Information on data protection

Who is responsible for data processing? Who can you contact with any questions you may have regarding data processing and the exercise of your data subject rights?

Data controller:
Verein Ybbstaler Alpen
, Göstling 46/2
, 3345 Göstling an der Ybbs

, Telephone: +43 7484 93049
, Email: info@ybbstaler-alpen.at

What data is processed? What are the sources of this data?

We process the personal data that we receive from you in the course of a business relationship or that you provide to us with your consent. This includes, amongst other things, newsletter subscriptions, requests for brochures, voucher orders, booking enquiries, competitions, registration for the POI database (users) and contact enquiries.

Personal data includes:

• Private individuals: name, address, contact details (email, telephone), country
• Employees of organisations and partner companies: In the context of business-to-business relationships, in addition to the data mentioned above, the company or organisation is also collected and stored.

Furthermore, in individual cases, the following data may also be included in the personal data:

• Image data in connection with competitions
• Data arising from the fulfilment of our contractual obligations
• Data required to carry out pre-contractual measures

For what purposes is the data processed? What is the legal basis for this processing?

Your personal data is processed exclusively in accordance with data protection regulations:
 

To fulfil contractual obligations and, where applicable, to carry out pre-contractual measures (Article 6(1)(b) of the GDPR)

The processing of your personal data is necessary in order to fulfil the enquiries and orders you have submitted in specific cases.

The purposes of data processing are primarily determined by the specific enquiry or order and include, amongst other things:

• Sending information materials (brochures, road maps, walking guides, etc.)
• Sending of vouchers ordered (gift vouchers, experience vouchers)
• Delivery of other orders (merchandise, etc.)
• Notifying winners and sending out prizes in connection with prize draws
• Provision of data to hosts/providers for the processing of non-binding enquiries and/or binding (online) bookings

Subject to your consent (Art. 6(1)(a) GDPR)

If you have given us your consent to process your personal data, this data will only be processed in accordance with the purposes set out in this declaration of consent and to the extent agreed.

Any consent you have given may be withdrawn at any time with immediate effect. The lawfulness of the processing carried out on the basis of your consent up until its withdrawal remains unaffected by this. For example, you can unsubscribe from our free newsletter at any time, either directly within the newsletter or by emailing info@ybbstaler-alpen.at.

Who receives your data? To whom is your data transferred outside the Ybbstaler Alpen association?

Within the Ybbstaler Alpen Association, those departments or staff members who require your personal data to fulfil pre-contractual measures or contractual obligations, as well as to safeguard the legitimate interests of the Ybbstaler Alpen Association, will have access to it.

Non-binding enquiries regarding offers and accommodation can be made via the Ybbstaler Alpen Association’s website. The contact details provided to us (name, address, email address and telephone number), as well as travel-specific details (arrival/departure dates, number of people, number of children and ages of the children), are passed on to the relevant hosts/providers for the purpose of processing the non-binding enquiry.

In addition, data processors commissioned by us (in particular IT and back-office service providers and printers) will receive your personal data, provided they require it to fulfil the relevant task. These data processors are contractually obliged to process your personal data only in connection with the provision of their services and to treat it confidentially.

Apart from the data processors mentioned above, your data will not be passed on to third parties unless there is a legal obligation to do so.

How long will your data be stored and processed?

We store and process your personal data for the duration of the ongoing customer relationship (including for direct marketing purposes) or until the relevant consent is withdrawn. In addition, the retention period must comply with the statutory accounting retention periods, e.g. the seven-year obligation to retain accounting documents and records.

What data protection rights do you have as a data subject?

As a data subject, you have the following rights at any time:

• Access to, rectification, erasure or restriction of the processing of your stored data (following clear identification via a valid identity document).
• Objection to the processing and use of your data for direct marketing purposes.
• Data portability in accordance with the requirements of data protection law.

Right to confirmation
: As a data subject, you have the right to request confirmation from us (following clear identification via a valid identity document) as to whether we are processing personal data relating to you. You may contact us at any time at info@ybbstaler-alpen.at for this purpose.

Right to access
As a data subject, you have the right to request from us (following clear identification via a valid identity document) free of charge, at any time, information regarding the personal data we hold about you and a copy of this information. You may contact us at any time at info@ybbstaler-alpen.at.

Your right to access information includes the following details:

• the purposes of processing,
• the categories of personal data processed by us,
• the recipients or categories of recipients to whom the personal data have been or will be disclosed,
• the existence of your right to rectification or erasure of the personal data concerning you, or to restriction of processing by us as the data controller, or your right to object to such processing
• the existence of a right to lodge a complaint with the Austrian Data Protection Authority as the supervisory authority
• where your personal data has not been collected from you as the data subject: all available information regarding the origin of such data

As part of the operation of our websites, we engage software service providers and agencies which may gain access to your personal data in the course of their activities. These parties have undertaken to comply with the applicable data protection regulations. You can request further information about the service providers we engage at info@ybbstaler-alpen.at.

Furthermore, as a data subject, you have the right to be informed as to whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you, as a data subject, have the right to be informed of the appropriate safeguards in connection with the transfer.

Right to rectification
As a data subject, you have the right to request that we (following clear identification via a valid identity document) rectify any inaccurate personal data concerning you without undue delay. You may contact us at any time at info@ybbstaler-alpen.at for this purpose.

Right to erasure (Right to be forgotten)
As a data subject, you have the right to request that we (following clear identification via a valid identity document) erase personal data concerning you without undue delay, provided that one of the following grounds applies and insofar as the processing is not necessary:

• Your personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
• As a data subject, you withdraw your consent on which the processing was based in accordance with Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
• As a data subject, you object to the processing in accordance with Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or, as a data subject, you object to the processing in accordance with Article 21(2) of the GDPR.
• Your personal data has been processed unlawfully.
• The erasure of your personal data is necessary for compliance with a legal obligation under Union law or the law of the Republic of Austria to which we, as the controller, are subject.

If any of the above grounds apply and you, as a data subject whose personal data is stored by the Ybbstaler Alpen Association, wish to request the erasure of this data, you may contact us at any time at info@ybbstaler-alpen.at.

Right to restriction of processing
As a data subject whose personal data is being processed, you have the right to request that we, as the data controller (following clear identification via a valid identity document), restrict the processing if one of the following conditions is met:

• You, as the data subject, contest the accuracy of the personal data, for a period enabling us, as the data controller, to verify the accuracy of your personal data.
• The processing is unlawful, and you, as the data subject, object to the erasure of your personal data and instead request the restriction of the use of your personal data.
• We, as the controller, no longer require your personal data for the purposes of processing, but you, as the data subject, require it to establish, exercise or defend legal claims.
• You, as the data subject, have objected to the processing in accordance with Article 21(1) of the GDPR, and it has not yet been determined whether the legitimate grounds of the data controller override those of the data subject.

If any of the above reasons apply and you, as a data subject whose personal data is stored by the Ybbstaler Alpen association, wish to request that the processing of this data be restricted, you may contact us at any time at info@ybbstaler-alpen.at.

Your right to data portability
As a data subject whose personal data is being processed, you have the right to receive the personal data concerning you, which you as the data subject have provided to us as the data controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another data controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, as a data subject, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to have your personal data transferred directly by us, as the data controller, to another data controller, provided this is technically feasible and does not adversely affect the rights and freedoms of others.

To exercise your right to data portability, you may contact us at any time at info@ybbstaler-alpen.at.

Right to object
As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) of the GDPR. You may contact us at any time at info@ybbstaler-alpen.at to do so.

Where we process your personal data for the purposes of direct marketing, you, as a data subject, have the right to object at any time to the processing of your personal data for the purposes of such marketing.

Right
to lodge a complaint If you believe that the processing of data is not lawful, we would first be pleased if you were to contact us directly. Irrespective of this, as a data subject, you have the right to lodge a complaint with the Austrian Data Protection Authority as the supervisory authority. You can contact the Data Protection Authority at https://www.dsb.gv.at.

Are you obliged to provide data?

Your personal data is required in order to carry out the request you have made (e.g. ordering vouchers, ordering information material, processing a booking) and to fulfil the resulting contract or pre-contractual measures. If you do not wish to provide us with this data, we will unfortunately be unable to carry out the request.

In any case, you are not obliged to give your consent to the processing of data that is not relevant to the fulfilment of the contract (e.g. when taking part in a competition, you do not have to give your consent to receive the newsletter – your consent is optional).

Cookies, Google Analytics, Google reCAPTCHA and Google Fonts

General information:

When you access this website, Mostviertel Tourismus GmbH stores information about your visit (date, time, page viewed). This data is used exclusively for statistical purposes and is analysed only in anonymised form.

In detail:

Cookies

This website uses cookies. We use cookies to enable the website to function, to compile statistics and to provide content tailored to your interests. Any sharing of this data takes place exclusively in pseudonymised form. By clicking on ‘Accept cookies’, you can continue to use our website to its full extent. These cookies are – with your consent – also processed and used by third-party providers in the USA. There is currently no adequate level of data protection in the USA, and it cannot be ruled out that state security authorities may issue orders to third-party providers (Google and Meta Platforms, Inc.) to gain access to data for control and surveillance purposes. There are no effective legal remedies or means of legal protection against this. Furthermore, the USA does not provide suitable safeguards for the protection of personal data. We only pass on your IP address (in truncated form, so that no unique identification is possible) and technical information such as browser, internet service provider, device and screen resolution to Google or Meta. Further details regarding cookies and how to disable them at a later date can be found under Website Use – Cookies. 

Google Analytics

Where you have given your consent, Google Analytics is used on this website. Mostviertel Tourismus GmbH uses Google Analytics to analyse website usage. The data obtained from this is used to optimise the website and our marketing activities, and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns. Further information on Google Analytics can be found online or at www.google.com/analytics. Further details on the terms of use and data protection can be found at https://policies.google.com/?hl=de.

Google Analytics is a web analytics service provided by Google LLC. The data controller in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). Google processes website usage data on our behalf and is contractually obliged to take measures to ensure the confidentiality of the data processed.

During your visit to the website, the following data, amongst other things, is recorded:

• The pages you visit, your ‘click path’
• Your behaviour on the pages (for example, clicks, scrolling behaviour and time spent on the site)
• Your approximate location (country and city)
• Your IP address (in truncated form, so that no unique identification is possible)
• Technical information such as browser, internet service provider, device and screen resolution
• The source of your visit (i.e. via which website or advertising medium you arrived at our site)
• The referrer URL (via which website or advertising channel you arrived at this website)

This data is transferred to a Google server in Europe and stored there.

Recipients
The recipient of the data is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) acting as a data processor. To this end, Mostviertel Tourismus GmbH has entered into a data processing agreement with Google. Google LLC, based in California, USA, and, where applicable, US authorities may access the data stored by Google.

Transfer to third countries
A transfer of data to the USA cannot be ruled out.

Retention
period Google Analytics stores cookies in your web browser for a period of 14 months from your last visit. These cookies contain a randomly generated user ID, which can be used to recognise you during future visits to the website.

The recorded data is stored together with the randomly generated user ID, which enables the analysis of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form indefinitely.

The legal basis for this data processing and the option
to withdraw consent is your consent, Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with effect for the future by accessing the cookie settings mentioned above and changing your selection there.

You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Google Analytics (with anonymisation feature)

We have implemented IP address anonymisation for Google Analytics on this website. This feature was developed by Google to enable this website to comply with applicable data protection regulations and the recommendations of local data protection authorities where these prohibit the storage of full IP addresses. The anonymisation or masking of IP addresses takes place as soon as the IP addresses enter the Google Analytics data collection network and before the data is stored or processed. Further information on IP anonymisation can be found at https://support.google.com/analytics/answer/2763052?hl=de.

Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is a solution that enables marketers to manage website tags via a single interface. The tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in effect for all tracking tags implemented using Google Tag Manager.

Google Ads Remarketing

We use the remarketing feature within the Google Ads service. The remarketing function enables us to present adverts based on users’ interests to visitors to our website on other websites within the Google advertising network (in Google Search or on YouTube, known as ‘Google Ads’, or on other websites). To do this, we analyse how users interact with our website – for example, which offers they have shown an interest in – so that we can display targeted adverts to them on other sites even after they have visited our website. To this end, Google stores a number in the browsers of users who visit certain Google services or websites within the Google Display Network. This number, known as a ‘cookie’, is used to track these users’ visits. This number serves to uniquely identify a web browser on a specific device and is not used to identify an individual; no personal data is stored.

You can prevent participation in this tracking process in various ways:

a) by adjusting the settings in your browser software; in particular, blocking third-party cookies means you will not receive adverts from third-party providers;

b) by installing the plug-in provided by Google via the following link: https://www.google.com/settings/ads/plugin

c) by disabling interest-based adverts from providers participating in the ‘About Ads’ self-regulatory campaign via the link http://www.aboutads.info/choices; please note that this setting will be reset if you clear your cookies

d) by adjusting your cookie settings accordingly (see the section on cookies above). Please note that, in this case, you may not be able to make full use of all the features of this website.

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

Google Ads Conversion

We use the Google Ads Conversion service to draw attention to our attractive offers on external websites using advertising material (known as Google Ads). We can use the data from the advertising campaigns to determine how successful the individual advertising measures are. In doing so, we aim to show you adverts that are relevant to you, make our website more interesting for you, and ensure a fair calculation of advertising costs.

If you access our website via a Google advert, Google Ads will store a cookie on your device. These cookies usually expire after 30 days and are not intended to identify you personally. The following analytical data is usually stored in connection with this cookie: the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (an indication that the user no longer wishes to be targeted).

These cookies enable Google to recognise your web browser. If a user visits specific pages on an Ads client’s website and the cookie stored on their computer has not yet expired, Google and the client can recognise that the user clicked on the advert and was redirected to that page. Each Ads client is assigned a different cookie. Cookies cannot therefore be tracked across the websites of Ads clients. We ourselves do not collect or process any personal data in connection with the aforementioned advertising measures. We are merely provided with statistical reports by Google. These reports enable us to identify which of the advertising measures used are particularly effective. We do not receive any further data resulting from the use of the advertising materials; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server. We have no influence over the scope and further use of the data collected by Google through the use of this tool and therefore provide you with information in accordance with our current knowledge: Through the integration of Ads Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on one of our adverts. If you are registered with a Google service, Google may associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.

Google Analytics advertising features

In addition to the standard functions, we also use the advanced functions of Google Analytics on this website. The Google Analytics advertising functions implemented on this website include:

• Reports on impressions on the Google Display Network
• Google Analytics reports on performance by demographic characteristics and interests
• Integrated services for which data is collected in Google Analytics for advertising purposes, including the collection of data via ad preference cookies and anonymous identifiers

For this purpose, in addition to the data collected by the Google Analytics analytics tool, further data relating to visits is collected via Google ad preference cookies and anonymous identifiers. We use this information to improve our website offerings.

You can prevent the use of Google Analytics advertising features in various ways:

a) by adjusting the settings in your web browser

b) via the Google ad settings at https://www.google.com/ads/preferences/?hl=de

c) by adjusting your cookie settings accordingly (see above)

d) by opting out on the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

Please note that, in this case, you may not be able to make full use of all the features of this service.

Captcha.eu

To protect the information transmitted via our web forms, this website uses the ‘Captcha.eu’ service provided by Captcha GmbH, Muthgasse 2, 1190 Vienna. The purpose of this check is to distinguish whether the input is being made by a human or, in an abusive manner, by automated, machine-based processing. The processing is carried out in our legitimate interest in preventing automated entries by bots (Article 6(1)(f) of the GDPR). To this end, the IP address of your internet gateway, the type and model of your device, and the type and model of your browser are transmitted to Captcha GmbH, and the time between keyboard and mouse movements is measured. A data processing agreement has been concluded with Captcha GmbH. Captcha GmbH is therefore not permitted to use the data transmitted for its own purposes. The processing of the data takes place exclusively within the European Union.

Google Fonts

This website uses external fonts, namely Google Fonts. Google Fonts is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). However, we have integrated the external fonts locally, i.e. on our web server. As a result, there is no connection to Google’s servers and therefore no data transfer to the USA.

YouTube

Components from YouTube are integrated into this website. YouTube is an online video portal that enables video publishers to upload video clips free of charge and allows other users to view, rate and comment on them, also free of charge. YouTube permits the publication of all types of videos, which is why complete films and television programmes, as well as music videos, trailers and user-generated videos, are available via the internet portal.

YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time a user accesses one of the individual pages of this website – which is operated by the data controller and on which a YouTube component (YouTube video), the internet browser on the data subject’s IT system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google become aware of which specific subpage of our website is being visited by the data subject.

If the data subject is logged into YouTube at the same time, YouTube recognises, upon access to a subpage containing a YouTube video, which specific subpage of our website the data subject is visiting. This information is collected by YouTube and Google and associated with the data subject’s respective YouTube account.

YouTube and Google always receive information via the YouTube component to the effect that the data subject has visited our website if the data subject is logged into YouTube at the same time as accessing our website; this occurs regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not wish this information to be transmitted to YouTube and Google, they can prevent such transmission by logging out of their YouTube account before accessing our website.

The privacy policy published by YouTube, which is available at https://www.google.de/intl/de/policies/privacy/, provides information on the collection, processing and use of personal data by YouTube and Google.

Facebook Pixel and Remarketing/Retargeting

On the basis of your consent, our website uses Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). This allows us to track users’ actions after they have been redirected to a provider’s website by clicking on a Facebook advert. This enables us to record the effectiveness of Facebook adverts for statistical and market research purposes. We cannot view the personal data of individual users. However, the data collected is stored and processed by Facebook. Information controlled by Meta Platforms Ireland Limited may be transferred or transmitted to, or stored and processed in, the USA or other third countries for the purposes described in the policy.

Facebook may link the data to the data associated with your Facebook account and use it for its own advertising purposes in accordance with the Facebook Data Policy. Facebook Conversion Tracking also allows Facebook and its partners to show you adverts both on and off Facebook. A cookie is stored on your computer for this purpose. Only users aged 13 and over may give their consent.

Remarketing tags from Facebook are also integrated into our pages, which establish a direct connection between your browser and the Facebook server. This enables Facebook to associate your visit to our pages with your user account. We and our tourism industry partners may use the information obtained in this way to display Facebook adverts. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or of its use by Facebook. Further information on this can be found in Facebook’s privacy policy at https://www.facebook.com/about/privacy/.

Please click here to withdraw your consent: https://www.facebook.com/ads/website_custom_audiences/

Thinglink

We use Thinglink plugins on our websites to display photos interactively. This is a service provided by ThingLink Oy, Business ID 2329185-9, Salomonkatu 17 A, 00100 Helsinki. We have no control over what data such a plugin collects. Nor do we have any influence over how Thinglink uses this data. It can be assumed that at least the IP address and information about the devices used are collected and utilised; furthermore, it cannot be ruled out that Thinglink may attempt to store cookies on the devices used. This may enable Thinglink to be informed about visits to specific websites. Users who are logged in to Thinglink at the same time may be identified by Thinglink. For information on the data collected in this process and its use, please refer to Thinglink’s privacy policy, which can be viewed at https://www.thinglink.com/terms.

GetSiteControl

We use the services provided by GetSiteControl (GetWebCraft Limited, Klimentos 41–42, Klimentos Tower, Flat/Office 25, 1061, Nicosia, Cyprus). GetSiteControl is a programme that displays pop-ups and overlay windows on the website for informational purposes and to improve user navigation. The windows can be triggered according to specific rules (e.g. number of page visits). For this purpose, GetSiteControl sets cookies. Full details of data processing by GetWebCraft Limited can be found in the current privacy policy: https://getsitecontrol.com/privacy

AI Guide / Chat Function

An AI-powered chat and search function is available on our website. This service is provided by Goodguys GmbH, Moeringgasse 20/1, Door 2, 1150 Vienna. 
If you expressly activate and use this feature, your chat inputs and the technical information required for the provision, stability and security of the service will be processed. This may include, in particular, session or identification IDs, timestamps, language settings, information about the device or browser used, and the IP address, insofar as this is technically necessary. Personal data is processed on servers in Austria. Your IP address is not passed on to external AI services as part of the chat processing and is only processed for the duration of the chat session.
If you ask for location-based information within the chat, an interactive map from Google Maps may be displayed. This map is embedded directly in your browser; the AI Concierge does not forward your IP address, location coordinates or any other data from your chat session to Google. However, when the map is displayed in your browser, your device establishes a direct connection to Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). In doing so, your IP address may be transmitted to Google. Further information on Google’s data protection practices can be found at: https://policies.google.com/privacy?hl=de
Processing is carried out for the purpose of responding to your enquiry, providing the chat function, and ensuring and further developing the quality of the service.
Insofar as Goodguys provides the chat function on our behalf and processes data on our behalf, this is done on the basis of a data processing agreement in accordance with Article 28 of the GDPR. The legal basis for processing in connection with the use of the chat function is our legitimate interest, in accordance with Article 6(1)(f) of the GDPR, in providing our website visitors with a modern means of searching for and accessing information. 
Goodguys uses large language models via Microsoft Azure to generate the responses. Processing takes place exclusively in data centres within the European Union (France, Sweden). All other AI functions are operated locally on Goodguys’ own servers in Austria. According to Goodguys, only anonymised enquiries with no personal reference are transmitted to the language models; in particular, neither IP addresses nor any other identifiers that would enable assignment to individual persons are passed on.
Personal data (in particular IP addresses and session IDs) is processed solely for the duration of the chat session. As soon as you close the chat window, this data is immediately deleted or anonymised. The remaining chat content (questions and answers) is stored in a non-personally identifiable form for quality assurance and the further development of the service.
We ask that you do not provide any information in the chat that could be used to identify you (e.g. name, email address, telephone number). The chat function is used to provide tourist information on our website.
Further information on data processing by Goodguys can be found in Goodguys’ privacy policy at: goodguys.ai/de/

The Ybbstaler Alpen Association works in partnership with a wide range of social media providers. As part of this collaboration, when you use the relevant service, your browser will automatically connect to the selected service provider (e.g. Facebook). In doing so, your IP address, cookies and other information may be transmitted to the relevant service provider if you have previously visited their website. This data transfer only takes place when you interact with these social networks.

Our website features share buttons for the social networks Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA, YouTube, operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, Instagram, operated by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, as well as Google+ from the social network Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. The share buttons can be recognised by their respective logos.

All share buttons are configured in accordance with data protection regulations. Only when you click on the relevant ‘Share’ button on our website (and only then) is a direct connection established between your browser and the server of the operator of the respective network. According to the operators of the aforementioned social networks, no personal or company-related data is collected by the social networks unless you click on the relevant ‘Share’ button. Such data, including the IP address, is only collected and processed for members who are logged in. If you do not wish your visit to our website to be linked to your respective social network user account, please log out of that social network’s user account.

We would like to point out here that, as the provider of this website, we have no knowledge of the content of the data transmitted or of its use by the social networks. Further information on the use of data by the social networks can be found in the privacy policies of the social networks mentioned.

The individual social media channels in detail:

Use of Facebook plugins
This website uses plugins from the social network facebook.com – operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). These can be identified by one of the Facebook logos (a white ‘f’ on a blue tile or a ‘thumbs-up’ symbol) or by the label ‘Facebook Social Plugin’.

When you visit pages on our website that contain such a plugin, a connection is established with Facebook’s servers and the plugin is displayed on the website via a message sent to your browser. This transmits information to Facebook’s servers about which of our web pages you have visited. If you are logged in to Facebook at the time, Facebook associates this information with your personal Facebook account. When you use the plugin’s functions (e.g. by clicking the ‘Like’ button or posting a comment), this information is also associated with your Facebook account. This can only be prevented by logging out before using the plugin.

Further information on the collection and use of data by Facebook, as well as your rights in this regard and options for protecting your privacy, can be found in Facebook’s privacy policy: http://www.facebook.com/policy.php.

It is also possible to block Facebook social plugins using add-ons for your browser.

Use of the ‘+1’ button
This website uses the ‘+1’ button from the Google Plus social network, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (‘Google’). The button can be recognised by the ‘+1’ symbol on a white or coloured background.

When you visit a page on our website that contains such a button, your browser establishes a direct connection to Google’s servers. The content of the “+1” button is transmitted directly by Google to your browser and integrated into the webpage by your browser. We therefore have no influence over the extent of the data that Google collects via the button, but we assume that your IP address is recorded.

For information on the purpose and scope of data collection, as well as the further processing and use of the data by Google, and your rights in this regard and the settings available to protect your privacy, please refer to Google’s privacy policy regarding the “+1” button: http://www.google.com/intl/de/+/policy/+1button.html

If you are a Google+ member and do not wish Google to collect data about you via our website and link it to your membership details stored with Google, you must log out of Google+ before visiting our website.

Twitter
This website uses the buttons provided by the Twitter service. These buttons are provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. They can be recognised by terms such as ‘Twitter’ or ‘Follow’, combined with a stylised blue bird. These buttons allow you to share a post or a page from this website on Twitter or to follow the provider on Twitter.

When you visit a web page containing such a button, your browser establishes a direct connection to Twitter’s servers. The content of the Twitter buttons is transmitted directly from Twitter to your browser. We therefore have no influence over the scope of the data that Twitter collects via this plugin. To the best of our knowledge, only the user’s IP address is transmitted when the button is loaded, but it is not used for any purpose other than displaying the button.

Further information on this can be found in Twitter’s privacy policy at http://twitter.com/privacy.

Instagram
We use features from the social media network Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA, on our website. The functions for embedding Instagram content (embed function) allow us to display images and videos. When you visit pages that use such functions, data (IP address, browser data, date and time, cookies) is transmitted to Instagram, where it is stored and analysed. If you have an Instagram account and are logged in, this data will be linked to your personal account and the data stored therein. You can find the privacy policy, which explains what information Instagram collects and how it uses it, at https://help.instagram.com/155833707900388.

YouTube
Our website uses the YouTube button from the social network YouTube, which is operated by YouTube LLC, with its registered office at 901 Cherry Avenue, San Bruno, CA 94066, USA (“YouTube”). When you visit a page on our website that contains such a button, your browser establishes a direct connection to YouTube’s servers. The content of the YouTube button is transmitted directly from YouTube to your browser and integrated into the webpage by your browser. We therefore have no influence over the scope of the data that YouTube collects via the button; however, we assume that your IP address is also recorded. For information on the purpose and scope of data collection, as well as the further processing and use of the data by YouTube, and your rights and settings options regarding the protection of your privacy, please refer to YouTube’s privacy policy regarding the YouTube button: https://www.google.de/intl/de/policies/privacy/

If you are a YouTube member and do not wish YouTube to collect data about you via our website and link it to your membership details stored on YouTube, you must log out of YouTube before visiting our website.

Use of Google Maps

The Ybbstaler Alpen Association uses Google Maps on its website (and on the websites listed above), in particular to display POIs (Points of Interest) on an interactive map. Google Maps is operated by Google Inc. By using these websites, you consent to the collection, processing and use of data – both that which is automatically collected and that which you enter yourself – by Google, its agents or third-party providers.

You can find information on the data transmitted when using Google Maps via the following link: https://policies.google.com/privacy?hl=de. In addition to your IP address, this includes data such as the GPS data from a smartphone you are using or your search behaviour.

Processing of event data

In the Ybbstaler Alpen events calendar (www.veranstaltungen.mostviertel.at), we process event and contact details from publicly available sources – including photographs and, where applicable, moving images, which are published by registered users on the events calendar at veranstaltungen.niederoesterreich.at. This processing takes place for the duration of the event in question and to safeguard the legitimate interests of the data controller, Niederösterreich Werbung GmbH, as well as those of third parties (associations and institutions) who have published the event in question in the Lower Austria events calendar.

Events, etc.

Photographs (photos/videos) are taken at various events, in particular at any press conferences and other events organised by the Ybbstaler Alpen Association, or at which people who work on our premises, for us or with our support give presentations or perform.

Invitations and event notices will state in advance that photographs will be taken. Where the media privilege (Section 9 of the Data Protection Act) does not apply, the photographer will be instructed to obtain consent from small groups who are to be photographed. Where larger groups are photographed at events, the images are used to raise awareness of our organisation and promote its image; we publish these images online and, where appropriate, in printed materials about our organisation (legitimate interest).

If you are photographed as part of a small group or as an individual, the photographer will ask you before taking the photograph whether you consent to the processing of your image and will ask you to sign a declaration of consent as proof of your agreement. If you do not agree to this, you will have the option of stepping aside so as not to be depicted in the photograph. Unless the media privilege (Section 9 of the Data Protection Act) applies, you have the right to withdraw your consent at any time with effect for the future.

In the event of revocation, the photographs will be removed where technically possible, and efforts will be made to arrange for their removal from any other media. Printed brochures will not be destroyed following revocation. Upon receipt of the revocation, the data will no longer be processed for that purpose. If costs are incurred as a result of the withdrawal of consent and any prohibition on further use (such as amending the website or destroying printed information), and there is no legitimate interest in the withdrawal, the costs of the changes shall be borne by the data subject.

There is a right to object in accordance with statutory provisions, provided that the processing is based on a legitimate interest. As you have entered a public space at these events for an event in the marketing of which our organisation has an interest, this expectation must also be taken into account when considering any objection.

Where data is published on our own website, it will be deleted upon expiry of the copyright protection period or upon withdrawal of consent. If this data is published on social media, it will only be deleted upon withdrawal of consent.

Data security measures to protect your data

The security of your data is of the utmost importance to us. We have therefore implemented technical and organisational measures to ensure the security of data processing and to protect your personal data as effectively as possible against access by unauthorised third parties.

We achieve this, on the one hand, by using state-of-the-art security software, coding and encryption methods within our IT infrastructure; and, on the other hand, by promoting the security of your data through the implementation of risk-mitigating measures (data minimisation across all areas) and preventive safeguards.