Privacy Policy
1. Data protection at a glance
General Information
The following information provides a simple overview of what happens with your personal data when you visit our website. Personal information means any data by which you could personally be identified. You can find detailed information on the subject of data protection in our data protection declaration as provided under this text.
Data collection on our website
Who is responsible for the data collection on this website?
Data is processed on this website by the website operator. The operator's contact details can be found in the website's required legal notice.
How do we collect your data?
On the one hand, your data will be collected when you communicate it to us. This could, for example, be data you enter on a contact form.
Other data is collected automatically by our IT systems when you visit the website. This data is primarily technical data such as the browser and operating system you are using or when you accessed the page. The data is collected automatically as soon as you access our website.
What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyse how you use the site.
What rights do you have regarding your data?
You always have the right to request information about your stored data, where it came from, who received it, and why it was collected, at no expense to yourself. You also have the right to request that it be corrected, blocked, or deleted. To do this, or if you have any other questions about data protection, you can contact us at any time using the address given in the legal notice. You may also, of course, file a complaint with the competent regulatory authorities.
Besides, you have the right to request that the processing of your personal data be restricted. Relevant details may be found in this privacy policy under "Right to Restriction of the processing".
Analysis tools and third-party tools
When visiting our website, statistical analyses may be made of your surfing behaviour. This happens primarily through the use of cookies and analytics. The analysis of your surfing behaviour is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by not using specific tools. You will find detailed information on this in the following privacy declaration.
You can object to this analysis. Our privacy policy provides information on options in this regard.
2. General information and mandatory information
Privacy Policy
The operators of this website take the protection of your personal data very seriously. We treat your personal data as strictly confidential under statutory data protection regulations and this data protection declaration.
If you use this website, various pieces of personal data will be collected. Personal information means any data by which you could personally be identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.
Please note that data transmitted via the internet (for example, via email communication) may be subject to security breaches. Completely protecting data against access by third parties is impossible.
Notice concerning the data controller
Responsible for data processing on this website is:
Verein des Sekretariats des Nationalparkrates Hohe Tauern, Nationalpark Hohe Tauern
Kirchplatz 2
9971 Matrei in Osttirol
Austria
Phone: Tel.: 0043 (0)4875 5112
e-mail:
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal e-mail making this request is sufficient. A revocation request from you does not apply to data processed prior to your request having reached us.
Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)
If the data is processed on the basis of Art. 6 para. 1 (e) or (f) GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you lodge your objection, we will no longer process your relevant personal data unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedom, or the processing serves the purpose of asserting, exercising or defending legal claims (objection on the basis of Art. 21 para. 1 GDPR).
Where personal data is processed for direct marketing purposes, you have the right at any time to object to the processing of personal data concerning you for the purposes of such marketing, including profiling to the extent it is related to such direct marketing. If you object, your personal data will no longer be used for purposes of direct marketing (objection on the basis of Art. 21 para. 2 GDPR).
Right of Complaint with Regulatory Authorities
In the event of infringements of the GDPR, the persons concerned shall have the right to appeal to a supervisory authority, particularly in the Member State of their habitual residence, workplace or place of presumed infringement. The right of complaint exists without prejudice to other administrative or judicial remedies.
Right to Data Portability
You have the right to have data which we process on the basis of your consent or in fulfilment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another Data Controller, this shall only take place to the extent that is technically feasible.
SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the enquiries you send to us as site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://", and by the lock symbol in your browser bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be spied-out by third parties.
Disclosure, Blocking, Deletion and Correction of Data
Within the scope of prevailing statutory provisions, you have the right at any time to be provided with information free of charge about any of your personal data that is stored, as well as its origin, the recipient and the purpose for which it has been processed. When appropriate, you also have the right to have this data corrected, blocked or deleted. You can contact us at any time regarding this or any other questions on the topic of personal data at the address stated on our legal notice.
Right to Request Restriction of Processing
You have the right to request that the processing of your personal data be restricted. You can contact us at any time at the address stated on our legal notice. The right to restrict the processing is given in the following cases:
- If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the period of verification, you have the right to demand that the processing of your personal data be restricted.
- If the processing of your personal data has taken / is taking place unlawfully, you can demand the restriction of data processing instead of data deletion.
- If we no longer require your personal data but you do for exercising, defending or asserting legal claims, you have the right to demand that the processing of your personal data be restricted instead of data being deleted.
- If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, your as well as our interests must be weighed. As long as it has not been ascertained whose interests prevail, you have the right to demand that the processing of your personal data be restricted.
Where processing of your personal data has been restricted, such data – apart from being stored – may be processed only given your consent, or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person, or on the grounds of an important public interest of the European Union or a Member State.
3. Data collection on our website
Cookies
Some of our webpages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies help make our website more user-friendly, efficient and secure. Cookies are small text files which are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies." They are automatically deleted after you left our website. Other cookies remain in your device's memory until you delete them. These cookies enable us to recognise your browser when you visit the website again.
You can configure your browser to inform you about the use of cookies so that you can decide to accept or reject each cookie. Alternatively, your browser can automatically accept cookies under certain conditions or always reject them, and you can also tell it to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.
Cookies which are necessary to carry out the electronic communication process, or to provide certain functions desired by you (e.g. shopping basket function), are stored on the basis of Art. 6 para. 1 (f) GDPR. The website owner has a legitimate interest in the storing of cookies, so his services are provided in a technically sound and solid manner. If other cookies (such as those used to analyse your surfing behaviour) are also stored, they will be treated separately in this Privacy Policy.
Server log files
The website provider automatically collects and stores information in "server log files", which your browser automatically transmits to us. This is:
- Browser type and browser version
- operating system in use
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
A combination of this data with other data sources will not take place.
This data is collected on the basis of Art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in the technically fault-free display and optimisation of his website; for this purpose, the server log files must be recorded.
Contact Form
If you send us any inquiry through our contact form, the details stated on the form, including the contact details you enter there, will be stored by us for the purpose of dealing with your inquiry and in case of any follow-up questions. We will not share this data without your permission.
Thus, the data entered in the contact form will only be processed given your consent (Art. 6 para. 1 (a) GDPR). You may revoke your consent at any time. An informal e-mail making this request is sufficient. The legitimacy of your data having been processed by the time of your revocation is not effected thereby.
We will retain the data you provide on the contact form until request its deletion, revoke your consent for storage, or the purpose for its storage no longer applies (e.g. after handling of your inquiry has been completed). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.
Inquiry by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your request, including all ensuing personal data (name, nature of inquiry), is stored and processed by us for the purposes of the processing your request. We will not share this data without your permission.
This data is processed on the basis of Art. 6 para. 1 (b) GDPR, provided your request is related to the performance of a contract or necessary for the implementation of pre-contractual arrangements. In all other cases, the processing is based on your consent (Art. 6 para. 1 (a) GDPR) and / or on our legitimate interests (Art. 6 para. 1 (f) GDPR), as we have a legitimate interest in effectively processing the requests addressed to us.
We will retain the data you provide on the contact form until its deletion is requested, your consent for storage is revoked, or the purpose for its storage is no longer applicable (e.g. after handling of your inquiry has been completed). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected.
Registration on this website
You can register on our website in order to access additional functions offered here. The data input will only be used for the purposes of using the site or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject your registration.
To inform you about important changes such as those within the scope of our site or technical changes, we will use the e-mail address given during registration.
We will process the data provided during registration only on the basis of your consent (art. 6 para. 1 (a) GDPR). You may revoke your consent at any time with future effect. An informal e-mail making this request is sufficient. The legality of the processing of data which has already occurred before we receive your request remains unaffected by this.
We will continue to store the data collected during registration for as long as you remain registered on our website. Statutory retention periods remain unaffected.
Data transmitted when entering into a contract for online shops, retailers, and dispatch
We transmit personally identifiable data to third parties only to the extent required to fulfil the terms of your contract with us, for example, to companies entrusted to deliver goods to your location or banks entrusted to process your payments. Your data will not be transmitted for any other purpose, or only if you have given your express permission to do so. Your data will not be disclosed to third parties for advertising purposes without your express consent.
The basis for data processing is Art. 6 para. 1 lit. (b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
4. Analysis Tools and Advertising
Matomo (formerly Piwik)
This website uses the open source web analytics service Matomo. Matomo uses so-called "cookies". These are text files that are stored on your computer, allowing an analysis of your use of the website. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymised before it is stored.
Matomo cookies remain on your device until you delete them.
The storage of Matomo cookies and the use of this analysis tool are based on Art. 6 para. 1 (f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
Information generated by the cookie about the use of this website will not be given to third parties. You can prevent the use of cookies by selecting the corresponding settings on your browser; however, we would like to point out that if you do this, you may not be able to fully utilise all functions provided on this website.
If you do not agree with the storage and use of your data, you can disable this feature here. In this case, an opt-out cookie will be stored in your browser to prevent Matomo from storing your usage data. If you delete your cookies, this will mean that the Matomo opt-out cookie will also be deleted. You will then need to reactivate it when you return to our site if you wish for your activity not to be tracked.
5. Newsletter
Newsletter data
If you would like to receive our newsletter, we require a valid e-mail address as well as information which allow us to verify that you are the owner of the e-mail address provided and that you agree to receive this newsletter. No additional data is collected or will only be collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.
We will process the data provided in the newsletter registration form only on the basis of your consent (art. 6 para. 1 (a) GDPR). You can revoke consent to the storage of your data and e-mail address as well as their use for sending the newsletter at any time, e.g. through the "unsubscribe" link in the newsletter. The legality of processing data which has already occurred remains unaffected by this revocation.
The data provided when registering for the newsletter will be used to distribute the newsletter until such time as you cancel your subscription, when said data will be deleted. Data stored by us for other purposes shall remain unaffected by this.
6. Plug-ins and tools
YouTube
Our website uses plug-ins from YouTube, which is operated by Google. The operator of those pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages featuring a YouTube plug-in, a connection to the YouTube servers is established. The YouTube server is thereby informed which of our pages you have visited.
In addition, YouTube can store different cookies on your device. By means of these cookies, YouTube can gather information on the visitors of our website. Such information is being used inter alia to capture video statistics, to improve user-friendliness and to prevent fraud attempts. The cookies remain on your device until you delete them.
If you are logged into your YouTube account, you allow YouTube to directly associate your surfing habits with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in favour of our online presence becoming more attractive. This represents a legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR.
Further information about the handling of user data can be found in YouTube's privacy policy: https://policies.google.com/privacy?hl=de.
Google web fonts
This website uses so-called web fonts provided by Google to support the uniform display of fonts. Google fonts are installed locally. No connection to the Google services is established thereby.
Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our website, which is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
reCAPTCHA is used to check whether the data entered on our website (such as on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis starts automatically as soon as visitors enter the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor remains on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google.
reCAPTCHA analyses take place entirely in the background. Visitors are not being advised of such an analysis taking place.
This data is processed on the basis of Art. 6 para. 1 (f) GDPR. The website owner has a legitimate interest in protecting his web offers from abusive automated spying and spam.
For more information about Google reCAPTCHA and Google's privacy policy, please see the following links: https://policies.google.com/privacy?hl=de and https://www.google.com/recaptcha/intro/android.html.
Online social media presence
We maintain online presences on social networks and platforms in order to communicate with active customers, interested parties, and users and to inform them about our services.
We would like to point out that this might cause user data to be processed outside the European Union, which can pose risks for users because this might hinder the enforcement of users' rights, for example. With regard to US providers certified under the Privacy Shield, we would like to point out that they commit themselves to comply with EU data protection standards.
Furthermore, user data are generally processed for market research and advertising purposes. Thus, for example, user profiles can be created from the user behaviour and the associated user interests. The usage profiles can in turn be used, for example, to display advertisements that presumably correspond to the interests of the users both within and outside of the platforms. For these purposes, cookies are usually stored on the user's computer, in which the user's usage behaviour and interests are stored. Furthermore, data can also be stored in user profiles separate from the devices used by the users (especially if the users are members of the respective platforms and are logged in).
The processing of users' personal data is carried out on the basis of our legitimate interests to effectively offer users information and communicate with users in accordance with Art. 6 para. 1 (f) GDPR. If the users are requested by the respective providers of the platforms to consent to the aforementioned data processing, the legal basis for the processing is Art. 6 para. 1 (a), Art. 7 GDPR.
For a detailed description of the respective processing and the possibilities of objection (opt-out), we refer to the information provided by the providers linked below.
We would like to point out that requests for information and the assertion of user rights are also directed most effectively to the providers. Only the providers have access to the user data and can directly take appropriate measures as well as provide information. If you still need further assistance, you can contact us.
- Facebook page (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on the basis of an Agreement on joint processing of personal data - Data Policy: https://www.facebook.com/about/privacy/, specifically for pages: https://www.facebook.com/legal/terms/information_about_page_insights_data , Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
- Google/YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
- Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy Policy/Opt-Out: http://instagram.com/about/legal/privacy/.
Created with Datenschutz-Generator.de by RA Dr. jur. Thomas Schwenke, modified by the user
7. Payment providers and resellers
PayPal
Our website accepts payments via PayPal. The provider of this service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).
If you select payment via PayPal, the payment data you provide will be transmitted to PayPal.
Your data will be transmitted to PayPal on the basis of Art. 6 para. 1 lit. (a) GDPR (consent) and Art. 6 para. 1 lit. (b) GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. Revocation does not affect the effectiveness of historical data processing operations.