this remains in effect for all tracking tags implemented using the service.
Provider: Google Ireland Limited
Google Building Gordon House
Barrow St 4
Dublin
Ireland
Tel. +353 1 543 1000
Fax +353 1 686 5660
https://www.google.com/
https://policies.google.com/privacy
Use of Meta (Facebook & Instagram)
Content and services from the social network Facebook and the Instagram platform may be embedded on our website. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Examples of embedded content include widgets, images, videos or text links to original content on Facebook or Instagram. If you are a member of Meta, Meta may associate access to this content with your user account. Please refer to Meta's Privacy Policy for further information.
Link: https://www.facebook.com/privacy/policy
Use of Meta Pixel
We use the Meta Pixel on our website. The provider is also Meta Platforms Ireland Limited. According to Meta, the data collected may also be transferred to the USA and other third countries. We have concluded an agreement with Meta based on the EU Standard Contractual Clauses to ensure an adequate level of data protection.
The Meta Pixel enables us to define visitors to our website as a target group for the display of advertisements (“Facebook Ads” and “Instagram Ads”). This allows our advertisements to be shown specifically to Meta users who have already shown an interest in our website or viewed certain content. We can also statistically evaluate the effectiveness of our Meta advertisements by determining whether users were redirected to our website after clicking on an advertisement.
If you are logged into Meta with your account, Meta may associate your visit to our website with your user account. The data collected by Meta is anonymous to us and therefore does not allow us to identify you. Meta may, however, associate this data with your profile and use it for its own purposes, such as improving its advertising. We have no control over the scope or further use of the data by Meta.
The use of the Meta Pixel is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You may withdraw your consent at any time.
Further information about data processing by Meta can be found in Meta's Privacy Policy and in the information about the Meta Pixel.
Link: https://www.facebook.com/business/help/742478679120153?id=1205376682832142
Use of Microsoft Ads (Bing Ads)
Our website uses conversion tracking from Microsoft Advertising (Bing Ads). The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
If you reached our website via an advertisement placed by Microsoft, a cookie is set on your end device. This enables Microsoft and us to recognise that someone clicked on an advertisement and was redirected to our website. We only receive the total number of users who clicked on a Bing advertisement and were subsequently redirected to a landing page containing a conversion-tracking tag. No personal information identifying the user is disclosed to us.
Microsoft may also process the collected data in the USA. An adequate level of data protection is ensured through EU Standard Contractual Clauses and participation in the EU-US Data Privacy Framework (DPF).
You can deactivate cookies at any time in your browser settings or disable personalised advertising via Microsoft's opt-out page.
The use of Microsoft Ads is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You may withdraw your consent at any time. Further information can be found in Microsoft's Privacy Policy.
Link: https://www.microsoft.com/privacy/privacystatement
Use of TikTok Ads
We use the TikTok Pixel from the social network TikTok on our website. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and, for data transfers outside the EU, TikTok Information Technologies UK Limited.
With the help of the TikTok Pixel, we can track the behaviour of users who reached our website via TikTok advertisements. This enables us to measure the effectiveness of TikTok campaigns for statistical and market research purposes and to optimise future advertising measures.
When using the TikTok Pixel, personal data such as IP addresses, device IDs, browser information or activities on the website may be transmitted to TikTok and processed there. If you are logged into TikTok, TikTok may associate your visit to our website with your user account. TikTok may also use this data for its own advertising purposes. We have no control over this data processing.
TikTok relies on EU Standard Contractual Clauses for the transfer of personal data to third countries in order to ensure an adequate level of data protection.
The use of the TikTok Pixel is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You may withdraw your consent at any time with effect for the future.
Further information about data processing by TikTok can be found in TikTok's Privacy Policy.
Link: https://www.tiktok.com/legal/page/eea/privacy-policy/en