The operator of this website is Axamer Lizum GmbH & Co KG, Lizum 6, 6094 Axams, Phone +43 (0) 5234-68240, Email: office@axamer-lizum.at. Not only can you rely on our Tyrolean roots and expertise for all tourism-related matters, but when it comes to data protection, we also place great importance on integrity and compliance with all legal requirements of the EU General Data Protection Regulation (GDPR) as well as all relevant Austrian laws.

We operate this website, and you can find complete information about us and our contact details in the legal notice at the top of the page. Please feel free to contact us at any time with any questions you may have.

We use your personal data exclusively as described in our Privacy Policy. You can also find the legal basis for this here.

What rights do data subjects have? If you have any questions or wish to exercise your data protection rights, you can use the contact options listed in the legal notice to reach us by phone, in writing, or in person.

You may exercise the data subject rights listed below if the respective conditions are met. Please note that you may be required to provide appropriate proof of identity in advance.

Right of Access: You may request—generally free of charge—confirmation as to whether your personal data is being processed, and request access to that data and the information specified in Article 15 of the GDPR.

Right to rectification if we process inaccurate or incomplete data about you (Art. 16 of the GDPR). Right to erasure of personal data concerning you if the conditions set forth in Art. 17 of the GDPR are met.

Right to restrict the processing of your data pursuant to Article 18 of the GDPR. Right to data portability and to receive the personal data you have provided through an automated process in a structured, commonly used, and machine-readable format (Article 20 of the GDPR).

In cases where processing is based on a (non-overriding) legitimate interest, you have the right to object at any time pursuant to Article 21 of the GDPR. This right applies without restriction to processing for the purpose of direct marketing and related profiling.

You may withdraw your consent to the processing of personal data at any time; this does not affect the lawfulness of the processing carried out up to the time of withdrawal.

You have the right to lodge a complaint with a supervisory authority (data protection authority) with jurisdiction over you, in particular in the EU member state where you reside, work, or where the alleged violation occurred, if you believe that the processing of your personal data violates the General Data Protection Regulation or that your rights as a data subject have been infringed. We would appreciate it if you would contact us first and give us the opportunity to respond.

You can find a list of regulatory authorities here: http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.

For what purposes do we process personal data?
1. Operation of the website and our IT systems (maintenance and security) 2. Processing related to the provision of goods and services 3. Processing for marketing purposes (customer inquiries, customer service, and advertising) 4. Public relations and company archives 5. Data processing during the hiring process 6. Communication

Operation of the Website and Our IT Systems (Maintenance and Security) For the operation and maintenance of IT systems and company websites, as well as to ensure data security and prevent misuse or fraudulent behavior, we generally process our users’ personal data only to the extent necessary to provide our services, content, and offerings.

We process your data for pre-contractual measures or contractual obligations (e.g., compliance with General Terms and Conditions, Terms of Use, Art. 6(1)(b) GDPR), to the extent required by law (Art. 6(1)(c) GDPR, e.g., consent to the use of cookies, maintaining appropriate data security), and on the basis of Article 6(1)(f) of the GDPR for the following (overriding) legitimate interests: • Ensuring a functional and attractive website, • Maintaining data security, • Efficient internal administration within the corporate group

We do not intend to transfer data; however, data published by users of our services themselves (e.g., comments) is public and potentially accessible worldwide. If necessary, the data may be transferred to law enforcement agencies, courts, etc., to assert legal claims on behalf of the data controller or third parties. We transfer your data to third parties only if we are legally required to do so. In addition, in individual cases, we engage data processors to process your data within the scope of the contractual relationship or for analysis, information, and optimization purposes. These include, for example, service providers in the fields of marketing and market research, transportation and delivery companies, tax advisors, or IT service providers. However, we only transfer your data to such data processors on the basis of an agreement that complies with the legal framework and solely for the purposes of data processing.

The data controller is part of a corporate group. For the purposes of efficient internal administration, we therefore also engage affiliated companies in the processing activities. The corporate group has an overriding legitimate interest in this (Recital 48 of the GDPR).

Every time our website is accessed, our system automatically collects data and information from the computer system of the user accessing the site.

The following data is collected in this process:
• Information about the browser type and version used • The user’s operating system • The user’s Internet service provider • The user’s IP address and browser session ID • Date and time of access • Device data (device ID, screen resolution, language and country settings, etc.) • Websites from which the user’s system accesses our website • Websites accessed by the user’s system via our website.

Data necessary for the proper functioning of the website is processed and stored only for the duration of your visit to our site. Log data and IP addresses are also generally stored for 7 days to defend against attacks on our systems, to investigate data security incidents, and, if necessary, to pursue claims for damages until the matter is fully resolved.

There is no legal or contractual obligation to provide this data; however, it is necessary for the proper functioning of our website and our IT systems, which may otherwise be impaired.

Some of the data we collect is processed for marketing purposes. We inform you of this—and of your right to object—at the time the data is collected. Please refer to Section 3 of the Privacy Policy for more information.

The data is processed under joint responsibility in accordance with Article 26 of the GDPR together with Fröschl AG & Co KG, Brockenweg 2, 6060 Hall in Tirol, phone 05223-571560, office@froeschl.at.

Data processing in connection with the provision of goods and services, in particular for the sale of our products We collect personal data for the delivery of our products and the provision of our services, including through our online store, as well as for the use of third-party services in the context of business relationships.

The legal basis for processing the data consists of pre-contractual measures or contractual obligations (Art. 6(1)(b) GDPR), legal and statutory obligations (Art. 6(1)(c) GDPR, in particular tax and fiscal law), as well as the following (overriding) legitimate interests (Art. 6(1)(f) GDPR):
• Asserting or defending our own legal claims, in particular those arising from warranties and product liability • Mitigating default risks (including those involving third parties) • Responding to customer inquiries regarding deliveries and services; you have the right to object at any time, provided that no overriding interests (e.g., liability) preclude such action • Efficient internal administration within the corporate group / company group

If necessary, personal data may be transferred to the following categories of recipients:
• Banks (for processing payment transactions) • Legal representatives, courts if necessary • Certified public accountants (for auditing purposes) • Competent administrative authorities, in particular tax authorities • Debt collection agencies (therefore, only abroad to the extent that the debt must be collected abroad) • Third-party financiers such as leasing or factoring companies and assignees, provided that the delivery or service is financed in this manner • Contractual or business partners who are involved or are intended to be involved in the delivery or service (e.g., delivery services) • Insurance companies in connection with the conclusion of an insurance contract covering the goods or services or the occurrence of an insured event • Government agencies and institutions for the compilation of legally required (official) statistics • Customers (recipients of services) • Credit bureaus

In such cases, data will be transferred to third countries or international organizations only if either an adequacy decision pursuant to Article 45 of the GDPR has been issued or the conditions of Article 49(1)(b), (c), or (e) of the GDPR are met (necessity for the implementation of pre-contractual measures at the request of the data subject or in their interest; the establishment, exercise, or defense of legal claims) or consent has been obtained in accordance with Article 49(1)(a) of the GDPR.

We transfer your data to third parties only if we are legally required to do so. In addition, in certain cases, we engage data processors to process your data in connection with our contractual relationship or for analysis, information, and optimization purposes. These include, for example, transportation and delivery companies, tax advisors, or IT service providers. However, we only transfer your data to such data processors on the basis of an agreement that complies with the legal framework and solely for the purposes of data processing.

The data controller is part of a corporate group. For the purposes of efficient internal administration, we therefore also engage affiliated companies in the processing activities. The corporate group has an overriding legitimate interest in this (Recital 48 of the GDPR).

If there is a legitimate interest (based on the order amount), we check the creditworthiness of the customer before accepting an order.

If you have enabled the so-called Do Not Track (DNT) feature in your browser, your visit to the website will automatically not be tracked by the web analytics tool. However, this does not work with every browser. To enable DNT in your browser, please check your browser’s help section if you’re unsure how to do so.

Until the business relationship ends or until the expiration of the warranty, guarantee, statute of limitations, and statutory retention periods applicable to the data controller; furthermore, until the resolution of any legal disputes in which the data is required as evidence. In particular, at least 10 years to demonstrate compliance with tax and fiscal obligations (BAO), and at least 30 years for real estate transactions. For services in connection with which claims for damages may be asserted under the Austrian Civil Code (ABGB) or on other grounds (e.g., product liability), for the required duration.

The collection of the data we require is necessary for the conclusion of a contract.

Some of the data we collect is processed for marketing purposes. We inform you of this—and of your right to object—at the time the data is collected. Please refer to Section 3 of the Privacy Policy for more information.

Processing for marketing purposes (customer inquiries, customer service, and advertising) Customer support and marketing (direct marketing) for the purposes of the data controller or joint data controller, including through newsletters, responding to customer inquiries, sending promotional materials by mail, invitations to events, and sweepstakes.

Legitimate interests pursuant to Article 6(1)(f) of the GDPR:
• Advertising the group’s products and services • Customer acquisition and retention (reward programs for regular customers) • Enhancing the appeal of our offerings

You have the right to object to the processing of your data for these purposes at any time without having to provide a specific reason, and you may request that your data be deleted or that its processing be restricted. We would like to remind you of your rights regarding the direct collection of data.

If necessary, personal data may be transferred to the following categories of recipients: delivery services, printing companies, newsletter service providers, website service providers, and IT service providers

The data controller is part of a corporate group. For the purposes of internal business administration, we therefore also engage affiliated companies in the processing activities. The corporate group has an overriding legitimate interest in this (Recital 48 of the GDPR). Processing for marketing and customer retention purposes is carried out exclusively for the purposes of the data controller with whom a business relationship exists; processing for such purposes by the corporate group requires the prior consent of the data subject.

When you visit our websites, we use cookies, web beacons, and Google Analytics. You can opt out of each of these by disabling the corresponding feature in your browser.

Prospect data and profiles in online stores are stored for 3 years from the last customer contact. Mailing addresses and email addresses are stored for the duration of marketing activities or until the customer objects or unsubscribes from a newsletter; In addition, data is stored if a restriction on processing is requested or if processing for other purposes requires a longer retention period (in particular, in accordance with Section 2 of the Privacy Policy).

There is no obligation to provide data.

In response to customer inquiries, depending on the nature of the inquiry and how it is handled, further processing may occur in connection with deliveries and services; for more details, see Section 2 of the Privacy Policy.

Public Relations and Corporate Archives

Providing information of at least local or regional public interest regarding the responsibilities and activities of the data controller, and preserving essential information to document the history and development of the company and selected individuals in leadership roles, to the extent that there is a public or legitimate private interest in archiving such information.

You have the right to object at any time, without providing a specific reason, to the processing of your data for these purposes on grounds relating to your particular situation, and you may request the erasure or restriction of such processing. We would like to draw your attention to your rights regarding the direct collection of data and in connection with invitations to events.

The legal basis for the processing is the freedom of expression pursuant to Articles 13, 17, and 17a of the Basic Law, as well as Article 10 of the European Convention on Human Rights (ECHR) and, insofar as journalistic purposes are pursued, in accordance with Article 85 of the GDPR in conjunction with Section 9(2) of the DSG (for image data, also Section 12(2)(4) of the DSG, provided there is an overriding interest in the public presentation of events of contemporary history); otherwise, the consent of the data subjects is obtained in each case, particularly when publishing image data (Article 6(1)(a) of the GDPR / Article 9(2)(a) of the GDPR). Permanent archiving takes place, insofar as it concerns significant individuals and events in the company’s history, on the basis of a public or, at the very least, a corresponding private interest in documentation (for image data, § 12(3)(3) DSG) and for further processing for (contemporary) historical and scientific purposes in accordance with Art. 89 GDPR (§ 7(1)(1) and (2) DSG; in individual cases, consent of the data subjects in accordance with § 7(2)(2) DSG). To the extent that individuals are incidentally depicted in the documentation of public events, no identifying processing takes place.

No specific recipients are intended; however, publication is intended for the general public and, if it takes place on the Internet, is potentially accessible to everyone worldwide.

The data controller is part of a corporate group. For the purposes of internal business administration, we therefore also engage affiliated companies in the processing activities. The corporate group has an overriding legitimate interest in this (Recital 48 of the GDPR). Processing for marketing and customer retention purposes is carried out exclusively for the purposes of the data controller with whom a business relationship exists; processing for such purposes by the corporate group requires the prior consent of the data subject.

To the extent necessary for the purposes described, data on public figures is collected from publicly available sources (name, public office, presence along with the date, time, location, and occasion of the documented event); for private individuals, additional data may be collected from human resources records (name, age, years of service for anniversaries).

The retention period is limited to the period during which the data is suitable and usable for journalistic purposes; if there is a corresponding need for documentation, the data will be permanently archived for later (re)use for the purposes described in this processing activity.

There is no obligation to provide data.

The data will be used solely for the intended purposes and, where applicable, in accordance with Article 5(1)(b) of the GDPR for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes.

Data Processing in the Hiring Process

Temporary retention of applicants’ personal data in connection with unsolicited applications and application processes involving job postings, as well as use of such data for the purpose of selecting applicants and entering into an employment contract.

We process applicant data on the basis of Article 6(1)(b) of the GDPR (pre-contractual measures) and Article 6(1)(f) of the GDPR, so that we can contact you for the intended retention period for the purpose of applicant selection and, if necessary, verify your information on a case-by-case basis if this is in our interest for a position due to particularly high requirements regarding your trustworthiness or is necessary in the interest of third parties.

Your data will be disclosed to our employees only when necessary. In individual cases, we may contact the references you have provided. Similarly, in justified cases where there is a compelling interest, we may verify your information with third parties (e.g., submitted qualifications and university degrees). In such cases, data will only be transferred to third countries or international organizations if either an adequacy decision pursuant to Art. 45 of the GDPR is in place or the requirements of Art. 49(1)(b) of the GDPR are met (necessity for the implementation of pre-contractual measures at the request of the data subject) or consent has been provided in accordance with Article 49(1)(a) of the GDPR.

The data controller is part of a corporate group. For the purposes of efficient internal administration, we therefore also engage affiliated companies in the processing activities. The corporate group has an overriding legitimate interest in this (Recital 48 of the GDPR).

When we contact the references you have provided, data and information regarding your previous employment or work activities, as well as subjective assessments of your job performance by the relevant third parties, may be collected. (There are no plans to store this data and information.)

If you have applied for an open position, we will store your personal data for a maximum of 3 years from the end of the application process and then delete it; however, you may object to this at any time, without having to provide a formal notice, starting eight months after the end of the process.

If you have submitted a speculative application, we will retain your documents for up to 3 years so that we can contact you regarding suitable job openings; however, you may object to this processing at any time without having to provide a formal reason.

In any case, in order to complete the application process, you must provide proof that you possess the qualifications required for the position and submit your contact information. In some cases, depending on the requirements for filling a position, we may also need to request additional information from you (e.g., a criminal record check). If you do not provide the required information, your application for the respective position cannot be considered.

If you are hired, your application materials will continue to be used for human resources management purposes, with the exception of data requiring special protection (e.g., criminal record). All additional information will be provided to you before the contract is signed.

Communication


When you contact us via a form on the website, by email, or by phone, the data technically necessary for communication (depending on the chosen means of communication) is collected and processed, such as your phone number, email address, the time (and, if applicable, the duration) of the communication, etc. Incoming emails are also processed using spam filters, firewalls, virus scanners, etc., for the purposes described in Section 1 of this statement.

The data you provide will be processed for the purpose of handling your inquiry on the basis of the relevant legitimate interest pursuant to Article 6(1)(f) of the GDPR. The additional purposes of the processing depend on the content of the communication and are specified in points 1–6 of this Privacy Policy.

With regard to processing for the purposes specified in Article 6(1)(e) and (f) of the GDPR in this Privacy Policy, as indicated therein, you have the right to object at any time, without providing a specific reason, to the processing for these purposes on grounds relating to your particular situation, and may request the erasure or restriction of processing. We draw your attention to your rights regarding the direct collection of data (e.g., in online forms). This right does not apply if we process your inquiry or a communication for other reasons (e.g., contractual obligations, legal obligations, product liability) and are required to store the data for the period specified in this Privacy Policy.

Depending on the purpose of a communication, a corresponding transfer may be required in accordance with sections 1 through 6 of this Privacy Policy.

Whenever contact is made, our systems automatically collect data and information from the data subjects’ communication devices or technical systems.

The following data is collected in this process: the data subject’s contact information (e.g., phone number, email address, etc.), time of the communication (date, time), consent to the recording, duration of the call (if applicable), voice message (answering machine, if applicable), and content of the communication (text message, if applicable).

The retention period is determined by the time required to complete the communication process; in addition, depending on the purpose of the communication, a longer retention period may be necessary, as specified in sections 1–6 of this Privacy Policy.

There is no obligation to provide the data.

Depending on the content of your inquiry or the communication process, your data will be further processed for all the purposes listed in the preceding sections of this Privacy Policy.

Cookies


To make your visit to our website more engaging, enable the use of certain features, and display relevant products, we use so-called cookies on various pages in addition to the data mentioned above. This serves to protect our legitimate interests—which, following a balancing of interests, are deemed to prevail—in optimizing the presentation of our offerings. The legal basis is Article 6(1)(f) of the GDPR. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e., when you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies). You can find the storage duration in the overview within your web browser’s cookie settings. You can configure your browser to notify you when cookies are set and decide on a case-by-case basis whether to accept them, or to block the acceptance of cookies in specific cases or generally. Each browser manages cookie settings differently. This is described in each browser’s Help menu, which explains how you can change your cookie settings. If you do not accept cookies, the functionality of our website may be limited. In the online store, cookies are used to ensure the proper functioning of the shopping cart and the ordering process. Cookies are not inherently harmful; rather, they provide both you and us with useful conveniences. You can prevent the analysis of user behavior by blocking this domain from setting cookies in your browser, for example, by setting an exception in your browser (such as in Firefox). Please consult your browser’s help section, if necessary, to learn how to configure this in your browser. Of course, you can also delete the above-mentioned cookies from your browser on an ad hoc basis or periodically to remove tracking information.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. The information collected by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there. Please note that on our websites, Google Analytics has been extended with the code “gat._anonymizeIp();” to ensure that IP addresses are collected anonymously. Therefore, at our request, Google collects your IP address only in truncated form, which ensures anonymization and does not allow any conclusions to be drawn about your identity. If IP anonymization is enabled on this website, your IP address will be truncated by Google beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google. Google will only transfer this data to third parties if required by law or as part of data processing on behalf of the website operator. Under no circumstances will Google combine your data with other data collected by Google. For more information about Google Analytics and data protection, please visit: https://support.google.com/analytics/answer/6004245?hl=de

etracker - incert Coupon Shop


The provider of this website uses services from etracker GmbH in Hamburg, Germany (www.etracker.com) to analyze usage data. By default, we do not use cookies for web analytics. If we do use analytics and optimization cookies, we will obtain your explicit consent separately in advance. If this is the case and you agree, cookies will be used to enable statistical reach analysis of this website, performance measurement of our online marketing activities, and testing procedures—for example, to test and optimize different versions of our online offering or its components. Cookies are small text files stored by the internet browser on the user’s device. etracker cookies do not contain any information that would allow a user to be identified.

The data generated by etracker is processed and stored exclusively in Germany by etracker on behalf of the provider of this website and is therefore subject to strict German and European data protection laws and standards. In this regard, etracker has been independently audited, certified, and awarded the ePrivacyseal data protection seal of approval.

Data processing is carried out in accordance with the legal provisions of Article 6(1)(f) (legitimate interest) of the General Data Protection Regulation (GDPR). Our legitimate interest under the GDPR is to optimize our online services and our website. Since the privacy of our visitors is important to us, any data that could potentially be linked to an individual—such as IP addresses, login IDs, or device identifiers—is anonymized or pseudonymized as soon as possible. This data is not used for any other purpose, combined with other data, or disclosed to third parties.

You may object to the data processing described above at any time. Objecting will not result in any adverse consequences.

My visit data is included in the web analytics. You can find more information about etracker's privacy policy here.

Right to Information
Under the Data Protection Act, you have the right to receive information about your stored personal data free of charge. If you have any questions about this privacy policy, please contact us at Axamer Lizum GmbH & Co KG, Lizum 6, 6094 Axams, phone +43 (0) 5234-68240, email: office@axamer-lizum.at.

Date of Privacy Policy: August 4, 2023