Information Disclosure pursuant to Art. 13 EU General Data Protection Regulation (GDPR)

When you access one of our webpages, information pertaining to your access (date, time of day, page viewed, IP address) is recorded on our server. We do so due to our legitimate interest in monitoring technical operation, optimizing our information offer and in order to recognize attacks upon our website. These data are evaluated by us exclusively for our own statistical purposes in an anonymized form.

The recorded data are deleted after six months.

Data is processed on behalf of Gasteinertal Tourismus GmbH.

As a rule, no personal data are collected by us when you avail yourself of our web offer. If you contact us by means of the contact forms which we provide or subscribe to our newsletter, your email address and other personal data provided will only be used in order to respond to your personal correspondence. We guarantee that your information will be used exclusively by us, that it will not be shared with third parties and that it will be handled in strictest confidence in compliance with currently applicable legal statutes. One exception is the sharing of data with data processing contractors who work exclusively at the direction of Gasteinertal Tourismus GmbH, who do not use data for their own purposes and who are themselves bound by separate agreements to the data privacy requirements of the General Data Protection Regulation.

You have the right to demand information about the data we have stored pertaining to you, to have said data corrected or deleted, to restrict the processing thereof or to object to such processing (in particular, objection to the sending of direct advertising) as well as the right to submit a complaint to the governmental oversight authority.

General Inquiries/Booking Inquiries/Brochure Orders

The data contained in your inquiry (name, contact information, content of the inquiry, history of earlier contacts with us), which you have sent to us by means of the contact form or email, are processed by us in order to provide customer service (pre-contractual measures) and for marketing purposes (legitimate interest in the sending of direct postal advertising). Your data will be deleted by us five years after your last inquiry insofar as no legal statutes require us to preserve your data longer. In the event of a general inquiry or booking inquiry pertaining to an accommodation provider or other partner business, your data will be transmitted to the business in question. In the event of a general booking inquiry, your data may also be sent to several accommodation providers in order to elicit an optimal offer.

Newsletter Registration

The newsletter is sent to you subject exclusively to your consent expressed by entering the data and your email address and clicking on the button (register), then clicking on the confirmation link contained in a confirmation email which is then sent to you automatically (“double opt-in”).

Your consent to the mailing of a newsletter to you may be revoked at any time by means of written correspondence or by clicking on the unsubscribe link contained in the email newsletter. Your revocation of consent shall in no way affect the legal foundation of mailings which had been sent prior to and up to the point of revocation.

Your data will be stored until such point as you revoke your consent or cancel the newsletter.

Legal notice pertaining to the use of cookies:

This website uses software in order to analyze use of the website.

Analysis of this data may provide valuable insights into the needs of users. Such insights may contribute to the improvement of the quality of our offer.

Within this context, we make use of so-called cookies. Cookies are small text files that are stored on the computer of the visitor to our website and used to recognize a visitor anonymously when they visit the website. In general, cookies may be blocked or deleted by adjusting your browser settings accordingly.

Google Analytics

This website uses Google Analytics, a web analysis service from Google LLC. (“Google”). In general, the information about your use of this website generated by the Google cookie is transmitted to a Google server in the USA, where it is stored. If IP anonymization is activated on this website, within the European Union as well as other states which are signatories to the European Economic Area your IP address will first be truncated. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA, where it will then be truncated. Google is a signatory to the EU-US Privacy Shield agreement, thereby guaranteeing an appropriate level of data privacy as required by the EU Commission compliant with Art. 45 GDPR. On behalf of the operator of this website, Google will use this information in order to analyze your use of the website, compile reports about website activities and provide the website operator with further services pertaining to website use and Internet use in general. The IP address obtained from your browser within the scope of Google Analytics will not be merged with other data from Google. You may prevent the storage of cookies on your device by making the corresponding changes in your browser software settings; We wish to point out, however, that, if you should indeed choose to do so, you may not be able to take advantage of the full functionality of this website.

You may further prevent transmission of data generated by the cookie and your use of the website (including your IP address) to Google as well as the processing of said data by Google, by downloading and installing the browser plug-in which is available under the following link http://tools.google.com/dlpage/gaoptout?hl=de.

The data about your website visit will be automatically deleted 26 months after said visit.

Further information about conditions of use and data privacy may be found under the Google Analytics Conditions of Use as well as in the Google Analytics Overview. We draw your attention to the fact that the code extension "gat._anonymizeIp();" was added to Google Analytics in order to guarantee anonymized compilation of IP addresses (so-called “IP masking”).

Use of Google Maps

This website uses Google Maps in order to present interactive maps and generate route descriptions. Google Maps is a map service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. Through usage of Google Maps, information about your use of this website including your IP address as well as the (starting) address which you entered within the scope of the route planner function may be transmitted to Google in the USA. If you open a page on our website which contains Google Maps, your browser will establish a direct connection with the servers of Google. The map content will be transmitted by Google directly to your browser and be embedded by Google on the webpage. That said, we have no influence upon the scope of data which Google may collect in this way. According to our current state of knowledge, however, this will at least include the following data:

    Date and time of day of your visit to the webpage in question,

    Internet address or URL of the webpage in question,

    IP address,

    Address which was entered within the scope of using the route planner.

We have no influence upon the subsequent processing and usage of data by Google and can therefore assume no responsibility whatsoever in this context.

If you do not wish for Google to collect, process or use data pertaining to our Internet presence, you can deactivate JavaScript in your browser settings. However, should you choose to do so, you will be unable to display or make use of maps on your device.

The purpose and scope of the data which are collected as well as the further processing and use of data by Google as well as your rights in this regard and your setting options to protect your private sphere may be found in Google’s own data privacy disclosure (https://policies.google.com/privacy?hl=de).

Google LLC is an active participant in the Privacy Shield Agreement (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). According to the European Commission, this guarantees an appropriate level of protection of your personally identifiable data consistent with Art. 45 GDPR.

Facebook Remarketing

On this website, we use Remarketing Tags from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. When you access our website, Remarketing Tags create a direct connection between your browser and the Facebook servers. In the process, Facebook receives information that you have visited our website from your IP address. As a consequence, Facebook can attribute your visit to our website to your Facebook user account. The information obtained in this way may be used to generate Facebook advertising. We wish to point out that, as the provider of this website, we have no knowledge as to the content of data which is transmitted or how it is used by Facebook. Further information on this topic may be found in the data privacy policy of Facebook itself at https://www.facebook.com/about/privacy/. If you do not wish for Custom Audiences to compile your data, you may deactivate Custom Audiences here: https://www.facebook.com/ads/website_custom_audiences/.

Google Remarketing

On our website, we make use of the remarketing or “similar target groups” function of Google Inc. (“Google”). By means of this function, we are able to target advertising to visitors of this website that is personalized and reflects the user’s personal interests whenever they visit other websites in the Google Display network. In order to conduct the analysis of website so as to generate interest-targeted advertising, Google uses so-called cookies. This involves storing a small text file identified by means of a series of digits on the browsers of visitors to the website. This number is used to compile anonymized data about use of the website. No personally identifiable data about the visitor to the website is stored in the process. If you subsequently visit a different website within the Google Display network, you will be shown advertising tailored with high probability to products and information you have previously elicited. You may permanently deactivate the use of cookies by Google by clicking on the following link, then downloading and installing the plug-in provided: https://www.google.com/settings/ads/plugin

Further information about Google Remarketing as well as Google’s own data privacy policy may be consulted here: http://www.google.com/privacy/ads/

Hotjar

This website uses Hotjar, analysis software provided by Hotjar Ltd. (“Hotjar”)(http://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europa). With Hotjar, it is possible to measure and analyze usage behaviors on our website in the form of clicks, mouse movements, scroll heights, etc. The information which is generated by means of the “Tracking Code” and the “Cookie” is transmitted to the Hotjar servers in Ireland, where it is stored.

The following information is collected:

·       The IP address of your device (collected and stored in an anonymized format)

·       Screen size of your device

·       Device type and browser information

·       Your geographic location (country only)

·       Your language preference for use of the website

Furthermore, when you use Hotjar, the following data will be stored on our server:

·       Referring domain

·       Visited pages

·       Your geographic location (country only)

·       Your language preference for use of our website

·       Date and time of day when you accessed our website

Hotjar will use this information in order to analyze your use of our website, compile reports as well as provide other services pertinent to website use as well as use of the Internet in general. In order to provide this service, Hotjar avails itself of the services of other third-party companies, such as Google Analytics and Optimizely. These third-party companies may store information which your browser transmits within the scope of your visit to the website, for example cookies or IP requests. For further information about how Google Analytics and Optimizely store and use your data, please consult their data privacy policies.

The cookies used by Hotjar have varying “lifespans”. Some remain for up to 365 days while others last only as long as your actual visit to the website.
You may prevent the collection of your data by Hotjar by clicking on this link and following the instructions which you will find there: https://www.hotjar.com/opt-out.

 

Data transfer to Salzburgerland Tourismus GmbH
On this website, with your consent, data on the use of individual parts of the website is transferred to Salzburgerland Tourismus GmbH, Wiener Bundesstraße 23, 5300 Hallwang(https://www.salzburgerland.com). Data on the use of this website is processed for the purpose of analysis and online marketing, including the display of personalized advertising on other websites. This processing takes place until consent is withdrawn or the respective cookie storage period expires. Further information on data protection at Salzburgerland Tourismus GmbH can be found at https://www.salzburgerland.com/de/impressum-und-datenschutz/.

Gasteinertal Tourismus GmbH, based in Bad Hofgastein, is committed to making its website accessible in accordance with Section 4c of the Salzburg Participation Act implementing Directive (EU) 2016/2102 of the European Parliament and of the Council of 26 October 2016 on barrier-free access to the websites and mobile applications of public sector bodies (OJ L 327, 2.12.2016, p. 1).

This accessibility statement applies to the website www.gastein.com.

Status of compatibility with the requirements

This website is only partially compatible with conformance level AA of the "Web Accessibility Guidelines - WCAG 2.1" according to the applicable harmonized European standard "European Standard EN 301 549 V2.1.2 (2018-08)" due to the following incompatibilities.

Non-accessible content

a) Incompatibility with Web Accessibility Act (WZG) implementing Directive (EU) 2016/2102.

The alternative texts on our website still require end-to-end review, which is why the WCAG 1.1. alternative texts success criterion is only partially met. We are striving to implement appropriate alternative texts for new content immediately and for older content in the next development cycles, at the latest by the end of 2021.

Several elements throughout the site do not have sufficient contrast, which is why the requirement (WCAG 1.4.3. Contrast Minimum) cannot be fully met. Since these are mainly elements with blue / white contrast, but this corresponds to our CD colors, a fix will only be done as a result of a revision of our corporate identity.

"Bold" tag is used to format text. Also, html elements

1 Purpose of data processing
DBB processes personal data of employees, partners, customers and suppliers for the purpose of providing business activities and fulfilling associated legal and contractual requirements.

1.1 Collection of customer data
In the course of purchasing a ticket via the online form, by telephone or at our ticket offices, we collect and process - depending on the respective product - first name, last name, address, telephone number, e-mail address, date of birth and photo in order to carry out the booking and payment process.

1.2 Access control
It is pointed out that for the purpose of access control, a reference photo of the lift ticket holder is taken the first time the lift ticket holder passes through a turnstile equipped with a camera. This reference photo is compared by the lift personnel with the photos taken each time the lift card holder passes through a camera-equipped turnstile. The reference photo is deleted immediately after the expiry of the lift ticket, the other photos at the latest 30 minutes after the respective passage through a turnstile. Please note that it is also possible to purchase lift tickets that are technically configured in such a way that no photo is taken when passing through the turnstile, but that random checks by the lift personnel must be expected.

1.3 Online shop
DBB does not operate an online shop. The website www.dorfgastein.com merely provides a link to the Ski amadé GmbH online shop. The Ski amadé GmbH online shop is not covered by this privacy policy.

1.4 Photo points
There is a photo point at the top station of the Gipfelbahn-Fulseck which you can use to take photos. When you use this photo point, a current photo is taken and published online. Some of the photo points are operated by Alturos Destinations GmbH (Skiline). These are not covered by this privacy policy and are not the responsibility of DBB. DBB can therefore accept no liability for the operator's privacy policy.

1.5 Skiline
Via the website you can access the external service Skiline to view your personal altitude profile. Skiline receives the turnstiles you have passed and your card number to create the altitude profile. No personal data is therefore passed on. When you call up the Skiline service via our website, you leave our website and we cannot accept any liability as a result.

1.6 Applicants
The contact details and application documents submitted in the course of an application are processed electronically by us for the purpose of selecting suitable candidates for employment. In the event of rejection, the application documents will only be kept on record if you consent to this.

2. Proof of low epidemiological risk for ski pass validity ("2G proof")

According to the COVID 19 regulations, people using our cable car facilities for recreational purposes must show valid proof of a low epidemiological risk. Currently, this is "2G proof" (vaccinated or recovered). The legal basis for the checking of this proof by us is a legal obligation in accordance with the COVID 19 regulations (in its current version) in connection with Art. 6 (1) lit. c DSGVO. For the purpose of simplifying the checking of this proof in the case of multi-day and season tickets, it is possible to store the 2G proof, provided that you give us your express consent to do so. The legal basis for the storage of the 2G proof is therefore your express consent pursuant to Art. 9 (2) lit. a DSGVO for the processing of health data via our digital "Safe2Ski Check in" tool from the company SKIDATA or, in the case of purchases at our ticket offices on site, your signing of a corresponding declaration of consent in paper form. There is no legal obligation to store your 2G proof; instead of storing it, an individual check of the 2G proof can be carried out each time you enter a cable car. For the automated storage and control of your 2G proof, we use the services of our order processor SKIDATA (SKIDATA Austria GmbH, Hochthronstraße 1-7, A-5083 Grödig/Salzburg). We have finalised a corresponding agreement with the company SKIDATA in accordance with Art. 28 DSGVO as an order processor, which ensures that your data is processed exclusively within the scope of our contract. For more information about Skidata's privacy policy, please visit: https://www.skidata.com/de-at/datenschutz/. We generally store your 2G proof for the duration of the validity of your multi-day or season ticket. Beyond this, processing may take place if this is necessary for the assertion or defence of claims. You can revoke your consent at any time by sending an e-mail to us, without this having any effect on the lawfulness of the processing until the date of revocation.