Privacy policy

Status 5/23/2018

Busslehner Sports
Sport Busslehner GmbH
A - 6215 Achenkirch
Tel. +43 5246 6316
office(at)busslehner-sports.com

We strive to provide services/products of outstanding quality. In order to guarantee this in the future and to be able to offer you the best possible service and perfect performance, we collect and process data and activities from inquiries, bookings, voucher purchases or when you visit our website. We process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing in the context of our website, our Facebook account. If you make a booking with us, make a purchase, send us an inquiry, obtain information or brochure material, we process your personal data in accordance with Art. 6 para. 1 sentence 1 lit b, f.

What data do we collect?

Website: When you use this website, we collect technically necessary data that is automatically transmitted to our server, including IP address, date and time of the session, type of end device, access status/HTTP status code, browser type, language and version of the browser software, operating system.

This is technically necessary in order to display our website to you. We also use the data to improve the website in line with your expectations and to ensure the security and stability of the website. The legal basis for the collection is Art. 6 para. 1 lit. f GDPR.

Forms: If you contact us via a form on the website or by e-mail, make an inquiry or make a booking, you provide us with the personal data (e.g. name, postal address, e-mail address, telephone number, interests, etc.) for processing that we need to be able to process your request. We store and process this data. We do not pass it on to third parties. Exceptions to this are companies that work on our behalf as processors and with whom we have concluded an agreement that they will handle your data with the same legally prescribed duty of care as we do. The companies are listed below in this privacy policy.

Cookies

Our website uses cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause any damage.

We need cookies to make our website user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser on your next visit.

If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases.

If you do not allow cookies, not all functions of our website may be available.

Web analysis - Google Analytics

We use Google Analytics on our website to analyze and improve the use of our website.

Google Analytics is a web analysis service provided by Google Inc. Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The legal basis for the processing of data with the help of Google Analytics is Art. 6 para. 1 lit. f GDPR. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

We have concluded a corresponding contract with the provider for order processing.

You can prevent this by setting up your browser so that no cookies are stored. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent. You can also prevent the data generated by cookies and relating to your use of the website (including your IP address) from being passed on to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

We use Google Analytics with the extension "_anonymizeIp()". This shortens the IP addresses (so-called IP masking). A reference to specific persons can thus be excluded. Google participates in the EU-US Privacy Shield, www.privacyshield.gov. This ensures an adequate level of data protection even in exceptional cases in which Google transfers personal data / EU-US framework to the USA.

Information about Google: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001

Further information on Google's terms of use:
www.google.com/analytics/terms/de.html

More information about Google's privacy policy:
www.google.com/intl/de/analytics/privacyoverview.html

Google Maps

This website accesses the Google Maps service. This enables us to show you interactive maps directly on our website and allows you to use the map function conveniently. By using Google Maps, data is transmitted to Google in the USA, including your IP address.

You can prevent the transmission of data to Google by deactivating JavaScript in your browser settings. In this case, the services of Google Maps will also not be available to you.

The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR. Google participates in the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework

Information about Google:
Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA

More information about Google's terms of use:
www.google.com/analytics/terms/de.html

More information about Google's privacy policy:
www.google.com/intl/de/analytics/privacyoverview.html

More information on the terms of use of Google Maps:
www.google.com/intl/de_US/help/terms_maps.html

Google Fonts

We use Google Fonts on our website. This allows us to integrate certain fonts into our website. These fonts are provided by Google via servers in the USA. When accessing our website, the visitor's web browser establishes a direct connection to these servers. Among other things, the visitor's IP address is transmitted to Google and stored there. Google participates in the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework

Social media plugins

We use the following social media plugins on our website: Facebook. You can recognize them by the special icons or terms such as "Like", "Gefällt mir" etc. for social media channels. Personal data is transmitted to the respective plug-in provider and stored there.

The respective plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. We offer you the opportunity to interact with the social networks and other users via the plug-ins so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 lit. f GDPR.

Data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider. In the case of US providers, data is transmitted in the USA; these providers have submitted to the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the privacy policies of these providers. There you will also find further information on your rights and options for changing settings to protect your privacy:

Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA
www.facebook.com/policy.php

Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA
www.google.com/policies/privacy/partners/?hl=de

When you make a booking or purchase with us, send us an inquiry or request information or brochures, we process your personal data in accordance with Art. 6 para. 1 sentence 1 lit. b, f. You can also subscribe to our newsletter on our website. In the newsletters we inform you about innovations to our product/service, news and interesting facts, as far as possible and known to us, tailored to your interests and vacation wishes. When you subscribe to the newsletter, we collect and store the data that you enter in the input mask (e.g. surname, first name, e-mail address, postal address and enrich this with interests that are known to us from your vacation wishes). We use your data for direct marketing within the meaning of Article 21 GDPR and Article 6(1)(f) GDPR in order to send you customized information about our services. Your data will not be passed on to third parties. Subscription to the newsletter is only possible with your consent. The double opt-in procedure is used for registration.

We also use your child's date of birth to send booking-related direct marketing emails. We will always send emails to the parental email address provided during the booking process. You can object to this use at any time with effect for the future.

You can easily revoke your consent to receive direct marketing emails and the newsletter at any time by using the unsubscribe function in the newsletter sent to you. We use the data exclusively for sending direct marketing measures and newsletters.

We use the service "WS SPORTS" from Waldhart Software, 6405 Pfaffenhofen, Unterdorf 1, as a technical service provider for the creation and dispatch of the newsletter. As part of the technical processing, employees of Waldhart Software also have access to your personal data to the extent necessary, exclusively for the implementation and maintenance of the newsletter dispatch. We have concluded an order processing contract with Waldhart Software in accordance with Art. 28 GDPR to ensure the confidentiality and security of your data. Your data will not be used by Waldhart Software for its own purposes.

Storage duration

We only process and store your data for as long as is necessary for processing or to comply with legal obligations. Once the purpose of processing no longer applies, your data will be blocked or deleted. If there are additional statutory storage obligations, we will block or erase your data once the statutory storage periods have expired.

Our measures to protect your personal rights

As mentioned at the beginning, we take the protection of your personal data very seriously and use it exclusively to stay in contact with you, to optimize our service and to tailor it to your wishes and needs.

We take appropriate measures to prevent unauthorized access to the stored data, theft, disclosure, modification or destruction.

Our employees are trained accordingly and are obliged to maintain confidentiality and to use your data in accordance with the law.

With service providers to whom we disclose personal data for communication purposes (newsletters, mailings, etc.) or for commercial purposes (bookkeeping, accounting, booking route, data management systems, etc.), we have concluded order processing agreements to protect the confidentiality of your personal data. Agreements on order processing have been concluded.

Our website contains links to third-party websites. We are not responsible for compliance with the provisions of the GDPR by these providers. We therefore recommend that you also enquire about the privacy policy of these companies.

Your rights

In particular, the GDPR grants you the right of access to your personal data (whether and which data we store, processing purposes, duration of storage), the right to rectification and completion, the right to erasure, the right to restriction of processing, the right to data portability, the right to object and the right to withdraw your consent under data protection law.

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If you wish to exercise this right of confirmation, you can contact our data protection officer at any time.

You have the right to receive information from us free of charge at any time about the personal data stored about you. Furthermore, the European legislator has granted you the right to obtain information about the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations, where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases where the processing is based on automated decision-making, the significance and envisaged consequences of such processing for the data subject. and 4 GDPR and - at least in these cases - meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you. If the personal data was not collected from you, you have the right to access all available information about the origin of the data.

You also have the right to know whether personal data has been transferred to a third country or to an international organization. If this is the case, you also have the right to obtain information about the appropriate safeguards in connection with the transfer.

You have the right to demand the immediate correction of incorrect personal data concerning you.

You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the following grounds applies and insofar as the processing is not necessary

The personal data have been collected or otherwise processed for such purposes for which they are no longer necessary.
The data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) GDPR, or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
The data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) GDPR.
The personal data was processed unlawfully.
The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

If one of the above reasons applies and you wish to have personal data stored by us deleted, you can contact our data protection officer at any time. Our data protection officer or an employee appointed by him will ensure that the request for deletion is complied with immediately.

If we have made the personal data public and our company is obliged to erase the personal data in accordance with Art. 17 para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data that you have requested the erasure of all links to your personal data or of copies or replications of your personal data from these other data controllers, unless the processing is necessary. Our data protection officer or an employee appointed by him will take the necessary steps in individual cases.

You have the right to demand that we restrict processing if one of the following conditions is met:

The accuracy of the personal data is contested by you, for a period enabling us as the controller to verify the accuracy of the personal data.
The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
We as the controller no longer need the personal data for the purposes of the processing, but you as the data subject require them for the establishment, exercise or defense of legal claims.
You have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether our legitimate grounds override yours as the data subject.

If one of the above conditions is met and you wish to request the restriction of personal data stored by us, you can contact our data protection officer at any time. Our data protection officer or an employee appointed by him will arrange for the restriction of processing.

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us as the controller to whom the personal data has been provided, provided that the processing is based on consent pursuant to Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 letter a GDPR or on a contract pursuant to Art. 6 para. 1 letter b GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as the controller.

Furthermore, when exercising your right to data portability pursuant to Art. 20 para. 1 GDPR, you have the right to obtain that the personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.

To assert the right to data portability, you can contact our data protection officer at any time.

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.

If you have any questions about this statement or the processing of your personal data by our company, please contact us by email at sartori@sports-tourism.at or our data protection officer, GF Martina Bauer by email at martina@busslehner-sports.com or GF Christian Bußlehner by email at christian(at)busslehner-sports.com

Innsbruck, 23.5.2018