Privacy policy.

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

Company

S4 Snowsport GmbH

Address

Lindau 19a
6391 Fieberbrunn
Austria

Phone

+43 5354 52080

E-mail

office@s4-fieberbrunn.at

If you have any questions about data protection or wish to exercise your rights, you can reach us using these contact details. The full address and company details are set out in the legal notice.

This website can generally be used without providing any personal data. We process personal data only to the extent necessary to operate the website, to answer an enquiry or to perform a contract — or to the extent that you have given your consent.

Personal data means any information relating to an identified or identifiable natural person, such as a name, address, e-mail address or telephone number.

We base the processing of personal data on the following legal bases:

• Art. 6(1)(a) GDPR — consent. For example, when you expressly load the external booking portal on our site.
• Art. 6(1)(b) GDPR — contract and pre-contractual measures. Enquiries about courses, rental or accommodation, and the preparation and processing of a booking.
• Art. 6(1)(c) GDPR — legal obligation. In particular retention obligations under tax and company law.
• Art. 6(1)(f) GDPR — legitimate interest. The secure, stable and trouble-free operation of this website.

This website is hosted by easyname GmbH, Canettistraße 5/10, 1100 Vienna, Austria (FN 402196s, Handelsgericht Wien (Commercial Court of Vienna)). easyname provides the server, delivers the pages and in doing so processes the technically necessary connection data (see server log files) on our behalf and on our instructions as a processor pursuant to Art. 28 GDPR.

The purpose is the technical provision, operation and security of the website. The legal basis is our legitimate interest in a reliable, secure and fast web presence pursuant to Art. 6(1)(f) GDPR. The servers are located in the European Union; no personal data is transferred to a third country in the course of hosting.

Each time this website is accessed, data transmitted by your browser is automatically recorded and stored in the server’s log files. The following may be recorded:

• browser type and browser version
• the operating system used
• the page from which the site was accessed (referrer)
• the sub-pages visited
• date and time of access
• the IP address
• the internet service provider of the accessing system

This data serves to deliver the content correctly, to ensure that the technology works properly and to fend off attacks on our systems. The legal basis is our legitimate interest in secure operation pursuant to Art. 6(1)(f) GDPR. We do not draw any conclusions about you personally from this data; it is stored separately from other personal data and deleted as soon as it is no longer required for the stated purpose.

This website does not set any analytics, tracking or advertising cookies. There is no audience measurement, no profiling and no automated decision-making.

When you first scroll, a notice appears with two options. It relates exclusively to the external booking portal (see below). We store your choice in your browser’s local storage (localStorage) under the key “s4-einwilligung” — this is not a cookie, it is not transmitted to us or to third parties, and it serves only to avoid asking you again on every visit. You can change or withdraw your choice at any time via “Privacy settings” in the page footer.

The fonts used are delivered from our own server. Accessing the site therefore does not establish a connection to any font provider.

If you contact us by e-mail or telephone, we process the data transmitted in the process — such as your name, e-mail address, telephone number and the content of your enquiry — exclusively to handle the enquiry and to stay in touch with you.

The legal basis is Art. 6(1)(b) GDPR where the enquiry serves to initiate or perform a contract, and otherwise our legitimate interest in responding pursuant to Art. 6(1)(f) GDPR. We delete this data as soon as the enquiry has been fully dealt with and no statutory retention obligations stand in the way. The data is not passed on to third parties.

You book courses, rental and tours through a third-party portal operated at rental.skirentalresorts.com. This portal is embedded in a frame on our booking pages but is only loaded after you have given your consent — either by choosing “Allow all” in the notice or by clicking “Load booking” on the respective page. As long as you do not load the booking, no connection is made to the provider and no cookie is set.

If you load the portal, your IP address and technical details of your browser are transmitted to the provider, who may set their own cookies in the process. The legal basis for this is your consent pursuant to Art. 6(1)(a) GDPR. If you have chosen “Allow all”, your consent applies to future visits in this browser; you can withdraw it at any time with effect for the future via “Privacy settings” in the page footer. If you have only loaded the portal by clicking, your consent applies to that visit only.

The operator of the booking portal is responsible for the processing within the portal; its privacy policy applies. We process the data we receive in order to carry out the booking on the basis of Art. 6(1)(b) GDPR.

We do not embed any social network plug-ins. Our pages contain only simple links to our profiles. Only when you click one of these links is a connection to the respective network established, at which point the privacy policy of that provider applies. No data is transmitted to the network without a click.

If you send us a job application, we process the data transmitted exclusively to handle the application procedure. The legal basis is pre-contractual measures pursuant to Art. 6(1)(b) GDPR.

If no employment relationship is established, we delete the application documents once the procedure has been completed, as soon as they are no longer needed to assert or defend legal claims. If you would like us to keep your documents on file for future positions, we need your consent pursuant to Art. 6(1)(a) GDPR — you can withdraw it at any time.

We pass on personal data only to the extent necessary for the purposes stated or where there is a legal obligation to do so. Recipients may include:

• easyname GmbH as host (see the “Hosting” section) and IT service providers who act for us as processors pursuant to Art. 28 GDPR
• the operator of the external booking portal, as soon as you start a booking
• tax advisers, as well as authorities and courts, to the extent we are legally obliged to do so

Data is not passed on for advertising purposes, nor is it sold.

We store personal data only for as long as is necessary for the respective purpose. After that, it is deleted — unless statutory retention obligations provide otherwise. For business records, the retention period is generally seven years (§ 132 Bundesabgabenordnung (Austrian Federal Fiscal Code), § 212 Unternehmensgesetzbuch (Austrian Commercial Code)).

This website is delivered encrypted via HTTPS. We take technical and organisational measures to protect your data against loss, destruction and unauthorised access.

Data transmission over the internet may nevertheless have security gaps; absolute protection is not possible. You are therefore free at any time to send us your data by another route, for example by telephone.

As a data subject, you have the following rights with respect to us:

• Access to the data processed about you (Art. 15 GDPR)
• Rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability in a structured, commonly used and machine-readable format (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR)
• Withdrawal of consent you have given, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, an informal message to office@s4-fieberbrunn.at or a call to +43 5354 52080 is sufficient.

You have the right to lodge a complaint about the processing of your personal data with a supervisory authority. The competent authority is:

Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42, 1030 Vienna
dsb@dsb.gv.at
www.dsb.gv.at

We will update this policy whenever our services or the legal requirements change. The version published here applies to each new visit. The conditions for our courses and services are set out in our terms and conditions.