Privacy policy or information according to Art 13 and 14 DSGVO
Responsible for data protection:
Thomas Martinz
Contact details:
Gerlitzen Gipfelhaus Betriebs GmbH
Sauerwald 10
9543 Arriach
gipfelhaus@gerlitzen.at
+43 4248 2881
Data processing purposes:
Contact form
If you contact us by form on the website or by e-mail, the data you provide will be stored by us for six months for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.
Analysis purposes
In addition, data is collected and used for analysis purposes. This data processing is not personal (see information on cookies below).
Registration
When registering, the user’s e-mail address and a password are stored. If a purchase is subsequently made, the e-mail address is linked to the data determined during the purchase process. The data you provide is required to set up the user account. The data processing is carried out for the duration of the existence of the user account. In case of deletion of the user account, the e-mail address and the password as well as the link to data of the purchase transaction will be deleted.
IT Security
When visiting this website, log files are also stored which contain the IP address and other data on access to the website (e.g. date, time, user agent, referrer). Data processing is limited to a maximum of 30 days and is only used to protect against DDOS attacks or other interventions in the functionality of the website and any underlying database systems.
Cookies information
This website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause any damage.
So-called session cookies are used on this site. These are generated when the website is called up and automatically deleted again. They are used for recognition purposes when you visit the same website again within a short period of time, in order to take into account preferences that have already been made again. No personal data is stored or processed in the process.
Cookies have the purpose of making the website offer user-friendly. Some cookies remain stored on your terminal device until you delete them. They thus enable the website operator to recognize your browser on your next visit. If you do not wish this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. However, when cookies are deactivated, the functionality of the website may be limited.
Google web analytics service (Google Analytics)
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. We use the function “Activation of IP anonymization” on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before processing/storage. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and measuring the campaign performance of online advertising for analysis and optimization purposes.
The data processed includes in particular online identifiers (including cookie identifiers), Internet protocol addresses, device identifiers, location data, identifiers assigned by the customer, and user data (in particular time and duration of access, selection of certain offers, etc.). More information on how Google Analytics handles user data can be found in Google’s privacy policy, available at https://policies.google.com/privacy?hl=de .
You can prevent the collection of the data generated by the cookie and related to your use of the website to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Instructions on how you can also prevent Google from storing data can be found at the following link: https://developers.google.com/analytics/devguides/…
The relationship with the web analytics provider is based on commissioned data processing when using Google Analytics. The transfer of data to the processor is based on an adequacy decision of the European Commission (Privacy Shield self-certification). The data is deleted regularly (currently every 26 months).
Use of Google Adwords conversion tracking
This website uses the online advertising program “Google AdWords” and, as part of Google AdWords, conversion tracking. Google Conversion Tracking is an analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer. These cookies lose their validity after a maximum of 90 days. If you visit certain web pages on our website and the cookie has not yet expired, Google and the website operator can recognize that you clicked on the ad and were redirected to this page. The information collected using the conversion cookie is used to create conversion statistics. Here, the website operator learns the total number of users who clicked on an ad and were redirected to a page tagged with a conversion tracking tag and/or performed various actions on the page. However, the website operator does not receive any information with which users can be personally identified. If you do not wish to participate in tracking, you can object to this use by preventing the installation of cookies by selecting the appropriate settings in your browser software (deactivation option). They will then not be included in the conversion tracking statistics. Further information as well as Google’s privacy policy can be found at: http://www.google.com/policies/technologies/ads/, http://www.google.de/policies/privacy/
The relationship with the web analytics provider is based on commissioned data processing when using Google Adwords conversion tracking. The transfer of data to the processor is based on an adequacy decision by the European Commission (Privacy Shield self-certification). Google is also obliged to delete the data regularly (currently every 39 months).
Social media
If Facebook social plugins are used on this website, these are provided by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The embeddings are recognizable by the Facebook logo or the terms “Like”, “Like”, “Share” in Facebook’s colors (blue and white). Information about all Facebook plugins can be found in the following link: https://developers.facebook.com/docs/plugins/
The plugins are activated only when you click the corresponding buttons. If they are grayed out, the plugins are inactive. You have the option to activate the plugins on each visit.
The plugins establish a direct connection between your browser and the Facebook servers. This is done only after the activation of the plugin. The website operator has no influence on the nature and extent of the data that the plugin sends to the servers of Facebook Inc. transmitted. Information can be found here: https://www.facebook.com/help/186325668085084
The plugin informs Facebook Inc. about the fact that you as a user have visited this website. There is a possibility that your IP address will be stored. If you are logged into your Facebook account during your visit to this website, the aforementioned information will be linked to it.
Legal basis for data processing:
On the website, data is processed exclusively on the basis of the legal provisions (DSGVO, TKG 2003).
The data processing (webshop, product ratings, booking tool and user account) is based on Art 6 para. 1 lit. b) (contract performance purposes) GDPR.
In the case of the use of analysis tools, the use of data is based on Art 6 para. 1 lit f) (legitimate interest) DSGVO. The legitimate interest in the use of data is the improvement of the website and the measurement of the success of online advertising.
The use of IT data security measures is also based on Art. 6 para. 1 lit f) (legitimate interest) DSGVO. The legitimate interest in the use of data is the protection of our own IT systems.
The use of social media plugins takes place only after consent. The legal basis is therefore Art. 6 para. 1 lit a) DSGVO. Consent must be given again each time the website is accessed.
Your rights
In principle, you have the rights to information, correction, deletion, restriction of processing, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated in some way, you can complain to the supervisory authority. In Austria, this is the data protection authority.