Data controller:

Hochkar & Ötscher Tourismus GmbH
Managing Directors: Mag. Veronika Nutz and Mag. Markus Redl

Göstling 46
3345 Göstling
Telephone: +43 43 5/0138
Email: info@hochkar.com

We have commissioned ecoplus Alpin GmbH, Niederösterreich-Ring 2, Haus A, 3100 St. Pölten, as our data processor to process your personal data in connection with your enquiry, your stay and your mountain experience, in order to provide you with relevant information. This also applies to your purchase of vouchers on our website. ecoplus Alpin GmbH processes the data on our behalf and in accordance with our instructions.

We process the personal data that we receive from you in the course of a business relationship or that you provide to us with your consent. This includes, amongst other things, newsletter subscriptions, booking enquiries, competitions, registration for the events database or POI database (users) and contact enquiries.

Personal data includes:

• Private individuals: name, address, contact details (email, telephone), country
• Employees of organisations and partner companies: In the context of business-to-business relationships, in addition to the data mentioned above, the company or organisation is also collected and stored.

Furthermore, in individual cases, the following data may also be included in the personal data:

• Image data in connection with competitions
• Data relating to the fulfilment of our contractual obligations
• Data required to carry out pre-contractual measures

For what purposes is the data processed? What is the legal basis for this processing?

Your personal data is processed exclusively in accordance with data protection regulations:

To fulfil contractual obligations and, where applicable, to carry out pre-contractual measures (Article 6(1)(b) of the GDPR)

The processing of your personal data is necessary in order to fulfil the enquiries and orders you have submitted in specific cases.

The purposes of data processing are primarily determined by the specific enquiry or order and include, amongst other things:

• Sending information materials (leaflets, price lists, etc.)
• Sending ordered vouchers by post or electronically via email
• Delivery of other orders
• Notifying winners and sending out prizes in connection with prize draws
• Provision of data to service providers and excursion destinations for the processing of non-binding enquiries

Subject to your consent (Article 6(1)(a) of the GDPR)

If you have given us your consent to process your personal data, this data will only be processed in accordance with the purposes set out in this consent form and to the extent agreed.

Any consent you have given may be withdrawn at any time with immediate effect. The lawfulness of any processing carried out on the basis of your consent up until its withdrawal remains unaffected by this. For example, you can unsubscribe from our free newsletter at any time, either directly within the newsletter or by emailing info@hochkar.com.

Who receives your data? To whom is your data transferred outside Hochkar & Ötscher Tourismus GmbH?

Within Hochkar & Ötscher Tourismus GmbH, access to your personal data is granted to those departments or employees who require this data to fulfil pre-contractual measures or contractual obligations, as well as to safeguard the legitimate interests of Hochkar & Ötscher Tourismus GmbH.

Non-binding enquiries can be made via the Hochkar & Ötscher Tourismus GmbH website. The contact details provided to us (name, address, email address and telephone number), as well as travel-specific details (arrival/departure dates, number of people, number of children and their ages), are transferred to the relevant hosts or providers for the purpose of processing the non-binding enquiry.

In addition, data processors commissioned by us (in particular IT and back-office service providers and printers) will receive your personal data, provided they require it to fulfil the respective task. All data processors are contractually obliged to process your personal data only in connection with the provision of their services and to treat it confidentially.

Apart from the data processors mentioned above, your data will not be passed on to third parties unless there is a legal obligation to do so.

How long will your data be stored and processed?

We store and process your personal data for the duration of the active customer relationship (including for direct marketing purposes) or until the relevant consent is withdrawn. In addition, the storage period must comply with the statutory accounting retention periods, e.g. the seven-year obligation to retain accounting documents and records.

What data protection rights do you have as a data subject?

As a data subject, you have the following rights at any time:

• Access to, rectification, erasure or restriction of the processing of your stored data (subject to clear identification via a valid identity document).
• Objection to the processing and use of your data for direct marketing purposes.
• Data portability in accordance with the requirements of data protection law.

Right to confirmation

As a data subject, you have the right to request confirmation from us (following clear identification via a valid identity document) as to whether we are processing personal data relating to you. You may contact us at any time at info@hochkar.com for this purpose.

Right of access

As a data subject, you have the right to receive, at any time and free of charge, information from us (following clear identification via a valid identity document) regarding the personal data we hold about you, and to receive a copy of this information. You may contact us at any time at info@hochkar.com.

Your right to access information covers the following details:

• the purposes of processing,
• the categories of personal data processed by us,
• the recipients or categories of recipients to whom the personal data have been or will be disclosed,
• where possible, the envisaged period for which your personal data will be stored, or, if this is not possible, the criteria used to determine that period,
• the existence of your right to have personal data concerning you rectified or erased, or to have processing restricted by us as the data controller, or your right to object to such processing
• the existence of a right to lodge a complaint with the Austrian Data Protection Authority as the supervisory authority
• where your personal data has not been collected from you as the data subject: all available information regarding the origin of such data

As part of the operation of our websites, we engage software service providers and agencies who may gain access to your personal data in the course of their activities. These parties have undertaken to comply with the applicable data protection regulations. You can request further information about the service providers we engage at info@hochkar.com.

Furthermore, as a data subject, you have the right to be informed as to whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you, as a data subject, have the right to be informed of the appropriate safeguards in connection with the transfer.

Right to rectification

As a data subject, you have the right to request that we (following clear identification via a valid identity document) rectify any inaccurate personal data concerning you without delay. You may contact us at any time at info@hochkar.com for this purpose.

Right to erasure (right to be forgotten)

As a data subject, you have the right to request that we (following clear identification via a valid identity document) erase personal data concerning you without undue delay, provided that one of the following grounds applies and insofar as the processing is not necessary:

• Your personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
• As a data subject, you withdraw your consent on which the processing was based in accordance with Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
• As a data subject, you object to the processing in accordance with Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or, as a data subject, you object to the processing in accordance with Article 21(2) of the GDPR.
• Your personal data has been processed unlawfully.
• The erasure of your personal data is necessary for compliance with a legal obligation under Union law or the law of the Republic of Austria to which we, as the controller, are subject.

If any of the above grounds apply and you, as a data subject whose personal data is stored by Hochkar & Ötscher Tourismus GmbH, wish to request the erasure of this data, you may contact us at any time at info@hochkar.com.

Right to restriction of processing

As a data subject whose personal data is being processed, you have the right to request that we, as the data controller (following clear identification via a valid identity document), restrict the processing if one of the following conditions is met:

• You, as the data subject, contest the accuracy of the personal data, for a period enabling us, as the data controller, to verify the accuracy of your personal data.
• The processing is unlawful, and you, as the data subject, object to the erasure of your personal data and instead request the restriction of the use of your personal data.
• We, as the data controller, no longer require your personal data for the purposes of processing, but you, as the data subject, require it to establish, exercise or defend legal claims.
• You, as the data subject, have objected to the processing in accordance with Article 21(1) of the GDPR, and it has not yet been determined whether the legitimate grounds of the controller override those of the data subject.

If any of the above reasons apply and you, as a data subject whose personal data is stored by Hochkar & Ötscher Tourismus GmbH, wish to request the restriction of the processing of this data, you may contact us at any time at info@hochkar.com.

Your right to data portability

As a data subject whose personal data is being processed, you have the right to receive the personal data concerning you, which you as the data subject have provided to us as the data controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another data controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, as a data subject, when exercising your right to data portability in accordance with Article 20(1) of the GDPR, you have the right to have your personal data transferred directly from us, as the data controller, to another data controller, provided this is technically feasible and does not adversely affect the rights and freedoms of others.

To exercise your right to data portability, you may contact us at any time at info@hochkar.com.

Right to object

As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Article 6(1)(e) or (f) of the GDPR. You may contact us at any time at info@hochkar.com to do so.

Where we process your personal data for the purposes of direct marketing, you, as a data subject, have the right to object at any time to the processing of your personal data for the purposes of such marketing.

Right to lodge a complaint

You may lodge your complaints at any time with the Austrian Data Protection Authority: https://www.dsb.gv.at
 

Are you obliged to provide data?

Your personal data is required in order to carry out the request you have made (e.g. ordering vouchers, ordering information material) and to fulfil the resulting contract or pre-contractual measures. If you do not wish to provide us with this data, we will unfortunately be unable to carry out your request.

In any case, you are not obliged to give your consent to the processing of data that is not relevant to the fulfilment of the contract (e.g. when taking part in a competition, you do not have to give your consent to receive the newsletter – your consent is optional).

To ensure the best possible customer service and keep you informed, we store the areas of interest you have selected as ‘rated interests’, provided you have specified or selected them. Disclosing your areas of interest is voluntary and can be changed or deleted by the newsletter recipient at any time and free of charge. We use the areas of interest you have disclosed to send you automated, personalised newsletters.

You may object to the use of your personal data for this purpose at any time and without giving reasons. Your objection will result in us no longer using your personal data for the purposes of personalised newsletter marketing in future.

Cookies, Google Analytics, Captcha.eu, Google Fonts and other services

General information:

When you access this website, technical information relating to your visit is processed. This includes, in particular, the date and time of access, the page viewed, the browser used, the operating system, the device, the referrer URL and technical access data.

This data is used for the technical provision, security and optimisation of the website and – provided you have given your consent – for statistical and marketing purposes.

In detail:

Cookies

This website uses cookies and similar technologies. We use cookies to enable the website to function, to carry out statistical analyses, and to provide content and advertising tailored to your interests.

Some cookies are technically necessary. Other cookies, particularly those used for statistics, marketing, remarketing, external media or analysis, are only set with your consent.

Where possible, this data is shared exclusively in pseudonymised form. By clicking on ‘Allow cookies’, you can make full use of our website.

These cookies may also be processed and used by third-party providers – with your consent. In this context, the transfer of personal data to countries outside the European Union or the European Economic Area, in particular to the USA, cannot be ruled out.

Further details regarding cookies and how to disable them at a later date can be found under Website Use – Cookies.

Google Analytics

Where you have given your consent, Google Analytics is used on this website. Hochkar & Ötscher Tourismus GmbH uses Google Analytics to analyse website usage.

The data obtained from this is used to optimise the website and our advertising measures, and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.

Further information on Google Analytics can be found at www.google.com/analytics. Further details on terms of use and data protection can be found at https://policies.google.com/?hl=de.

Google Analytics is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). Google processes website usage data on our behalf. Hochkar & Ötscher Tourismus GmbH has entered into a data processing agreement with Google.

During your visit to the website, the following data in particular may be processed:

• the pages you have visited and your click path
• your behaviour on the pages, for example clicks, scrolling behaviour and time spent on the site
• your approximate location, for example country, region or city
• technical information such as browser, internet service provider, device and screen resolution
• the source of your visit, i.e. the website, search engine or advertising channel via which you reached us
• the referrer URL

Google states that Google Analytics does not log or store individual IP addresses of users from the EU.

Recipient

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as a data processor. Google LLC, based in the USA, and, where applicable, US authorities may, under certain circumstances, access data stored by Google.

Transfer to third countries

The transfer of data to the USA or other third countries cannot be ruled out. Where data is transferred to third countries, this is done in accordance with the legal requirements, in particular on the basis of an adequacy decision by the European Commission, appropriate safeguards such as standard contractual clauses, or your explicit consent.

Retention period

The retention period for user-related data processed in Google Analytics is determined by the settings we have selected in Google Analytics. Unless otherwise stated, the retention period is up to 14 months. Other data may be retained for longer in aggregated form.

Legal basis and right to withdraw consent

The legal basis for this data processing is your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings and changing your selection there.

You can also prevent the collection of data generated by cookies and relating to your use of the website, as well as the processing of this data by Google, by downloading and installing the browser plug-in provided by Google: https://tools.google.com/dlpage/gaoptout?hl=de.

Google Analytics with anonymisation feature

Google Analytics processes data in such a way that, according to Google, no individual IP addresses of users from the EU are logged or stored. Further information on IP processing in Google Analytics can be found at: https://support.google.com/analytics/answer/2763052?hl=de.

Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is a solution that allows website tags to be managed via a single interface.

The tool itself does not create user profiles and does not store cookies for analytical or marketing purposes. Google Tag Manager triggers other tags, which may in turn process personal data. Google Tag Manager does not access this data.

If deactivation has been carried out at domain or cookie level, this remains in effect for all tracking tags implemented using Google Tag Manager.

Google Ads Remarketing

Where you have given your consent, we use the remarketing function within the Google Ads service.

The remarketing function enables us to present interest-based adverts to users of our website on other websites within the Google advertising network, in Google Search, on YouTube or on other websites.

To do this, we analyse users’ interactions on our website, such as which offers, tickets, events or tourism-related content they have shown an interest in. This enables us to display targeted advertising even after they have visited our website.

Cookies or similar technologies may be used for this purpose. These are used to recognise a browser on a specific device and not directly to identify an individual.

You can prevent participation in this tracking process in various ways:

• by adjusting the settings in your browser software accordingly, in particular by blocking third-party cookies
• by installing the plug-in provided by Google at https://www.google.com/settings/ads/plugin
• by disabling interest-based adverts via https://www.aboutads.info/choices
• by adjusting your cookie settings accordingly; further details can be found under ‘Website Use – Cookies’

Please note that, in this case, you may not be able to make full use of all the features of our website.

Further information on data protection at Google can be found at: https://policies.google.com/privacy?hl=de.

Alternatively, you can visit the Network Advertising Initiative’s website at https://thenai.org/.

Google Ads Conversion

Where you have given your consent, we use Google Ads Conversion to draw attention to our offers on external websites using advertising materials known as Google Ads.

We can use the data from these advertising campaigns to determine how successful individual advertising measures are. Our aim is to show you adverts that are of interest to you, to make our website more attractive, and to calculate advertising costs in a fair and transparent manner.

If you access our website via a Google advert, Google Ads may store a cookie on your device. These cookies generally expire after 30 days and are not intended to identify you personally.

In particular, this cookie may store the unique cookie ID, the number of ad impressions per placement, the most recent impression, and opt-out information.

These cookies enable Google to recognise your web browser. If a user visits certain pages on our website and the cookie stored on their device has not yet expired, Google and we can recognise that the user clicked on the advert and was redirected to that page.

We ourselves only receive statistical reports from Google. These reports enable us to identify which advertising measures are particularly effective. We do not receive any further data resulting from the use of the advertising materials; in particular, we cannot personally identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s servers. We have no influence over the scope and further use of the data processed by Google.

Google Analytics advertising features

Where you have given your consent, we use Google Analytics advertising features on this website in addition to the standard Google Analytics functions.

The Google Analytics advertising features implemented on this website may include, in particular, the following functions:

• Reports on impressions on the Google Display Network
• Google Analytics reports on performance by demographic characteristics and interests
• Integrated services for which data is collected in Google Analytics for advertising purposes, including the collection of data via ad preferences cookies and anonymous identifiers

For this purpose, in addition to the data collected by Google Analytics, further data may be collected via Google advertising cookies and anonymous identifiers. We use this information to improve our website and marketing activities.

You can prevent the use of Google Analytics advertising features in various ways:

• by adjusting the settings in your browser software
• via Google’s ad settings at https://adssettings.google.com/
• by adjusting your cookie settings; further details can be found under ‘Website usage – Cookies’
• by opting out on the Network Advertising Initiative website at https://thenai.org/

Please note that, in this case, you may not be able to make full use of all the features of our website.

Captcha.eu

To protect the information transmitted via our web forms, this website uses the Captcha.eu service provided by Captcha GmbH, Muthgasse 2, 1190 Vienna, Austria.

The purpose of this check is to distinguish whether the input is being made by a human or, in an abusive manner, by automated, machine-based processing.

The processing is carried out in our legitimate interest in preventing automated submissions by bots, spam and the misuse of our forms, in accordance with Article 6(1)(f) of the GDPR.

In particular, the IP address of your internet gateway, the type and model of your device, the type and model of your browser, and technical usage information may be processed for this purpose. In addition, the time intervals between keyboard and mouse movements may be measured.

A data processing agreement has been concluded with Captcha GmbH. Captcha GmbH is therefore not permitted to use the data transmitted for its own purposes.

According to the provider, the data is processed within the European Union.

Further information can be found at: https://www.captcha.eu/de/dsgvo__de/.

Google Fonts

This website uses external fonts, known as Google Fonts. Google Fonts is a service provided by Google.

We have integrated the external fonts locally, i.e. on our web server. As a result, there is no connection to Google’s servers and therefore no data is transferred to Google in connection with the display of these fonts.

YouTube

Components from YouTube are integrated into this website. YouTube is an online video portal that enables video publishers to upload video clips and allows other users to view, rate and comment on these videos.

YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page on which a YouTube video is embedded, your browser may establish a connection to YouTube’s or Google’s servers. In doing so, YouTube and Google will be informed of which specific subpage of our website has been visited.

If you are logged in to YouTube or Google at the same time, YouTube or Google may associate your visit with your user account. This occurs regardless of whether you click on a YouTube video or not.

If you do not wish this association to take place, you can prevent it by logging out of your YouTube or Google account before visiting our website.

Further information on data processing by Google and YouTube can be found at: https://policies.google.com/privacy?hl=de.

Adform

This website uses the online marketing tool Adform, provided by Adform A/S, Silkegade 3B, 1113 Copenhagen, Denmark.

Adform uses cookies and similar technologies to display relevant adverts, improve campaign performance reports, or prevent users from seeing the same adverts multiple times.

Adform uses a cookie ID to track which adverts are displayed in which browser. Furthermore, Adform can use cookie IDs to track so-called conversions relating to ad requests. This is the case, for example, when a user views or clicks on an Adform advert and later visits our website using the same browser and carries out an action there.

The information obtained in this way may be used by Hochkar & Ötscher Tourismus GmbH and its tourism or advertising partners for Adform adverts.

According to Adform, Adform cookies do not contain any direct personal information such as email addresses, names or addresses.

Due to the marketing tools used, your browser automatically establishes a direct connection with Adform’s servers. Through the integration of the Adform cookie, Adform receives the information that you have visited the relevant part of our website or clicked on one of our adverts.

Furthermore, the Adform cookies used enable us to understand whether you carry out certain actions on our website after viewing or clicking on one of our display or video adverts on another platform via Adform.

Adform uses this information to understand which content you have interacted with on our website, so that it can later display targeted advertising to you.

Our website may also use cookies and products from Adform A/S, in particular ad servers, DSPs and DMPs, for targeted advertising. For this purpose, various parameters such as pages visited, device type, geographical origin and most recently visited websites may be collected, and visitors may be grouped into segments.

Using statistical analysis, similar individuals can then be identified within the Adform cookie pool in order to target them with personalised advertising for tourism offers.

Where joint processing within the meaning of Article 26 of the GDPR takes place with Österreich Werbung or other tourism or advertising partners, the relevant agreements and information will be provided.

Further information on Adform can be found at: site.adform.com/privacy-center/platform-privacy/product-and-services-privacy-policy/.

Information on opting out or deleting data stored by Adform can be found at: https://site.adform.com/privacy-center/platform-privacy/right-to-be-forgotten/.

Facebook Pixel and Remarketing/Retargeting

Based on your consent, our website uses the Meta Pixel as well as remarketing and retargeting functions provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (‘Meta’).

This allows us to track users’ actions after they have been redirected to our website by clicking on a Facebook or Instagram advert. This enables us to evaluate the effectiveness of our adverts for statistical and market research purposes.

We cannot view the personal data of individual users. However, the data collected is stored and processed by Meta. Information controlled by Meta may be transferred to the USA or other third countries, stored and processed there for the purposes described in Meta’s Privacy Policy.

Meta may link the data to data from your Facebook or Instagram account and use it for its own advertising purposes. Meta Conversion Tracking also allows Meta and its partners to show you adverts both on and off Facebook and Instagram.

A cookie may be stored on your device for these purposes.

Our pages may also incorporate Meta remarketing tags, which establish a direct connection between your browser and Meta’s servers. This enables Meta to associate your visit to our pages with your user account.

We and our tourism or advertising partners may use the information obtained in this way to display Facebook and Instagram adverts.

Please note that, as the website provider, we do not have full knowledge of the content of the data transmitted or how it is used by Meta.

Further information can be found in Meta’s privacy policy at: https://www.facebook.com/privacy/policy/.

You can adjust your advertising settings on Facebook and Instagram here: https://www.facebook.com/adpreferences/ad_settings/.

Thinglink

Plugins from Thinglink may be used on our website for the interactive display of photos. The provider is ThingLink Oy, Business ID 2329185-9, Salomonkatu 17 A, 00100 Helsinki, Finland.

We do not have complete control over what data such a plugin collects in individual cases. Nor do we have complete control over how Thinglink uses this data.

It can be assumed that at least the IP address, as well as information about the device and browser used, may be processed. It also cannot be ruled out that Thinglink may attempt to store cookies on the device being used.

This may enable Thinglink to be informed about visits to specific web pages. Users who are logged into Thinglink at the same time may, where applicable, be identified by Thinglink.

Information on the data collected in this process and its use can be found in Thinglink’s privacy policy at: https://www.thinglink.com/terms.

GPX Studio

Interactive maps, tours or GPX tracks may be embedded on our website via the GPX Studio service.

GPX Studio is an online service for displaying, creating and editing GPX files. When these are embedded on our website, your browser may establish a connection to GPX Studio’s servers so that the relevant map or GPX track can be displayed.

In particular, technical information such as your IP address, browser details, device information, and the date and time of access may be processed.

According to GPX Studio, GPX files do not leave the user’s browser when the service is used. GPX Studio also states that it does not use any tracking or data collection.

Third-party map data or map services may be integrated for map display, in particular OpenStreetMap or – depending on the technical configuration – MapTiler. This may result in a connection being established with the respective providers.

This integration is carried out to enable us to display interactive maps, tours, routes and GPX tracks on our website.

The legal basis is our legitimate interest, in accordance with Article 6(1)(f) of the GDPR, in providing a user-friendly presentation of tours, routes and map information. If the integration is only loaded after you have given your consent, the legal basis is your consent in accordance with Article 6(1)(a) of the GDPR.

Further information on GPX Studio can be found at: https://gpx.studio/

VOR widget / VOR AnachB route planner

A widget from the Verkehrsverbund Ost-Region (VOR) may be embedded on our website. The provider is Verkehrsverbund Ost-Region (VOR) GmbH, Europaplatz 3/3, 1150 Vienna, Austria.

The VOR widget enables users to access information on journeys to and from a destination by public transport, by bicycle, on foot or by car. Depending on how it is integrated, the VOR AnachB route planner, the VOR fare information service or a VOR departure monitor may be used in particular.

When you use the VOR widget on our website or visit a page on which the widget is embedded, your browser may establish a connection to the servers of Verkehrsverbund Ost-Region. In doing so, technical information such as your IP address, browser details, device information, the date and time of access, and the journey details you have entered or selected may be processed.

This processing is carried out in order to provide you with up-to-date timetable information, connection details, departure times and, where applicable, fare information.

The legal basis is our legitimate interest, in accordance with Article 6(1)(f) of the GDPR, in providing user-friendly information on public transport to Hochkar. If the widget is only loaded after you have given your consent, the legal basis is your consent in accordance with Article 6(1)(a) of the GDPR.

Further information on data processing by the Verkehrsverbund Ost-Region (VOR) can be found in the VOR’s privacy policy: https://www.vor.at/datenschutz

GetSiteControl

We use services provided by GetSiteControl, GetWebCraft Limited, Klimentos 41–42, Klimentos Tower, Flat/Office 25, 1061 Nicosia, Cyprus.

GetSiteControl is a service that enables pop-ups, overlay windows or notifications to be displayed on the website for informational purposes and to improve user guidance.

These windows can be displayed according to specific rules, such as the number of page views or certain user interactions. For this purpose, GetSiteControl may set cookies or similar technologies.

Further information on data processing by GetSiteControl can be found in the provider’s privacy policy at: https://getsitecontrol.com/privacy.

Hochkar & Ötscher Tourismus GmbH Newsletter

Subscription to our newsletter is via a double opt-in process. After subscribing, you will receive an email asking you to confirm your subscription. By clicking on the link provided to activate your subscription, you agree to receive the Hochkar & Ötscher Tourismus GmbH newsletter, which contains information on news, events and tips.

You also consent to the analysis of the newsletter through the individual measurement, storage and evaluation of open rates and click-through rates in recipient profiles, for the purpose of tailoring future newsletters to the interests of our readers. This consent may be withdrawn with future effect.

The lawfulness of any data processing operations that have already taken place remains unaffected by this withdrawal. You can unsubscribe from the newsletter by clicking the unsubscribe link at the end of each newsletter. Once you have unsubscribed from our newsletter, your email address will be deleted from our records and those of our external service provider. We engage a service provider to send out our newsletter. This provider has undertaken to comply with the applicable data protection regulations. You can request further information about the service provider we use at info@hochkar.com.

An overview of social plug-ins and social media channels

Hochkar & Ötscher Tourismus GmbH uses various social media channels and may include content or links to social networks and external platforms on its website.

If you interact with such social media content, buttons, embedded posts or links, your browser may automatically establish a connection with the relevant provider. In particular, your IP address, technical information about your browser and device, cookies and information about the page you are visiting may be transmitted to the relevant provider.

Data is transferred to social networks in particular when you interact with the relevant content, for example by clicking on a social media link, playing an embedded video, sharing a post or accessing an external social media channel.

If you are logged in to a social network at the same time, the relevant provider may associate your visit to our website or your interaction with our content with your user account. If you do not wish this to happen, please log out of your user account before visiting our website or using the relevant functions.

Please note that, as the provider of this website, we do not have full knowledge of the content of the data transmitted or how it is used by the respective social networks. Further information on data processing can be found in the privacy policies of the respective providers.

Social media channels of Hochkar & Ötscher Tourismus GmbH

Hochkar & Ötscher Tourismus GmbH operates or links to the following social media channels in particular:

• Facebook
• Instagram
• YouTube

Facebook

Our website may incorporate features, links or content from the social network Facebook. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Facebook features can be identified, in particular, by the Facebook logo or corresponding links to our Facebook page.

If you visit a page on our website that incorporates Facebook features, or if you click on a link to Facebook, a connection may be established with Meta’s servers. In doing so, Meta may receive information about which page of our website you have visited.

If you are logged into Facebook at the time, Meta may associate this information with your personal Facebook user account. When you use Facebook features – for example, by clicking a button, sharing content or interacting with a post – this information may also be associated with your Facebook account.

You can prevent such association by logging out of your Facebook account before visiting our website or using the relevant Facebook features.

Further information on the collection and use of data by Meta, as well as your rights and settings options in this regard, can be found in Meta’s Privacy Policy: https://www.facebook.com/privacy/policy/

Instagram

Our website may incorporate features, links or content from the social network Instagram. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Instagram features can be identified in particular by the Instagram logo, links to our Instagram profile or embedded Instagram content.

When you visit a page on our website that contains embedded Instagram content, or when you click on a link to Instagram, a connection may be established with Meta’s servers. In particular, your IP address, browser data, the date and time of access, and information about the page visited may be processed.

If you are logged into Instagram at the time, Meta may associate this information with your Instagram user account. If you do not wish this to happen, please log out of your Instagram account before visiting our website or using the relevant features.

Further information on data processing by Instagram or Meta can be found at: https://privacycenter.instagram.com/policy/

YouTube

Our website may incorporate features, links or embedded videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page on our website that contains a YouTube video or a YouTube feature, your browser may establish a connection to YouTube’s or Google’s servers. In doing so, YouTube and Google may receive information about which specific page on our website you have visited.

If you are logged in to YouTube or Google at the same time, Google may associate this information with your user account. This may occur regardless of whether you click on a YouTube video or not.

If you do not wish YouTube or Google to associate your visit to our website with your user account, please log out of your YouTube or Google account before visiting our website.

Further information on data processing by Google and YouTube can be found at: https://policies.google.com/privacy?hl=de

Hochkar & Ötscher Tourismus GmbH uses Google Maps on its website (and on the websites listed above

websites) Google Maps, in particular to display POIs (Points of Interest) on an interactive map. Google Maps is operated by Google Inc. By using these websites, you consent to the collection, processing and use of data – both that which is collected automatically and that which you enter yourself – by Google, its agents or third-party providers.

You can find information on the data transmitted when using Google Maps via the following link: https://policies.google.com/privacy?hl=de. In addition to the IP address, this includes, amongst other things, data such as the GPS data from a smartphone being used or search behaviour.

Photography, audio and video recordings at events

Photographs, audio and video recordings may be taken during events, press conferences, marketing campaigns and other activities organised by Hochkar & Ötscher Tourismus GmbH.

This applies in particular to events organised, run or supported by Hochkar & Ötscher Tourismus GmbH, as well as events at which individuals appear, give presentations or participate on our premises, at our facilities or on our behalf.

Where possible, invitations and/or announcements during the event will indicate that photographs, audio and video recordings may be made.

The recordings may be used to document the event, for public relations purposes, to promote our offers and services, and to showcase the activities of Hochkar & Ötscher Tourismus GmbH. Publication may take place, in particular, on our website, on social media, in newsletters, in press releases and in printed information and promotional materials.

The legal basis for the processing is, where applicable, our legitimate interest pursuant to Article 6(1)(f) of the GDPR in the documentation, public relations and promotion of our events, offers and services. In the case of photographs of individuals or small groups, processing may take place on the basis of your consent in accordance with Article 6(1)(a) of the GDPR.

If you are recognisably the focus of a photograph or video, either as an individual or as part of a small group, your consent will be sought wherever possible before the photograph or video is taken or published. If you do not wish to be photographed or filmed, you may inform the photographer or the staff on site of this.

Where processing is based on your consent, you may withdraw this consent at any time with effect for the future. In the event of withdrawal, the recordings in question will be removed from our own digital channels, insofar as this is technically possible and reasonable. Materials that have already been printed cannot be subsequently destroyed or recalled following a withdrawal of consent.

Where processing is based on our legitimate interest, you have the right to object to the processing on grounds relating to your particular situation. In this case, we will assess whether there are compelling legitimate grounds for continuing the processing.

Photographs, audio and video recordings will be stored for as long as is necessary for the purposes stated, or for as long as there are legal requirements for retention, documentation or evidence. Published content may remain accessible for longer, particularly in the context of public relations and documentation.

Participation in photographic, audio and video recordings and advertising campaigns

In the context of photographs, audio and video recordings and advertising campaigns, personal data relating to participants may be processed. This includes, in particular, photographs and video recordings, audio recordings, names, contact details and, where applicable, any further information required for the organisation and use of the recordings.

The processing is carried out for the purpose of creating, editing, publishing and utilising the recordings, as well as for the implementation of marketing, press and public relations activities by Hochkar & Ötscher Tourismus GmbH.

The retention period depends on the specific purpose of the processing, the agreed rights of use and the length of time for which processing is necessary to pursue or defend legal claims.

Access control / Photocompare for lift passes

For the purpose of access control, a reference photograph of the lift pass holder may be taken the first time they pass through a turnstile fitted with a camera.

This reference photograph may be compared by lift staff with photographs taken on subsequent passes through a turnstile fitted with a camera. This serves to verify the proper use of the lift pass and to prevent misuse.

The reference photograph is deleted once the relevant lift pass has expired. The verification photographs taken during subsequent passages are deleted no later than 30 minutes after the respective passage through the turnstile.

It is possible to purchase lift passes that are technically configured so that no photograph is taken when passing through the turnstile. In this case, however, you should expect random checks by lift staff.

The legal basis for the processing is our legitimate interest, in accordance with Article 6(1)(f) of the GDPR, in effective access control, the prevention of ticket misuse and ensuring the orderly operation of lifts and cable cars.

Data security measures to protect your data

The security of your data is of the utmost importance to us. We have therefore implemented all necessary technical and organisational measures to ensure the security of data processing and to protect your personal data as effectively as possible against access by unauthorised third parties.

We achieve this, on the one hand, by using state-of-the-art security software, coding and encryption methods within our IT infrastructure; and, on the other hand, by enhancing the security of your data through the implementation of risk-mitigating measures (data minimisation across all areas) and preventive safeguards.

Car Park Management and Number Plate Recognition

This notice describes how Hochkar & Ötscher Tourismus GmbH, Göstling 46, 3345 Göstling an der Ybbs, Austria, processes personal data in connection with car park management.

1. Purposes of data processing

We process personal data in connection with our car park management for the following purposes:

• Management of car parks and processing of parking authorisations or parking tickets
• Automating and speeding up entry and exit for vehicles with a valid parking authorisation
• Monitoring compliance with the terms of use and car park regulations, for example where vehicles are parked across multiple spaces
• Monitoring the lawful use of parking tickets, for example where the permitted parking duration is exceeded
• Protecting our facilities, premises and car parks, for example against vandalism or damage
• Documentation, investigation and prosecution of the misuse of parking spaces, for example, parking without payment
• Carrying out and documenting necessary measures in connection with the repositioning or re-parking of motor vehicles
• Asserting, exercising or defending legal claims

2. Categories of data processed

In the context of car park management, the following data in particular may be processed:

• data provided by you when purchasing a ticket or entering into a contract
• Vehicle registration number provided when purchasing a ticket, either online or at the ticket office
• Vehicle registration number data recorded on entry and exit
• Time of entry and exit
• Duration of parking
• Information regarding parking authorisation or the parking ticket
• Where applicable, image data collected as part of number plate recording or checks

Notices regarding image recording and the collection of number plate data are displayed on site in accordance with legal requirements.

3. Legal basis for processing

Insofar as processing is necessary for the processing and billing of parking fees in connection with a parking ticket, the processing is carried out on the basis of the performance of a contract in accordance with Article 6(1)(b) of the GDPR.

The recording of number plates in connection with our car park management is carried out on the basis of our legitimate interest in accordance with Article 6(1)(f) of the GDPR. Our legitimate interest lies, in particular, in the efficient management of our car parks, monitoring compliance with the terms of use, preventing misuse, protecting our facilities, and the establishment, exercise or defence of legal claims.

The recognition of individual number plates to automate and speed up entry and exit for vehicles with valid parking authorisation, in particular for registered vehicles, long-term parkers or staff, is also carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR in efficient car park management.

You have the right to object, pursuant to Article 21(1) of the GDPR, to processing based on Article 6(1)(f) of the GDPR if there are grounds relating to your particular situation.

4. Retention period

Personal data is stored only for as long as is necessary for the respective purposes or as required by statutory retention periods.

Customer data and ticket data are stored for the duration of the contract and, beyond that, only for as long as is necessary to comply with statutory retention obligations or to establish, exercise or defend legal claims. Further information on data processing in connection with the online shop can be found in the privacy policy available there.

Vehicle registration number data is generally stored for as short a period as possible. As a rule, vehicle registration number data is processed only for the duration of the vehicle’s presence on the premises. Once entry and exit have been recorded, the vehicle registration number data is deleted, provided that no further processing is required.

In the event of an investigation, number plate data may be stored for up to 24 hours after the vehicle has left the car park in order to track movements and investigate any potential irregularities.

In the event that no exit is detected or a vehicle does not exit correctly, number plate data may be stored for up to the maximum permitted parking duration. This is currently up to 48 hours. After this period, the number plate data is deleted, provided that no further processing is required for a specific reason.

Registered number plates, in particular those of long-term parkers, staff or other authorised persons, are stored for the duration of the respective registration or parking authorisation and are subsequently deleted, provided there is no statutory retention obligation or legitimate reason for further storage.

Vehicle registration numbers with a ticket that is still valid are stored for the duration of the ticket’s validity and in accordance with the rules set out above.

Personal data, including vehicle registration numbers, processed in connection with the repositioning or re-parking of a motor vehicle, parking without a valid parking ticket, or any other misuse of parking spaces, shall be deleted as soon as the purpose of the processing has been fulfilled and there are no statutory retention periods or legitimate interests that preclude further storage.

Data may be retained for a longer period, in particular where it is required for documentation, investigation or law enforcement purposes, such as to assert civil claims or to defend against claims for damages.

5. Recipients of the data

Personal data will only be disclosed to the extent that this is necessary for the purposes stated or where there is a legal obligation to do so.

Recipients may include, in particular, technical service providers, providers of the car park management system, payment or ticketing service providers, legal representatives, public authorities or courts.

6. Your rights

In accordance with the statutory provisions, you have, in particular, the right to access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interests.

To exercise your rights, you can contact us using the following details:

Hochkar & Ötscher Tourismus GmbH
Göstling 46
3345 Göstling an der Ybbs
Austria
Email: info@hochkar.com