Privacy policy

Mitterwallnerhof
Fam. Stocker

Fastenbergweg 9
8971 Schladming

Mobiltel.: +43 650 2310278
E-Mail: stocker@mitterwallnerhof.at

Responsible body in the sense of data protection law

Mitterwallnerhof - Stocker family

Contact:

Fastenbergweg 9
8971 Schladming

Phone: +43 650 2310278
Email: stocker@mitterwallnerhof.at

Definitions
Our data protection declaration should be simple and understandable for everyone. As a rule, the data protection declaration uses the official terms of the General Data Protection Regulation (DSGVO). The official definitions are explained in Art. 4 DSGVO.

Data processing by visiting our website
When you visit our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:
- Visited domain
- Date and time of the request
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- Web browser and operating system used
- IP address of the requesting computer
- Amount of data transferred
We collect the listed data to ensure a smooth connection of the website and to enable a comfortable use of our website by the users. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of the data or the log files is Art. 6 para. 1 lit. f DSGVO.

For reasons of technical security, in particular to defend against attempted attacks on our web server, we may store this data for a short period of time. It is not possible for us to draw conclusions about individual persons on the basis of this data. After seven days at the latest, the data is anonymised by shortening the IP address at domain level, so that it is no longer possible to establish a reference to the individual user. This data is not analysed in any way except for statistical purposes in anonymised form. This data is not merged with data from other data sources.

Contact form and contact by e-mail
If you send us enquiries via the contact form or by e-mail, your details from the enquiry form or your e-mail, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up enquiries. Under no circumstances will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f DSGVO and, if applicable, Art. 6 Para. 1 lit. b DSGVO if your request is aimed at concluding a contract. Your data will be deleted after your request has been processed, provided that there are no legal obligations to retain data.
Information according to Art 13 DSGVO

Your personal data, in particular
- your master data (surname, first name, address, e-mail address, telephone and fax number, date of birth, customer number) as well as language and vehicle registration number,
- the data in travel documents (passport number, passport data, date of birth, issuing authority, period of validity, nationality) and identity cards (identity card, driving licence etc. including issuing authority and period of validity),
- the data on the method of payment and in connection with payments, in particular with EC cards, credit cards and bank cards,
- the length of stay requested by you as well as destinations, hotels, contact persons, conditions, special services, health data, frequent flyer number, personal preferences related to the stay, which you make known to us, and
- special categories of data such as health data and data on special needs and marriage/partnership,
are required for our services. This also includes bookings for travel, guides, gastronomy, rental vehicles, transfers, registration processing, insurance, events, tours, accreditations, vouchers including customer creation, billing and their verification (B2B, B2C, FIT), ticket bookings, summer card, ski pass, cross-country ski ticket.
This data is therefore stored and processed by us for these purposes and, if necessary, transferred to third parties with whom we cooperate in order to provide the most effective and best possible service for our customers - this may also include service providers in third countries as order processors, software and agency service providers. 
The legal bases for these data processing processes are
- The fulfilment of our pre-contractual and contractual obligations to you,
- consent obtained from you,
- legal, contractual or other legal obligations on our part (e.g. documentation rights and obligations according to accounting, tax and customs law, contracts, reporting, legal disputes) as well as § 96 TKG and
- our legitimate interests (e.g. the improvement of our customer service, including in the area of direct advertising, or the protection of our own legal interests).
The duration of storage is determined by the duration of our business relationship, the consents you have given, and furthermore by the statutory retention obligations and legal obligations applicable to us. We emphasise that in the case of regular cooperation for our best possible customer service, we strive to know your customer requirements already communicated to us so well that we can continuously and permanently satisfy you.
Your personal data according to the registration form will be forwarded to ARGE Schladming-Dachstein-Card for the smooth issuing and use of the Schladming-Dachstein-Sommercard.
Privacy policy: www.schladming-dachstein/datenschutz

Your rights
In the following, you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:
- The right to request information about your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.
- The right to request the correction of incorrect or incomplete personal data stored by us without delay in accordance with Art. 16 DSGVO.
- The right to request the erasure of your personal data stored by us in accordance with Article 17 of the GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
- The right to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO.
- The right, pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.
- The right to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or workplace.
- Right to revoke consent given in accordance with Art. 7 (3) DSGVO: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right of objection

Insofar as your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation.
If you would like to exercise your right of revocation or objection, it is sufficient to send an e-mail to stocker@mitterwallnerhof.at.

Use of Google Analytics and Google Tag Manager
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, thus excluding the possibility of personal references. If the data collected about you is related to a person, this is immediately excluded and the personal data is deleted immediately.

We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f DS-GVO.
Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms of use: http://www.google.com/analytics/terms/de.html
Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy.
This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".
https://myaccount.google.com
User and event level data linked to cookies, user identifiers (e.g. User ID) and advertising IDs (e.g. DoubleClick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]) are retained by us for 14 months before being automatically deleted.

Use of Google Tag Manager: Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. http://www.google.de/tagmanager/use-policy.html

Cookies
Our website uses cookies, which are stored by the browser on your device and which contain certain settings for the use of the website (e.g. for the current session). Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted after closing the browser. Other cookies remain stored on your terminal device until you delete them or the storage period expires. These cookies enable us to recognise your browser on your next visit.
In part, the cookies serve to simplify website processes by storing settings (e.g. providing already selected options). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. The cookie settings can be managed under the following links for the respective browsers:
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
You can also individually manage the cookies of many companies and functions that are used for advertising. To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.
Most browsers also offer a so-called "Do-Not-Track function", with which you can indicate that you do not want to be "tracked" by websites. When this feature is enabled, the browser tells ad networks, websites and applications that you do not want to be tracked for behavioural advertising and the like. For information and instructions on how to edit this feature, please see the links below, depending on your browser provider:
Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=en
Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/
Internet Explorer: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track
Opera: http://help.opera.com/Windows/12.10/de/notrack.html
Safari: https://support.apple.com/kb/PH21416?locale=de_DE
In addition, you can prevent the loading of so-called scripts by default. NoScript allows JavaScripts, Java and other plug-ins to run only on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).
Please note that if you deactivate cookies, the functionality of this website may be limited.

Duration of storage of personal data
The duration of the storage of personal data is determined by the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for the fulfilment or initiation of a contract or if we have a legitimate interest in continuing to store it, the data is deleted when it is no longer required for these purposes or when you exercise your right of revocation or objection.

Contact
You can request information about your personal data stored by us free of charge at any time. As a data subject, you also have the right to revocation, information, deletion, correction, restriction and transfer of your personal data, insofar as this is not opposed by a legal obligation on our part to retain the data. 
For more information about your rights as a data subject, please contact us at stocker@mitterwallnerhof.at. We will be happy to help you. The Austrian Data Protection Authority (DPA), Wickenburggasse 8-10, 1080 Vienna, is the competent supervisory authority for complaints.

Changes to our data protection declaration
We reserve the right to adapt or update this data protection declaration if necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The most current version applies to your visit.

Stand: 26.11.2021