Data protection

General information on data processing

The protection of your personal data is of particular concern to us. We process your data exclusively on the basis of the statutory provisions, in particular the General Data Protection Regulation (GDPR) and the Telecommunications Act 2021 (TKG 2021).

When you visit our website, technically necessary data is processed, in particular

• IP address
• Date and time of access
• Page or file accessed
• Amount of data transferred
• Notification of successful retrieval
• Browser type and browser version
• operating system
• Referrer URL

This processing is carried out to ensure technical operation, system security, error analysis and to defend against attacks on our website on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Server log files are stored for a period of 14 months and then deleted, unless further storage is required to clarify security incidents.

Responsible for data processing

Gasteinertal Tourismus GmbH Gasteiner Bundesstraße 367 5630 Bad Hofgastein Austria

Tel: +43 (0) 6432 / 3393-0 Fax: +43 (0) 6432 / 3393 120 Email: info@gastein.com

As a rule, we do not collect any personal data when you use our website. If you contact us using the contact forms provided or subscribe to our newsletter, your e-mail address and other personal data will only be used for individual correspondence to answer your inquiry. We guarantee that your data will only be used by us, will not be passed on to third parties and will be treated confidentially in accordance with the applicable legal provisions. An exception is the transfer to processors who work exclusively on the instructions of Gasteinertal Tourismus GmbH, do not use the data for their own purposes and are bound by their own agreements to the data protection obligations of the General Data Protection Regulation.

Newsletter

If you subscribe to our newsletter, we will process the data you provide to send you the newsletter. The registration takes place exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. Registration takes place using the double opt-in procedure. This means that after registering, you will receive an email in which you must confirm your registration by clicking on a confirmation link. You can revoke your consent at any time with effect for the future, in particular via the unsubscribe link in every newsletter or by notifying us. This does not affect the lawfulness of the processing carried out before you withdraw your consent. Your data will be stored for the duration of the newsletter subscription and deleted after you unsubscribe, provided there are no statutory retention obligations to the contrary.

Customer area

The data you enter will be processed for the purpose of customer support in order to give you extended access to the information offered on the website (e.g. your order history). Your data will be deleted at the latest 3 years after expiry of the statutory retention obligations.

Processing of data from customers, business partners, job applications and data from job applications will be deleted six months after a decision on employment has been made, unless we receive your consent for longer storage. Other data will be deleted after expiry of the applicable statutory retention periods. If there are no statutory retention obligations, the data will be retained for a period of three years from the last contact.

Online bookings, booking inquiries and brochure orders via feratel DESKLINE

We use the feratel DESKLINE booking and inquiry platform from feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck, Austria, to process online bookings, booking inquiries and brochure orders. In particular, we process inventory data, contact data, communication data, contract data and - if necessary for the booking - payment data. The processing takes place

• to carry out pre-contractual measures and to fulfill the contract in accordance with Art. 6 para. 1 lit. b GDPR,
• to fulfill legal storage obligations pursuant to Art. 6 para. 1 lit. c GDPR. Insofar as this is necessary to process the booking, data will be transmitted to the accommodation providers concerned or other tourism service partners. There is a contract with feratel for order processing in accordance with Art. 28 GDPR. Further information on data processing by feratel can be found in feratel's privacy policy: https://www.feratel.com/datenschutz.html

Cookies and consent management

Our website uses cookies and similar technologies. These are small files or technical information that are stored or read on your end device. Technically necessary cookies are used to ensure the operation and basic functions of the website. Processing is carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR; if it is absolutely necessary to store or read cookies on your end device, this is done without separate consent in accordance with § 165 para. 3 TKG 2021.

We only use all other cookies and technologies, in particular for statistical, analysis, marketing and remarketing purposes, if you have given your express prior consent. In this case, the legal basis is Art. 6 para. 1 lit. a GDPR in conjunction with § 165 para. 3 TKG 2021. You can revoke or adjust your consent at any time with effect for the future via the cookie settings.

Google Analytics 4

If you have given your consent, we use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is used to statistically analyze the use of our website and to continuously improve our online offering. The processing takes place exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 165 para. 3 TKG 2021. We only use Google Analytics with activated IP anonymization. This means that your IP address is shortened within the European Union or the European Economic Area before further processing. The personal data linked to Google Analytics is automatically deleted after 14 months. It cannot be ruled out that data will be transmitted to Google LLC in the USA in the course of use. Insofar as a third country transfer takes place, we base this on the adequacy decision on the EU-US Data Privacy Framework or on other suitable guarantees within the meaning of Art. 44 et seq. GDPR, if necessary. You can revoke your consent at any time with effect for the future via the cookie settings. You can find more information on data processing by Google in Google's privacy policy.(https://policies.google.com/privacy)

Use of Google Maps

This website uses Google Maps to display interactive maps and to provide directions. Google Maps is a map service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When using Google Maps, personal data, in particular your IP address and technical usage data, may be transmitted to Google. Transmission to Google LLC servers in the USA cannot be ruled out. The integration of Google Maps takes place exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 165 para. 3 TKG 2021, insofar as information is stored or read out on your end device or personal data is transmitted to Google through the integration. You can revoke your consent at any time via the cookie settings. Further information on data processing by Google can be found in Google's privacy policy.

Meta Remarketing / Meta Pixel

If you have given your consent, we use technologies from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, to measure the reach of our website and to target visitors to Meta platforms based on their interests. In particular, online identifiers, usage data and IP addresses may be processed. A transfer to third countries, in particular to the USA, cannot be ruled out. The processing takes place exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 165 para. 3 TKG 2021. You can revoke your consent at any time with effect for the future via the cookie settings. Further information can be found in Meta's privacy policy.

Google Remarketing

If you have given your consent, we use Google's remarketing functions to address visitors to our website on other websites within the Google advertising network on the basis of their interests. Cookies and similar technologies may be used and personal data, in particular IP address, online identifiers and information on usage behavior, may be processed. The processing is carried out exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 165 para. 3 TKG 2021. You can revoke your consent at any time with effect for the future via the cookie settings. Further information on data processing by Google can be found in Google's privacy policy: http://www.google.com/privacy/ads/

Data transfer to Salzburgerland Tourismus GmbH

On this website, with your consent, data on the use of individual parts of the website is transferred to Salzburgerland Tourismus GmbH, Wiener Bundesstraße 23, 5300 Hallwang(https://www.salzburgerland.com). Data on the use of this website is processed for the purpose of analysis and online marketing, including the display of personalized advertising on other websites. This processing takes place until consent is withdrawn or the respective cookie storage period expires. Further information on data protection at Salzburgerland Tourismus GmbH can be found at https://www.salzburgerland.com/de/impressum-und-datenschutz/.

Recipients and transfers to third countries

Insofar as this is necessary for the operation of our website or the provision of our services, we transfer personal data to IT service providers, hosting providers, booking service providers, marketing and analysis service providers and tourism service partners. If data is transferred to recipients outside the European Economic Area, this is only done on the basis of an adequacy decision by the European Commission or on the basis of suitable guarantees in accordance with Art. 44 et seq. GDPR.

Storage duration

We only store personal data for as long as is necessary for the respective purposes or for as long as there are statutory retention obligations. Unless a more specific storage period is specified in this privacy policy, personal data will be deleted as soon as the purpose of the processing no longer applies and there are no legal storage obligations or legitimate interests to prevent deletion.

Your rights

You have the right to information about the personal data processed by us at any time, as well as the right to rectification of incorrect or incomplete data, erasure, restriction of processing, data portability and objection to the processing of your personal data. If the processing is based on your consent, you can revoke this consent at any time with effect for the future. If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the Austrian Data Protection Authority.

Cookie declaration / Cookiebot

This website uses cookies and similar technologies. Cookies are small text files that are stored or read on your end device and enable certain functions of the website. We use technically necessary cookies to ensure the operation and basic functions of the website. These cookies can be used without separate consent, insofar as this is absolutely necessary in accordance with Section 165 (3) TKG 2021. All other cookies and technologies, in particular for statistical, analytical, convenience and marketing purposes, are only used if you have given your express prior consent. Some cookies are set by third-party providers that are integrated on our pages. Detailed information on the specific cookies used, providers, purposes and storage periods can be found in our cookie settings or in the cookie declaration on this website. You can change or revoke your consent at any time with effect for the future in the cookie settings. Further information on how we process personal data and how you can contact us can be found in our privacy policy.

Purpose of Data Processing
DBB processes personal data of employees, partners, customers, and suppliers for the purpose of conducting its business activities and fulfilling related legal and contractual requirements.

Collection of Customer Data
When you purchase a ticket via the online form, by phone, or at our box offices, we collect and process—depending on the specific product—your first name, last name, address, phone number, email address, date of birth, and photo to complete the booking and payment process.

Video Surveillance

Legal basis for data processing:

Legitimate interest pursuant to Art. 6(1)(f) GDPR in conjunction with § 12(2)(4) DSG.

Purpose and interests pursued:

Monitoring of facilities and outdoor areas to ensure the safety of the infrastructure, employees, and guests

Retention period:

72 hours or, depending on the circumstances, until the specified purpose is achieved

Access Control
Please note that for the purpose of access control, a reference photo of the lift ticket holder is taken the first time they pass through a turnstile equipped with a camera. This reference photo is compared by lift staff with the photos taken each time the holder passes through a turnstile equipped with a camera. The reference photo is deleted immediately after the lift ticket expires; the other photos are deleted no later than 30 minutes after each passage through a turnstile. Please note that it is also possible to purchase lift passes that are technically configured so that no photo is taken when passing through the turnstile; however, in such cases, random checks by lift staff should be expected.

Online Store
DBB does not operate an online store. The website www.dorfgastein.com merely redirects users to the online store of Ski amadé GmbH. The online store of Ski amadé GmbH is not covered by this privacy policy.

Photo Spots
There is a photo point at the Fulseck Summit Cable Car mountain station that you can use to take photos. When you use this photo point, a current photo is taken and published online. Some of the photo points are operated by Alturos Destinations GmbH (Skiline). These are not covered by this Privacy Policy and are not the responsibility of DBB. DBB therefore cannot accept any liability for the operator’s privacy policies.

Skiline
Through the website, you can access the external Skiline service to view your personal elevation profile. To generate the elevation profile, Skiline receives information about the turnstiles you have passed through as well as your ticket number. No personal data is therefore shared. When you access the Skiline service via our website, you leave our site, and we cannot assume any liability thereafter.

Job Applicants
The contact information and application documents submitted as part of a job application are processed electronically by us for the purpose of selecting suitable candidates for employment. In the event of a rejection, the application documents will only be retained on file if you consent to this.

Proof of Low Epidemiological Risk for Ski Pass Validity (“2G Proof”)

In accordance with the COVID-19 Measures Ordinance, individuals using our cable car facilities for recreational purposes must present valid proof of low epidemiological risk. Currently, this is “2G proof” (vaccinated or recovered). The legal basis for our verification of this proof is the statutory obligation to conduct such verification pursuant to the COVID-19 Measures Ordinance (as currently in force) in conjunction with Art. 6(1)(c) of the GDPR. To simplify the verification of this proof for multi-day and season passes, we offer the option to store your 2G proof, provided you give us your explicit consent to do so. The legal basis for storing the 2G proof is therefore your explicit consent pursuant to Article 9(2)(a) of the GDPR for the processing of health data via our digital “Safe2Ski Check-in” tool provided by SKIDATA or, for purchases at our on-site ticket counters, your signature on a corresponding paper consent form. There is no legal obligation to store the 2G proof; instead of storage, an individual verification of the 2G proof may be conducted each time you board a cable car. For the automated storage and verification of your 2G proof, we use the services of our data processor SKIDATA (SKIDATA Austria GmbH, Hochthronstraße 1–7, A-5083 Grödig/Salzburg). We have entered into a corresponding agreement with SKIDATA as a data processor in accordance with Article 28 of the GDPR, which ensures that your data is processed exclusively within the scope of our mandate. For more information on SKIDATA’s data protection practices, please visit: https://www.skidata.com/de-at/datenschutz/. We generally store your 2G proof for the duration of the validity of your multi-day or season pass. In addition, processing may take place if necessary to assert or defend claims. You may revoke your consent at any time by sending us an email; this will not affect the lawfulness of the processing prior to revocation.

Miscellaneous

Please note that webcams from Feratel are also installed in the ski area, which capture panoramic images. These images are publicly accessible on the Internet and some are broadcast on TV.

Dorfgasteiner Bergbahnen AG does not manage this data.

General Rate Regulations 2021/22