1. Personal data
Personal data means all data containing information about personal or factual circumstances, such as name, address, e-mail address, telephone number, date of birth, age, gender, video recordings, photos, etc. Please notify us if changes are made to your personal data.
We will collect, process and use your personal data only where this is necessary for the performance of the contract or is required by a legal obligation or if you voluntarily provide us with such data. We will obtain your consent before any further processing of your data. Processing may also take place without your consent where our legitimate interest in data processing outweighs your interest in data protection. We will use the data provided to us in particular for the purposes of performing the contract, initiating the contract, meeting legal obligations, etc.
As a rule we will collect your data directly from you. In the context of the contract, however, it may happen that we will collect your data from third parties, such as bookings made via tour operators or booking platforms and similar.
We would furthermore state that the provision of personal data is to a certain extent required by law (e.g. tax law) or may result from contractual provisions (e.g. information about the contracting party). Failure to provide the personal data may mean that the contract cannot be concluded.
2. Your rights
Under the provisions of the GDPR you have the right to receive information on any of your personal data that we store, as well as a right to correction, data transmission, objection, limitation of processing and blocking or deletion of incorrect or unlawfully processed data. You have the right to revoke your consent at any time.
If you believe that our processing of your personal data violates the applicable data protection law, you may make a complaint to the competent supervisory authority. The Data Protection Authority is the competent body for Austria.
3. Data security
Your personal data will be protected by appropriate organisational and technical precautions. These precautions in particular relate to protection against unauthorised, unlawful or accidental access, loss, processing, use or manipulation of data.
Please note that we do not accept any liability whatsoever for the disclosure of information owing to errors in data transmission and/or unauthorised access by third parties for which we are not responsible.
4. Transmission of data to third parties
In order to perform our contractual or legal obligations, it may be necessary to transfer your data to data processors or to other recipients, in particular to public authorities. Data processors will process your personal information according to strict guidelines and only to the extent necessary to perform such tasks. As an example, our data processors are external IT service providers, etc.
On the basis of our legitimate interests (i.e. our interest in the analysis, optimisation and business operation of our offer within the meaning of Art. 6 (1) (f) GDPR)), our offering will include third-party content or service offers in order to integrate content and services.
This assumes that your IP address will be transmitted to such third-party providers because the content cannot be sent to your browser without the IP address. The IP address is required to display this content. Third-party providers may also use so-called web beacons for statistical or marketing purposes. Web beacons can be used to evaluate information such as visitor traffic on the website. For this purpose a cookie may also be set that will contain technical information about your browser and operating system, the referring websites, time spent visiting and other information regarding the use of our website. The following provides an overview of some of our third-party providers:
- To provide certain fonts on the website, we use the Google Fonts service provided by Google, Inc. For more information on how Google Fonts handles your personal information see https://developers.google.com/fonts/faq.
We will only transfer your data to other recipients if you have given us or the recipient your consent to the transmission of data, or if the transmission of data is required to execute or perform the contract, or if we are legally obliged to transmit the data.
We transmit your personal data to recipients within the European Union or to countries for which the European Commission has determined that there exists an appropriate level of data protection. If this is not the case we will ensure, on the basis of suitable guarantees, that the data recipient complies with the GDPR.
Personally identifiable data and information will be transmitted by Google Analytics, the Facebook Plugin, Google Remarketing, Facebook Custom Audiences, Google AdWords, Google Fonts and DoubleClick to their respective providers in the USA. Such personal information will be stored and processed in the United States of America. There is no equivalent level of privacy in the USA; however, the data recipients have agreed to comply with European data protection standards under the EU-US Privacy Shield, thus ensuring the protection of your data. Such data may be in certain circumstances be shared with third parties.
5. Retention of data
a.) Retention in order to perform contractual or legal obligations:
We will retain your data for as long as is necessary to perform our contractual or legal obligations. We are thus for example required to keep our accounting records for a period of 7 years from the end of the calendar year in question.
When storing your data we will ensure that such data is only used to the extent necessary for the above-mentioned purposes.
b.) Retention on the basis of your consent:
Subject to your consent, we will store your data for as long as this is specified in your statement of consent or other agreement, for example in the context of a contract made with you.
c.) Retention based on legitimate interests:
We will also store your data for as long as is necessary to defend liability or other claims within the statutory limitation period. Under Austrian law such period is in principle 3 years from the time when the damage and the author of the damage became known.
We will store booking inquiries that do not lead to the conclusion of a contract for the purpose of internal analyses (such as analysing our offer) for a period of 24 months.
We will save documents relating to job applications for a period of 12 months.
d.) Obligations to delete data on the basis of the right to deletion:
Our obligations to delete data in the event of your exercising your right to deletion pursuant to Art. 17 GDPR will not be affected by the above paragraphs.
6. Collection of general data and information
Our website collects a series of general data and information on each visit. The browser, operating system, previously visited website, page visited, date and time of visit, IP address, internet service provider, amount of data transferred and other similar data and information may all be gathered. Such data will be used by us to maintain the website and to prevent dangers. In this regard we have a legitimate interest in the storage of log files within the meaning of Art 6 (1) (f) GDPR.
The anonymous data contained in server log files will be stored separately from all other personal data.
If you do not want this you can configure your browser so that it will inform you as regards the setting of cookies and you can allow this only in individual cases. Where the cookies we use are subject to, we will ask for your consent in advance. Disabling cookies may limit the functionality of our website.
8. Google Analytics
The provider is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. Google Analytics is a service for gathering, collecting and analysing data on the behaviour of visitors to websites. Among other things, Google uses the data and information obtained to evaluate the use of our website and to provide other services related to the use of this website.
Google Analytics sets a cookie that enables Google to analyse the usage of our website. This cookie prompts the browser to send data to Google for the purpose of online analysis. As part of this technical process Google will receive such personal data as the IP address of the data subject, which among other things permits Google to track the origin of visitors and clicks and subsequently to allow the settlement of commissions.
We use the “_gat._anonymizeIp” feature for web analysis via Google Analytics. This feature means that the IP address will be shortened and anonymised by Google.
For more information see https://www.google.com/intl/de_de/analytics/ and https://www.google.com/intl/en/policies/privacy/. Please contact us for more information if you wish to object to such data processing. It is possible to opt out by installing the following plugin: https://tools.google.com/dlpage/gaoptout?hl=de.
9. Google AdWords
The provider is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. Google AdWords is an internet advertising service that allows advertisers to show ads in Google search engine results as well as on the Google advertising network.
If you have reached our website via a Google ad, a so-called conversion cookie will be placed on your system. The conversion cookie stores personal information such as the web pages visited. A conversion cookie will expire after 30 days and will not be used to identify you. The conversion cookie indicates whether you have visited certain subpages of our website, for example an online shop. The conversion cookie helps both us and Google to determine whether you have generated revenue. The data and information collected will be used by Google to provide visitor statistics for our website. Neither we nor any other advertisers using Google AdWords will receive any information that could identify you.
10. Contact form
If the contact form is used, the personal data you provide will automatically be saved. Different personal data may be required by mandatory fields according to the contact form used. If a mandatory field requires personal data, such data must be provided as part of the initiation or performance of the contract or on account of legal obligations.
This data will be stored for processing or contact purposes and will not as a matter of principle be disclosed to any third parties.
The personal data you provide will be stored for as long as is necessary for the assertion and/or defence of claims or as required by the relevant legal obligations
The following data will be collected if you participate in a competition on our website: first name, last name, date of birth, e-mail address. Such data are necessary for the holding of the competition and will only be used for this purpose: in this respect, the data processing is legally justified upon the basis of the performance of a contract pursuant to Article 6 (1) (b) GDPR.
If you have given your consent, your name will be published on our social media channels. You may revoke this consent at any time; we will in this case delete the social media post.
You will receive information about vacancies in our company via our website. As part of the application process, you have the option of submitting your application documents electronically via e-mail, or by post. Your data will be used for evaluation purposes during the application process, for establishing contact during the application process and, where applicable, for establishing an employment relationship.
13. Contact details
Sport Souvenir Patterer GmbH
FN 63548d, Salzburg District Court
Tel.: 0043 6564 7325