Privacy
1. Privacy at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any information that can identify you personally. Detailed information on privacy can be found in our privacy policy listed below this text.
Data collection on our website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.
How do we collect your data?
Your data is collected in part by you providing it to us. This could be, for example, data you enter into a contact form.
Other data is automatically collected by our IT systems when you visit the website. These are mainly technical data (e.g., internet browser, operating system, or time of page view). This data collection is automatic as soon as you access our website.
Why do we use your data?
Some of the data is collected to ensure the website is provided error-free. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to obtain information about the origin, recipients, and purpose of your stored personal data at any time, free of charge. You also have the right to request correction, blocking, or deletion of this data. For this purpose, as well as for other questions about data protection, you can contact us at any time at the address provided in the imprint. Furthermore, you have the right to file a complaint with the relevant supervisory authority.
You also have the right, under certain circumstances, to request the restriction of processing your personal data. For further details, please refer to the privacy policy under "Right to Restrict Processing."
Analysis tools and third-party tools
When visiting our website, your surfing behavior may be statistically evaluated. This is mainly done using cookies and so-called analysis programs. The analysis of your surfing behavior is generally anonymous; it cannot be traced back to you.
You can object to this analysis or prevent it by not using certain tools. Detailed information about these tools and your options for objecting can be found in the following privacy policy.
2. General information and mandatory information
Privacy policy
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can identify you personally. This privacy policy explains which data we collect and how we use it. It also explains how and for what purpose this occurs.
We point out that data transmission over the internet (e.g., communication via email) may have security gaps. Complete protection of data from third-party access is not possible.
Notice regarding the responsible entity
The responsible party for data processing on this website is:
Das Steghaus am Schwarzsee
Seebichlweg 37b
6370 Kitzbühel
E-Mail: info@steghaus.at
Telephone: +43 5356 64254 750
The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Withdrawal of your consent to data processing
Many data processing operations are only possible with your explicit consent. You can withdraw any consent already given at any time. A simple email notification to us is sufficient for this. The legality of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.
Right to object to data collection in special cases and to direct marketing (Article 21 GDPR)
If data processing is carried out based on Art. 6 (1) lit. e or f GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The legal basis for processing is provided in this privacy policy. If you object, we will no longer process your affected personal data, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims (objection under Art. 21 (1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling, to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Art. 21 (2) GDPR).
Right to file a complaint with the responsible supervisory authority
In the event of violations of the GDPR, affected individuals have the right to file a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the location of the alleged infringement. The right to complain exists without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a structured, commonly used, and machine-readable format. If you request the direct transfer of data to another controller, this will only be done to the extent technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as website operators, this page uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser's address bar.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Information, restriction, deletion, and correction
You have the right, within the scope of applicable legal provisions, to obtain free information about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as the right to correction, blocking, or deletion of this data. For this purpose, as well as for other questions regarding personal data, you can contact us at any time at the address provided in the imprint.
Right to restriction of processing
You have the right to request the restriction of processing your personal data. You can contact us at any time at the address provided in the imprint for this purpose. The right to restrict processing applies in the following cases:
- If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. During the verification period, you have the right to request the restriction of processing of your personal data.
- If the processing of your personal data is unlawful, you may instead of deletion request the restriction of data processing.
- If we no longer need your personal data, but you need it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of processing of your personal data instead of deletion.
- If you have filed an objection under Art. 21 (1) GDPR, a balance must be made between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of processing of your personal data.
If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.
Objection to marketing emails
We hereby object to the use of contact data published under the imprint obligation for sending unsolicited advertising and informational materials. The operators of these pages expressly reserve the right to take legal action in the case of unsolicited delivery of advertising information, such as spam emails.
3. Data collection on our website
Cookies
This website uses cookies. Cookies do not harm your computer and do not contain viruses. Cookies are used to make our offering more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are "session cookies." They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.
You can configure your browser to notify you when cookies are set and allow cookies only in specific cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.
Cookies that are necessary for the execution of the electronic communication process or to provide certain functions you wish (e.g., shopping cart function) are stored based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If other cookies (e.g., cookies for analyzing your surfing behavior) are stored, they are treated separately in this privacy policy.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Used operating system
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources.
The collection of this data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of its website – for this purpose, the server log files must be collected.
Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.
The processing of the data entered in the contact form is therefore carried out exclusively based on your consent (Art. 6 (1) lit. a GDPR). You can withdraw this consent at any time. A simple email notification to us is sufficient for this. The legality of the data processing carried out until the withdrawal remains unaffected by the withdrawal.
The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for data storage ceases to apply (e.g., after your request has been processed). Mandatory legal provisions – especially retention periods – remain unaffected.
Inquiry via email, phone, or fax
If you contact us by email, phone, or fax, your inquiry, including all personal data arising from it (such as your name and inquiry), will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent.
The processing of this data is based on Article 6(1)(b) of the GDPR if your inquiry relates to the fulfillment of a contract or is necessary for the execution of pre-contractual measures. In all other cases, processing is based on your consent (Article 6(1)(a) of the GDPR) and/or our legitimate interests (Article 6(1)(f) of the GDPR), as we have a legitimate interest in effectively processing inquiries directed to us.
The data you send to us through contact inquiries will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for data storage no longer applies (e.g., after the completion of processing your inquiry). Mandatory statutory provisions – particularly statutory retention periods – remain unaffected.
Registration on this website
You can register on our website to access additional features. The data you enter during registration will be used only for the purpose of utilizing the respective offer or service you have registered for. The mandatory fields requested during registration must be fully completed. Otherwise, we will reject the registration.
For important changes, such as changes to the scope of the offer or technical necessities, we will use the email address provided during registration to inform you accordingly.
The processing of the data entered during registration is based on your consent (Article 6(1)(a) of the GDPR). You can revoke any consent given at any time. A simple notification by email to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.
The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.
Comment function on this website
For the comment function on this page, in addition to your comment, the time of creation of the comment, your email address, and, if you do not post anonymously, the username you chose will be stored.
Retention Period of Comments
The comments and related data (e.g., IP address) will be stored and remain on our website until the commented content is completely deleted or the comments must be deleted for legal reasons (e.g., offensive comments).
Legal Basis
The storage of comments is based on your consent (Article 6(1)(a) of the GDPR). You can revoke any consent given at any time. A simple notification by email to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.
Processing of data (customer and contract data)
We collect, process, and use personal data only to the extent necessary for the establishment, content, or modification of the legal relationship (inventory data). This is based on Article 6(1)(b) of the GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process, and use personal data about the use of our websites (usage data) only to the extent necessary to allow the user to utilize the service or for billing purposes.
The collected customer data will be deleted after the completion of the contract or the end of the business relationship. Statutory retention periods remain unaffected.
Data transmission upon contract conclusion for services and digital content
We only transmit personal data to third parties if this is necessary for the fulfillment of the contract, such as to the bank involved in payment processing.
Further transmission of the data will not take place unless you have explicitly consented to the transfer. Data will not be passed on to third parties without your explicit consent, for example, for advertising purposes.
The basis for data processing is Article 6(1)(b) of the GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures.
MyFonts Counter
This website uses MyFonts Counter, a web analytics service provided by MyFonts Inc., 500 Unicorn Park Drive, Woburn, MA 01801, USA. Due to licensing requirements, page view tracking is performed, and the number of visits to the website is counted and transmitted to MyFonts for statistical purposes. MyFonts collects only anonymized data. Data transmission may occur through the activation of JavaScript code in your browser. To prevent the execution of JavaScript code from MyFonts entirely, you can install a JavaScript blocker (e.g., www.noscript.net). For more information on MyFonts Counter, please refer to the privacy policy of MyFonts at: https://www.myfonts.com/a/font/legal/website-use-privacy-policy.
4. Social Media
eRecht24 Safe Sharing Tool
The content on our pages can be shared in a privacy-compliant manner on social networks such as Facebook, Twitter, or Google+. For this purpose, this page uses the eRecht24 Safe Sharing Tool. This tool only establishes direct contact between the networks and users when the user actively clicks one of these buttons. By clicking the button, the user gives consent within the meaning of Art. 6 para. 1 lit. a GDPR. This consent can be withdrawn at any time with effect for the future.
No automatic transmission of user data to the operators of these platforms occurs through this tool. If the user is logged into one of the social networks, an information window will appear when using the social buttons of Facebook, Google+1, Twitter & Co., where the user can confirm the text before submitting it.
Our users can share the content of this site in a privacy-compliant manner on social networks without the network operators creating complete browsing profiles.
Twitter Plugin
Our pages integrate features of the Twitter service. These features are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and disclosed to other users. Data is also transmitted to Twitter. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or how it is used by Twitter. You can find more information in Twitter's privacy policy at: https://x.com/en/privacy.
The use of the Twitter plugin is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in maximizing visibility on social media.
You can change your privacy settings on Twitter in your account settings at https://twitter.com/account/settings.
Google+ Plugin
The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Collection and Sharing of Information: Using the Google+ button, you can publish information worldwide. Through the Google+ button, you and other users will receive personalized content from Google and our partners. Google stores the information that you have given a +1 for a content, as well as information about the page you viewed when you clicked +1. Your +1s may be displayed as references, along with your profile name and photo, in Google services, such as in search results or on your Google profile, or on other sites and advertisements across the web.
Google records information about your +1 activities to improve Google services for you and others. To use the Google+ button, you need a publicly visible Google profile that must contain at least the name chosen for the profile. This name is used across all Google services. In some cases, this name may also replace another name that you used when sharing content through your Google account. The identity of your Google profile may be shown to users who know your email address or have other identifying information about you.
Use of Collected Information: In addition to the uses described above, the information you provide is used in accordance with Google's applicable privacy policy. Google may publish aggregated statistics about the +1 activities of users or share them with users and partners, such as publishers, advertisers, or affiliated websites.
The use of the Google+ plugin is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in maximizing visibility on social media.
5. Analysis Tools and Advertising
Google Analytics
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called "cookies." These are text files stored on your computer that allow an analysis of the website usage by you. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
The storage of Google Analytics cookies and the use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offerings and advertising.
Browser Plugin
You can prevent the storage of cookies by adjusting your browser software accordingly; however, we point out that in this case, you may not be able to fully use all the features of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data on future visits to this website: Disable Google Analytics.
For more information on how Google handles user data in Google Analytics, visit: https://support.google.com/analytics/answer/6004245?hl=en.
Demographic characteristics in Google Analytics
This website uses the "demographic features" function of Google Analytics. This allows reports to be created that contain statements about the age, gender, and interests of website visitors. These data come from interest-based advertising by Google and from visitor data from third-party providers. This data cannot be attributed to a specific person. You can deactivate this function at any time via the ad settings in your Google account or prevent the collection of your data by Google Analytics as described in the "Opt-out of Data Collection" section.
Retention period
Data stored by Google on user and event levels, which are linked to cookies, user identifiers (e.g., User ID), or advertising IDs (e.g., DoubleClick cookies, Android advertising ID), are anonymized or deleted after 14 months. For more details, see the following link: https://support.google.com/analytics/answer/7667196?hl=en.
6. Newsletter
Newsletter data
If you wish to receive the newsletter offered on the website, we require your email address and information that allows us to verify that you are the owner of the provided email address and agree to receive the newsletter. No other data is collected, except on a voluntary basis. We use this data solely for the purpose of sending the requested information and do not share it with third parties. For this, we use the e-marketing tool from CleverReach. More information about the processing of data by CleverReach can be found here: https://www.cleverreach.com/de-de/datenschutz/
The processing of data entered in the newsletter sign-up form is based solely on your consent (Art. 6 (1) (a) GDPR). You can withdraw your consent to the storage of data, email address, and its use for sending the newsletter at any time, for example, via the "unsubscribe" link in the newsletter. The legality of any data processing that has already occurred remains unaffected by the withdrawal.
The data you provided for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after unsubscribing. Data stored for other purposes will remain unaffected.
7. Plugins and Tools
Google Web Fonts
This page uses so-called web fonts, provided by Google, to ensure uniform display of fonts. When you visit a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.
For this purpose, your browser must connect to Google's servers. This allows Google to know that our website has been accessed through your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive display of our online offerings. This constitutes a legitimate interest according to Art. 6 (1) (f) GDPR.
If your browser does not support web fonts, a standard font from your computer will be used.
For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq and Google's privacy policy at https://policies.google.com/privacy?hl=en.
Google Maps
This page uses the Google Maps service via an API. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence over this data transmission.
The use of Google Maps is in the interest of providing an attractive presentation of our online offers and easy identification of the locations we provide on the website. This constitutes a legitimate interest according to Art. 6 (1) (f) GDPR.
More information on handling user data can be found in Google's privacy policy at https://policies.google.com/privacy?hl=en.
Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to verify whether the data input on our websites (e.g., in a contact form) is made by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various features. This analysis begins automatically as soon as the website visitor enters the site. For analysis, reCAPTCHA evaluates various information (e.g., IP address, duration of the visit, mouse movements made by the user). The data collected during the analysis is transmitted to Google.
The reCAPTCHA analysis runs completely in the background. Website visitors are not informed that an analysis is taking place.
The data processing is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in protecting its online services from abusive automated spying and SPAM.
For more information about Google reCAPTCHA and Google's privacy policy, visit: https://policies.google.com/privacy?hl=en and https://www.google.com/recaptcha/intro/android.html.
8. Our Services
Applications
We offer you the opportunity to apply to us (e.g., via email, mail, or an online application form). Below we inform you about the scope, purpose, and use of the personal data collected during the application process. We assure you that the collection, processing, and use of your data is in accordance with applicable data protection law and all other legal requirements, and that your data will be treated as strictly confidential.
Scope and purpose of data collection
When you send us an application, we process your associated personal data (e.g., contact and communication data, application documents, notes from interviews, etc.) to the extent necessary for the decision regarding the establishment of an employment relationship. The legal basis for this is § 26 BDSG-new under German law (initiation of an employment relationship), Art. 6 (1) (b) GDPR (general contract initiation), and – if you have given consent – Art. 6 (1) (a) GDPR. Consent can be withdrawn at any time. Your personal data will only be shared within our company with individuals involved in processing your application.
If the application is successful, the data you submitted will be stored in our data processing systems based on § 26 BDSG-new and Art. 6 (1) (b) GDPR for the purpose of implementing the employment relationship.
Data retention period
If we cannot make you a job offer, if you reject a job offer, withdraw your application, withdraw your consent to data processing, or request the deletion of the data, the data you submitted, including any remaining physical application materials, will be stored or kept for a maximum of 6 months after the conclusion of the application process (retention period), to be able to track the details of the application process in case of discrepancies (Art. 6 (1) (f) GDPR).
YOU CAN OBJECT TO THIS STORAGE IF YOU HAVE LEGITIMATE INTERESTS THAT OUTWEIGH OUR INTERESTS.
After the retention period expires, the data will be deleted unless there is a legal retention obligation or another legal reason for further storage. If it becomes clear that the retention of your data after the retention period is required (e.g., due to a pending or imminent legal dispute), deletion will only take place once the data is no longer relevant. Other statutory retention obligations remain unaffected.
9. Purchasing a Voucher via the Website
Description and scope of data processing
On our website, there is the option to purchase vouchers. If a user takes advantage of this option, the data entered in the input form is transmitted and stored. This data includes: Salutation, first name, last name, address, email address, phone number, voucher value, personalization of the voucher, shipping options/alternative delivery address, payment method.
If you make a voucher value purchase from our website, it is processed via the online order platform of websLINE Internet & Marketing GmbH, Sägewerkstrasse 24, 83395 Freilassing, Germany. All order data you enter is transmitted securely via encryption. websLINE is committed to handling your transmitted data in accordance with data protection regulations. websLINE takes all organizational and technical measures to protect your data. No further transfer of data to third parties occurs in this context. The data is used solely for processing the booking and for communication.
Legal basis for data processing
The legal basis for the data processing is the conclusion of a purchase contract with the user.
Purpose of data processing
The processing of personal data from the input form is solely for processing the voucher purchase and handling the payment transaction.
Duration of storage
The data will be deleted as soon as they are no longer necessary for achieving the purpose of their collection. In the case of a contractual relationship, we will delete the data once national, commercial, statutory, or contractual retention obligations have been fulfilled.
Right to object and option for removal
The user has the right to object to the processing of their personal data at any time.