We hereby wish to inform you of the processing of your personal data within the context of the General Data Protection Regulation (GDPR), the Data Protection Law (DPL) and the Telecommunications Law (TL). Please contact us at any time should you need more information. Our contact details can be found at the end of this Privacy Policy.

1. Personal data

Personal data means all data containing information about personal or factual circumstances, such as name, address, e-mail address, telephone number, date of birth, age, gender, social security number, video recordings, photos, etc. Please notify us if changes are made to your personal data.

We will collect, process and use your personal data only where this is necessary for the performance of the contract or is required by a legal obligation or if you voluntarily provide us with such data. We will obtain your consent before any further processing of your data. Processing may also take place without your consent where our legitimate interest in data processing outweighs your interest in data protection. We will use the data provided to us in particular for the purposes of performing the contract, initiating the contract, meeting legal obligations, etc.

As a rule we will collect your data directly from you. In the context of the contract, however, it may happen that we will collect your data from third parties, such as bookings made via tour operators or booking platforms and similar.

We would furthermore state that the provision of personal data is to a certain extent required by law (e.g. tax law) or may result from contractual provisions (e.g. information about the contracting party). Failure to provide the personal data may mean that the contract cannot be concluded.

2. Purposes and legal basis

a.) Performance of services:

In the case of tickets that are issued for a period of one or more days, your name, date of birth, address and payment details will potentially be collected so that the controller knows the individual with whom the contract has been concluded and to whom there is a performance obligation. The processing of these data, and for this purpose, is performed in a legally justified manner upon the basis of the performance of the contract in accordance with Article 6(1)(b) GDPR.

Tickets may be used in several areas operated by legally independent cable car companies. In order to facilitate this, as well as for the purpose of internal billing between the individual cable car companies, data are transferred to IG members and processed by them for approval purposes. The processing of these data, and for this purpose, is performed in a legally justified manner upon the basis of the performance of the contract in accordance with Article 6(1)(b) GDPR as well as our legitimate interest in accordance with Article 6(1)(f) GDPR.

b.) Fraud control:
In the case of tickets for which Photocompare is enabled, a reference photo will be taken the first time the ticket is used, provided the terminal in use has the technical capability to do so and the Photocompare process is actually enabled as well. If the ticket is used again, this reference photo will then be compared with an inspection photo and checked to see if the ticket has been given to someone else in an unauthorised manner. The processing of these data, and for this purpose, is performed in a legally justified manner upon the basis of the legitimate interest in accordance with Article 6(1)(f) GDPR.

c.) Service offer:
On the basis of our legitimate interests (i.e. our interest in the analysis, optimisation and business operation of our (web) offer within the meaning of Article 6(1)(f) GDPR)), our offering will include third-party content or service offers in order to integrate content and services.

This assumes that your IP address will be transmitted to such third-party providers because the content cannot be sent to your browser without the IP address. The IP address is required to display this content. Third-party providers may also use so-called web beacons for statistical or marketing purposes. Web beacons can be used to evaluate information such as visitor traffic on the website. For this purpose a cookie may also be set that will contain technical information about your browser and operating system, the referring websites, time spent visiting and other information regarding the use of our website.

3. Your rights

Under the provisions of the GDPR you have the right to receive information on any of your personal data that we store, as well as a right to correction, data transmission, objection, limitation of processing and blocking or deletion of incorrect or unlawfully processed data.

You have the right to revoke your consent at any time. Where such revocation is issued, any data processing undertaken up to this point will remain lawful.

If you believe that our processing of your personal data violates the applicable data protection law, you may make a complaint to the competent supervisory authority. The Data Protection Authority is the competent body for Austria.

4. Data security

Your personal data will be protected by appropriate organisational and technical precautions. These precautions in particular relate to protection against unauthorised, unlawful or accidental access, loss, processing, use or manipulation of data.

Please note that we do not accept any liability whatsoever for the disclosure of information owing to errors in data transmission and/or unauthorised access by third parties for which we are not responsible.

5. Transmission of data to third parties

In order to perform our contractual or legal obligations, it may be necessary to transfer your data to data processors or to other recipients, in particular to public authorities. Data processors will process your personal information according to strict guidelines and only to the extent necessary to perform such tasks. As an example, our data processors are external IT service providers, etc.

On the basis of our legitimate interests (i.e. our interest in the analysis, optimisation and business operation of our offer within the meaning of Art. 6 (1) (f) GDPR)), our offering will include third-party content or service offers in order to integrate content and services.

This assumes that your IP address will be transmitted to such third-party providers because the content cannot be sent to your browser without the IP address. The IP address is required to display this content. Third-party providers may also use so-called web beacons for statistical or marketing purposes. Web beacons can be used to evaluate information such as visitor traffic on the website. For this purpose a cookie may also be set that will contain technical information about your browser and operating system, the referring websites, time spent visiting and other information regarding the use of our website. The following provides an overview of some of our third-party providers:
 

• As a booking platform and to integrate webcams, we use offers from feratel media technologies AG, Maria-Theresien-Strasse 8, A-6020 Innsbruck. Its privacy policy can be found at http://www.feratel.at/datenschutzerklaerung/.
• For presenting interactive map content, such as hiking routes, trails, cycle routes etc. we use a service provided by General Solutions Steiner GmbH, FN 39037h, Bruggfeldstrasse 5/III, A-6500 Landeck, office@general-solutions.at. Its privacy policy can be found at https://general-solutions.eu/uploads/Datenschutzerklaerung.pdf.
• As a further provider, we use offers from Outdooractive GmbH & Co KG, HRA 8939, Missener Strasse 18, D-87509 Immenstadt, service@outdooractive.com. Its privacy policy can be found at https://www.outdooractive.com/de/datenschutz.html.
• For presenting currently open facilities (slopes, lifts, etc.) we use a service provided by intermaps Software GmbH, FN 83621y, Schönbrunner Strasse 80/6, A-1050 Vienna, privacy@intermaps.com. Its privacy policy can be found at https://www.intermaps.com/datenschutz.html.
• For integrating webcams on our website we use offers from Panomax GmbH FN 477789g, Landesstrasse 23, A-5302 Henndorf a.W., office@panomax.com. Its privacy policy can be found at https://www.panomax.com/datenschutz.html.
• To provide certain fonts on the website, we use the Google Fonts service provided by Google, Inc. For more information on how Google Fonts handles your personal information see https://developers.google.com/fonts/faq.
• We are a member of the community of interests of the Zillertal Seilbahnen cable car operators (“CI”, Zillertaler Seilbahnen GmbH). The privacy policy of the CI can be found at www.zillertalski.at. The data transfer to IG members is performed in accordance with the purposes for doing so (Point 2).
• The management of ticket data and the transmission of data to IG members is undertaken by SKIDATA AG, FN 59669z, Untersbergstraße 40, 5083 Grödig/Salzburg, Austria. The Photocompare process as described under Point 2 is also provided via SKIDATA.

We will only transfer your data to other recipients if you have given us or the recipient your consent to the transmission of data, or if the transmission of data is required to execute or perform the contract, or if we are legally obliged to transmit the data.

We transmit your personal data to recipients within the European Union or to countries for which the European Commission has determined that there exists an appropriate level of data protection. If this is not the case we will ensure, on the basis of suitable guarantees, that the data recipient complies with the GDPR. There is no adequate level of data protection in the USA in particular. If we transmit data to companies in the USA, these companies must be subject to the EU-US Privacy Shield. By self-certifying under the terms of the Privacy Shield, companies are therefore confirming compliance with the provisions of GDPR. Further details on the Privacy Shield can be found at: https://www.privacyshield.gov/welcome.

6. Retention of data

a.) Retention in order to perform contractual or legal obligations:
We will retain your data for as long as is necessary to perform our contractual or legal obligations. We are thus for example required to keep our accounting records for a period of 7 years from the end of the calendar year in question.

When storing your data we will ensure that such data is only used to the extent necessary for the above-mentioned purposes.

b.) Retention on the basis of your consent:
Subject to your consent, we will store your data for as long as this is specified in your statement of consent or other agreement, for example in the context of a contract made with you.

c.) Retention based on legitimate interests:

We will also store your data for as long as is necessary to defend liability or other claims within the statutory limitation period. Under Austrian law such period is in principle 3 years from the time when the damage and the author of the damage became known.

Reference photos (see Point 2 and 5) are stored for the period of validity of the respective ticket and then erased. Inspection photos (photos used to compare individuals with the reference photo) will be deleted no more than 48 hours after passing through the turnstile. If inspection photos are required to provide evidence of fraud, they will be stored for 14 days.

Video surveillance in or around buildings will be stored for a maximum of 72 hours for the purpose of protecting property.

We will store booking inquiries that do not lead to the conclusion of a contract for the purpose of internal analyses (such as analysing our offer) for a period of 24 months.

We will save documents relating to job applications for a period of 12 months.

d.) Obligations to delete data on the basis of the right to deletion:
Our obligations to delete data in the event of your exercising your right to deletion pursuant to Art. 17 GDPR will not be affected by the above paragraphs.

7. Collection of general data and information

Our website collects a series of general data and information on each visit. The browser, operating system, previously visited website, page visited, date and time of visit, IP address, internet service provider, amount of data transferred and other similar data and information may all be gathered. Such data will be used by us to maintain the website and to prevent dangers. In this regard we have a legitimate interest in the storage of log files within the meaning of Art 6 (1) (f) GDPR.

The anonymous data contained in server log files will be stored separately from all other personal data.

8. Cookies

Our website uses so-called cookies. These are small text files that are stored on your device using the browser. We use cookies to make our offer user-friendly. Most of the cookies we use are essential cookies and are automatically deleted from your hard drive at the end of the browser session (“session cookies”).

The third-party providers we mention in this privacy policy may use “persistent cookies” in order to properly display content or to ensure the functioning of the service.

If you do not want this you can configure your browser so that it will inform you as regards the setting of cookies and you can allow this only in individual cases. Where the cookies we use are subject to, we will ask for your consent in advance. Disabling cookies may limit the functionality of our website.

9. Facebook

The provider of the following services is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

a.) Social Media Plug-In:

For each visit to this website where a Facebook plugin has been embedded, your browser is automatically prompted to download an image of the Facebook plugin. This technical process tells Facebook which specific subpage of our website is being visited. If you are logged into Facebook at the same time, Facebook will recognise which specific subpage is being visited. This information is collected and associated with the respective Facebook account by Facebook without your having to click on the plugin.

If you do not want to transmit such data to Facebook you can prevent it by logging out of your Facebook account.

For more information see https://de-de.facebook.com/privacy/explanation. Please contact us for more information if you wish to object to such data processing.

b.) Custom Audiences:

Facebook Custom Audiences permits visitors to our website to receive targeted interest-based advertising. This is done by placing cookies on your device. These cookies can be used to analyse user behaviour when visiting the website, then used for targeted product recommendations and interest-based advertising.

If you do not want this you can opt out via the following link: https://www.facebook.com/settings/?tab=ads.

10. Google

The provider of the following services is Google Ireland Limited, Reg# 368047, Gordon House, Barrow Street, Dublin, D04 E5W5, Dublin.

a.) Google Analytics:

Google Analytics is a service for gathering, collecting and analysing data on the behaviour of visitors to websites. Among other things, Google uses the data and information obtained to evaluate the use of our website and to provide other services related to the use of this website.

Google Analytics sets a cookie that enables Google to analyse the usage of our website. This cookie prompts the browser to send data to Google for the purpose of online analysis. As part of this technical process Google will receive such personal data as the IP address of the data subject, which among other things permits Google to track the origin of visitors and clicks and subsequently to allow the settlement of commissions.

We use the “_gat._anonymizeIp” feature for web analysis via Google Analytics. This feature means that the IP address will be shortened and anonymised by Google.

For more information see https://www.google.com/intl/de_de/analytics/ and https://www.google.com/intl/en/policies/privacy/. Please contact us for more information if you wish to object to such data processing. It is possible to opt out by installing the following plugin: https://tools.google.com/dlpage/gaoptout?hl=de.

b.) Google Maps:
We use Google Maps from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website.

When the functions of this map are used, data are transferred to Google. To find out what data Google collects and what these data are used for, click: https://www.google.com/intl/de/policies/privacy/. 

c.) Remarketing:

Google Remarketing is a feature of Google AdWords that allows us to show you ads if you have previously visited our website.

The provider is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. Google Remarketing is a feature of Google AdWords that allows us to show you ads if you have previously visited our website.

Google Remarketing sets a cookie that will recognise you when you subsequently visit websites that are also members of the Google advertising network. The cookie is used to store personal information such as the websites visited. Whenever you visit a website that has the Google Remarketing service embedded, your browser automatically identifies itself with Google. As part of this technical process Google will receive such personal data as the user's IP address or browsing habits.

It is possible to opt out via the following link: https://adssettings.google.com/authenticated?hl=en. You can also configure your browser to prevent the use of third-party cookies.

d.) Google AdWords:

Google AdWords is an internet advertising service that allows advertisers to show ads in Google search engine results as well as on the Google advertising network.

If you have reached our website via a Google ad, a so-called conversion cookie will be placed on your system. The conversion cookie stores personal information such as the web pages visited. A conversion cookie will expire after 30 days and will not be used to identify you. The conversion cookie indicates whether you have visited certain subpages of our website, for example an online shop. The conversion cookie helps both us and Google to determine whether you have generated revenue. The data and information collected will be used by Google to provide visitor statistics for our website. Neither we nor any other advertisers using Google AdWords will receive any information that could identify you.

e.) Double Click:

DoubleClick is an online marketing service that sets cookies in order to provide users with relevant ads. DoubleClick can also track so-called conversions using cookie IDs. This will happen for example if a user sees a DoubleClick ad and later visits the advertiser’s website using the same browser and buys something there. DoubleClick lets your browser automatically establish a direct connection to the Google server. If you are registered with a service provided by Google, Google may associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible for the provider to find and store your IP address.

You can disable the interest-based ads of providers that are part of the About Ads self-regulatory campaign via the link http://www.aboutads.info/choices; this setting will be deleted when you delete your cookies.

For more information see https://www.google.com/doubleclick and http://support.google.com/adsense/answer/2839090.

11. YouTube Data protection declaration

We use YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, on this page.

When you visit pages of our website that include integrated YouTube videos, data are transferred to YouTube, stored and evaluated. If you have a YouTube account and are logged in, this information will be associated with your personal account and the information stored in it.

To find out what data Google collects and what these data are used for, click: https://www.google.com/intl/de/policies/privacy/.

12. Instagram Data protection declaration

On our website we use functions of the social media network Instagram of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA.

Content embedding features (embed function) allow us to view images and videos.

When you access pages using such functions, data (IP address, browser data, date and time, cookies) is transmitted to Instagram, stored and evaluated.

If you have an Instagram account and are logged in, this information will be associated with your personal account and the information stored in it.

The data protection guidelines, the nature of the information Instagram collects and how it uses it can be found at: https://help.instagram.com/155833707900388. 

13. Push notifications from PushPanda.io

We use browser push notifications from PushPanda.io. Browser push notifications are notifications that can be displayed on your terminal device without opening the website or the relevant app.

No distinctive user data, such as IP addresses or similar, that could allow the user in question to be identified, are saved. If somebody registers for the notification distributor (opt-in process), only an identification code and the geographical IP information (country and state) of the user are sent to PushPanda.io and stored in its database. This code is issued by the respective browser provider (Google, Mozilla, Apple, etc.) and enables the notifications to be sent to the relevant browser later. Notifications are sent by the browser provider itself.

If the opt-in for push notifications is withdrawn (opt-out), all data saved with PushPanda.io is deleted and the identification code will be invalid.
You can find information about opting out of push notifications at https://www.pushpanda.io/de/links/abmeldung/. PushPanda.io is a service of Project K GmbH, with headquarters in Innsbruck, Austria.

14. Newsletter

Our Newsletter will be sent with your consent or with legal permission. If you wish to receive our Newsletter, you need only provide your e-mail address, otherwise the Newsletter cannot be sent. Further information other than your e-mail address is optional and will only be used to personalise the offer (e.g. by selecting a topic to inform you about via the Newsletter). The data will be used for the purpose of sending advertising and will be deleted as soon as you revoke your consent to the sending of the Newsletter. Cancellations may be sent to us via the contact details below, or you can simply unsubscribe directly from the Newsletter.

In order to send you the Newsletter we need confirmation that you are the owner of the e-mail address (so-called double opt-in). This confirmation is required to ensure that you have actually signed up for the Newsletter. Registrations for the Newsletter will be logged in order to provide proof of the registration process, which includes both the storage of the registration and confirmation times, and of your IP address. Changes to your stored data will also be logged. You can cancel your subscription at any time via the cancellation option in the Newsletter.

When retrieving the Newsletter, a web beacon will collect technical information such as information about your browser and system as well as your IP address and the time of retrieval. This information is used for technical improvements to the services based upon the technical data or the target audience and reading behaviour or access times. These statistical surveys will also determine whether the Newsletters were opened, when they were opened and which links were clicked on. This information may for technical reasons be assigned to individual Newsletter recipients.

15. Contact form

If the contact form is used, the personal data you provide will automatically be saved. Different personal data may be required by mandatory fields according to the contact form used. If a mandatory field requires personal data, such data must be provided as part of the initiation or performance of the contract or on account of legal obligations.

This data will be stored for processing or contact purposes and will not as a matter of principle be disclosed to any third parties. If we cannot answer a particular request, it will be forwarded to the relevant tourist association (currently those of Zell-Gerlos, Wald-Königsleiten, or Krimml) for reply. We have concluded an order processing contract to ensure that your data will be properly protected.

The personal data you provide will be stored for as long as is necessary for the assertion and/or defence of claims or as required by the relevant legal obligations

16. Competitions

The following data will be collected if you participate in a competition on our website: first name, last name, date of birth, e-mail address. Such data are necessary for the holding of the competition and will only be used for this purpose: in this respect, the data processing is legally justified upon the basis of the performance of a contract pursuant to Article 6 (1) (b) GDPR.

If you have given your consent, your name will be published on our social media channels. You may revoke this consent at any time; we will in this case delete the social media post.

17. Applications

You will receive information about vacancies in our company via our website. As part of the application process, you have the option of submitting your application documents electronically via e-mail, or by post. Your data will be used for evaluation purposes during the application process, for establishing contact during the application process and, where applicable, for establishing an employment relationship.

18. Contact details

Controller:

ZELLER BERGBAHNEN ZILLERTAL GmbH & Co KG
FN 22212s, Landesgericht Innsbruck
Rohr 23, 6280 Zell am Ziller
Tel.: 05282/7165
E-Mail: datenschutz@zillertalarena.com

19. Zillertal Arena

The controller is a member of Zillertal Arena, an advertising alliance, which have merged together, doing so in particular for marketing purposes. Zillertal Arena is made up of the following members:

ZELLER BERGBAHNEN ZILLERTAL GmbH & Co KG
Rohr 23, 6280 Zell am Ziller
Tel.: 05282/7165
E-Mail: datenschutz@zillertalarena.com

SCHILIFTZENTRUM GERLOS GmbH

HNr. 306, 6281 Gerlos
Tel.: 05284/5376
E-Mail: info@bergbahnen.gerlos.at

GERLOSPASS–KÖNIGSLEITEN-BERGBAHNEN GmbH
Königsleiten 82, 5742 Wald-Königsleiten
Tel.: 06564/8212
office@koenigsleiten-bahnen.at

HOCHKRIMMLER SEILBAHNENGESELLSCHAFT mbH
Oberkrimml 95, 5743 Krimml
Tel.: 06564/7325-13
dsgvo@gerlosplatte.com

TOURISMUSVERBAND ZELL-GERLOS
Dorfplatz 3a, 6280 Zell am Ziller
Tel.: 05282/2281
info@zell-gerlos.at

TOURISMUSVERBAND WALD-KÖNIGSLEITEN
Hnr. 126, 5742 Wald im Pinzgau
Tel.: 06565/8243
info@wald-koenigsleiten.at

TOURISMUSVERBAND KRIMML-HOCHKRIMML

Oberkrimml 37, 5743 Krimml
Tel.: 06564/7239

info@krimml.at 

20. Community of interests of the Zillertaler Seilbahnen cable car operators

The controller is a member of the community of interests of the Zillertaler Seilbahnen cable car operators (“IG”), a company under civil law. The cable car companies have merged together to form IG, doing so in particular for marketing purposes as well as for billing purposes. Although it does not have a legal personality, IG is made up of legally independent operating companies. IG is made up of the following members:

FINKENBERGER ALMBAHNEN GmbH

Persal 200, 6292 Finkenberg

Tel.: 05285/62196

info@almbahnen.at

FÜGEN-BERGBAHN GesmbH & Co KG

Hochfügenerstraße 77, 6263 Fügen

Tel.: 05288/62991

info@spieljochbahn.at
 

GERLOSPASS–KÖNIGSLEITEN-BERGBAHNEN GmbH

Königsleiten 82, 5742 Wald Königsleiten

Tel.: 06564/8212

office@koenigsleiten-bahnen.at

SKILIFTGESELLSCHAFT HOCHFÜGEN GmbH

Sennereistraße 1, 6263 Fügen

Tel.: Büro 05288/62319; Kassa 05280/5305

info@hochfuegenski.com

HOCHKRIMMLER SEILBAHNENGESELLSCHAFT mbH

Oberkrimml 95, 5743 Krimml

Tel.: 06564/7325-13

info@gerlosplatte.com

BERGBAHNEN SKIZENTRUM HOCHZILLERTAL GmbH & Co KG

Postfeldstraße 7, 6272 Kaltenbach

Tel.: 05283/2800; 05288/63200

info@hochzillertal.com

MAYRHOFNER BERGBAHNEN AKTIENGESELLSCHAFT

Ahornstraße 853, 6290 Mayrhofen

Tel.: 05285/62277

info@mayrhofner-bergbahnen.com

SCHILIFTZENTRUM GERLOS GmbH

6281 Gerlos, HNr. 306

Tel.: 05284/5376

info@bergbahnen.gerlos.at

TUXER BERGBAHNEN GmbH

6293 Tux 395

Tel.: 05287/87246

info@eggalm.com

ZELLER BERGBAHNEN ZILLERTAL GmbH & Co KG

Rohr 23, 6280 Rohrberg

Tel.: 05282/7165

info@zillertalarena.com

ZILLERTALER GLETSCHERBAHN GmbH & Co KG

Hintertux 794, 6293 Tux

Tel.: 05287/8510

info@hintertuxergletscher.at
 

BERGBAHNEN WILDKOGEL-Oberpinzgauer Fremdenverkehrsbeförderungs- und Bergbahnen Aktiengesellschaft

Wildkogelbahnenstraße 343, 5741 Neukirchen am Großvenediger

Tel.: 06565/6405

info@wildkogelbahnen.at