Privacy Policy for Website Visitors

This notice describes how your personal data is processed in connection with this website.

Go to cookie/privacy settings (withdraw consent)
Change privacy settings directly

1. Responsible for the processing of personal data

Vereinigte Bergbahnen Gesellschaft mbH
Maria-Theresien-Straße 8
6020 Innsbruck
ÖSTERREICH

info@skisport.com

(In the further course of this privacy policy, we are referred to as "we" or "us".)

2. What data we process about you

In the course of your visit to this website, we will collect the following information: The date and time you access a page on our website, your IP address, the name and version of your web browser, the website (URL) you visited before accessing this website, certain cookies (see points below) and the personal data that you provide yourself by filling in the contact form (e.g. providing your name and email address) or the content of your message.

3. Data security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with legal requirements and taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing. In doing so, we take into account the likelihood and extent of potential threats to the rights and freedoms of natural persons.
These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access, as well as access to the data itself, its input, disclosure, availability, and segregation.

To protect user data from unauthorized access during transmission via our online services, we use TLS encryption (HTTPS). This technology ensures the secure transmission of information between the website or app and the user's browser or between servers. TLS, the more modern and secure version of SSL, meets the highest security standards. For websites with a TLS certificate, the URL begins with "https://".

4. Cookies and external services

Our website uses cookies. Cookies are data records that are stored in your browser by the website or server when you visit the website and sent to the server each time you access the website. Cookies allow data (e.g., language settings, shopping cart contents, login or registration status, etc.) to be stored in the browser between page views or recurring visits. This means that the browser remembers the settings from the last time you accessed or visited the website. Cookies can also be used to uniquely identify your browser. This can be used, among other things, to verify your authorization (login or registration status).

When you first access our website, a banner appears informing you that cookies are being set or that external services are being integrated. At the same time, the text provides information about data processing supported by cookies and external services via a link to this privacy policy. In this banner, you have the option to consent to the use of all services and cookies or individual categories (data protection categories). Your consent will be stored in your browser using a cookie for up to 12 months. If you are under 14 years of age and wish to give your consent, you must ask your legal guardian for permission. If you ignore the banner or refuse consent, no services or cookies that are not absolutely necessary for the operation of the website will be activated. Please note that if you reject or block cookies or external services, certain features of the website will no longer be available and may prevent you from fully using the website.

4.1 Data protection categories

4.1.1 Essential

We use so-called essential cookies and external services that are necessary for the operation of the website and its functions. These cookies and services cannot be refused. This may include the following functions: an online shop's shopping cart, a cookie for checking login status, and other similar cookies and external services. These cookies are not used to track visitors. Most of these cookies are automatically deleted after the browser is closed (session cookies). The processing of your personal data in this context is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR; among other things, ensuring the functionality of our website. The processing of personal data in this context is neither contractually nor legally obligatory. However, without the processing of personal data, our service and the functionality of the website cannot be guaranteed.
Further information on your right of objection pursuant to Art. 21 GDPR can be found at Your rights as a data subject.

External services in the category "Essential":
AlpineCard, dataCycle data management system, etracker - Cookie-less Modus, feratel booking&more (TOSC5), INCERT voucher shop, Onboard, Onlim KI-Telefonassistent, pixel.map

4.1.2 Statistics, marketing

We use external services and cookies to create usage statistics, measure the reach of our website and the success of advertising measures, and/or increase the reach of our website. This helps us improve your experience on the website and our products and services. Your personal data is processed exclusively on the basis of your active consent in accordance with Art. 6 (1) (a) GDPR. However, we would also like to point out in this context that in this case, not all functions on our website may be available. We would also like to point out that web analysis tools are used to evaluate visitor behavior and analyze interests (profiling).

External services in the category "Statistics and Marketing":
Google Analytics, Google Tag Manager, Meta Pixel, The Trade Desk

Further information on your right of revocation pursuant to Art. 7 (3) GDPR can be found in the section Your rights as a data subject. You can also revoke your consent for the future at any time in the section Revocation of consent.

4.1.3 External media

We also use external services and cookies to better present the content of our website. These include, for example, services for displaying and integrating images, videos, audio recordings, maps, and other content from external services. If consent is required to use one of these external services (such as services from countries that do not comply with European data protection regulations; e.g., services in the USA) and you have not yet consented to use the services in this category, you will be explicitly asked for your consent (consent in accordance with Art. 6 (1) (a) GDPR) to the privacy policy of the respective service before using the respective service. This means that if you do not consent to this category in your privacy settings, you still have the option of subsequently activating individual services in this category.

External services in the category "External Media":
OpenStreetMap, Vimeo, YouTube

Further information on your right of revocation pursuant to Art. 7 (3) GDPR can be found in the section Your rights as a data subject. You can also revoke your consent for the future at any time in the section Revocation of consent.

4.2 Deleting cookies and website data

With the exception of essential (technically necessary) cookies, you can reject any data protection category via a banner, or subsequently by actively taking action via the Revocation of consent section. You can also delete individual cookies, the entire cookie database, and any other website data that may have been stored via your browser settings. Caution: When manually deleting cookies and website data, especially individual cookies, the website may no longer function properly.
Depending on your browser type, you can find information and instructions here on how to delete these cookies or block their storage in advance: Qwant search results for deleting cookies

4.3 Revocation of consent

Here you have the option to withdraw your previously granted consent to categories or services:
Change privacy settings

5. Contact

If you contact us via the contact form on this website, the comments function of the website, by e-mail or telephone, you agree to the transmission of your personal data mentioned under What data we process about you and to be contacted by e-mail or telephone. Your data will only be used to contact you and will not be passed on by us.

6. Newsletter

If you have subscribed to our newsletter, you agree to the transmission of your personal data mentioned under point What data we process about you and to be contacted by e-mail. Your data will be used exclusively for our newsletter.

6.1. Mailchimp

To send our newsletter, we use the Mailchimp service provided by the American provider Intuit, 2700 Coast Ave, Mountain View, CA 94043, USA. If you subscribe to our newsletter, your data (email address, IP address, device and browser identification and any additional data you may have provided such as title, name, etc.) will be stored by Mailchimp. Mailchimp also stores all accesses you make via your newsletter (when and from which IP address the newsletter was viewed or opened, and which links were clicked).

In the context of data transfer to the USA, we would like to point out that Intuit is EU-US Data Privacy Framework certified (see https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en or https://www.dataprivacyframework.gov/list) and has an appropriate level of data protection (see also Art. 45 GDPR). Furthermore, we would like to point out that we have concluded a data protection agreement with Intuit, which obliges Intuit to comply with data protection regulations.

Detailed information on the use, utilisation, storage and transfer of your data to third parties by MailChimp can be found here: https://mailchimp.com/legal/privacy/. You can unsubscribe from the newsletter at any time and have your data deleted from MailChimp by clicking on the link at the bottom of the email you receive.

6.2. NumBirds CRM

For the distribution of our newsletters and the management of customer and partner contacts, we use the NumBirds CRM service (numbirds.com) provided by NumBirds GmbH, Gottfried-Hagen-Str. 22, 51105 Köln, Germany. If you register or have registered for our newsletter via our website, the data you provide, in particular your email address and, where applicable, other contact details, will be transferred to NumBirds and processed there. In addition, contacts from our online shop are transferred to NumBirds and managed there as part of our CRM activities. We also use NumBirds to send informational communications to partners, accommodation providers, bus companies, schools and comparable contact groups.

The processing of your data by NumBirds is carried out on our behalf on the basis of a corresponding data processing agreement. Detailed information on the use, processing, storage and, where applicable, disclosure of your data by NumBirds can be found in the provider’s privacy policy: https://numbirds.com/datenschutz. You may unsubscribe from our newsletters and informational communications at any time. In particular, you can use the corresponding unsubscribe link provided in the respective email.

7. Tools and external services used

7.1. AlpineCard

The AlpineCard is a personal KeyCard that provides guests with various benefits from our partners. The AlpineCard is sold on our website via the online shop operated by feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck, Austria. Further information on the processing and disclosure of your data can be found directly in the online shop when purchasing the AlpineCard and in feratel's privacy policy at: https://www.feratel.at/datenschutz/

7.2. dataCycle data management system

We operate the dataCycle data management system to display map information, events, images, and other tourist information. The access data generated (including IP address, device, and browser identification) is neither used to track visitors nor shared with third parties. Further information about the benefits of dataCycle can be found on the dataCycle website at https://datacycle.info/.

7.3. etracker - Cookie-less Modus

This website uses etracker, a web analytics service provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany. We use etracker in cookie-less mode. This makes it possible to use etracker without requiring consent. The data generated by etracker is processed and stored by etracker exclusively in Germany and is therefore subject to strict German and European data protection laws and standards.

Further information on data protection at etracker, in particular regarding cookie-less mode, can be found at https://www.etracker.com/datenschutz/.

7.4. feratel booking&more (TOSC5)

Our website uses the online booking tool TOSC5 from feratel, a product of feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck, Austria. In order to be able to display the booking tool, your IP address is transmitted to feratel, and the data you enter in the booking form is also transmitted directly to feratel, where it is processed for booking purposes. In the course of this, we as the website operator have no access to your data. Feratel may also use its own external services to provide the booking tool. Please read feratel's privacy policy carefully before using feratel's online booking tool TOSC5.
You can find feratel's privacy policy here: https://www.feratel.at/en/privacy-policy/

7.5. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies. The information generated by the Google Analytics cookies about your use of this website (including your IP address and the URLs of the visited website, as well as device and browser identification) may be transferred to and stored on servers in the USA operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043.

In the context of data transfer to the USA, we would like to point out that Google LLC is EU-US Data Privacy Framework certified (see https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en or https://www.dataprivacyframework.gov/list) and has an appropriate level of data protection (see also Art. 45 GDPR). Furthermore, we would like to point out that we have concluded a data protection agreement with Google LLC, which obliges Google LLC to comply with data protection regulations.

The website uses the IP anonymisation option offered by Google Analytics. Your IP address will therefore be shortened/anonymised by Google as soon as Google receives your IP address. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data by Google. You can find Google's privacy policy at https://policies.google.com/privacy?hl=en.

7.6. Google Tag Manager

We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website. This is a solution that allows us to manage statistics and tracking services via a simple interface and integrate them into our website. The Tag Manager itself does not track visitors, but is primarily used to integrate tracking from other services. Among other things, your IP address as well as device and browser identification are transmitted by Google to servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, in the USA and stored there.

In the context of data transfer to the USA, we would like to point out that Google LLC is EU-US Data Privacy Framework certified (see https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en or https://www.dataprivacyframework.gov/list) and has an appropriate level of data protection (see also Art. 45 GDPR). Furthermore, we would like to point out that we have concluded a data protection agreement with Google LLC, which obliges Google LLC to comply with data protection regulations.

You can find Google's privacy policy at https://policies.google.com/privacy?hl=en.

7.7. INCERT voucher shop

Our voucher shop is operated by the company INCERT eTourismus GmbH & Co KG (hereinafter referred to as INCERT) in Wirtschaftspark Lederfabrik, Leonfeldnerstraße 328, 4040 Linz. When you use the voucher shop, your IP address is transferred to INCERT and all service providers involved in the operation of the service. In addition, INCERT may collect information about your use of the Service. Please read INCERT's privacy policy carefully before using the voucher shop.
You can find INCERT's privacy policy on the website https://www.incert.at/dsgvo/ or on https://www.incert.at/datenschutz/.

7.8. Meta Pixel

We use the Meta Pixel from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, on our website. With the help of the Meta Pixel, we can evaluate the reach of our ads on Facebook, Instagram, and other Meta services. This primarily serves to improve the ads we place on Meta services (Facebook, Instagram, etc.). Your data is collected and stored by Meta, and is not visible to us; it can only be used to place ads. Cookies are set when the Meta Pixel code is used.
By using the Meta Pixel, Meta is informed of your visit to this website so that you can see ads relevant to you on Meta. If you have a Meta account and are logged in, your visit to our website will be associated with your corresponding Meta user accounts (Facebook, Instagram, etc.). At a minimum, your IP address, device and browser identification will be transferred to Meta Ireland Limited and possibly also to Meta Platforms, Inc., 1 Meta Way Menlo Park, California 94025 in the USA.

In the context of data transfer to the USA, we would like to point out that Meta Platforms, Inc. is EU-US Data Privacy Framework certified (see https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en or https://www.dataprivacyframework.gov/list) and has an appropriate level of data protection (see also Art. 45 GDPR). Furthermore, we would like to point out that we have concluded a data protection agreement with Meta Platforms, Inc., which obliges Meta Platforms, Inc. to comply with data protection regulations.

Information on how the Meta Pixel is used for advertising campaigns can be found at https://www.facebook.com/business/learn/facebook-ads-pixel. For more information on Meta's data policy, please visit https://www.facebook.com/privacy/policy/.

7.9. Onboard

For the provision of our online application form, we use the Onboard service (onboard.org), provided by onboard GmbH, Dr. J. Köllensperger Straße 10/B, 39011 Lana (BZ), South Tyrol / Italy. If you apply to us via our online application form, the data you enter and submit, in particular your contact details, application documents and any other information you provide as part of your application, will be processed and stored via Onboard.

The processing of your data by Onboard is carried out on our behalf on the basis of a corresponding data processing agreement. Detailed information on the use, processing, storage and, where applicable, disclosure of your data by Onboard can be found in Onboard's privacy policy: https://www.onboard.org/privacy/.

7.10. Onlim KI-Telefonassistent

For the provision of our AI telephone assistant, we use the Onlim service (onlim.com) provided by Onlim GmbH, Neutorgasse 13/5, 1010 Wien, Austria. When using the AI voicebot, the content of your conversations and, where applicable, your telephone number are processed, particularly if you request a callback or provide a callback number. In addition, telephone calls are currently recorded and processed for the purpose of optimizing and improving the AI telephone assistant.

The processing of your data by Onlim is carried out on our behalf on the basis of a corresponding data processing agreement. Detailed information on the use, processing, storage and, where applicable, disclosure of your data by Onlim can be found in the provider's privacy policy: https://onlim.com/datenschutzerklaerung/.

7.11. OpenStreetMap

To display interactive maps this website uses OpenStreetMap, a service of the Openstreetmap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. A "company limited by guarantee" registered in England and Wales. By calling up this website, information about the use of this website including the IP address is transmitted to OpenStreetMap. By establishing a direct connection between your browser and OpenStreetMap, map content from OpenStreetMap is transmitted directly to your browser and from there integrated into the website. We therefore have no influence whatsoever on the data collected in this way. Further information on the collection and processing of your data by OpenStreetMap can be found here: https://wiki.osmfoundation.org/wiki/Privacy_Policy.

7.12. pixel.map

We use pixel.map, a service provided by pixelpoint multimedia werbe GmbH, Rosentaler Straße 150, 9020 Klagenfurt am Wörthersee, Austria, to display interactive maps. The access data collected in this process (including IP address, device and browser identification) is not used to track visitors and is not passed on to third parties. Further information about the advantages of pixel.map over other map services such as Google Maps, Bing Maps, or Mapbox can be found on the pixelpoint website at https://www.pixelpoint.at/pixel.map/.

7.13. The Trade Desk

For the analysis, optimization and delivery of advertisements, we use The Trade Desk (theTradeDesk), provided by The Trade Desk Inc., 42 N. Chestnut St, Ventura, CA 93001, USA. This enables us to determine which products and content are of interest to internet users who have seen our advertisements and visit our website. The technology provided by theTradeDesk also enables us to recognize users of our website and, during future advertising interactions, tailor advertisements and content to their interests, such as products and information they have viewed.

In the context of data transfer to the USA, we would like to point out that The Trade Desk, Inc. is EU-US Data Privacy Framework certified (see https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en or https://www.dataprivacyframework.gov/list) and has an appropriate level of data protection (see also Art. 45 GDPR). Furthermore, we would like to point out that we have concluded a data protection agreement with The Trade Desk, Inc., which obliges The Trade Desk, Inc. to comply with data protection regulations.

Detailed information on the use, processing, storage and disclosure of your data to third parties by The Trade Desk can be found here: https://www.thetradedesk.com/de/legal/privacy.

7.14. Vimeo

When you visit our website, you can watch videos embedded by Vimeo.com, Inc., 555 West 18th Street, New York, New York 10011, USA.
In order to display Vimeo videos, Vimeo.com, Inc. collects, among other things, your IP address, device and browser identification, which may be transmitted by Vimeo.com, Inc. to servers in the USA and stored there. Vimeo.com, Inc. may also collect data about your use of the videos.

In the context of data transfer to the USA, we would like to point out that Vimeo.com, Inc. is EU-US Data Privacy Framework certified (see https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en or https://www.dataprivacyframework.gov/list) and has an appropriate level of data protection (see also Art. 45 GDPR). Furthermore, we would like to point out that we have concluded a data protection agreement with Vimeo.com, Inc., which obliges Vimeo.com, Inc. to comply with data protection regulations.

Please read the Vimeo.com, Inc. Privacy Policy carefully before using Vimeo. For privacy policy and terms of use, visit https://vimeo.com/privacy.

7.15. YouTube

When visiting our website, you can watch videos embedded from YouTube (a product of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
In order to display YouTube videos, Google collects your IP address as well as your device and browser identification. These data may be transmitted by Google to servers in the USA at Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, and stored there. Google may also collect data about your use of YouTube.

In the context of data transfer to the USA, we would like to point out that Google LLC is EU-US Data Privacy Framework certified (see https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en or https://www.dataprivacyframework.gov/list) and has an appropriate level of data protection (see also Art. 45 GDPR). Furthermore, we would like to point out that we have concluded a data protection agreement with Google LLC, which obliges Google LLC to comply with data protection regulations.

You can find the privacy policy and terms of use at https://policies.google.com/privacy?hl=en.

8. Purposes of data processing

We will process your personal data for the following purposes:

• to provide you with this website and to further improve and develop this website
• to be able to compile usage statistics
• to be able to detect, prevent and investigate attacks on our website
• to be able to respond to your enquiry and/or to carry out pre-contractual measures
• to improve technical support for users
• to compile easy-to-use website access statistics in a cost-effective manner
• to better promote our services or products
• to accept applications

9. Legal basis of the processing

The processing of your personal data (see point What data we process about you) is carried out exclusively on the legal basis of

• the fulfilment of the contract with you and/or for the implementation of pre-contractual measures (Art 6 para 1 lit b DSGVO);
  and/or
• our overriding legitimate interest in achieving the purposes stated in the point Purposes of data processing (Art 6 para 1 lit f DSGVO).

10. Transmission of your personal data

For the above-mentioned purposes, we will transfer your personal data to the following recipients, in some circumstances also depending on your consent:

• to the services listed under Tools and external services used
• to the services listed under Newsletter

We work with selected service providers who carry out certain data processing on our behalf (e.g., hosting providers and other IT service providers employed by us). This is always done in compliance with applicable data protection regulations, in particular the EU General Data Protection Regulation (EU-GDPR). We have concluded corresponding data processing agreements (DPAs) with these partners to ensure the protection of your personal data.

11. Duration of storage

We will generally store your data processed by us through your visit to this website for a period of three months. Longer storage will only take place insofar as this is necessary to investigate detected attacks on our website.

If you have transmitted your personal data to us by filling in forms or using other techniques on our website, we will store your data in any case for as long as appears necessary for the completion of your request and as long as required for legal retention periods and/or limitation periods.

12. Your rights as a data subject

As a data subject, you have the right to information, rectification, erasure, and restriction of processing. This also applies to the right to data portability, provided the processing is based on a contract or consent.
If the processing of your personal data is based on Art. 6 (1) (e) GDPR (data processing in the public interest), Art. 6 (1) (f) GDPR (data processing based on a balance of interests), or in the context of profiling pursuant to Art. 4 (4) GDPR, you also have the right to object. This right also applies to the processing of data for direct marketing purposes.
If you have given your consent, you also have the right to revoke it at any time with effect for the future.

If you believe that the processing of your personal data is unlawful, you can contact any data protection authority. The supervisory authority responsible for us pursuant to Art. 55 GDPR:

Österreichische Datenschutzbehörde (https://www.dsb.gv.at/), Barichgasse 40-42, 1030 Vienna, Austria, dsb@dsb.gv.at

If you have any questions regarding this privacy policy or would like to exercise your rights listed therein, please contact the address provided under Responsible for the processing of personal data.