Privacy Policy
The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Skischule Brandnertal GmbH
Mühledörfle 22 AT-6708 Brand
E office@skischule-brandnertal.at
T +43 (0) 5559 333
ATU76514247
Managing Directors: Schallert Sebastien, Schallert Werner, Sperger Reinhard
Data Protection Officer: Schallert Sebastien
Your data subject rights You may exercise the following rights at any time using the contact details of our Data Protection Officer provided above. Information about your data stored by us and its processing, correction of inaccurate personal data, deletion of your data stored by us, restriction of data processing if we are not yet permitted to delete your data due to legal obligations, objection to the processing of your data by us and data portability, provided that you have consented to the data processing or have concluded a contract with us. If you have given us your consent, you may withdraw it at any time with effect for the future. You may lodge a complaint with the supervisory authority responsible for you at any time. Your responsible supervisory authority depends on the federal state of your place of residence, your workplace or the alleged infringement. A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Purposes of data processing by the controller and third parties We process your personal data only for the purposes stated in this Privacy Policy. Your personal data will not be transferred to third parties for purposes other than those stated. We only disclose your personal data to third parties if: you have given your express consent to this, the processing is necessary for the performance of a contract with you, the processing is necessary for compliance with a legal obligation, the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed.
Deletion or blocking of data We comply with the principles of data avoidance and data minimisation. We therefore store your personal data only for as long as is necessary to achieve the purposes stated here or as provided for by the various statutory retention periods. Once the respective purpose no longer applies or these periods have expired, the corresponding data will be routinely blocked or deleted in accordance with the statutory provisions.
Collection of general information when visiting our website When you access our website, general information is automatically collected by means of a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider and similar information. This is exclusively information that does not allow any conclusions to be drawn about your person. This information is technically necessary in order to correctly deliver the website content requested by you and is inevitably generated when using the internet. It is processed in particular for the following purposes: ensuring a trouble-free connection to the website, ensuring smooth use of our website, evaluating system security and stability, and for further administrative purposes. The processing of your personal data is based on our legitimate interest arising from the aforementioned purposes for data collection. We do not use your data to draw conclusions about your person. Recipients of the data are only the controller and, where applicable, processors. Anonymous information of this kind may be statistically evaluated by us in order to optimise our website and the technology behind it.
Cookies Like many other websites, we also use so-called “cookies”. Cookies are small text files that are transferred from a website server to your hard drive. This automatically provides us with certain data such as, for example, IP address, browser used, operating system and your connection to the internet. Cookies cannot be used to start programs or transfer viruses to a computer. Using the information contained in cookies, we can make navigation easier for you and enable the correct display of our webpages. Under no circumstances will the data collected by us be passed on to third parties or linked to personal data without your consent. Of course, you can generally also view our website without cookies. Internet browsers are usually set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.
Contact form If you contact us with questions of any kind by email or contact form, you give us your voluntary consent for the purpose of contacting you. For this purpose, a valid email address is required. This is used to assign the inquiry and subsequently answer it. Providing further data is optional. The information you provide will be stored for the purpose of processing the inquiry and for possible follow-up questions. Once your inquiry has been completed, personal data will be deleted automatically. Changes to our privacy provisions: We reserve the right to amend this Privacy Policy so that it always complies with current legal requirements or to implement changes to our services in the Privacy Policy, e.g. when introducing new services. The new Privacy Policy will then apply to your next visit.
Questions for the Data Protection Officer If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organisation directly.
Information on data processing in connection with Google Analytics This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the controller responsible for data processing on this website is located outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as "Google". Google Analytics uses so-called "cookies", text files that are stored on the site visitor’s computer and enable an analysis of the site visitor’s use of the website. The information generated by the cookie about the site visitor’s use of this website (including the shortened IP address) is usually transmitted to a Google server and stored there. Google Analytics is used on this website exclusively with the "_anonymizeIp()" extension. This extension ensures anonymisation of the IP address by shortening it and excludes direct personal identification. Through this extension, the IP address is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by the relevant browser as part of Google Analytics is not merged with other Google data. On behalf of the website operator, Google will use the information obtained to evaluate the use of the website, to compile reports on website activity and to provide the website operator with other services related to website use and internet use (Art. 6 para. 1 lit. f GDPR). The legitimate interest in data processing lies in the optimisation of this website, the analysis of website use and the adaptation of the content. The interests of users are sufficiently protected through pseudonymisation. Google LLC. provides a guarantee, based on the Standard Contractual Clauses, to maintain an adequate level of data protection. The data sent and linked to cookies, user IDs (e.g. User ID) or advertising IDs is automatically deleted after 50 months. The deletion of data whose retention period has been reached is carried out automatically once a month. Collection by Google Analytics can be prevented by the site visitor adjusting the cookie settings for this website. The collection and storage of the IP address and the data generated by cookies can also be objected to at any time with effect for the future. The corresponding browser plug-in can be downloaded and installed at the following link: https://tools.google.com/dlpage/gaoptout
Use of AI-supported email processing To process customer inquiries by email, we use a partially automated system that preprocesses incoming emails using AI technology and generates suggested replies. As part of email processing, only the content of your incoming email inquiries is processed. This may include: your name, your email address and any information you voluntarily provide (e.g. names and ages of course participants, desired course dates). The processing is carried out exclusively for the purpose of answering your inquiry and recommending suitable course offers. No automated decision-making within the meaning of Art. 22 GDPR takes place. All outgoing replies are checked for accuracy before being sent. For processing, we use OpenAI, LLC. A data processing agreement pursuant to Art. 28 GDPR exists with this service provider. The transfer to OpenAI (USA) is based on the adequacy decision of the EU Commission regarding the EU-US Data Privacy Framework. OpenAI is certified under this framework. Legal basis The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract or for the implementation of pre-contractual measures) as well as Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient and low-error handling of customer inquiries).
Storage period Your email inquiries are stored in accordance with our general email retention periods. The data transmitted to OpenAI for processing is not used by OpenAI for training AI models and is not permanently stored, in accordance with the contractual agreements.