Source: http://www.oetztaler-radmarathon.com/home/website-services/data-privacy-statement-oetztal-tourismus.html
Timestamp: 2019-04-18 14:52:31+00:00

Document:
Hereinafter referred to as "responsible" or "we".
Personal data (e.g. name, e-mail address, telephone number, etc.) are processed and transmitted by the responsible only in a lawful manner - in particular for fulfilling contractual obligations, based on predominant legitimate interests of the operator or on the basis of the user's explicit consent. The legal basis for each processing operation is specified separately in each case.
When contacting Ötztal Tourismus via e-mail, social media, telephone or on-site, the following details are partially processed for handling the request and for answering follow-up questions that might arise: salutation, first and last name, e-mail address, telephone number, address, post code, country. In addition, other specified data concerning the request will be processed. In general, collected personal data will be deleted within 12 months after completion of the request's processing. In the case of a contract, personal data will be deleted after expiration of the relevant warranty, term of guarantee or damage claim period or after expiry of the statutory storage periods.
Personal data disclosed by the user will only be processed by the operator to the extent required for the processing of the current request and/or the provision of the requested service. According to Art. 6 (1) lit. b GDPR, these data processing operations are required to fulfill the contract or to carry out pre-contractual measures. In some cases, data processing also takes place in the common interest of Ötztal Tourismus (Art. 6 (1) lit f GDPR - regarding in particular: customer service, granting of loyalty discounts, defense against liability claims).
In the course of this data processing operation, Ötztal Tourismus also partially forwards personal data collected to the processor (see 13. Data Processor). If there is a legal or regulatory obligation, data will also be transmitted to public authorities (Art. 6 (1) lit. c GDPR).
If you place an order in one of our shops, by telephone or on our webpages, we will collect all data required or entered by you for the handling of your order. These are - in particular - your name, your telephone number, your address and e-mail address ("contact information") as well as your payment data (bank card, credit card data, etc.).
Personal data disclosed by the user will only be processed by the operator to the extent required for the processing of the request and/or the provision of the requested service. According to Art. 6 (1) lit. b GDPR, these data processing operations are required to fulfill the contract or to carry out pre-contractual measures.
In the course of this data processing, the operator also partly forwards personal data collected to the processor (see 13. Data Processor). If there is a legal or regulatory obligation, data will also be transmitted to public authorities (Art. 6 (1) lit. c GDPR). If required for delivery or order processing, personal data will also be forwarded to third party service providers (e.g. delivery services).
If you make a room reservation via Ötztal Tourismus, we will collect all data necessary or provided by you for the correct handling of the reservation. These are - in particular - your name, your telephone number, your address and e-mail address ("contact information") as well as the check-in date and the check-out date, your hotel and the type of room you booked ("booking data").
When you make a booking at Ötztal Tourismus, your personal booking details will be forwarded to the selected accommodation provider/service provider in order to make your reservation at all possible. Your personal contact details will not be sold or rented to third parties by Ötztal Tourismus.
In the course of this data processing operation, the operator also partly forwards personal data collected to the processor (see 13. Data Processor). If there is a legal or regulatory obligation, data will also be transmitted to public authorities (Art. 6 (1) lit. c GDPR).
To fulfill the legal obligations of Ötztal Tourismus or its members in the sphere of the official guest registration system (Registration Act, Registration Act Implementation Ordinance, Tirolean Residence Tax Act, Tourism Statistics Regulation, etc.), Ötztal Tourismus processes only anonymized data. Assignment of such data to individualized persons is not available and not possible at all.
As a guest in the holiday region of ​​Ötztal Tourismus you have the opportunity to receive or and use several bonus cards (Ötztal Card, Ötztal Premium Card, Niederthai Card or Guest Card). When referring to and using these bonus cards, your personal data may be processed by Ötztal Tourismus.
If you receive and use only the Guest Card which grants reductions on public bus lines within the valley, there is no processing of personal data by Ötztal Tourismus.
If you receive or purchase the Ötztal Card, the Ötztal Premium Card or the Niederthai Card - which accommodation providers, Ötztal Tourismus or other distribution partners issue only at your request (in part for a fee) - the following personal data will be processed: first name, last name, date of birth, country of origin, postal code, length of stay (check-in date/check-out date) and, if applicable, payment method (including bank or credit card details). When using the bonus card, the following personal data are processed as well: data about the usage cycle of the respective card, use of the services and accommodation provider.
The processing of such personal data is necessary in order to enable identification (prevention of abuse) on the one hand, and to be able to determine the validity period of the card at the respective service provider on the other hand. In addition, central data processing is legally required under the responsibility of Ötztal Tourismus (data is recorded to a centralized card system) and necessary to allow the settlement of reductions between service providers, Ötztal Tourismus and accommodation providers.
Ötztal Tourismus collects such data either directly from those affected or data is transmitted to Ötztal Tourismus by the accommodation provider on the basis of a separate, explicit consent.
The processing of data is based on the necessity for the provision of contractual services (Art. 6 (1) lit. b GDPR) or on the basis of your explicit consent (Art. 6 (1) lit. a GDPR).
In order to provide our regular guests in the holiday region with personal invitations to regular guest meetings and information about the Ötztal (e.g. community magazine) as well as to enable regular guest awarding ceremonies, Ötztal Tourismus keeps a file on regular guests. Name, address, e-mail address, number of stays, date of award and gifts are processed in this file. Ötztal Tourismus receives such personal data - if you have not objected - from the member businesses. Data processing takes place either on the basis of your explicit consent (Art. 6 (1) lit. a GDPR) or due to our legitimate interest in maintaining a special customer relationship with you and for direct advertising (Art. 6 (1) lit. f GDPR). You can object to the processing of your personal data by Ötztal Tourismus for these purposes at any time.
Ötztal Tourismus also acts as chief organizer of countless events (e.g. sports events, regular guest meetings). If you register for such an event, we will process all personal information you provide and any follow-up data that may be required during the event. Data processing takes place for the handling of your registration, for the execution of the respective event as well as for the documentation and public communication of the event including the corresponding results. This type of data processing takes place on the basis of your explicit consent (Art. 6 (1) lit. a GDPR), the necessity to fulfill the contract stipulated (Art. 6 (1) lit. b GDPR) or due to our legitimate interests in the implementation and public communication of such an event (Art. 6 (1) lit. f GDPR).
In some cases, photos and videos are also made in the course of our events, which may be used to portray the participants, event assistants and spectators. These photographs are processed together with information about the recording (e.g. event, location, date, name and contact details of the persons in the photo) for internal documentation on the one hand and on the other hand for the public communication of the event. Under certain circumstances, the photographs taken may also be made available to the public via print and online media, TV formats and social media channels (even outside the European Union with a lower level of data protection). These data processing operations take place due to our legitimate interests in the implementation and public communication of such events (Art. 6 (1) lit. f GDPR, § 12 lit. 2 no. 4 DPA) or on the basis of any prior consent granted (Art. 6 (1) lit. a GDPR, § 12 lit. 2 no. 2 DPA). In particular, the publication also takes place on the basis of freedom of information and for journalistic purposes (Art. 85 GDPR, § 9 DPA, § 78 Copyright Act).
You are not under obligation to be photographed. Please inform the photographers and filmmakers on the spot that you don't want to be photographed or filmed already before taking the pictures. You may object to the processing of photographs on which you are recognizable and highlighted at any time within the meaning of Art. 21 lit. 1 GDPR (for special reasons). As far as possible Ötztal Tourismus will make any effort to arrange for the deletion/anonymization of the respective photographs.
If you send us an application, we will process all personal data you provide (name, contact details, CV, photographs, etc.) for the purpose of evaluating your application and, if necessary, making it possible to fill a vacancy. This is due to our predominant legitimate interest in carrying out an efficient and successful application process (Art. 6 (1) lit. f GDPR) and on the basis of the need to carry out pre-contractual measures (Art. 6 (1) lit. b GDPR). In general, we will retain your personal data for a period of 6 months from the conclusion date of the application process, and also beyond this period with your explicit consent (in this case your application will be kept in evidence).
Also our business partners collect and process varied personal data details. This applies, for example, to name and contact details of the respective contact person, payment data, other contract data, etc. These data processing operations are required to fulfill a contractual or legal obligation (Art. 6 (1) lit. b or lit. c GDPR).
The above-mentioned data processing methods in connection with the organization of the Ötztaler Cycle Marathon are carried out with the assistance of Datasport AG (PO Box 117, Bolacker 1, 4563 Gerlafingen, +41 32 321 44 11), which acts as our data processor. A processor contract has been concluded with Datasport AG in accordance with Art. 28 GDPR.
I expressly agree that in case of an accident or illness in the course of the event, the Austrian Red Cross (Bezirksstelle Imst, Meraner Straße 16, 6460 Imst) or the Red Cross Tirol (Gemeinnützige Rettungsdienst GmbH, Steinbockallee 13, 6063 Rum) are entitled to transmit the following personal data entirely and without restriction to the organizer in case of a legitimate request: personal data (name, starting number [which in particular allows conclusions about address, date of birth, e-mail address, jersey size and result list] and "further care" [for example further transport facilities, transport to a certain hospital or to a certain doctor, "transfer" to other determined supervisors] but not medical diagnoses) which are made available to the ambulance and/or rescue service team on the occasion of an injury or illness. These data may be processed by the organizer if necessary and forwarded to persons who can provide my personal registration number. This consent can be revoked at any time by sending an e-mail to dsb@oetztal.com. However, the revocation has the consequence that a participation in the Ötztaler Cycle Marathon is not possible.
Se ti iscrivi, o meglio se ambisci a un pettorale della Ötztaler Radmarathon, verranno utilizzati i seguenti tuoi dati personali: Nome, indirizzo, data di nascita, indirizzo E-mail, taglia della maglia, risultati (inclusi quelli parziali), foto. L’elaborazione di tali dati serve per la procedura di iscrizione (incluso il contatto con i partecipanti), per il rilevamento del piazzamento, per la comunicazione pubblica dell’evento (stampa, pubblicazione dei risultati, foto, ecc.), per il conteggio dei contributi di partecipazione, per la pubblicazione delle liste d’iscrizione e dei risultati (inclusi i collegamenti con link esterni, che agiscono in modo autonomo). L’elaborazione di tali dati personali ci serve per l’attuazione dei nostri impegni e contratti (Art 6, par 1 lit b DSGVO) o per i nostri interessi di divulgazione della manifestazione (Art 6, par 1 lit f DSGVO; vedi anche sopra manifestazioni e foto evento). In base al tuo permesso volontario (Art 6 par 1 lit a DSGVO) i suoi dati verranno anche usati per il nostro direct-marketing e per la creazione di un account (vedi punto 07. Account oppure “ informativa sulla privacy – siti web”), ma anche per il direct-marketing tramite i nostri sponsor, che ottengono tali dati.
L’elaborazione dei dati sopra citati, in occasione dello svolgimento della Ötztaler Radmarathon, verrà effettuata tramite Datasport AG (CAP 117, Bolacker 1, 4563 Gerlafingen, +41323214411), la nostra agenzia ufficiale di elaborazione dati. Con Datasport AG è stato stipulato un contratto per l’elaborazione dati in base all’art 28 DSGVO.
Per ulteriori informazioni riguardanti l‘uso dei dati personali per la partecipazione alla Ötztaler Radmarathon si prega di consultare l’informativa sulla privacy di Datasport AG (https://www.datasport.com/de/datenschutzerklaerung). Qua verrete anche informati sull’uso dei dati personali tramite Datasport AG sotto la responsabilità di Ötztal Tourismus.
Concordo pienamente, che in caso di incidente, oppure di malattia durante l’evento, la Croce Rossa austriaca (con sede a Imst, Meraner Strasse 16, A-6460 Imst) oppure il soccorso della Croce Rossa del Tirolo (Steinbockallee 13, A-6063 RUM) hanno il diritto di ottenere i miei dati personali (nome, numero pettorale, indirizzo, data di nascita, indirizzo E-mail, numero pettorale e risultati) e “altri servizi” (come trasporto in uno specifico ospedale o ambulatorio, oppure consegna ad altra persona, escludendo la diagnosi medica) in caso di ferite o di malattia e/o di primo soccorso, a pieno titolo e senza limitazioni. I suddetti dati possono essere comunicati in caso di necessità dall’organizzazione. Questa richiesta può essere sospesa dal concorrente tramite specifica richiesta inviando una mail a dsb@oetztal.com . La sospenzione comporta però l’esclusione di partecipazione alla Oetztaler Radmarathon.
If you fear any breach of privacy rules by the Ötztal Tourismus, we politely ask you contact us. You also have a right to send an official complaint to the Austrian Data Protection Authority (Barichgasse 40-42, 1080 Wien, dsb@dsb.gv.at, www.dsb.gv.at).

References: Art. 6
 Art. 6
 § 12
 § 12
 § 9
 § 78
 Art. 21
 Art. 28