Privacy Policy
Information regarding the handling of your personal details when you visit our website is provided here. To make available the functions and services of our website, we need to gather personal details about you. We will clarify the data we gather about you afterwards, regarding why it is required and your rights with regard to your details. The following party is responsible for processing your personal details on this website :
Claudia Fiegl eU
Dorfstraße 42
6450 Sölden
Tel.: +43 5254 2467
Fax: +43 5254 246728
E-Mail: info@heiners.at
Informational use
When you use this website, in any other way (e.g. for registration or use a contact form), details are transferred to us, and we gather the requisite technical details which are automatically transferred to our server, these details include:
- IP-Adresse
- Date and time of the enquiry
- Request content
- Access status/HTTP status code
- Browser type
- Language and browser software system
- Operating system
Online Booking
On our website you can enter personal details via a contact form in order to book your holiday online. When you use the booking contact form, we gather and store your details that you enter in the form (e.g. surname, first name, e-mail address) and forward it to our online booking partner Casablanca Hotelsoftware GmbH .
Casablanca Hotelsoftware GmbH – Öde 58 – 6491 Schönwies – Österreich – info[at]casablanca.at
More information about TOC and Privacy of Casablanca Hotelsoftware GmbH:
http://www.casablanca.at/de/footer-navigation/agb-datenschutz
Data processors
The protection of your data is important to us. Even if we use a data processor (e.g. company Feratel – Gästeverzeichnis nach § 19 MeldeV), we make sure that the data processing takes place within the European Union.
Guest Registration Data
-
Compulsory Guest Registration
According to the Austrian Registration Laws you are required to register with us, providing all data specified in § 5 and § 10 of the Registration Act. This concerns the following data: Name, date of birth, gender, nationality, country of origin, address and postal code and - for foreign guests - the type, number, date of issue and issuing authority of a travel document as well as the date of arrival and departure. -
Official Guest Register
We will keep this data in an official Guest Register based on the legal obligation in accordance with § 19 of the Registration & Implementation Act, and store it for a period of 7 (seven) years unless this data is processed for other purposes and longer periods stated in this privacy policy. The official Guest Register is managed electronically by our responsible office, all data is forwarded to the respective IT processor. This data is stored locally and not transmitted to a third country. -
Disclosure of Data
The data categories "Arrival" and "Departure" linked to the country of origin are forwarded to the respective municipality in which our accommodation is located in accordance with § 6 of the Tourism Statistics Regulation. Aggregated data - regarding the total number of overnight stays and persons who are obliged to pay the resort tax - are also transmitted to Ötztal Tourismus, our regional tourist board, and/or to the municipality. This is done on the basis of § 19 of Tirol's Resort Tax Regulations. -
Legal Basis of Processing
The processing in accordance with above mentioned points is based on GDPR art. 6 para. 1 lit. c. . -
Additional Data Transmission to the Tourist Board/Municipality
In addition, we forward your postal code and your year of birth (in a pseudonymized or anonymized way) to the tourism association and to our local municipality in order to compile and evaluate statistics on country of origin and age. This transfer of data is based on GDPR art. 6 (1) lit. e (duty in the public interest) and lit. f (predominant legitimate interests). You can object to the processing at any time for reasons that arise from your particular situation (GDPR art. 21 para. 1).
Guest Card
-
General
You have the opportunity to use a Guest Card. The Guest Card will grant you a discount on public bus line tickets. The Guest Card is valid for the entire period of your stay here with us. -
Issuing of Guest Cards
The Guest Card is issued by the accommodation provider only at your request. It will be an electronically generated Guest Card. -
Processed Personal Data
For the electronically generated Guest Card the following personal data, deriving from your guest registration data (see point above), are processed: First name, last name, date of birth, country of origin/postal code and period of stay (arrival/departure).
In this case there is no electronic processing for Guest Card purposes. -
Legal Basis of Processing
The processing of personal data for Guest Card purposes is based on your consent (GDPR art. 6 para. 1 lit. a).
Your consent can be revoked at any time by talking directly to your accommodation provider. -
Recipient of Data
In order to receive a discount you must present the respective Guest Card including your personal data to the bus driver, therefore you disclose your data. The bus driver will check visually if the Guest Card is still valid.
Bonus Cards (Ötztal Premium Card)
-
General
Guests have the opportunity to take advantage of a Bonus Card if offered by the accommodation. The special Bonus Card will grant you discounts and/or benefits at various partner companies within the holiday region (reduced admission tickets, for example). The Bonus Card is valid for the entire period of your stay here with us (Niederthai Card) or is starting from the day after arrival (Ötztal Premium Card). -
Issuing of Bonus Cards
The Card will only be issued by the accommodation provider at your request. It is issued as an electronically generated Card. -
Processed Personal Data
For the electronically generated Card the following personal data, deriving from your guest registration data (see point above), are processed: First name, last name, date of birth, country of origin/postal code and period of stay (arrival/departure).
When using the Bonus Card, the following personal data are processed as well: details about the usage cycle of the respective Card, use of services and accommodation provider.
The data is required to prove the identity as well as the validity period of the Card for the respective service provider. It is also needed for the billing of discounts and benefits between the service partners, Ötztal Tourismus and the accommodation providers. -
Legal Basis of Processing
The processing of personal data for Bonus Card purposes is based on your consent (GDPR art. 6 para. 1 lit. a).
Your consent can be revoked at any time by sending an e-mail or by talking directly to your accommodation provider.
Other processing of your data
Basically, we only process those data which is absolutely necessary for the conclusion of the contract or for the fulfillment of the contract. If you have also given us the appropriate consent, we will process your data in such a way that we will provide you with information about our services until further notice. In doing so, we use the following communication channels, if you have given us this: Phone, Email, SMS, Post or Social Media Channels.
SSL encryption
This site uses an SSL encryption for security reasons and for the protection of the transmission of confidential content, such as the enquiries, which you send to us as a website-user. An encrypted connection can be identified when the browser address bar changes from “http://” to “https://” and by the appearance of the lock symbol in browser bar. When the SSL encryption is activated the data that you send us cannot be read by third parties.
Use of cookies
We use cookies to facilitate and improve the use of our website. Cookies are text information that are stored on a computer when you a visit a web browser on a computer. Their purpose is to recognise a session, for instance in the event of a permanent log-in on our website or for the basket function of an online shop.
Most web browsers accept cookies automatically. Stored cookies can be deleted at any time via your web browser settings. You can also adjust the settings of your web browser so no cookies are stored. However, in some circumstances, not all of the functions of our website will be available.
Newsletter
You can subscribe to a newsletter on our website. If you subscribe to the newsletter, we gather and store the details that you enter in the form (e.g. surname, first name, e-mail address). Your details will not be forwarded to third parties. Subscription to the newsletter is only possible with your consent. Legal basis for processing is Art. 6 Para. 1 lit. a GDPR. We only use your details to send our newsletter.
Google Analytics
We use Google Analytics, to analyse the use of and improve our website.
Google Analytics is a web analysis service operated by Google Inc. (“Google”). Google Analytics uses “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally forwarded to a Google server in the USA and stored there. In the event of the activation of IP anonymization on this website, your IP address will be truncated by Google within European Union member states and within other contracting states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google will use this information to evaluate your use of the website, to compile reports about website activities and to provide additional services linked with the use of the website and the Internet. On behalf of the website operator, Google will use this information to assess your use of the website, to compile reports about website activities and to provide additional services pertaining to the website operator. Legal basis for the processing of details with Google Analytics is Art. 6 Para. 1 lit. a GDPR. The IP address transferred from your browser in the context of Google Analytics will not be associated with other data stored by Google. You may refuse the installation of cookies by selecting the appropriate settings on your browser, we would however point out that in this case, the full functionality of this website may not be available to you. You may also prevent Google compiling details generated by the cookie and about your use of the website (incl. your IP address) by downloading and installing this browser plug-in at the following link: https://tools.google.com/dlpage/gaoptout?hl=en .
We use Google Analytics with the ‘_anonymizeIp()’ extension. This truncates your IP address (IP masking). This rules out reference to specific people. Google participates in the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework . In exceptional cases this provides an appropriate level of data protection for personal data transferred to Google in the USA.
Information about Google: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
More information about Google Analytics usage conditions:
https://www.google.com/analytics/terms/us.html
More information about Google usage conditions:
https://policies.google.com/terms?hl=en&=us
More information about Google Privacy:
https://policies.google.com/privacy?hl=en&=us
Universal Analytics
This website uses Google Analytics for cross-device analysis. Each user receives a User ID for this. In your client account, under ‘My Details’, you can deactivate cross-device analysis of your ‘personal details’ about your use.
Google Adwords Conversion-Tracking
We use Google Adwords to show you Google websites and other third party advertising. Using Conversion Tracking we are able to determine how successful individual advertising methods are. With the purpose being to show you advertising that is of interest to you and to make our website more interesting for you. Legal basis for processing your details is Art. 6 Para. 1 lit. f GDPR.
Advertising is delivered by Google via a so-called ‘ad server’. We also use cookies, which enable performance measurement of specific parameters, such as overlay of adverts or user clicks. When you reach our website via a Google advert, a Google Adwords cookie is stored on your PC. These cookies are generally no longer valid after 30 days and are not used to identify you personally. This cookie generally stores a unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) along with opt-out information (markers that the user no longer wants to be approached) as analysis values.
These cookies enable Google to recognise your Internet browser. In so far as a user visits specific pages of the website of an Adwords client and the cookie stored on their computer has not yet expired, Google and the client are able to ascertain that the user has clicked on the adverts and has been forwarded to this site. Each Adwords client has a different cookie. Cookies are not able to be tracked via the websites of Adwords customer. We collate data ourselves and do not process any personal details in the advertising methods stated. We only receive statistical evaluations from Google. With the help of this analysis we are able to determine which of the advertising media used have been particularly effective. We do not receive any further details about the use of advertising media and are not able to identify the user from this information.
Due to the marketing tools used, your browser automatically creates a direct link with the Google server. We have no influence on the scope and on any further processing of data by Google and are hereby informing you of our level of awareness. By integrating AdWords Conversion Tracking, Google receives information that you have called up the relevant section of our site, or that you have clicked on one of our adverts. If you are registered for a Google service, Google can attribute your visit to your account. Even if you are not registered on Google or are not logged in, there is the chance that the service provider may ascertain and store your IP address.
You can prevent the storage of cookies by making the relevant setting on your browser software; we would however point out that in this case, not all of the functions of this website will be able to be used in full. You can also prevent data being compiled for Google about your use of the website that is generated by the cookie (incl. your IP address), and ensure that Google does not process this data, by downloading and installing the browser plug-in available via the following link: https://www.google.com/settings/ads/plugin
Google participates in the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework . In exceptional cases this provides an appropriate level of data protection for personal data transferred to Google in the USA.
More information about Google usage conditions:
https://policies.google.com/terms?hl=en&=us
More information about Google Privacy:
https://policies.google.com/privacy?hl=en&=us
Google Adwords Remarketing
We use Google Adwords Remarketing. Using this application, after a visit to our website we can display our advertising on other websites. This is done via cookies stored in your browser, with your usage behaviour regarding visits to different websites compiled and assessed by Google. This means that Google is able to attribute your previous visit to our website. The merging of your personal details that may be stored by Google, in the context of data gather via remarketing, will not be carried out by Google, as per its own assertions. In particular according to Google, pseudonymising will be effected for any re-marketing.
As a user you can deactivate the use of cookies by Google by visiting https://adssettings.google.com/?hl=en aufrufen.
Facebook Pixel
Our website measures conversions using visitor action pixels from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
These allow the behavior of site visitors to be tracked after they click on a Facebook ad to reach the provider's website. This allows an analysis of the effectiveness of Facebook advertisements for statistical and market research purposes and their future optimization.
The data collected is anonymous to us as operators of this website and we cannot use it to draw any conclusions about our users' identities. However, the data are stored and processed by Facebook, which may make a connection to your Facebook profile and which may use the data for its own advertising purposes, as stipulated in the Facebook privacy policy. This will allow Facebook to display ads both on Facebook and on third-party sites. We have no control over how this data is used.
Check out Facebook's privacy policy to learn more about protecting your privacy: https://www.facebook.com/about/privacy
You can also deactivate the custom audiences remarketing feature in the Ads Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen . You will first need to log into Facebook.
If you do not have a Facebook account, you can opt out of usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/uk/your-ad-choices
Social plug-ins
We currently use the following social media plug-ins: Facebook. By way of a button, personal details are transferred to the respective plug-in provider and stored there.
The respective plug-in provider stores the data gathered about you and uses this for the purposes of advertising, market research and/or for requirements-oriented design of its website. Any such evaluation is carried out (even for users that are not logged-in) to display requirements-oriented advertising and to provide other social network users with details about your activities on our website. You have the right to object to the creation of a user profile, and to enforce this you must contact the respective plug-in provider. We use plug-ins to provide you with an opportunity to interact with social networks and other users, so we can improve our offer and make it more appealing to you as a user. Legal basis for the use of the plug-in is Art. 6 Para. 1 lit. f GDPR.
Data forwarding is effected irrespective of whether you have an account with the plug-in provider and are logged-in there. If you are logged in with the plug-in provider, the data we gather is directly allocated to your existing account with that plug-in provider. For American service providers, transfer is effected in the USA; and is subject to the EU-US Privacy Shield:
https://www.privacyshield.gov/EU-US-Framework
Further information about the scope and purpose of data collection and processing by your plug-in provider is available in the following data protection statements for these service providers, listed below. This will provide further information about your rights in this regard and settings options to protect your privacy:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
https://www.facebook.com/policy.php
HolidayCheck Online Reisebüro, Bahnweg 8, CH-8598 Bottighofen
https://www.holidaycheck.at/datenschutz
TripAdvisor Inc., 400 1st Avenue, Needham, MA 02494 USA
https://tripadvisor.mediaroom.com/AT-privacy-policy
Integration of YouTube
We have embedded YouTube videos in our online offer which are stored on http://www.YouTube.com and that are directly playable from our website.
By visiting our website YouTube gets information that you have called up the respective subpage on our website. Log files are also transmitted. This happens irrespective of whether or not you have a user account, where you are logged in to or if you have no user account. If you are logged in at Google, your details are linked directly to your account. If you do not want YouTube to link you with your profile, you must log out before activating the button. YouTube stores your details as a user profile and uses them for the purposes of advertising, market research and/or requirements-oriented design of its website. Any such evaluation is carried out (even for users that are not logged-in) to display requirements-oriented advertising and to provide other social network users with details about your activities on our website. You have the right to object to the creation of a user profile, and to do this you have to contact YouTube.
Further information on the scope and extent of data collection and its processing is available in the Google data protection statement, where you will also get further information regarding your rights and setting options to protect your privacy.
More information about Google usage conditions:
https://policies.google.com/terms?hl=en&=us
More information about Google Privacy:
https://policies.google.com/privacy?hl=en&=us
Google Maps
We use Google Maps on our website. With it, we are able to show you interactive maps directly on our website and facilitate convenient use of the map function. When you use Google Maps your details are transferred to Google in the USA, including your IP address.
You can prevent the transfer of data to Google by deactivating JavaScript in your browser settings. In this instance, you cannot use Google Maps on our website.
Legal basis for processing your details is Art. 6 Para. 1 lit. f GDPR. Google participates in the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework .
Information about Google:
Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA
More information about Google usage conditions:
https://policies.google.com/terms?hl=en&=us
More information about Google Privacy:
https://policies.google.com/privacy?hl=en&=us
More information about Google Maps:
https://www.google.com/intl/de_US/help/terms_maps.html
Use of Google Fonts
Our website uses Google Fonts. This enables us to integrate specific fonts in our website. These fonts are made available by Google via servers in the USA. When our website is called up, the visitor’s web browser makes a direct connection with these servers. The visitor’s IP address is transferred to Google and stored there. Google participates in the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework
information about Google:
Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA
More information about Google Privacy:
https://policies.google.com/privacy?hl=en&=us
Storage period
We will only process an store your details as long as this is necessary for the processing and adherence to statutory duties. When these details are no longer required for the fulfilment of a purpose, your data will be blocked or deleted. If there are legal duties for retention, we block and delete your details upon expiry of the statutory storage period.
Your rights
With regard to your personal details, you have the following legal rights:
-
Right to information
You have the right to ask for conformation as to whether we process personal details that concern you. If this is the case, you have the right to be informed about these personal details and to other information, e.g. processing purposes, recipients and the planned storage duration and criteria for determining duration. -
Right of rectification and Completion
You have the right to request the immediate rectification of incorrect details. In consideration of the purposes of processing, you have the right to request the completion of incomplete details. -
Right to deletion (‘Right to be forgotten’)
You have a right to deletion in so far as processing is not required. This is the case for instance when your details are no longer required for the original purpose, you have revoked your declaration of consent or your details have been wrongfully processed. -
Right to restrict processing
You have the right to restrict processing, for instance if you are of the opinion that your personal details are incorrect. -
Right to data portability
You have the right to receive personal data concerning you in a structured, current and machine-readable format. -
Right of objection
You have the right, for whatever reasons that result from your specific situation, to object to the processing of specific data that concerns you. In the case of direct advertising, you as the person affected, have the right to object to the processing of your personal details for the purposes of such advertising; this also applies to profiling, in so far as it is connected with direct advertising. -
Right to withdraw your declaration of consent
You can withdraw your consent to the processing of your details at any time with future effect. The legality of processing carried out until this rescission will remain unaffected. You may also raise objections at any time with a data protection authority, for instance, if you are of the opinion that data processing is not consistent with legal data protection provisions.