Privacy policy ARGE Sommercard

The protection of your personal data is of particular concern to us. We therefore process your data exclusively in a lawful manner on the basis of the statutory provisions (especially GDPR, DSG 2018, TKG 2021). In this privacy policy, we inform you about the most important aspects of data processing – type, scope and purposes of the collection and use of personal data – in the context of the use of this website and in the context of other services of our company.

Only the German version of our privacy policy is legally binding text. The English translation serves as a legally non-binding information. Deviations of the English text or how it could be understood do not affect the exclusive legal validity of the German text and its meaning.

The responsible person (“controller” within the meaning of Art. 4 no. 7 GDPR) of the processing of your personal data (“personal data” within the meaning of Art. 4 no. 1 GDPR) is:

ARGE Schladming-Dachstein Card
Rohrmoosstraße 234
A-8970 Schladming
Tel.: +43 (0) 3687 23310-613
E-Mail: sommercard@schladming-dachstein.at
WEB: https://www.schladming-dachstein.at/de/urlaub-planen/schladming-dachstein-card

A non-binding list of the current members (service providers) of the ARGE Schladming-Dachstein Card can be found on the website given above.  

Purposes of the processing of personal data

The purposes of the processing of your personal data generally result from our business activities as a consortium of tourism service providers, which provides tourist services of the Schladming-Dachstein region in the form of the Schladming-Dachstein Card: Providing our Schladming-Dachstein Card experiences, our information offers, processing customer enquiries / orders / bookings, accounting, communication with business partners and customers.

In addition to the Schladming-Dachstein Card for guests, there are the following cards, valid for the entire summer season: Host Card, Leisure Card, Employee Card and Benefit Card. The cards differ in their included services and Schladming-Dachstein Card specific conditions from those of the Schladming-Dachstein Card for guests. In addition, the season tickets are not issued by the Schladming-Dachstein Card host, but directly in the office of the ARGE Schladming-Dachstein Card, or they can also be purchased online.

The data of our Schladming-Dachstein Card partners (hosts and service partners) is processed in order to enable these partners to participate in the Schladming-Dachstein Card project (presentation of the partners in our advertising materials as well as billing of services handled via the project).

The data of our Schladming-Dachstein Card customers is processed in order to be able to provide these customers with the services included or discounted in the project.

Categories of data

In the context of the issuance and use of the Schladming-Dachstein Card, the following personal data of the Schladming-Dachstein Card partners (hosts and service partners) are processed:

Data Schladming-Dachstein card hosts
•    Company data or personal master data (e.g. name of the company or contact person, address)
•    Contact details (e.g. e-mail address, telephone number)
•    Communication data (time and content of communication)
•    Number of guests and nights for which Schladming-Dachstein Cards have been issued (for billing purposes)
•    Payment data (e.g. account number)
•    Contract data (regulations for participation in the Schladming-Dachstein Card project)

Data Schladming-Dachstein Card service partners
•    Company data or personal master data (e.g. name of the company or contact person, address)
•    Contact details (e.g. e-mail address, telephone number)
•    Communication data (time and content of communication)
•    Number and type of services used by Schladming-Dachstein Card customers at the service partner (for billing purposes)
•    Payment data (e.g. account number)
•    Contract data (regulations for participation in the Schladming-Dachstein Card project)

As part of the issuance and use of the Schladming-Dachstein Card, the following personal data of Schladming-Dachstein Card customers (users) will be processed:

Basic data of Schladming-Dachstein Card customers
•    Salutation
•    First Name
•    Last Name
•    Date of birth
•    Address (country and zip code)
•    Travel date (only for guests of the Schladming-Dachstein Card hosts)
•    Email address (optional)
•    Holiday accommodation (only for guests of the Schladming-Dachstein Card hosts)

Usage data of Schladming-Dachstein Card customers
•    Identification number (of the Schladming-Dachstein Card)
•    Usage data of the Schladming-Dachstein Card (Schladming-Dachstein Card service provider where the use takes place, time of use, number of uses, type of service, etc.)

Within the Schladming-Dachstein Card project we do not process sensitive data within the meaning Art. 9 GDPR nor personal data relating to criminal convictions and offences within the meaning of Art. Art. 10 GDPR.

Lawfulness of the processing of personal data

Processing of the data of our Schladming-Dachstein Card partners (hosts and service partners)
The processing of the above-mentioned data of our Schladming-Dachstein Card partners is necessary for the participation of these partners in the Schladming-Dachstein Card project. The legal basis for the processing of this data is therefore the performance of the contract in accordance with Art. 6 (1) lit. b GDPR. The processing and storage of invoice data of the Schladming-Dachstein Card partners is our legal obligation in accordance with Art. 6 (1) lit. c GDPR.

Processing of the basic data Schladming-Dachstein Card season ticket customers
The collection and processing of the basic data of our season ticket customers (host card, leisure card, employee and benefit card) is carried out by us ourselves when purchasing the tickets in our office or online on the legal basis of the performance of the contract in accordance with Art. 6 (1) lit. b GDPR.

Processing of basic data Schladming-Dachstein Card guests
We receive the data required for the issuance and use of the Schladming-Dachstein Card from guests in our host partner businesses (accommodations in the Schladming-Dachstein region) from our host partners. When booking is processed in an accommodation establishment in the Schladming-Dachstein holiday region, which is designated as a Schladming-Dachstein Card host, the guest data will be collected in accordance with the guest directory sheet in accordance with the legal provisions and transmitted to us to the extent necessary for the issuance of the Schladming-Dachstein Card. The validity of the Schladming-Dachstein Card for guests is linked to the length of stay in the Schladming-Dachstein Card host business. The collection and transmission of this data for the issuance of the Schladming-Dachstein Card by our host partners to us is based on the legal basis of the consent of the guests in accordance with Art. 6 (1) lit. a GDPR. This consent can be revoked at any time free of charge, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal. Due to the transmission of this data by the Schladming-Dachstein Card hosts to us, there is no joint controllership within the meaning of Art. 26 GDPR between us and the Schladming-Dachstein Card hosts.

If you book your holidays in an accommodation facility in the Schladming-Dachstein holiday region that issues your Schladming-Dachstein Card as a digital Schladming-Dachstein Card, you will receive a message on the e-mail address you provided with the link to activate the digital Schladming-Dachstein Card. The processing of guest data in the context of the use of our digital Schladming-Dachstein Card is your consent in accordance with Article 6 (1) lit. a GDPR.

Collection and processing of usage data
When using a Schladming-Dachstein Card services, the validity of the Schladming-Dachstein Cards is checked by the respective Schladming-Dachstein Card service partner, and subsequently usage data is collected and transmitted to us. The validity of the Schladming-Dachstein Cards is checked on the basis of our legitimate interest in accordance with Art. 6 (1) lit. f GDPR to only provide our services to those customers who are entitled to these services. The legal basis for the collection and transmission of usage data is the performance of the contract in accordance with Art. 6 (1) lit. b GDPR, as the usage data is required for billing with the individual service partners.

We process your personal data with the support of processors who support us in the provision of our services (e.g. IT service providers for issuing the Schladming-Dachstein Card, transmission of data between controllers and ARGE Schladming-Dachstein Card as well as Schladming-Dachstein Card hosts, creation of the digital Schladming-Dachstein Card, storage of your data, sending of information etc.). These processors are bound by a corresponding agreement within the meaning of Art. 28 GDPR with us to strictly protect your personal data and not to process your personal data for any purpose other than to provide our services.

Currently, the following processors are used to collect and process personal data as part of the processing of the analogue and digital Schladming-Dachstein Card:
•    feratel media technologies AG (FN 72841w, Laubichl 60, 5452 Pfarrwerfen); CardSystem for operating the analogue and digital Schladming-Dachstein Card as well as recording basic data and usage data

Your personal data will be passed on to companies other than our data processors to typical economic service providers such as banks, tax consultants or auditors. Transfer of personal data to state institutions and authorities only takes place within the framework of mandatory national legal provisions.

Usage data will only be passed on to our service partners to the extent necessary, insofar as this is necessary for the billing of the services between us and our partners.

Transfers of Personal Data to Third Countries or International Organisations

In principle, we process your personal data in the EU. If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if we use the services of our data processors or third parties, this will only take place if the requirements of Art. 44 ff. GDPR are available for the transfer to third countries: i.e. on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU or in compliance with officially recognized contractual obligations, the so-called "EU standard contractual clauses". If we rely on the EU standard contractual clauses as the legal basis for the transmission of your personal data, we will also check the admissibility of this data transmission as part of a comprehensive risk assessment. If we come to a negative result, we will not transfer these data without your explicit consent in accordance with Art. 49 (1) lit. a GDPR to a third country.

Your personal data will be deleted by us as soon as the purpose for which we collected your data no longer applies. Storage can also take place if we process the data for a purpose that is compatible with the original purpose. It can also take place if this is provided for by laws, ordinances or other provisions to which our company is subject.

For the purpose of providing evidence in the context of any court proceedings, your personal data may be processed until the expiry of the statutory limitation periods, insofar as this is necessary for the potential conduct of the proceedings. The applicable statutory limitation period is usually three years. We keep data to prove proper accounting (e.g. § 212 UGB and § 132 BAO) for 7 years.

We collect the data of our Schladming-Dachstein Card partners (hosts and service partners) as well as the Schladming-Dachstein Card season ticket customers directly from those affected. We receive the data of guests in our host partner businesses (accommodations in the Schladming-Dachstein region that are partners of the Schladming-Dachstein Card) from our host partners. We receive the usage data of our customers from the service partners of the Schladming-Dachstein Card.

Profiling

We do not use any automated decision-making or profiling processes that have a legal effect on you in the meaning of Art. 22 GDPR or that significantly affect you in a similar manner. 

In principle, you have the right to information, correction, deletion and restriction of the processing of personal data in accordance with the GDPR. If the legal basis for the processing of your personal data is your consent or a contract concluded with you, you also have the right to data portability. You have the right to revoke any consent you may have given to the processing of your personal data. The lawfulness of the processing of your personal data up to the time of revocation is not affected by this. You have the right to object to the processing of your personal data for the purpose of direct marketing. In the event of an objection, your personal data will no longer be processed for the purpose of direct marketing. A detailed explanation of these rights can be found here in Chapter III.

Right of complaint

If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can complain to the competent supervisory authority. In Austria, this is the data protection authority (Barichgasse 40-42, A-1030 Wien, email: dsb@dsb.gv.at).

Visiting our Website

We, the ARGE Schladming-Dachstein Card, do not operate our own website. Our services are displayed here by the person responsible for this website within the meaning of Art. 4 Z 7 GDPR Tourismusverband Schladming Dachstein (Ramsauerstraße 756, A-8970 Schladming). Further information on the processing of your personal data in connection with your visit to this website can be found here in this privacy information of the Tourismusverband Schladming Dachstein (Tourism Association of Schladming Dachstein region). 

Other Data Processing in Business and Customer Contact

In this section we inform you about other data processing processes outside our website.

Job Applications

The contact data and application documents transmitted to us in the course of a job application will be processed by us exclusively internally for the purpose of selecting suitable candidates for an employment relationship. There is no legal or contractual obligation to provide the personal data. Failure to do so will only result in you not submitting your request and we will not be able to process it. The personal data transmitted in this way will be stored by us in accordance with the statutory provisions for a maximum of 6 months, in the case of the explicit consent of the applicant to keep the documents in evidence, for a maximum of 2 years.