Information on the collection of personal data

In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour. The controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is Fender Chalets Sonnalm, Stubeck Sonnalm 126, 9853 Gmünd in Kärnten (see imprint). When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations. If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.

Your Rights

You have the following rights vis-à-vis us with regard to your personal data:

• Right of access,
• Right to rectification or erasure,
• Right to restriction of processing,
• Right to object to processing,
• right to data portability.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

Collection of personal data when visiting our website

When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 lit. f GDPR):

• IP address
• Date and time of the enquiry
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status / HTTP status code
• Amount of data transferred in each case
• Website from which the request originates
• browser
• Operating system and its interface
• Language and version of the browser software.

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the organisation that sets the cookie (in this case, us). Cookies cannot execute programmes or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.

Use of cookies

a) This website uses the following types of cookies, the scope and function of which are explained below:

• Transient cookies (b)
• Persistent cookies (c).

b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser. c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time. d) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.

Other functions and offers on our website

In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you must generally provide additional personal data that we use to provide the respective service and for which the aforementioned data processing principles apply. In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the service.

Google Ads Lead Forms

We use what are known as lead forms on the Google Ads advertising platform. These enable you to express your interest in our services directly within a Google advert (e.g. in Google Search, on YouTube or on the Google Display Network) and to provide us with your contact details without having to visit our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).

When you complete and submit such a form, the data you have entered is transmitted to us. Depending on the form, this may include [first name and surname, email address, telephone number, postcode, company name and your answers to any additional questions]. If you are logged into your Google account, individual fields may be pre-filled by Google with the data stored in your account. You can check and amend this information before submitting the form.

We use this data exclusively to process your enquiry, contact you and send you [a quote / information about our services]. The legal basis is Article 6(1)(b) of the GDPR (implementation of pre-contractual measures at your request). [If you have expressly consented in the form to receiving advertising or a newsletter, this processing is carried out on the basis of Article 6(1)(a) of the GDPR; you may withdraw your consent at any time with future effect.]

The data transmitted is made available by Google in our Google Ads account for up to 30 days. [We transfer the data from there via download or an automated interface (webhook) to our CRM system [name of the system].] We store your data for as long as is necessary to process your enquiry, or until statutory retention periods have expired. If no contractual relationship is established, we will delete your data after [6 months] at the latest.

It cannot be ruled out that Google may also transfer data to servers operated by Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, on the basis of which the European Commission has determined that an adequate level of data protection exists (adequacy decision pursuant to Article 45 of the GDPR). Further information on data processing by Google can be found at https://policies.google.com/privacy.

You have the rights to access, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

Objection or revocation against the processing of your data

If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation affects the reliability of the processing of your personal data after you have given it to us. Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing. Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the following contact details:

Fender Chalets Sonnalm
Stubeck Sonnalm 126
9853 Gmünd in Kärnten
Austria

Phone: +43 664 427 4808
E-Mail: sonnalm@fenderchalets.at