I. Name and Address of Responsible Party
The party responsible for processing personal data on this website is:
Pfänderbahn AG, Steinbruchgasse 4, 6900 Bregenz, Österreich
Telephone: +43 5574 42 160-0
E-Mail: office@pfaenderbahn.at
If you have any questions regarding data protection, you can contact the data protection officer, Mr. DI Thomas E. Kinz, at any time.
II. General information about Data Handling
1. Scope of processing personal data
Insofar as personal data is provided by the contractual partner, this will be used for the processing of enquiries and/or bookings, for the provision of services by Pfänderbahn AG and for administrative purposes. The contractual partner agrees that his personal data may be stored and processed as required. The personal data will be treated strictly confidentially in accordance with the provisions of the Data Protection Act and will neither be sold to third parties nor otherwise marketed. The personal data will only be passed on to third parties or otherwise transmitted if this is necessary for the business transaction or if personal data must be disclosed due to statutory provisions.
2. Your rights (rights of user)
You have the following legal rights with regard to your personal data:
Right to information
You have the right to request confirmation as to whether we process personal data that concerns you. If this is the case, you have the right to obtain information about this personal data as well as other information, e.g. the processing purposes, the recipients and the planned duration of storage or the criteria for determining the duration.
Right to rectification and completion
You have the right to demand the correction of your incorrect data without delay. Taking into account the purposes of the processing, you have the right to request the completion of any incomplete data.
Right to cancellation ("right to be forgotten")
You have a right to deletion of your data insofar as the processing is not necessary. This is the case, for example, if your data is no longer necessary for the original purposes, if you have withdrawn your declaration of consent under data protection law, or if the data has been unlawfully processed.
Right to limitation of processing
You have the right to limit the processing of your data, e.g. if you believe that your personal data is incorrect.
Right to data transferability
You have the right to receive your personal data concerning you in a structured, accessible and machine-readable format.
Right of objection
You have the right to object at any time to the processing of certain personal data concerning you for reasons arising from your particular situation.
In the case of direct marketing, you as a data subject have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising, including profiling, in so far as it is linked to such direct marketing.
Right to revoke your data protection consent
You can revoke your consent to the processing of your personal data at any time with effect for the future. However, the legality of the processing carried out until the revocation is not affected by this. You can also complain to a data protection supervisory authority at any time if you believe that the data processing does not comply with data protection regulations.
3. Storage Duration
We only process and store your data for as long as is necessary for processing or to comply with legal obligations. Your data will be blocked or deleted once the processing purpose has ceased to apply. If, in addition, legal obligations exist in regard to, we will block or delete your data at the end of the legal storage periods.
III. Data Security
1. SSL encryption
We use the common TLS method in connection with the highest encryption level supported by your browser within the website visit. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the address bar of your browser.
In addition, we apply other appropriate technical and organizational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
2. Emails sent to us
We draw your attention to the fact that - subject to an explicit agreement and configuration - emails that are sent to us are unencrypted.
IV. Description and Scope of Data Processing
1. Provision of the website
Each time our website is accessed, our web server automatically collects data and information from the computer system of the accessing computer in so-called “server log files”. The following data is collected:
- Browser type and browser version
- Operating system
- Referrer URL
- Time of server request
- These data cannot be assigned to specific persons by us. This information is evaluated for website access statistics and stored on a long-term basis.
2. Google Analytics
"This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google in advance within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as Google from processing this data by downloading and installing the browser plug-in available under the following link [the current link is https://tools.google.com/dlpage/gaoptout?hl=en].
In addition, we ensure that your IP address is anonymized before transmitting to Google.
3. Google Maps
We use Google Maps from the company Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. By using the functions of this map, data is transferred to Google. You can find out which data is collected by Google and what this data is used for at https://policies.google.com/privacy
4. Google Fonts
We use Google Fonts from the company Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. Google Fonts is used without authentication and no cookies are sent to the Google Fonts API. If you have an account with Google, none of your Google Account information will be transmitted to Google while using Google Fonts. Google only records the use of CSS and the fonts used . Google stores this information securely. You can find out more about these and other questions at https://developers.google.com/fonts/faq. You can find out which data is collected by Google and what this data is used for at https://policies.google.com/privacy
5. Cookies
We use cookies to facilitate and improve the use of our website. Cookies is text information that is stored on a computer when you visit a website via the web browser.
Most web browsers automatically accept cookies. You can delete saved cookies at any time via the settings of your web browser. You can also adjust the settings of your web browser so that no cookies are saved. In this case, not all functions of our website may be available. See our Cookies Policy.
6. Forms
You can enter personal data via a form on our website. When you use our forms, we collect and store the data you enter in the input mask (e.g. last name, first name, e-mail address). They are not passed on to third parties. The legal basis for processing in the case of consent is Art. 6 para. 1 lit. a GDPR. If your request serves to prepare the conclusion of a contract, Art. 6 para. 1 lit. b GDPR is an additional legal basis. We use the data exclusively to process and answer your forms.
7. Newsletter
You can subscribe to a newsletter on our website. When you subscribe to the newsletter, we collect and store the data you enter in the input mask (form) (e.g. last name, first name, e-mail address). We do not share your information with third parties. A subscription to the newsletter is only possible with your consent. The legal basis for the processing is Art. 6 para. 1 lit. a GDPR. We use the data exclusively for the dispatch of newsletters.
8. Use of the voucher system
The data that you provide to us within the framework of the online booking (period of carriage, desired package, title, first name, surname, company, telephone number, e-mail address, home address, credit card number, comment if applicable) will be used exclusively for the purpose of making your booking, contacting you in this regard and organising your stay. We would like to point out that when you click on Booking, the data is automatically forwarded to our booking platform, which is operated by Incert GmbH. Your data will be collected for us by Incert GmbH as an order processor and subsequently forwarded to us. By concluding an order processing contract, we have ensured that Incert GmbH processes your data in accordance to the applicable standards and does not use it for its own purposes. If you process payment via our online platform in the course of your booking, your data will be forwarded to SIX Payment Services GmbH (Europa) S.A. Branch Office Austria in 1030 Vienna, Marxergasse 1b, which operates this payment processing platform. Your data will be collected for us by SIX Payment Services GmbH (Europa) S.A. Branch Office Austria as an order processor and then forwarded to us. By concluding an order-processing contract, we have ensured that SIX Payment Services GmbH (Europa) S.A. Zweigniederlassung Österreich processes your data in accordance to the applicable standards and does not use it for its own purposes.
9. The use of YouTube
We use the YouTube LLC YouTube video embedding feature on our website. (901 Cherry Ave., San Bruno, CA 94066, USA; "YouTube"). YouTube is a service offered with Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The function displays videos stored on YouTube in an iFrame on the website. The Advanced Privacy Mode option is enabled. This prevents YouTube from storing information about website visitors. Only when you watch a video will information about it be sent to YouTube and stored there.
For more information about YouTube's and Google's collection and use of this information, your rights in this regard, and how YouTube can protect your privacy, please refer to YouTube's privacy policy.
10. Use of social media plug-ins
No social media plugins are used - there is only a link to the Facebook social media site.
11. Information about our Facebook presence
We operate the following Facebook fan pages as responsible persons: https://www.facebook.com/Pfaenderbahn/
As a page operator, Facebook provides us with the "Page Insights" function, which gives us insight into the usage behavior on our Facebook pages. Personal user data is processed in this process.
Together with Facebook, we are responsible for this data processing in the sense of the GDPR. For this reason, Facebook has amended its terms of use so that they comply with data protection requirements and contain an agreement on joint responsibility (pursuant to Art. 26 DSGVO). The amended terms of use can be viewed at https://www.facebook.com/legal/terms/page_controller_addendum.
We, as page administrators, use our Facebook fan pages or the "Page Insights" functionality on the basis of our legitimate interests (Art. 6 Para. 1 lit. f GDPR) to find out which target group interacts with our Facebook fan pages. This enables us to constantly improve our website and our offers. Facebook assumes primary responsibility for fulfilling its data protection obligations with regard to data processing in connection with the "Page Insights" functionality. Facebook therefore assumes responsibility for fulfilling the information duties, the rights of the persons concerned, the security of user data and the reporting of data protection violations. If you have any questions about the information Facebook stores about you, please contact Facebook directly or consult Facebook's Privacy Policy. You will also find detailed information about opt-outs that are available to you for certain features.
12. Our weather information, 360-Degree Panorama
We get the weather information from the provider wetterring.at. There is no data exchange. We only fetch the current pictures from the weathering server. Our 360-degree panorama camera comes from another provider and is basically positioned in such a way that no personal pictures of people can be seen. From a technical point of view, no personal data is transmitted when the panorama camera is called up.
13. Contact form & e-mail contact
If you fill out a contact form or send us an e-mail or other electronic message, your details will only be stored for the purpose of processing the enquiry, possible further related questions, and will only be used within the scope of the enquiry.
The legal basis for processing your request is Art. 6 Para. 1 S. 1 lit. b GDPR.
We will delete your e-mail address after your request has been processed.