Schafbergbahn

Declaration regarding Data Protection

Status as of:  May 2019

The protection of your personal data is a special priority to us. Therefore we are processing your data exclusively in accordance with the legal provisions of the DSGVO [German acronym of the Austrian Regulation of the Data Protection Act] and thee TKG [German acronym of the Austrian Telecommunications Act] 2003. With this declaration regarding data protection we are informing you about the most important aspects of data processing within the framework of our website, including the online ticket shop, as well as which rights you have according to the current data protection laws and how you can exercise these rights. 

Furthermore, this declaration regarding data protection also applies to all cases stated below, whenever personal details of natural persons are being processed by Salzkammergutbahn GmbH. 

We reserve the right to adjust this declaration regarding data protection at any time due to legal or technical developments. The current version as published on www.schafbergbahn.at is applicable. 

Contacting us

If you are contacting us by using the form on this website or via e-mail, then the details provided by you will be stored by us for the purpose of processing your inquiry and for the purpose of subsequent questions for a period of six months. We will not disclose these data to anyone without your consent. 

SSL-encryption

For reasons of security and for the protection of the transmission of confidential information, such as inquiries, for example, which you would send to us as the operator of the website, we are using an SSL-encryption. You can recognize an encryption when the address line in your browser changes from "http://" to "https://" and also when the lock-symbol is shown in your browser line. When the SSL-encryption has been activated, then the data, which you are sending to us, cannot be read by any third party. 

Collection of access data and log files

Based on our justified interests in accordance with Art. 6 (1) lit. f. DSGVO [German acronym of the Austrian Regulation of the Data Protection Act] we collect data about any access to the server, from which this service is provided (the so-called server log files).

Among the access data are the name of the accessed website, the file, thee date and time of the access, the amount of data transferred, the report about the successful access, thee browser type and version, the operating system of the user, the referring URL (the previously accessed site), the IP-address and the provider of the query.

The log file information will be stored for a maximum duration of seven days for security reasons, (for example to uncover abuse or fraudulent actions) and thereafter it will be deleted.

Data, which are required to be stored for longer time periods in order to be available as evidence, will be excluded from deletion until such time as each incident is finally settled. 

Children

Children should not submit any personal details to the websites of Salzkammergut GmbH  without the consent of their parents. Salzkammergutbahn GmbH encourages all parents and chaperones on how to instruct their children regarding the safe and responsible use of personal details on the internet.

Salzkammergutbahn GmbH will in no way knowingly collect personal details of children, use them in any way, or disclose them to any third parties in an unauthorized manner. 

1.     Who is responsible for the processing of data, and who is the person for you to get in touch with? 

Salzkammergutbahn GmbH

Markt 35

5360 St. Wolfgang [Austria] 

Telephone +43 6138 2232-0

Fax +43 6138 2232-0

E-Mail: berg.schiff@schafbergbahn.at 

2.   Purpose of data processing by Salzkammergutbahn GmbH as well as other specific information (according to Art. 13 as well as 14 DSGVO [German acronym for the Austrian Regulation of the Data Protection Act]) 

a)   Website Google Analytics / Google Re-marketing

This website uses Google Analytics and Google Re-marketing services of Google Inc. ("Google"). Google Analytics and Google Re-marketing are using so-called "cookies", i. e. text files, which are stored on your computer and which enable an analysis of the use of the website by you. The information generated by said cookie regarding your use of this website (including your IP-address) will be forwarded to a server of Google in the U.S. and stored there.

This website uses Google Analytics with the extension "_anonymizelp()", whereby the IP-addresses are processed only in an abbreviated form in order to exclude the possibility of a direct, personal reference.

Google will use this information in order to evaluate your use of the website, to compile reports about the activities regarding this website for the operator of the website, and to provide additional services relating to the use of the website and the internet in general. Google will also transfer this information to third parties if need be, provided that this is mandated by law or to the extent that third parties are processing these data on behalf of Google.

Third party vendors, including Google, are advertising on websites on the internet based on previous visits by a user to this website. In no way will Google connect your IP-address with other data, which have been stored by Google. You can prevent the installation of these cookies through corresponding settings of your browser software; but we are pointing out to you, that in such case you may not be able to use the full scope of all functions of this website. By using this website, you are giving your consent to have data obtained by you processed by Google in the manner and for the purpose described above.

The collection and storage of data may be revoked at any time with a future effective date. We have entered into an appropriate agreement with the provider regarding the collection of order details. The processing of data is carried out based on the legal provisions of § 96 (3) TKG [German acronym for the Austrian Telecommunications Act] as well as Art. 6 (1) lit f (justified interest) of the DSGVO [German acronym of the Austrian Regulation of the Data Protection Act]. 

Our concern in accordance with the DSGVO [German acronym of the Austrian Regulation of the Data Protection Act] (justified interest) is the improvement of our offers and our image on the web. Since the private sphere of our users is important to us, the user data are pseudonymized. The user data will be stored for a time period of 14 months. 

Cookies

Our website is using so-called cookies. These are small harmless text files, which are stored on your end-user device with the help of the browser. They do not cause any harm.

We are using cookies in order to design our offers user-friendly. Some cookies remain on your end-user device, until you delete them. They enable us to recognize your browser during your next visit. If you do not want that, then you can change the settings of your browser that it will inform you about the storage of cookies and that you will only permit that in individual cases.

Upon deactivation of cookies, the functions of our website may be restricted. You may find additional information about the cookies used by this website here. 

b)    Sweepstakes

Purpose of processing

The purpose of data processing is the notification of winnings and upon appropriate consent the sending of a newsletter. 

Legal basis

The legal basis for the processing of data is the rules of participation as they can be retrieved from the website of Salzkammergutbahn GmbH. There is no legal or contractual obligation to provide personal details. Said provision is, however, required for participating in the sweepstakes. The failure to provide these details will only result in your inability to participate in the sweepstakes. 

Data categories

First and last name of the participant

E-mail address

Telephone number

Mailing address

Facebook-User-ID and profile image

WhatsApp Profile

Instagram-User-ID and profile image 

Categories of recipients

Order processors within the framework of the provision of services (shipping partner):

Facebook, WhatsApp, Instagram, SnapChat 

Data storage / deletion

We are processing your personal details to the extent required until the expiration of the storage obligations as mandated by taxation, company and value-added-tax laws of seven years. Furthermore, your data will remain stored for as long as required for the enforcement of any legal claims. 

c)     Video surveillance 

Purpose of processing

The purpose of data processing is the protection of ourselves / our assets and the compliance with legal diligence obligations, in each case also including the securing of evidence, with exclusive evaluation of any incident case, provided that certain facts would justify the assumption that the guarded assets could become the target or the location of a dangerous attack. 

Legal basis

The legal basis is provided by § 12 DSG [German acronym for the Austrian Data Protection Act] 2018 as well as §§ 353 onwards ABGB [Austrian Civil Code] (property protection) and § 80 StPO [Austrian Code of Criminal Procedure]. 

Data categories

During video surveillance the following categories of data are processed about people, who are in the video-surveilled area, as well as persons, who will be identified in case of an incident:

  • Photographic data of the concerned persons

  • Location of the video-recording

  • Time of the video-recording

  • Identities of the concerned persons, provided they are recognizable from the recording by the person evaluating same

  • Role of the concerned person (e.g. perpetrator, victim, witness), if this can be ascertained from the recording  

Categories of recipients

After an evaluation in case of an incident, the following recipients will receive these data:

Insurance companies (solely for the purpose of handling insurance claim cases)

Data storage / deletions

In accordance with legal provisions (see § 12 DSG [Austrian Data Protection Act] 2018) the data will be stored for a period of 72 hours and then deleted automatically. 

d)    Online-ticket shop

Purpose of processing

The purpose of data processing is the handling of ticket sales in the Online-ticket shop of Salzkammergutbahn GmbH. 

Legal basis

The data provided by you to the Online-ticket shop are required to complete the contractual obligations. There will be no disclosure of these data to third parties, with the exception of the transfer of bank data / credit card data to the processing banking institutions / payment service providers for the purpose of processing the payment and the debiting of the purchase price.

There is no legal or contractual obligation to provide personal details. However, the provision of personal details is required for the completion of the contract.

The non-provision of these details would result in the contract not being able to be completed. 

Data storage / deletion

We are processing your personal details to the extent required until the expiration of the storage obligations as mandated by taxation, company and value-added-tax laws of seven years. Furthermore, your data will remain stored for as long as required for the enforcement of any legal claims. After the cancellation of a purchase, the data stored with us will be deleted. 

3.   Which data protection rights am I entitled to as a result of the processing of data by Salzkammergutbahn GmbH? 

Right of disclosure

You may require a confirmation from us as to whether or to which extent we are processing your data. 

Right to correction

If your personal details, which we are processing, are incomplete or incorrect, then you can demand from us at any time to correct or complete them. 

Right to deletion

You can demand the deletion of your personal details, if we process them unlawfully or if the processing of it violates your justified protective rights in an unreasonable manner.

However, we would like to point out to you that there might be reasons, which would oppose the immediate deletion, for example, if we must comply with our obligation to store these data as regulated by law. 

Right to restriction of processing

You can demand of us the restriction of processing of your data in the following cases:

- if you are disputing the correctness of the data for a period of time which would allow us to determine the correctness of the data;

- if the processing of the data is unlawful, but you refuse their deletion and instead demand a restriction of the use of the data;

- if we do no longer need the data for their intended purpose, but you still require the data to make or defend legal claims or if you have filed an objection against the processing of the data. 

Right to transferability of data

You can demand from us that we make your data available to you in a structured, commonly used and machine-readable format, provided that we are processing these data based on an approval granted by you or due to justified interests, or if the processing is required in order for us to comply with the contract between us, and said processing of your data is carried out using automated processes. 

Right to object

If we are processing your data to carry out tasks, which safeguard public interests, to exercise official authority, or if we are referring to our justified interests when processing your data, you can file an objection against such data processing, if there are prevailing protective rights for your data.

You may at any time object to the mailing of advertising without stating any reasons. However, we would like to point out that we are entitled to continue to process your data despite your objection if we can prove that there are compelling reasons for such processing, which prevail over your interests, rights, or liberties, or if the processing serves the assertion, exercising or defense of legal claims. 

Right to revoke

If the processing of data is based on your consent, you can revoke it at any time. 

Right to complain

In order to ascertain your rights, you may contact us by e-mail at berg.schiff@schafbergbahn.at or by regular mail to the address stated in item 1. In order to be able to guarantee the protection your rights and your privacy, we may require additional information (for example: a copy of your identification) to verify your identity if in doubt.

In case of any violation of the protection of your data, you may direct any complaints to 

Österreichische Datenschutzbehörde [Austrian Data Protection Authority]

Barichgasse 40-42, 1030 Vienna [Austria]

Telephone: +43 1 52 152-0

Е-mail: dsb@dsb.gv.at.