Online Shop
This section of the privacy policy serves as a general information guide about who processes which data, for what purpose, and on what legal basis. It emphasizes that this is merely informational and does not require a declaration of intent by the affected person, nor does it constitute part of a contract.
1. Registration/Login in Online Shop:
This part describes that with a single account at "Freunde der Berge," users can access ticket shops of various mountain resorts like "Annaberger Lifte," "Erlebnisalm Mönichkirchen," "Hochkar Bergbahnen," and "Ötscherlifte." To place orders or purchase tickets, registration or login with customer data is required.
The ticket shops are operated by their respective mountain railway companies, responsible under GDPR. These companies have contracted ecoplus Alpin GmbH to process data on their behalf through a data processing agreement (Art 28 GDPR).
To provide these services, personal data shared during registration or later is processed. This includes name, email, birthdate, gender, chosen password, address (and possibly a different delivery address), optional phone number, and vehicle registration number when buying a parking ticket.
Data is not shared with other shops unless you order or book services there. Data is stored for accessing past orders and to autofill information for new orders. For technical registration, the service "Auth-Zero" is contracted under a data processor agreement.
2. Ticket Orders in the Online Shop:
For online ticket purchases, your personal, contract, and payment details, along with communication data (IP address and server log files), are processed to fulfill the contract and for invoicing and archiving, as required by law. This data is stored as long as necessary or as mandated by legal requirements (e.g., invoice retention for 7 years as per § 132 BAO) or for defending potential warranty/liability claims. If an order is canceled, data is stored for 24 hours to address any issues, particularly technical, during the ordering process.
Entering personal data is not obligatory, but without it, your bookings/orders can't be processed. It's also possible to purchase tickets for others by providing their name and birthdate.
For processing seasonal, multi-day, and day ticket orders, the service "Pricenow" is used, and a data processing agreement as per Art 28 GDPR has been signed with them.
To process orders in the online ticket shops, it's necessary to provide details like title, first and last name, address, email, birth date, optionally a portrait photo and vehicle registration, and ticket information. This data processing and storage are for contract fulfillment and pre-contractual services under GDPR (Art. 6 (1) lit. b and c). Online booking software is used based on legitimate interest in providing transport tickets remotely. For ticket creation, Kubeos in Salzburg, Austria, is contracted under a data processing agreement (Art. 28 GDPR).
The company uses customer email addresses for surveys to improve products and services. Customers can opt out of this by emailing a specified message to office@erlebnisalm.com.
To process orders in the online ticket shops, it's necessary to provide details like title, first and last name, address, email, birth date, optionally a portrait photo and vehicle registration, and ticket information. This data processing and storage are for contract fulfillment and pre-contractual services under GDPR (Art. 6 (1) lit. b and c). Online booking software is used based on legitimate interest in providing transport tickets remotely. For ticket creation, Kubeos in Salzburg, Austria, is contracted under a data processing agreement (Art. 28 GDPR).
We, as your contract partner, have a legitimate interest in enhancing and optimizing our products and services. Customer feedback is essential for this purpose, as it provides direct insights into their experiences. Thus, we inform you that the email address provided in our online shop may be used for surveys about our products and services. If you do not consent to this use of your data, you can object by sending an email to office@erlebnisalm.com with the following, specified message to opt-out of these surveys:
“I hereby object to the use of my email address and contract data (including related payment data) [please enter your email address here] for the purpose of customer surveys aimed at improving the products and services I have purchased, as well as similar products and services of Erlebnisalm Mönichkirchen GmbH.”
3. External Payment Service Providers:
For order payments, external payment service providers are used under the legal basis of contract fulfillment. Payments are made through their platforms, using a secure SSL process. However, the seller does not assume liability for data or system attacks. Payment details entered, such as account numbers, credit card numbers with verification codes, passwords/TANs, etc., are processed exclusively by these providers and are not visible to shop operators. Shop operators only receive confirmation of payment or notification of payment failure from these providers. Links to the privacy policies and terms of service of the payment providers are also provided.
https://eps-ueberweisung.at/de/datenschutzhinweis
https://www.payone.com/DE-de/datenschutz
https://www.datatrans.ch/de/datenschutzbestimmungen/
4. Deletion of User Account:
Users can delete their accounts at any time. All data not subject to legal retention will be deleted. Deleting your account means losing access and the ability to make ticket purchases. To delete, email the address provided in the shop. The deletion request will be processed unless there's a legal reason against it. Note: Deletion is not possible if there's an active booking or order until it's completed.
This notice outlines how Erlebnisalm Mönichkirchen GmbH processes personal data in relation to its parking space management, in accordance with Article 13(1) of the GDPR.
1. Purposes of Data Processing:
We will process your personal data for the following purposes:
a) Parking management, including service automation and acceleration for vehicles with booked parking tickets.
c) Compliance monitoring of usage terms (e.g., parking over two spaces).
d) Verification of legal use of the parking ticket (e.g., exceeding parking time).
e) Protection of facilities (e.g., vandalism).
f) Investigation of misuse (e.g., parking without payment).
These data are collected through:
The statement indicates that notifications about image recording and vehicle registration data capture are provided in accordance with legal requirements.
2. Legal Basis for Processing:
The billing of parking fees in connection with the parking ticket is based on contract fulfillment (Article 6(1)(b) GDPR).
The capture of license plate numbers for parking space management is based on the legitimate interest of the controller (Article 6(1)(f) GDPR), aiming to achieve the purposes mentioned in point 1 (a to f). You have the right to object to this data processing under Article 21(1) GDPR if there are reasons arising from your specific situation.
Recognition of individual license plates for service automation and acceleration for vehicles on the whitelist is also mentioned.
3. Transmission of Your Personal Data:
For the purposes mentioned above, your personal data may be processed or transmitted to the following recipients, as needed:
Data processors
4. Storage Duration:
a) Customer Data: We retain your personal data only for as long as necessary to fulfill the contract and achieve the purposes mentioned in point 1. For specific details, please refer to the Shop's Data Protection Policy.
b) Image Processing ("Video Surveillance"): Recorded data, unless needed for specific protection or evidence purposes, is deleted no later than 48 hours after recording.
In general, we aim to store data for the minimum necessary duration. Typically, this means retaining data only for the duration a license plate is present. This involves recording entry and exit, followed by immediate deletion of the license plate data. In cases of inspection, a 24-hour buffer is maintained to enable tracking of movements, as follows: entry recording -> exit recording + 24 hours -> followed by license plate deletion.
In cases where a license plate does not exit, there is a definable maximum parking duration set at 48 hours. This means that a license plate that has not exited within that time frame or where the exit might not have been detected will only remain in the system for 48 hours.
The only exceptions to this rule are "registered" license plates (e.g., long-term parkers, employees) and license plates with valid tickets (see Shop's Data Protection Policy). Registered license plates will be stored indefinitely until revoked, while those with valid tickets will be stored for as long as the ticket is valid, following the rules mentioned above.
5. Your Rights Regarding Personal Data:
You have the following rights concerning your personal data: the right to request information, correction, deletion, restriction, data portability, and objection. Please contact us to exercise these rights.
If you believe that the processing of your data violates data protection laws or that your data protection rights have been infringed in any way, you have the right to file a complaint with the data protection authority.
If the processing is based on your consent, you have the right to withdraw your consent at any time.
If you have given your consent to receive the newsletter from "Freunde der Berge," we will use the data you provided, including salutation, first name, last name, and email address, to keep you informed regularly about news from the region and current offers. The legal basis for processing your personal data is your explicit consent, which we obtain through the "Double Opt-In" procedure. To facilitate the newsletter delivery, the above-mentioned data is exclusively shared with the company Wilken AG, Blumenaustrasse 8, 9320 Arbon, Switzerland, which operates the E-Marketing Suite on our behalf. With the assistance of Wilken AG, we can analyze our newsletter campaigns. When a sent newsletter email is opened, a connection is established with the servers to determine if a newsletter message has been opened and which links may have been clicked. The purpose of these analyses is to better tailor future newsletters to the interests of the recipients, especially focusing on identifying particular ski areas of interest. Furthermore, technical information such as the time of retrieval, IP address, browser type, and recipient's operating system is recorded. We have concluded a data processing agreement with Wilken AG in accordance with Article 28 of the GDPR to ensure that your data is processed only to the extent desired by us and permitted by you. If you no longer wish to receive the newsletter, you can unsubscribe at any time. To do so, you can use the unsubscribe link provided in every email or contact us directly at info@freundederberge.at.
6. External Links
For your optimal information, you will find links on our pages that refer to third-party websites. In cases where such links are not clearly recognizable, we would like to inform you that it is an external link. We, as the responsible entity, have no influence on the content and design of these pages provided by other providers and therefore assume no liability for the content of websites or URLs linked to this website or for the functioning of any type of link.
In the case of links to other online offerings, we do not assume any liability for the content, functionality, and availability of the linked website(s). This also applies to all other direct or indirect references or links to external internet offerings.
7. Your Rights under GDPR and the Data Protection Act
According to the General Data Protection Regulation (GDPR) and the Data Protection Act, you, as the data subject, have the following rights and remedies concerning data processing:
Data Protection Information (freundederberge.at)
