1. Data protection at a glance

General Information

The following information provides a simple overview of what happens with your personal data when you visit our website. Personal information means any data by which you could personally be identified. You can find detailed information on the subject of data protection in our data protection declaration as provided under this text.

Data collection on our website

Who is responsible for the data collection on this website?

Data is processed on this website by the website operator. The operator's contact details can be found in the website's required legal notice.

How do we collect your data?

On the one hand, your data will be collected when you communicate it to us. This could, for example, be data you enter on a contact form.

Other data is collected automatically by our IT systems when you visit the website. This data is primarily technical data such as the browser and operating system you are using or when you accessed the page. The data is collected automatically as soon as you access our website.

What do we use your data for?

Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyse how you use the site.

What rights do you have regarding your data?

You always have the right to request information about your stored data, where it came from, who received it, and why it was collected, at no expense to yourself. You also have the right to request that it be corrected, blocked, or deleted. To do this, or if you have any other questions about data protection, you can contact us at any time using the address given in the legal notice. You may also, of course, file a complaint with the competent regulatory authorities.

Besides, you have the right to request that the processing of your personal data be restricted. Relevant details may be found in this privacy policy under "Right to Restriction of the processing".

Analysis tools and third-party tools

When visiting our website, statistical analyses may be made of your surfing behaviour. This happens primarily through the use of cookies and analytics. The analysis of your surfing behaviour is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by not using specific tools. You will find detailed information on this in the following privacy declaration.

You can object to this analysis. Our privacy policy provides information on options in this regard.

2. General information and mandatory information

Privacy Policy

The operators of this website take the protection of your personal data very seriously. We treat your personal data as strictly confidential under statutory data protection regulations and this data protection declaration.

If you use this website, various pieces of personal data will be collected. Personal information means any data by which you could personally be identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmitted via the internet (for example, via email communication) may be subject to security breaches. Completely protecting data against access by third parties is impossible.

Notice concerning the data controller

Responsible for data processing on this website is:

Sporthotel Hochlienz

Familienresort & Almdorf 
GF Huber Johann
Zettersfeld 1, A-9900 Lienz
Telefon: 0043 (0) 4852 6661 / Fax DW 32
info@sporthotel-hochlienz.at

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal e-mail making this request is sufficient. A revocation request from you does not apply to data processed prior to your request having reached us.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

If the data is processed on the basis of Art. 6 para. 1 (e) or (f) GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you lodge your objection, we will no longer process your relevant personal data unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedom, or the processing serves the purpose of asserting, exercising or defending legal claims (objection on the basis of Art. 21 para. 1 GDPR).

Where personal data is processed for direct marketing purposes, you have the right at any time to object to the processing of personal data concerning you for the purposes of such marketing, including profiling to the extent it is related to such direct marketing. If you object, your personal data will no longer be used for purposes of direct marketing (objection on the basis of Art. 21 para. 2 GDPR).

Right of Complaint with Regulatory Authorities

In the event of infringements of the GDPR, the persons concerned shall have the right to appeal to a supervisory authority, particularly in the Member State of their habitual residence, workplace or place of presumed infringement. The right of complaint exists without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to have data which we process on the basis of your consent or in fulfilment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another Data Controller, this shall only take place to the extent that is technically feasible.

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the enquiries you send to us as site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://", and by the lock symbol in your browser bar.

If SSL or TLS encryption is activated, the data you transfer to us cannot be spied-out by third parties.

Disclosure, Blocking, Deletion and Correction of Data

Within the scope of prevailing statutory provisions, you have the right at any time to be provided with information free of charge about any of your personal data that is stored, as well as its origin, the recipient and the purpose for which it has been processed. When appropriate, you also have the right to have this data corrected, blocked or deleted. You can contact us at any time regarding this or any other questions on the topic of personal data at the address stated on our legal notice.

Right to Request Restriction of Processing

You have the right to request that the processing of your personal data be restricted. You can contact us at any time at the address stated on our legal notice. The right to restrict the processing is given in the following cases:

• If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the period of verification, you have the right to demand that the processing of your personal data be restricted.
• If the processing of your personal data has taken / is taking place unlawfully, you can demand the restriction of data processing instead of data deletion.
• If we no longer require your personal data but you do for exercising, defending or asserting legal claims, you have the right to demand that the processing of your personal data be restricted instead of data being deleted.
• If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, your as well as our interests must be weighed. As long as it has not been ascertained whose interests prevail, you have the right to demand that the processing of your personal data be restricted.

Where processing of your personal data has been restricted, such data – apart from being stored – may be processed only given your consent, or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person, or on the grounds of an important public interest of the European Union or a Member State.

3. Data collection on our website

Cookies

Some of our webpages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies help make our website more user-friendly, efficient and secure. Cookies are small text files which are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies." They are automatically deleted after you left our website. Other cookies remain in your device's memory until you delete them. These cookies enable us to recognise your browser when you visit the website again.

You can configure your browser to inform you about the use of cookies so that you can decide to accept or reject each cookie. Alternatively, your browser can automatically accept cookies under certain conditions or always reject them, and you can also tell it to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

Cookies which are necessary to carry out the electronic communication process, or to provide certain functions desired by you (e.g. shopping basket function), are stored on the basis of Art. 6 para. 1 (f) GDPR. The website owner has a legitimate interest in the storing of cookies, so his services are provided in a technically sound and solid manner. If other cookies (such as those used to analyse your surfing behaviour) are also stored, they will be treated separately in this Privacy Policy.

Server log files

The website provider automatically collects and stores information in "server log files", which your browser automatically transmits to us. This is:

• Browser type and browser version
• operating system in use
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

A combination of this data with other data sources will not take place.

This data is collected on the basis of Art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in the technically fault-free display and optimisation of his website; for this purpose, the server log files must be recorded.

Contact Form

If you send us any inquiry through our contact form, the details stated on the form, including the contact details you enter there, will be stored by us for the purpose of dealing with your inquiry and in case of any follow-up questions. We will not share this data without your permission.

Thus, the data entered in the contact form will only be processed given your consent (Art. 6 para. 1 (a) GDPR). You may revoke your consent at any time. An informal e-mail making this request is sufficient. The legitimacy of your data having been processed by the time of your revocation is not effected thereby.

We will retain the data you provide on the contact form until request its deletion, revoke your consent for storage, or the purpose for its storage no longer applies (e.g. after handling of your inquiry has been completed). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

Inquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including all ensuing personal data (name, nature of inquiry), is stored and processed by us for the purposes of the processing your request. We will not share this data without your permission.

This data is processed on the basis of Art. 6 para. 1 (b) GDPR, provided your request is related to the performance of a contract or necessary for the implementation of pre-contractual arrangements. In all other cases, the processing is based on your consent (Art. 6 para. 1 (a) GDPR) and / or on our legitimate interests (Art. 6 para. 1 (f) GDPR), as we have a legitimate interest in effectively processing the requests addressed to us.

We will retain the data you provide on the contact form until its deletion is requested, your consent for storage is revoked, or the purpose for its storage is no longer applicable (e.g. after handling of your inquiry has been completed). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected.

4. Plug-ins and tools

YouTube

Our website uses plug-ins from YouTube, which is operated by Google. The operator of those pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our pages featuring a YouTube plug-in, a connection to the YouTube servers is established. The YouTube server is thereby informed which of our pages you have visited.

In addition, YouTube can store different cookies on your device. By means of these cookies, YouTube can gather information on the visitors of our website. Such information is being used inter alia to capture video statistics, to improve user-friendliness and to prevent fraud attempts. The cookies remain on your device until you delete them.

If you are logged into your YouTube account, you allow YouTube to directly associate your surfing habits with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in favour of our online presence becoming more attractive. This represents a legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR.

Further information about the handling of user data can be found in YouTube's privacy policy: https://policies.google.com/privacy?hl=de.

Google web fonts

This website uses so-called web fonts provided by Google to support the uniform display of fonts. Google fonts are installed locally. No connection to the Google services is established thereby.

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our website, which is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

reCAPTCHA is used to check whether the data entered on our website (such as on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis starts automatically as soon as visitors enter the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor remains on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google.

reCAPTCHA analyses take place entirely in the background. Visitors are not being advised of such an analysis taking place.

This data is processed on the basis of Art. 6 para. 1 (f) GDPR. The website owner has a legitimate interest in protecting his web offers from abusive automated spying and spam.

For more information about Google reCAPTCHA and Google's privacy policy, please see the following links: https://policies.google.com/privacy?hl=de and https://www.google.com/recaptcha/intro/android.html.