Data Protection
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data refers to any data that can be used to personally identify you. For detailed information regarding data protection, please refer to our privacy policy listed below.
Data collection on
our website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator.
You can find their privacy policy via the provided link.
How do we collect
your data?
Some of your data is collected when you provide it to us—for example, when you enter information into a contact form, reserve sports equipment online, or send us an email.
Other data is automatically recorded by our IT systems when you visit the website. This primarily consists of technical data (such as your internet browser, operating system, or the time the page was accessed). This data is collected automatically as soon as you enter our website.
What do we use
your data for?
Some data is collected to ensure the website functions correctly. Other data may be used to analyze your user behavior. What rights do you have regarding your data? You have the right to obtain information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking, or deletion of this data. You may contact us at any time at the address provided in the legal notice regarding this matter or any other questions concerning data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
2.
General Information and Mandatory Information
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various items of personal data are collected. Personal data is information that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this takes place.
Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
Note regarding the controller.
The controller responsible for data processing on this website is:
Note on the controller The controller responsible for data processing on this website is:
Obertauern Sport GmbH
Peter Kernstock / CEO
Waldherrstrasse 10
5561 Untertauern
Telefon: +43 (0) 676/4023650
E-Mail: [email protected]
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, or similar).
Revocation of your consent
to data processing
Many data processing operations are only possible with your express consent. You may revoke any consent you have already given at any time. An informal notification sent to us via email is sufficient for this purpose.
The lawfulness of data processing carried out prior to the revocation remains unaffected by the revocation.
Right to data portability
You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content—such as orders or inquiries that you send to us as the site operator—this page uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the lock symbol in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Payment transactions
on this website
If, following the conclusion of a contract requiring payment, you are required to provide us with your payment details (e.g., account number for direct debit), this data is necessary for processing the payment. Payment transactions using standard payment methods (Visa/MasterCard, direct debit) are conducted exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the padlock symbol in the browser bar. With encrypted communication, the payment details you transmit to us cannot be read by third parties.
Information, blocking,
deletion
Subject to applicable legal provisions, you have the right at any time to obtain information free of charge regarding your stored personal data, its origin and recipients, and the purpose of the data processing, as well as—where applicable—the right to have this data corrected, blocked, or deleted. You may contact us at any time at the address provided in the legal notice regarding this matter or for any further questions concerning personal data.
Objection to promotional newsletter emails
The use of contact details published in compliance with mandatory legal notice requirements for the purpose of sending unsolicited advertising or informational materials is hereby expressly prohibited. The site operators expressly reserve the right to take legal action in the event of unsolicited promotional information being sent, such as via spam emails.
Objection to promotional newsletter emails
The use of contact details published in compliance with mandatory legal notice requirements for the purpose of sending unsolicited advertising or informational materials is hereby expressly prohibited. The site operators expressly reserve the right to take legal action in the event of unsolicited promotional information being sent, such as via spam emails.
3.
Data Protection Officer
Statutorily required data protection officer
We have appointed a data protection officer for our company.
Obertauern Sport GmbH
Peter Kernstock / CEO
Waldherrstrasse 10
5561 Untertauern
Telefon: +43 (0) 676/4023650
E-Mail: [email protected]
4.
Data collection on
our website
Cookies
Some of our web pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. They serve to make our website more user-friendly, effective, and secure. Cookies are small text files that are placed on your computer and stored by your browser.
Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit ends. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can configure your browser to inform you about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Cookies that are necessary for carrying out the electronic communication process or for providing certain functions you have requested (e.g., the shopping cart function) are stored based on Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of its services. Any other cookies (e.g., cookies for analyzing your browsing behavior) that may be stored are addressed separately in this privacy policy.
Contact Form
If you send us inquiries via the contact form, the information provided in the form—including the contact details you entered—will be stored by us for the purpose of processing the inquiry and handling any follow-up questions. We will not share this data without your consent.
Consequently, the data entered into the contact form is processed exclusively based on your consent (Art. 6 para. 1 lit. a GDPR). You may revoke this consent at any time. An informal notification sent to us via email is sufficient for this purpose. The lawfulness of data processing operations carried out prior to the revocation remains unaffected by the revocation.
The data you enter in the contact form will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been fully processed). Mandatory statutory provisions—particularly retention periods—remain unaffected.
Registration on
this Website
You can register on our website to access additional features. We use the data entered for this purpose solely to provide the specific service or offering for which you have registered. All mandatory information requested during registration must be provided in full; otherwise, we will reject the registration.
We use the email address provided during registration to notify you of important changes, such as modifications to the scope of services or technically necessary updates.
The data entered during registration is processed based on your consent (Art. 6(1)(a) GDPR). You may revoke your consent at any time. An informal notification sent to us via email is sufficient for this purpose. The lawfulness of data processing carried out prior to the revocation remains unaffected.
Data collected during registration is stored by us for as long as you remain registered on our website and is subsequently deleted. Statutory retention periods remain unaffected.
Processing of
Data
(Customer & Contract Data)
We collect, process, and use personal data only to the extent necessary for establishing, defining the content of, or modifying the legal relationship (inventory data). This is done based on Art. 6(1)(b) GDPR, which permits data processing for the performance of a contract or for taking steps prior to entering into a contract. We collect, process, and use personal data regarding the use of our websites (usage data) only to the extent necessary to enable the user to utilize the service or to bill for it.
Collected customer data is deleted upon request following the completion of the order or the termination of the business relationship. Statutory retention periods remain unaffected.
Data Transmission
upon Conclusion of Contract
for Services and
Digital Content
We transmit personal data to third parties only when necessary for contract fulfillment—for example, to the financial institution commissioned with payment processing or to the online reservation system operator for technical maintenance purposes.
No further transmission of data takes place unless you have expressly consented to such transmission. Your data is not passed on to third parties without express consent—for instance, for advertising purposes. The legal basis for data processing is Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or to take steps prior to entering into a contract.
Online reservation and booking system
The online reservation and booking of your ski equipment is handled via Wintersteiger AG’s "Easyrent" system. Wintersteiger AG’s privacy policy and a detailed explanation of the data processing can be found at the following link:
https://www.wintersteiger.com/de/Unternehmen/Datenschutz
5.
Social Media
Sharing content via plugins (Facebook, Instagram, Google, Twitter, etc.)
Content on our pages can be shared on social networks such as Facebook, Twitter, or Google+ in a manner that complies with data protection regulations. A direct connection between the networks and users is established only when the user actively clicks on one of these buttons.
There is no automatic transmission of user data to the operators of these platforms. If the user is logged into one of the social networks, an information window appears when using the social buttons for Facebook, Instagram, Google+1, Twitter, etc., allowing the user to confirm the text before sending it.
Our users can share content from this page on social networks in a data-protection-compliant manner, without the network operators creating comprehensive browsing profiles.
6.
Newsletter
If you wish to subscribe to the newsletter offered on the website, we require an email address from you, as well as information that allows us to verify that you are the owner of the provided email address and consent to receiving the newsletter. No further data is collected, or data is collected only on a voluntary basis. We use this data exclusively to send the requested information and do not pass it on to third parties.
The processing of the data entered into the newsletter registration form is based solely on your consent (Art. 6 para. 1 lit. a GDPR). You may revoke your consent to the storage of the data and email address, as well as their use for sending the newsletter, at any time—for example, via the "unsubscribe" link in the newsletter. The lawfulness of data processing operations already carried out remains unaffected by the revocation.
The data you provide for the purpose of receiving the newsletter is stored by us until you unsubscribe from the newsletter and is deleted after cancellation. Data stored by us for other purposes (e.g., email addresses for the member area) remains unaffected by this.
7. Plugins and Tools
Our website uses the following providers:
Google Analytics, Facebook Connect, Facebook, Facebook Pixel, Instagram.
YouTube
Our website uses plugins from the Google-operated site YouTube. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This informs the YouTube server which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of presenting our online services in an appealing manner. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
Further information on the handling of user data can be found in YouTube’s privacy policy at: https://policies.google.com/privacy?hl=de
Vimeo
Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages equipped with a Vimeo plugin, a connection to Vimeo's servers is established. This informs the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This applies even if you are not logged into Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.
If you are logged into your Vimeo account, you enable Vimeo to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account.
Further information on the handling of user data can be found in Vimeo's privacy policy at: https://vimeo.com/privacy.
As of December 1, 2023, to the best of my knowledge and belief.
