Privacy policy

Last updated: 6 September 2022

Information

This page explains how we process your personal data.

If you want to change your privacy settings (grant consent or revoke your previously granted consent), click here to change your settings.

Controller

The controller of your personal data on our website is:

Alps Residence Holidayservice GmbH
Kirchberger Straße 60
6370 Kitzbühel
Austria
Tel.: +43 3537 200 50
E-Mail: office@alps-resorts.com

Data Protection Officer

Andreas Brix
Kirchberger Straße 60
6370 Kitzbühel
Phone: +43 3537 200 50
E-mail: a.brix@alps-resorts.com

Consent Management Tool

LEGALWEB.IO via KEY CDN

This website uses the Consent Management Tool of our processor LEGALWEB.IO, legalweb GmbH, Fürbergstraße 42a, 5020 Salzburg, Austria. The tool sets a cookie on your device in order to save the services you have selected or not selected. That cookie does not involve a user-specific ID and does not save any other personal data. It is saved for a maximum of 1095 days and is then deleted automatically. The legal basis of processing is your consent according to § 165 Abs. 3 TKG 2021.

The Consent Management Tool is loaded by our sub-processor Key CDN, proinity LLC, Faerberstrasse 9, CH-8832 Wollerau, Switzerland. Key CDN only collects your IP address to ensure the security of the data center. Your IP address will not be transmitted to legalweb GmbH. Data are transferred to Switzerland pursuant to Article 45 GDPR in conjunction with the Adequacy Decision C(2000) 2304 of the European Commission.

Webhost

Domaintechnik.at

Our website is hosted by our processor Domaintechnik, Ledl.net GmbH, Lederergasse 6, 5204 Straßwalchen, Austria.

Connection data are processed to provide and to deliver the website. Data are not stored beyond access for the mere purpose of delivery and provision of the website. However, our processor keeps connection data for security purposes. The duration of processing for security purposes varies and ends with the necessity of the security measures. Furthermore, our processor anonymizes collected data immediately after such data were collected and provides us with statistics for analysis containing anonymous data. We use these statistics for debugging and the sophistication of our website.

The legal basis of processing is the absolute technical necessity to provide and deliver the "website" service which you have explicitly requested according to § 165 Abs. 3 TKG 2021 by visiting the website.

Server Log-Files

Connection data are processed to monitor the technical function and to increase the reliability of our webhost. The duration of processing is limited to 30 days.

The legal basis of processing is the absolute technical necessity of a server log file as fundamental data basis for failure analysis and for security measures in connection with the "website" service you have explicitly requested according to § 165 Abs. 3 TKG 2021 by visiting the website.

Contend Delivery Network

Key CDN

Parts of our website are hosted by our processor Key CDN, proinity LLC, Faerberstrasse 9, CH-8832 Wollerau, Schwitzerland.

Connection data are processed to provide and to deliver the website. Data are not stored beyond access for the mere purpose of delivery and provision of the website. However, our processor keeps connection data for security purposes. The duration of processing for security purposes varies and ends with the necessity of the security measures. Furthermore, our processor anonymizes collected data immediately after such data were collected and provides us with statistics for analysis containing anonymous data. We use these statistics for debugging and the sophistication of our website.

The legal basis of processing is the absolute technical necessity to provide and deliver the "website" service which you have explicitly requested according to § 165 Abs. 3 TKG 2021 by visiting the website. Data are transferred to Switzerland pursuant to Article 45 GDPR in conjunction with the Adequacy Decision C(2000) 2304 of the European Commission.

Webfonts

Locally embedded fonts

We use Web Fonts, which we locally embed into our webspace so that no personal data are processed.

Google Fonts

We process connection data and browser data in cooperation with our processor Google Fonts, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland in order to provide the fonts which the web browser needs to display the website. These data are processed only for the time needed to select and transfer the fonts.

The legal basis of processing is the absolute technical necessity to provide and deliver the "website" service which you have explicitly requested according to § 165 Abs. 3 TKG 2021 by visiting the website.

Any further independent processing of data by Google Fonts is carried out by Google Fonts as sole controller. Detailed information is provided in the Data privacy policy and in the FAQ of Google Fonts.

Fontawesome

We process connection data and browser data in cooperation with our processor Fontawesome, Fonticons, Inc., 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA, in order to provide the fonts which the web browser needs to display the website. These data are processed only for the time needed to select and transfer the fonts.

The legal basis of processing is the absolute technical necessity to provide and deliver the "website" service which you have explicitly requested according to § 165 Abs. 3 TKG 2021 by visiting the website.

Any further independent processing of data by Gontawesome is carried out by Fontawesome as sole controller. Detailed information is provided in the Data privacy policy of Fontawesome.

Tag Manager

Google Tag Manager

If you give your consent, we will process your personal data in cooperation with the service Google Tag Manager, Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA, as joint controllers for the purpose of initiating, controlling and maintaining of further services on our website. In this case the service mentioned above shall be operated by Google Tag Manager. A failure to give consent will only have the impact meantioned above at the service idem. You can revoke your consent by changing the settings at Privacy settings.

We enable Google Tag Manager the collection of connection data and data of your web browser. This data will be used by Google to advancing their service.

The legal basis of processing is your consent according to Article 6 (1) (a) GDPR. Data will be transmitted to the United States on the basis of your consent according to Art. 49 (1) (a) in conjunction with Art. 6 (1) (a) GDPR. You were informed already prior to giving your consent that the USA have not adopted data protection standards in conformity with EU requirements. In particular US intelligence agencies will be able to access your data without informing you and without you being able to take legal action. For this reason, the European Court of Justice has issued a judgment by which it invalidated the previous adequacy decision (privacy Shield).

Web analysis

Google Analytics

If you have given your consent, we will process your personal data in cooperation with Google Analytics, Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA, as joint controllers for the purpose of failure analysis and statistical analysis of our website. A failure to give consent will have no immediate impact on the function of the website, although a lack of statistic data will make it more difficult for us to sophisticate the website. You can revoke your consent by changing the settings at Privacy settings.

We will enable the service to collect connection data, data of your web browser and data of accessed content and to execute analysis software and to store data on your terminal device. The service anonymizes collected data immediately after such data were collected and provides us with statistics for analysis containing anonymous data. We use these statistics for failure analysis and for the sophistication of our website. Data on your terminal device are kept for up to two years.

The legal basis of processing is your consent according to § 165 Abs. 3 TKG 2021. Data will be transmitted to the United States on the basis of your consent according to Art. 49 (1) (a) in conjunction with Art. 6 (1) (a) GDPR. You were informed already prior to giving your consent that the USA have not adopted data protection standards in conformity with EU requirements. In particular US intelligence agencies will be able to access your data without informing you and without you being able to take legal action. For this reason, the European Court of Justice has issued a judgment by which it invalidated the previous adequacy decision (privacy Shield).

Facebook Pixel

If you have given your consent, we will process your personal data in cooperation with Facebook Pixel, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland as joint controllers for the purpose of failure analysis and statistical analysis of our website. A failure to give consent will have no immediate impact on the function of the website, although a lack of statistic data will make it more difficult for us to sophisticate the website. You can revoke your consent by changing the settings at Privacy settings.

We will enable the service to collect connection data, data of your web browser and data of accessed content and to execute analysis software and to store data on your terminal device. The service anonymizes collected data immediately after such data were collected and provides us with statistics for analysis containing anonymous data. We use these statistics for failure analysis and for the sophistication of our website. Data on your terminal device are kept for up to two years.

The legal basis of processing is your consent according to § 165 Abs. 3 TKG 2021. The Facebook group will transmit your personal data to the United States. Data will be transmitted to the United States on the basis of your consent according to Art. 49 (1) (a) in conjunction with Art. 6 (1) (a) GDPR. You were informed already prior to giving your consent that the USA have not adopted data protection standards in conformity with EU requirements. In particular US intelligence agencies will be able to access your data without informing you and without you being able to take legal action. For this reason, the European Court of Justice has issued a judgment by which it invalidated the previous adequacy decision (privacy Shield).

Remarketing

Bing Ads

If you have given your consent, we will process your personal data in cooperation with Bing Ads, Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA as joint controllers for the purpose of providing personalized ads and measuring our advertising success.

There will not be any direct impact on the function of the website if you do not give your consent, although we will not be able to provide you with personalized ads on your device if you do not consent. You can revoke your consent by changing the settings at Privacy settings.

We will enable the service to collect connection data, data of your web browser and data of accessed content. We also enable the service to execute a tracking and recognition software and to store data on your device. The tracking and recognition software then allows the service to enhance its advertising network and to recognize you when you visit other websites or to provide personalized ads. We also use the collected data also to measure our advertising success.

The legal basis of processing is your consent according to § 165 Abs. 3 TKG 2021.

Data will be transmitted to the United States on the basis of your consent according to Art. 49 (1) (a) in conjunction with Art. 6 (1) (a) GDPR. You were informed already prior to giving your consent that the USA have not adopted data protection standards in conformity with EU requirements. In particular US intelligence agencies will be able to access your data without informing you and without you being able to take legal action. For this reason, the European Court of Justice has issued a judgment by which it invalidated the previous adequacy decision (privacy Shield).

Contact Form

You can contact us by using a contact form provided on our website. After submission of the contact form, the controller will process the personal data you have provided for the purpose of handling your request on the basis of your consent which you have given by submitting the form according to Art. 6 (1) (a) GDPR, until revocation.You have no legal or contractual obligation to provide personal data. If you do not provide such data, you are simply not able to submit and we are not able to process your request.

Application Form

You can also apply for a job on our website. We will process the personal data provided in the application form in order to manage your application based on a pre-contractual relationship according to Art. 6 (1) (b) GDPR until further notice, and for a duration of not more than 6 months after completion of the application procedure. If you explicitly want us to retain the application documents you have submitted, we will keep your records for not more than 18 months based on your consent according to Art. 6 Abs. 1 lit. a GDPR. You have no legal or contractual obligation to provide personal data. If you do not provide such data, we are simply not able to manage your application.

We do not transfer your job application data to third parties.

Newsletter

Mailchimp

After consenting we will process your personal data for the purpose of sending you electronic direct mailings (e.g. newsletter) until revocation.

For the purpose of sending you newsletters we collaborate with our processor Mailchimp, The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308, USA.

The legal basis of processing is your consent according to § 174 TKG 2021 combined with Art. 6 Abs. 1 lit. a GDPR. You have no legal or contractual obligation to provide personal data. If you do not provide such data, we will not send you electronic direct mailings.

Data will be transmitted to the United States on the basis of your consent according to Art. 49 (1) (a) in conjunction with Art. 6 (1) (a) GDPR. You were informed already prior to giving your consent that the USA have not adopted data protection standards in conformity with EU requirements. In particular US intelligence agencies will be able to access your data without informing you and without you being able to take legal action. For this reason, the European Court of Justice has issued a judgment by which it invalidated the previous adequacy decision (privacy Shield).

Comments Form

By commenting our products, postings, photographs or videos we will process your personal data for the purpose of imaging your comments on our website and internal documentation of the legal basis of the contract concluded according to Art. 6 (1) (b) GDPR (gratuitous hosting contract to image your commentation on our website). We will publish your name and comment on our website and store your personal data until deletion of your comment.

Comments Form

By commenting our products, postings, photographs or videos we will process your personal data for the purpose of imaging your comments on our website and internal documentation of the legal basis of the contract concluded according to Art. 6 (1) (b) GDPR (gratuitous hosting contract to image your commentation on our website). We will publish your nickname and comment on our website and store your personal data until deletion of your comment.

Embeddings

Google Maps

If you have given your consent, we will process your personal data in cooperation with Google Maps, Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA, as joint controllers for the purpose of showing interactive maps on our website.

We will enable the service to collect connection data, data of your web browser, and to place an advertising cookie. The placing of advertising cookies allows Google to create an individual user-ID for each user. These personal data can be used for unambiguous identification and are then processed via the advertising network operated by Google.

Any further independent processing of data by Google is carried out by Google as sole controller. Detailed information is provided in the Data privacy policy of Google.

If you do not give your consent, we are simple not able to provide the Google Maps service to you. You can revoke your consent by changing the settings at Privacy settings.

The legal basis of processing is your consent according to § 165 Abs. 3 TKG 2021. Data will be transmitted to the United States on the basis of your consent according to Art. 49 (1) (a) in conjunction with Art. 6 (1) (a) GDPR. You were informed already prior to giving your consent that the USA have not adopted data protection standards in conformity with EU requirements. In particular US intelligence agencies will be able to access your data without informing you and without you being able to take legal action. For this reason, the European Court of Justice has issued a judgment by which it invalidated the previous adequacy decision (privacy Shield).

YouTube

If you have given your consent, we will process your personal data in cooperation with YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as joint controllers for the purpose of playing videos on our website.

We will enable the service to collect connection data, data of your web browser, and to place an advertising cookie. The placing of advertising cookies allows Google to create an individual user-ID for each user. These personal data can be used for unambiguous identification and are then processed via the advertising network operated by Google.

The Google group will transmit your personal data to the United States. Data will be transmitted to the United States on the basis of your consent according to Art. 49 (1) (a) in conjunction with Art. 6 (1) (a) GDPR. You were informed already prior to giving your consent that the USA have not adopted data protection standards in conformity with EU requirements. In particular US intelligence agencies will be able to access your data without informing you and without you being able to take legal action. For this reason, the European Court of Justice has issued a judgment by which it invalidated the previous adequacy decision (privacy Shield).

Any further independent processing of data, especially via the Google advertising network, is carried out by Google as sole controller. Detailed information is provided in the Data privacy policy of Google.

If you do not give your consent, we are simply not able to provide the YouTube service to you. You can withdraw your consent by changing the settings at Privacy settings.

The legal basis of processing is your consent according to § 165 Abs. 3 TKG 2021.

Facebook

If you have given your consent, we will process your personal data in cooperation with Facebook, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, as joint controllers for the purpose of providing Facebook services (e.g. Facebook Like Button, Facebook Like Box) on our website.

We will enable the service to collect connection data, data of your web browser, and to place advertising cookies. The placing of advertising cookies allows Facebook to create an individual user-ID for each user. These personal data can be used for unambiguous identification and are then processed via the advertising network operated by Facebook.

The Google group will transmit your personal data to the United States. Data will be transmitted to the United States on the basis of your consent according to Art. 49 (1) (a) in conjunction with Art. 6 (1) (a) GDPR. You were informed already prior to giving your consent that the USA have not adopted data protection standards in conformity with EU requirements. In particular US intelligence agencies will be able to access your data without informing you and without you being able to take legal action. For this reason, the European Court of Justice has issued a judgment by which it invalidated the previous adequacy decision (privacy Shield).

Any further independent processing of data by Facebook is carried out by Facebook as sole controller. Detailed information is provided in the Data privacy polic of Facebook.

If you do not give your consent, we are simple not able to provide the Facebook services to you. You can revoke your consent by changing the settings at Privacy settings.

The legal basis of processing is your consent according to § 165 Abs. 3 TKG 2021.

Instagram

If you have given your consent, we will process your personal data in cooperation with Instagram, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, as joint controllers for the purpose of providing Instagram services on our website.

We will enable the service to collect connection data, data of your web browser, and to place advertising cookies. The placing of advertising cookies allows Facebook to create an individual user-ID for each user. These personal data can be used for unambiguous identification and are then processed via the advertising network operated by Facebook.

The Facebook group will transmit your personal data to the United States. Data will be transmitted to the United States on the basis of your consent according to Art. 49 (1) (a) in conjunction with Art. 6 (1) (a) GDPR. You were informed already prior to giving your consent that the USA have not adopted data protection standards in conformity with EU requirements. In particular US intelligence agencies will be able to access your data without informing you and without you being able to take legal action. For this reason, the European Court of Justice has issued a judgment by which it invalidated the previous adequacy decision (privacy Shield).

Any further independent processing of data by Facebook is carried out by Facebook as sole controller. Detailed information is provided in the Data privacy policy of Facebook.

If you do not give your consent, we are simple not able to provide the Facebook services to you. You can revoke your consent by changing the settings at Privacy settings.

The legal basis of processing is your consent according to § 165 Abs. 3 TKG 2021.

Right to objekt

You have the right to object to processing if your personal data are processed based on legitimate interests. We will then cease the processing carried out on this basis, unless there are compelling and legitimate reasons for us to do so. You have the right to object to the processing of your personal data for the purpose of direct marketing. In this case, we will cease the processing of your personal data for the purpose of direct mail. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to withdrawl

You have the right to withdraw your consent at any time by changing the settings at Privacy settings. If you have given your consent to receipt of advertising by email, you may withdraw your consent by clicking the unsubscribe link. In this case, we will cease the processing operations, unless there is any other legal basis. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Other rights

You have the right to access to, rectification, erasure and restriction of processing of personal data. You have also the right to data portability if the processing of your personal data is based on your consent or on a contract concluded with you. You have also the right to lodge a complaint with the supervisory authority. If you need more information on the supervisory authorities in the European Union, click here.