INFORMATION ON DATA PROCESSING UNDER ARTICLES 13 AND 14
THE EU DATA PROTECTION BASIC REGULATION (EU-DSGVO, 2016/679)
We hereby inform you about the processing of your personal data and the data protection claims and rights you are entitled to. The content and scope of data processing is largely determined by the products and services you have requested or agreed with you.
WHO IS RESPONSIBLE FOR DATA PROCESSING AND WHOM CAN YOU CONTACT?
Person in charge of data processing:
WHICH DATA IS PROCESSED AND FROM WHICH SOURCES DOES THIS DATA ORIGINATE?
We process the personal data that we receive from you within the scope of the business relationship. In addition, we process data which we have received from publicly accessible sources (e.g. company register, register of associations, media) or which are legitimately transmitted to us by third parties.
TO FULFILL LEGAL OBLIGATIONS (ART. 6 PARA. 1C DSGVO):
Processing of personal data may be necessary for the purpose of fulfilling various legal obligations (e.g. in particular the Package Travel Act, General Terms and Conditions of Travel (ARB 92), Consumer Protection Act, Travel Insurance Act, etc.).
Examples of such cases are:
Forwarding of customer and travel data to service providers such as airlines, reservation systems, hotels, tour operators, etc.
Forwarding of messages, requests etc. from the traveler to the service providers and vice versa from the service providers to the travelers
WITHIN THE SCOPE OF THEIR CONSENT (ART. 6 PARA. 1A DSGVO):
If you have given us your consent to process your personal data for specific purposes (e.g. transfer of data within the Group, evaluation of travel data for marketing purposes, procedures for needs analysis and direct customer contact), processing will only take place in accordance with the purposes and to the extent agreed in the declaration of consent. Any consent granted can be revoked at any time with effect for the future.
FOR THE PROTECTION OF LEGITIMATE INTERESTS (ART 6 PARA. 1F DSGVO):
As far as necessary, in the context of balancing interests in favor of Mountain Offsite or a third party, data processing may be carried out beyond the actual fulfillment of the contract in order to safeguard the legitimate interests of us or third parties. In the following cases, data processing is carried out to protect legitimate interests:
Advertising or market and opinion research, provided that you have not objected to the use of your data in accordance with Art 21 DSGVO
- Measures for business management and further development of services and products;
- within the scope of legal prosecution;
- assertion of legal claims and defence in legal disputes;
- Ensuring the IT security and IT operation of Mountain Offsite.
WHO RECEIVES MY DATA?
Within Mountain Offsite, your data will be made available to those departments or employees who need it to fulfill contractual and legal obligations and legitimate interests. In addition, processors commissioned by us (in particular IT service providers, back office service providers or telecommunications service providers) receive your data, provided that they need the data to perform their respective services. All processors are contractually obligated to treat your data confidentially and to process it only within the scope of providing their services. If there is a legal obligation, public bodies and institutions (e.g. courts etc.) may be recipients of your personal data.
Recipients of personal data in this context may be credit and financial institutions or comparable institutions to which we transfer data in order to carry out the business relationship with you, or other companies within the network connected to Mountain Offsite due to official or legal obligations.
Other data recipients may be those entities for which you have given us your consent to transfer data.
HOW LONG WILL MY DATA BE STORED?
We process your personal data, as far as necessary, for the duration of the entire business relationship (from the initiation, processing to the termination of a contract) as well as beyond that in accordance with the legal storage and documentation obligations, which result from the German Enterprise Code (UGB) and the Federal Fiscal Code (BAO), among others.
In addition, the statutory limitation periods, which can be up to 30 years in certain cases, e.g. according to the General Civil Code (ABGB), must be taken into account for the storage period.
WHAT DATA PROTECTION RIGHTS DO I HAVE?
You have the right to information, correction, deletion or restriction of the processing of your stored data, a right to object to the processing as well as a right to data transferability in accordance with the requirements of the data protection law at any time. Complaints can be directed to the Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna (www.dsb.gv.at).
AM I OBLIGED TO PROVIDE DATA?
Within the framework of the business relationship, you must provide us with the personal data required for the establishment and execution of the business relationship and which we are legally obliged to collect. If you do not provide us with this data, we will generally have to refuse to conclude the contract or execute the order or be unable to execute an existing contract and consequently have to terminate it. However, you are not obliged to give your consent to data processing with regard to data that is not relevant to the performance of the contract or not required by law.
TO WHAT EXTENT IS THERE AUTOMATED DECISION MAKING
As a matter of principle, we do not use a fully automated decision-making process in accordance with Article 22 of the DSGVO to establish and implement the business relationship. Should we use this procedures in individual cases, we will inform you of this separately if this is required by law.
USE OF GOOGLE ANALYTICS
This website uses Google Analytics, a web analysis service of Google Inc. to enable an analysis of the use of the website. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by Google Analytics about your use of this website (including your IP address) is transferred to a Google Inc. server in the USA and stored there.
INFORMATIONEN ABOUT COOKIES