Privacy Policy

As of 10.10.2024

You are important to us! Therefore, we consider it our duty to treat your personal data with the utmost care and protect it from misuse.

‍

ARGE NÖ Bergerlebnispass is represented by Hochkar & Ötscher Tourismus GmbH. As the controller within the meaning of the GDPR, ARGE NÖ Bergerlebnispass strictly adheres to the data protection regulations (GDPR and DSG) in their currently valid version when processing and collecting personal data. Below you will find detailed information about what personal data is collected during your visit to our website www.BERGERLEBNISPASS.at and what it is used for, as well as what personal data is processed in the context of the ongoing business relationship (free information service relating to the NÖ Bergerlebnispass) and how it is used. Hochkar & Ötscher Tourismus GmbH acts as a data processor for ARGE NÖ Bergerlebnispass.

‍

‍

Hyperlinks

Our website www.BERGERLEBNISPASS.at contains links (known as hyperlinks) to the websites of other providers (lift companies). These hyperlinks are clearly marked as such on our website by indicating the name of the individual lift companies.

‍

Specifically, these are the following providers: Annaberger Lifte, Erlebnisalm Mönichkirchen, Gemeindealpe Mitterbach, Hochkar Bergbahnen, Königsberg, Mariazeller Bürgeralpe, Ötscherlifte Lackenhof, Familienschigebiet Maiszinken, Semmering Hirschenkogel, Wexl Arena St. Corona am Wechsel.

‍

When you activate these hyperlinks, you will be redirected from our website directly to the website of the other provider and will thereby leave our website. You can recognize this in particular by the fact that the URL displayed in your browser changes.

‍

It is expressly emphasized that this privacy policy of ARGE NÖ Bergerlebnispass does not extend to these providers. As we have no influence over whether these providers comply with data protection regulations, we cannot accept any responsibility for the confidential handling of your data on these providers' websites. Therefore, we as ARGE NÖ Bergerlebnispass accept no responsibility or liability for the data processing carried out by these providers. For information about how these providers handle your personal data, please contact the relevant providers directly or refer to their websites.

‍

Our website does not contain any hyperlinks that redirect you to websites of providers outside the EEA.

‍

Below you will find detailed information (in particular) about:

1.          which personal data is collected during your visit to our website www.BERGERLEBNISPASS.at and for what purposes it is used,

2.         which personal data is processed in the context of your ongoing business relationship with us and for what purposes this data is used.

‍

‍

Changes in legislation or changes to our internal company processes may require adjustments to this privacy policy. We therefore ask you to read our privacy policy regularly. The current version of our privacy policy can be found on this homepage, where it can be accessed, saved, and printed at any time. If you have any questions, please feel free to contact us.

‍

1.  Responsibility

Responsible for data processing:

ARGE NÖ Bergerlebnispass
Göstling 46
3345 Gösting an der Ybbs
Phone: +43 (0)5 0138 201
E-Mail: info@bergerlebnispass.at
Homepage: www.BERGERLEBNISPASS.at

‍

Data protection coordinator:

Dipl.-Ing. Jakob Zeh
Telefon: +43 664 8272018
E-Mail: j.zeh@ecoplus.at

2. Types of data, data sources, and processing purposes

What is personal data?

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, or IP address. Information that we cannot link to your person (or only with disproportionate effort), e.g., by anonymizing the information, is not personal data. The processing of personal data (e.g., collection, retrieval, use, storage, or transmission) always requires a legal basis or your consent.

‍

What are special categories of personal data according to Article 9 of the GDPR?

The processing of special categories of personal data, i.e. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, health data, or data concerning the sex life or sexual orientation of a natural person, is generally prohibited and only permitted in specific cases; for example, if you give your express consent or if the processing is necessary for the establishment, exercise, or defense of legal claims.

‍

In general, we process personal data that we receive from you in the course of our business relationship or that you provide to us with your express consent.

‍

The following data (in particular) is processed for the purpose of providing information services by telephone, email, post, or on site at the office:

• First and last name, including title
• Date of Birth
• Gender
• Adress
• E-Mail-Adress
• IP-Adress
• Contact details

However, as we have no influence on the content of the information provided by customers by email, telephone, post, or in person at our office, it is not possible to provide a definitive list of the personal data or categories of personal data processed in this context.

We process only your (categories of personal data listed here) for the purposes specified in this privacy policy and only to the extent that is absolutely necessary for the fulfillment of those purposes. We therefore pursue comprehensive purpose limitation of data processing and data minimization in accordance with the GDPR in order to ensure the highest level of data security for you.

‍

3. Legal basis for data processing

contract fulfillment

We base our data processing in relation to the provision of our free information service on Art. 6 (1) (b) GDPR.

‍

Consent

If you have given us your consent to process your personal data, this data will only be processed in accordance with the purposes specified in the respective declaration of consent and to the extent agreed upon. The declaration of consent must be unambiguous, informed, and refer to the specific processing. You can revoke your consent at any time with future effect by sending an email to info@bergerlebnispass.at, by post, or in person at our office at Göstling 46, 3345 Göstling/Ybbs.

‍

4. Order processing and data transfer

In this section, we inform you about who we may share your data with and why.

Within ARGE NÖ Bergerlebnispass, those departments and employees who need your personal data to fulfill pre-contractual measures or contractual obligations and to safeguard the legitimate interests of ARGE NÖ Bergerlebnispass will have access to it. They act as vicarious agents of ARGE NÖ Bergerlebnispass and are fully subject to this privacy policy. Employees are obliged to handle and protect your data with care and receive regular training on data protection and data security.

‍

In addition, processors commissioned by us (in particular IT and back-office service providers and printing companies) receive your personal data if they need it to perform the respective service. We use the following processors in particular: Hochkar & Ötscher Tourismus GmbH, ecoplus Alpin GmbH.

‍

All processors are contractually obliged to process your personal data only within the scope of service provision and to treat it confidentially, as well as to process your data in accordance with the provisions of the GDPR. ARGE NÖ Bergerlebnispass only uses processors who offer sufficient guarantees that appropriate technical and organizational measures are implemented in such a way that processing is carried out in accordance with the requirements of the GDPR and the protection of the rights of the data subjects is ensured.

‍

5. Disclosure of data

In order to carry out your requested information request and fulfill the resulting free information service contract, your personal data (in particular your first and last name, including title, date of birth, gender, address, email address, IP address, and telephone contact details) will be processed to the extent necessary and provided by you.

‍

6. Duration of processing and data storage

How long will your data be stored and processed?

In general, personal data is deleted as soon as the purpose for which it was originally collected no longer exists and there is no other specific reason to store the data for longer.

Specifically, we store and process your personal data for the duration of the customer relationship or until you revoke your consent or object in accordance with Art. 21 GDPR. We therefore only store your personal data for as long as is necessary to fulfill the free information service. Your personal data will be stored for a maximum of 2 years from the last customer contact, for example to defend or enforce specific claims for damages.

‍

7. Rights of affected persons

As a data subject, you have the following rights at any time:

• Information, correction, deletion, or restriction of the processing of your stored data
• Objection to processing
• Data portability, right to withdraw consent

To exercise your rights as an affected person, or for any information regarding the processing of your personal data, please contact us at:

‍

ARGE NÖ Bergerlebnispass
Göstling 46, 3345 Gösting an der Ybbs
Phone: +43 (0) 50 138 200
E-Mail: info@bergerlebnispass.at

‍

‍

Right to information

For the security of your data, we ask you to provide us with a valid ID document for identification purposes when exercising your rights as a data subject.

Right to information – Art. 15 GDPR

As an affected person, you have the right to obtain the following information from us at any time free of charge:

• the purposes of processing
• the categories of personal data that we process
• the recipients or categories of recipients to whom the personal data has been or will be disclosed
• where possible, the envisaged period for which your personal data will be stored, or, if not possible, the criteria used to determine that period
• the existence of your right to rectification or erasure of personal data concerning you, or to restriction of processing by us as the controller, or your right to object to such processing
• the existence of a right to lodge a complaint with the competent supervisory authority; in Austria, this is the Data Protection Authority.
• all available information about the origin of your data, unless your personal data is collected from you as the data subject

Furthermore, as data subject, you have the right to obtain information about whether your personal data has been transferred to a third country or to an international organization. If this is the case, you as the data subject have the right to obtain information about the appropriate safeguards in connection with the transfer. ARGE NÖ Bergerlebnispass does not transfer your data to third countries or international organizations.

‍

Furthermore, as a data subject, you have the right to obtain information about the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details.

‍

You have the right to receive a copy of the personal data that is being processed. For any additional copies you request, we may charge a reasonable fee based on administrative costs. If you submit your request electronically, the information will be provided in a commonly used electronic format, unless you specify otherwise.

Please feel free to contact us at any time!

‍

‍

Right to rectification – Art. 16 GDPR

As a data subject, you have the right to request that we immediately rectify any inaccurate personal data concerning you and immediately complete your personal data stored by us. You can contact us at any time to do so.

‍

Right to correction

As a data subject, you have the right to request that we immediately correct any inaccurate personal data concerning you. You can contact us at any time to do so.

‍

‍

Right to erasure (or right to be forgotten) – Art. 17 GDPR

As a data subject, you have the right to request that we delete your personal data immediately if one of the following reasons applies and provided that the processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims:

‍

• Your personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
• As the data subject, you withdraw your consent on which the processing was based in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.
• As a data subject, you object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or as a data subject, you object to the processing pursuant to Art. 21 (2) GDPR.
• Your personal data has been processed unlawfully.
• The erasure of your personal data is necessary to comply with a legal obligation under Union law or the law of the Republic of Austria to which we, as the controller, are subject.

If one of the above reasons applies and you, as the data subject whose personal data is stored by ARGE NÖ Bergerlebnispass, wish to have this data deleted, you can contact us at any time.

‍

Right to restriction of processing – Art. 18 GDPR

As a data subject whose personal data is being processed, you have the right to request that we, as the controller, restrict processing if one of the following conditions applies:

• The accuracy of the personal data is contested by you as the data subject for a period that allows us, as the controller, to verify the accuracy of your personal data.
• The processing is unlawful, and you as the data subject refuse to have your personal data deleted and instead request the restriction of the use of your personal data.
• We, as the controller, no longer need your personal data for the purposes of processing, but you, as the data subject, need it to assert, exercise, or defend legal claims.
• You, as the data subject, have objected to the processing pursuant to Art. 21 (1) GDPR, and it is not yet clear whether the legitimate reasons of the controller outweigh those of the data subject.

If one of the above reasons applies and you, as the data subject whose personal data is stored by ARGE NÖ Bergerlebnispass, wish to restrict the processing of this data, you can contact us at any time.

‍

Right to data portability – Art. 20 GDPR

As a data subject affected by the processing of personal data, you have the right to receive the personal data concerning you, which you as the data subject have provided to us as the controller, in a structured, commonly used, and machine-readable format.

You also have the right to transmit this data to another controller without hindrance from us, provided that:

1. the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR
2. and processing is carried out using automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, as a data subject exercising your right to data portability pursuant to Art. 20 (1) GDPR, you have the right to have your personal data transferred directly from us as the controller to another controller, insofar as this is technically feasible and does not adversely affect the rights and freedoms of others.

You can contact us at any time to assert your right to data portability.

‍

‍

Right to object – Art. 21 GDPR

As a data subject, you have the right to object, on grounds relating to your particular situation, object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) (e) (processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller) or (f) (processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party) of the GDPR. You can contact us at any time to do so. As the controller, we will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

Insofar as we process your personal data for direct marketing purposes, you have a general right to object, which we will implement without you having to specify a particular situation. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

‍

Information on legal remedies – Art. 77 GDPR; Section 24 DSG

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR or (for Austria) the DSG. In Austria, this supervisory authority is the Data Protection Authority.

‍

Right of withdrawal – Art. 7 (3) GDPR

You have the right to revoke your consent at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent prior to revocation. You can revoke your consent at any time by simply sending an informal email to info@bergerlebnispass.at. You are also welcome to notify us of your withdrawal by mail or in person at the ARGE NÖ Bergerlebnispass office at Göstling 46, 3345 Göstling/Ybbs.

‍

‍

8. Data processing when using the ARGE NÖ Bergerlebnispass website

Cookies & Google Analytics

We use cookies on our website. Cookies are small files that we send to your device's browser and store there when you visit our website. Some features of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to perform various analyses. For example, cookies are able to recognize the browser you are using when you visit our website again. Cookies enable us, among other things, to make our website more user-friendly and effective for you by tracking your use of our website and determining your preferred settings (e.g., country and language settings).

On our website, we use the following cookies from “CookieBot” (UserCentrics), depending on the website user's selection:

‍

‍

• Necessary cookies
  Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
• Preferences
  Preference cookies allow a website to remember information that affects the way a website behaves or looks, such as your preferred language or the region you are in.
• Statistics
  Statistics cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.
• Marketing
  Marketing cookies are used to track visitors across websites. The intent is to display ads that are relevant and engaging for the individual user and therefore more valuable for publishers and third-party advertisers.

‍

Cookies used depending on the website user's selection:

‍

When you access this website, ARGE NÖ Bergerlebnispass stores information about your visit. This data is used exclusively for statistical purposes and is anonymized and aggregated before being evaluated. ARGE NÖ Bergerlebnispass uses this data exclusively to optimize its website and for market research. The following data is collected:

• Number of users on the website
• Time spent on the website
• Geographical origin of users
• Browser and device information

A complete list of the data that can be collected by Google Analytics depending on cookie consent can be found at https://developers.google.com/analytics/devguides/reporting/data/ v1/api-schema We base the processing of your personal data using technically necessary cookies on the legal basis of Art. 6 (1) lit. f GDPR, as we have a legitimate interest in processing this data because without it, the functions on our website cannot be used.

If you have given us your consent to the use of cookies other than those that are technically necessary on the basis of a notice on our websites – “cookie banner” – we base the lawfulness of the processing of your personal data (for technically necessary cookies in addition) on Art. 6 (1) lit. a GDPR.

‍

‍

If the data transmitted to us via cookies is no longer required for the purposes described above, it will be deleted. Only in individual cases may further storage take place if this is required by law.

‍

Google Analytics (with anonymization function)

This website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies,” which are text files placed on your computer, to help the website analyze how users use the site.

The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage.

‍

Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Further information about Google Analytics can be found on the Internet or at www.google.com/analytics. For more information about terms of use and data protection, please visit https://policies.google.com/?hl=de. You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

‍

We have implemented IP address anonymization from Google Analytics on this website. This feature was developed by Google so that this website can comply with applicable data protection regulations and recommendations from local data protection authorities if they prohibit the storage of the full IP address. The anonymization or masking of the IP address takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before the data is stored or processed. For more information on IP anonymization, please visit https://support.google.com/analytics/answer/2763052?hl=de.

‍

9. Data security

What data security measures have been taken to protect your data?

The security of your data is very important to us. We have therefore taken all necessary technical and organizational measures to ensure the security of data processing and the confidentiality of your personal data, and to protect your personal data from access by unauthorized third parties to the best of our ability, and will continue to do so in the future.  We regularly review the technical and organizational measures we have put in place to ensure that they are always in line with technological progress.

We achieve this on the one hand by using up-to-date security software, coding and encryption procedures within our IT infrastructure, and on the other hand by promoting the security of your data through the use of risk-minimizing measures (data minimization in all areas) and preventive protective measures.