General

This privacy notice informs you about the type, scope, and purpose of the processing of personal data (hereinafter briefly referred to as "data") within our online offer. For better clarity, we have created individual processing groups. 

Note: Not every one of our websites uses all the components described here. However, in order to comprehensively inform you at this central point, we describe below all data processing of our online offer.

Provision of Data by Users

In principle, there is no obligation to provide the data that we ask you to provide on our website. However, please keep in mind that if you do not do so, it will not be possible for you to use all functions and services.

No processing of sensitive data

We do not process special categories of data within the meaning of Art. 9 para. 1 GDPR.
We do not process data concerning criminal convictions and offenses within the meaning of Art. 10 GDPR.

No profiling

We do not carry out automated individual decisions, including profiling, within the meaning of Art. 22 para. 1 GDPR.

Log files

This website and the associated provider automatically collect information during website usage and store it in so-called log files.

This data cannot be assigned to specific individuals by us. A merging of this data with other data sources does not take place. We reserve the right to review this data retrospectively if we become aware of concrete indications of illegal use.

Collection of access data

We process the Internet address (IP address) of the requesting computer together with the date and time of the request, which file is requested, the amount of data transmitted, a message indicating whether the request was successful, identification data of the browser and operating system used, as well as the website through which access to the file occurred (if the access occurred via a link).

Legal basis and purposes of data processing

We process this data on the basis of our overriding legitimate interest (Art. 6 para. 1 lit. f GDPR) for the following purposes:

• Providing our online offer, its content, and functions
• Creation of usage statistics
• Improvement of our offer and our website
• Checking system security
• Detection, prevention, and investigation of attacks

Storage Duration of Log Files

We store this data for a maximum period of six months.

Data whose further retention is required for evidentiary purposes are exempt from deletion until the final clarification of the respective incident.

Inquiries, Comments, and Contributions

You can submit inquiries to us through our website, and on some pages, also leave comments and contributions.

Collection of Data

We process the information that you provide yourself by filling out the corresponding online forms for contact or for leaving comments or posts. These are the following types of data, many of which are optional:

• Master data (e.g., names, addresses)
• Contact data (e.g., email, phone numbers)
• Content data (e.g., text entries, photographs, videos)

Legal basis and purposes of data processing

We process this data on the basis of your consent (Art. 6 para. 1 lit. a GDPR), which can also be implied (implicitly) by the conscious submission of the respective form, or on the basis of (pre-)contractual obligations (Art. 6 para. 1 lit. b) for the following purposes:

• Answering contact inquiries and communicating with users
• Provision of (pre-)contractual services, service, and customer care
• Use of individual functions (e.g., comment function, posting an image, …) of our online offer by users

Speicherdauer von Veröffentlichungen durch Benutzer selbst

Storage duration of publications by users themselves

These data are not automatically deleted by us, as deletion is usually not in the interest of the user (contributor). However, you have the option to delete them yourself at any time or to request deletion from us.

Security Measures

In accordance with Art. 32 GDPR, taking into account the state of the art, implementation costs, the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.

These measures in particular include ensuring the confidentiality, integrity, and availability, as well as the resilience of the systems and services associated with processing. Measures taken include, for example, controlling physical access to the data, as well as access related to it, input, transmission, ensuring availability, and their separation.

Furthermore, we have established procedures that ensure the exercise of affected persons' rights, the deletion of data, and the response to risks to data. In addition, we take the protection of personal data into account already during the development or selection of hardware, software, and procedures, in accordance with the principle of data protection by design and by default (Art. 25 GDPR).

The security measures particularly include the encrypted transmission of data between your browser and our servers.

External Links

For your information, you will find links on our pages that refer to third-party websites (external links). Through such links to thematically relevant external websites, we create added value for you as a visitor to our website.

We would like to point out that we have no influence on the content and design of these pages of other providers. Therefore, the guarantees of this privacy policy do not apply to external providers.

Use of Cookies

We use so-called "cookies." These are pieces of information that are transmitted from a web server to a user's web browser and stored there for later retrieval. Cookies can be small text files or other types of information storage. The main purpose of cookies is to provide an offer specifically tailored to the user in order to make the use of the services as comfortable as possible.

Type of Cookie Storage

Session Cookies 

We use "session cookies" that are only stored for the duration of your current visit to our online presence (e.g., to store your login status or the shopping cart function and thus to enable the use of our online offerings at all). A session cookie stores a randomly generated unique identification number, called a session ID. In addition, a cookie contains information about its origin and the storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online offerings, for example, when you log out or close the browser.

Permanent Cookies

We use "permanent cookies" to store the personal settings you enter while using our services, so that you can personalize the service in this way. We can also use such cookies to work on an improvement of our offerings.

Required and optional cookies

Strictly necessary cookies
These cookies are required for the functioning of the website and cannot be disabled in your systems. Generally, these cookies are only set in response to actions you take, such as setting your privacy preferences, logging in, or filling out forms.

You can set your browser to block these cookies or to alert you about these cookies.
Note: Blocking strictly necessary cookies may limit the functionality of our website and, in some cases, prevent you from fully using this website.

Required and optional cookies

Strictly necessary cookies

These cookies are required for the functioning of the website and cannot be disabled in your systems. Generally, these cookies are only set in response to actions you take, such as setting your privacy preferences, logging in, or filling out forms. 

You can set your browser to block these cookies or to alert you about these cookies. Note: Blocking strictly necessary cookies may limit the functionality of our website and, in some cases, prevent you from fully using this website.

Optional Cookies

These cookies allow us, for example, to count visits and traffic sources so that we can measure and improve the performance of our website. They help us answer questions such as which pages are the most popular, which are used the least, and how visitors move around the website. All information collected by these cookies is aggregated and therefore analyzed only anonymously.

Other optional cookies may be set by our partners through our website. These companies can use them to create a profile of your interests and show you relevant ads on other websites. They are based on identifying your browser and internet device.

Avoidance of Cookies

If you do not wish cookies to be set, you can configure your browser so that it notifies you about the setting of cookies and allows you to permit them only on a case-by-case basis. Please use the help functions of your internet browser to find out how to change these settings in your browser.

Note: Blocking strictly necessary cookies may limit the functionality of our website and in some cases prevent you from using this website fully.

Google Site Search

Within our internet offering, the "Google Custom Search" (Google Custom Search Engine "Google CSE") is used as the central search service. "Google CSE" is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Description of the search process

Access to this search function is possible via its own search box embedded in the website and labeled "Search with Google^™." A link below the search box ("Privacy notices for Google^™ Search") refers to the privacy policy.

Activation of the Search

By entering a search term in the search box and pressing the enter key or the search icon (magnifying glass symbol), the user activates the search function and the search results page is called up, which, using a plugin provided by Google, loads the corresponding search results from Google.

Search Results Page

The plugin developed and provided by Google (Google Custom Search Engine "Google CSE") is integrated by us as a software module "as-is" (unchanged) into the search results page. The plugin enables automated communication (data exchange) between the accessed search results page and the Google service when the search results page is called. The use of the search function provided by Google involves a dynamic transfer of data by the service provider Google to the search results page.

Data Protection

As a rule, no data is transmitted to the provider of the search service (Google) when our web pages that include the "Google Custom Search" are accessed. Data is only transmitted to Google after the user activates the search box, starts a full-text search, and accesses the search results page. Using the search function within the search results page simultaneously also transmits user data to Google.

Legal basis and purpose

The integrated search service "Google CSE" enables a full-text search of the content of our online offerings.

By using the full-text search and the associated access to the search results page, you agree to the use of the Google search service and thus also to the transfer of data to the Google service (consent according to Art. 6 para. 1 lit. a GDPR). This includes, for example, the search terms you enter and the IP address of the computer you are using. Please note that different data protection standards apply to Google than to our own online offerings.

Storage Duration and Deletion

We expressly point out that the processing, in particular the storage, deletion, and use of potentially transmitted personal data, is the responsibility of the provider of the search service, and we have no influence on the type and scope of the data transmitted or on their further processing.

Note

If you are logged into your Google account, you allow Google to directly associate your search with your personal profile. You can prevent this by logging out of your Google account. 

Further information from Google on handling user data (Privacy Policy) is available at: www.google.com/intl/de/policies/privacy

Matomo

For quality assurance and optimization of our website, we use the open-source web analytics platform Matomo. We operate the Matomo web application on our own server, which allows us to provide you with more privacy, as Matomo therefore does not have access to the collected analytics data.

Legal basis and purposes of data processing

We process your personal data on the legal basis of our overriding legitimate interest (Art. 6 para. 1 lit. f GDPR), for the analysis and statistical evaluation of the use of our websites, in order to ensure quality assurance and, if necessary, to carry out optimization.

If you consent to the use of analysis cookies in the privacy settings, cookies will be set with your consent (Art. 6 para. 1 lit. a GDPR). The information obtained in this way about website usage is transmitted exclusively to our own servers and compiled into pseudonymous usage profiles. We use the data to evaluate the usage of the website. The collected data is not passed on to third parties.

You can withdraw your consent at any time by deleting the cookies in your browser or changing your privacy settings. This will protect your privacy, but it will prevent us from learning from your actions and improving usability for you and other users.

Collection of Data

Through Matomo, we collect and process the following data:

• User's IP address, with IP addresses being anonymized (IP masking), so that an assignment to individual users is not possible
• Date and time of the request
• Title of the displayed page (page title)
• URL of the accessed page (page URL)
• URL of the page that was accessed before the current page (referrer URL)
• Screen resolution used
• Time in the user's local timezone
• Files that were clicked and downloaded (download)
• Links to an external domain that were clicked (outlink)
• Page generation time (the time required for web pages to be generated by the web server and then downloaded by the user: page speed)
• User's location: country, region, city, approximate latitude and longitude (geolocation)
• Primary language of the browser used (Accept-Language header)
• User agent of the browser used (User-Agent header)

Storage Duration

We store personal data for a maximum period of six months.

Alpenverein Shop (Alpenvereins-Betriebe Gesellschaft m.b.H)

We offer you the possibility to register on our service platform mein.alpenverein.at and thus create a personal account.

Through our implemented single sign-on solution, you can also log in to our other platforms, such as alpenverein.shop,  with a single registration

Collection of Data and Purposes of Data Processing

To create a personal account, see the section "Registration on our service platform."

The account serves to

• Place orders and track shipments
• View old orders
• Go to checkout faster

In addition, members have the advantage of receiving products at the lower member price.

For the purpose of the purchasing process and for subsequent contract processing, personal data is processed by the webshop operator within the framework of cookies

• Name and address of the buyer
• Your payment data from our payment service provider for the processing of the payment

For the purpose of contract processing, the following data is also processed

• The order data, i.e. the ordered products, the billing and delivery address, payment method, entered messages, as well as contact information

Legal Basis

By filling your shopping cart, you agree to the use of data in accordance with our privacy policy (performance of a contract as well as pre-contractual obligations pursuant to Art. 6 Para. 1 lit. b GDPR).

Without this data, we cannot conclude the contract with you.

Data will be transferred to

• our payment service provider (payment data)
• the contracted transport/shipping company for the delivery of the goods
• tax advisors to fulfill our tax obligations

In this process, only the data relevant to the respective service is transmitted. No transmission to other third parties takes place.

Storage Duration

In the event of a cancellation of the purchase process, the data stored with us is deleted immediately.

In the case of a contract conclusion, all data from the contractual relationship is stored until the end of the product liability period (10 years according to § 13 PHG).

For the storage duration of your account, see the section 'Registration on our Service Platform'.

TaskCards Online-Pinnwand

Background

We use the online bulletin board "Taskcards" to support our courses and events. TaskCards is a service of dSign Systems GmbH, Waldhausstraße 14, 98574 Schmalkalden, Germany (hereinafter "dSign").

We generate anonymous tokens for the users of our bulletin boards. Thus, as a user, you do not need an account or a license for collaborative work in TaskCards.

Collection of data

i) In principle, dSign only collects technically necessary data (log data), such as IP address and date/time of access. This data is stored by dSign exclusively on servers in the EU.

ii) We process data that you as a user post yourself on our bulletin boards. Since this is done exclusively voluntarily by the user, the posted content is the sole responsibility of the user.

Legal basis and purposes of data processing

i) The log data is processed based on the overriding legitimate interest of dSign (Art. 6 para. 1 lit. f GDPR) and is necessary in order to a) be able to provide information to law enforcement authorities in the event of possible misuse of the platform and b) be able to detect and prevent attacks on the platform in a timely manner.

ii) We process the bulletin board data based on your consent (Art. 6 para. 1 lit. a GDPR), which can also be implied (tacitly) by the deliberate submission of your entry and the associated posting on our bulletin board. The purpose of the processing is an additional opportunity to participate in our courses.

Note: You can participate in any of our courses without using the online bulletin boards. 

We do not carry out any automated decision-making or profiling, and your data is only processed for the purposes listed above.

Recipients of Your Data

For online notice boards, we use dSign as a service provider. dSign is contractually obligated under Art. 28 GDPR to process data on behalf of and under the instructions of the controller.

You can find the detailed privacy policy of dSign for TaskCards at: www.taskcards.de/#/home/privacyPolicy

None of your data is transmitted to a country outside the EU (third country) or to an international organization.

Storage duration

i) Log data is stored by dSign on their servers and deleted after an expiration period.

ii) Participants in our courses still have access to the bulletin boards for a certain period of time (generally 1 month). Bulletin boards are also kept by us for documentation and analysis purposes if necessary.

Your Rights

You generally have the rights to access, rectification, deletion, restriction, data portability, revocation, and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, please contact us at datenschutz@alpenverein.at. You can also file a complaint with the supervisory authority. In Austria, this is the Data Protection Authority www.dsb.gv.at.

Changes and updates to the privacy notice

We ask you to regularly inform yourself about the content of our privacy notice. We adjust it as soon as legal requirements or changes in the data processing we carry out, for example through technical developments, make this necessary.