(Information in accordance with Articles 13 and 14 of the General Data Protection Regulation)
When you visit or use our website, we take the protection of your personal data very seriously. We process your data only on the basis of legal provisions (in particular the General Data Protection Regulation, the Austrian Data Protection Act and the Telecommunications Act) and would like to inform you in the following about important aspects of our data processing. We, that is Zillertaler Verkehrsbetriebe AG, based in Jenbach, as the operator of this website.
Service providers and risks associated with third country transfers
When using cookies and similar technologies that originate from US service providers (e.g. Google), information from you (e.g. IP address, usage behavior, technical data) is transmitted to the USA as a third country. Since there is no adequate level of data protection in the USA, we also obtain your express consent for this third-country transfer.
Please note that in the case of third country transfers without an adequacy decision by the European Commission or the existence of appropriate safeguards, there is no sufficient legal protection for European data subjects against this. Specifically, government surveillance programs in the U.S. (such as, in particular, FISA Section 702 and E.O. 12333 in conjunction with PPD-28) require providers of electronic communications services in the U.S., such as Google, to provide personal data to U.S. authorities without any legal recourse for data subjects. Thus, European data subjects in the U.S., in particular, have no rights of access, deletion or complaint.
Other data transfers
Server log files
We automatically collect and store information in so-called server log files, which your browser automatically transmits to us when you call up our website. These are:
- browser type and browser version
- Operating system used
- referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
In this data processing, we rely on our legitimate interests (Article 6(1) litera f of the General Data Protection Regulation), as we would otherwise not be able to provide you with our website. We do not combine this data with other data sources. However, we reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.
"Cookies" are small text files that are stored on your terminal device with the help of your browser. Among other things, they enable us to recognize your browser on your next visit, to carry out statistical evaluations and to be able to design our website in a user-friendly manner. In the process, information (e.g. IP address, usage behavior, technical data) may also be collected from you and in some cases also transmitted to third-party providers. Many browsers are set to automatically accept cookies. However, you can also deactivate the storage of cookies or set your browser to notify you as soon as cookies are to be stored. In the case of notification, you can reject our cookies. You can make corresponding data protection settings in your browser. Please note that the functionality of our website may be limited if you reject or deactivate our cookies.
When using technically necessary cookies, we rely on our overriding legitimate interests (Article 6(1) litera f of the General Data Protection Regulation), as we need them to ensure the functionality of our website. Without the use of technically necessary cookies, we cannot provide you with our website and its functions.
Google Analytics: we use the web analytics service "Google Analytics" provided by Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland. For the purpose of analyzing your interactions on our website, Google Analytics stores cookies on your computer. The information thus generated is transferred to Google servers in the USA in order to create reports on website activity for us and, if necessary, to provide other services associated with the use of websites. In the event that IP anonymization (anonymizeIP) is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. You can find more information on data processing within the scope of Google Analytics here.
You can prevent the storage of cookies by selecting the appropriate settings on your browser software. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link.
Listing of our cookies and your right of revocation
You can find a listing of our cookies and the possibility to revoke your cookies in our Cookie Statement.
"External embeddings" are small programs that we use to add additional third-party functionality to our website. In order for such third-party integrations to be displayed, the IP address and other technical information must be transmitted to the third-party provider on a regular basis. Sometimes other information (e.g. usage behavior, meta/communication data) is also collected for statistical and marketing purposes. If no other legal basis is indicated, we rely on your consent for this data processing.
Right of revocation
You can revoke your given consent for the use of our external embeddings at any time by leaving our website or in our Cookie Statement.
Our external integrations
Google Tag Manager: The "Google Tag Manager" from Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland, is used to manage website tags on our website, which we can use to integrate other services (e.g. tracking codes from Google Analytics). Thus, no personal data is stored with the Tag Manager itself yet, but only by other integrated services. Only your IP address is transmitted to Google so that this service can be executed. You can find more information on data processing within the scope of Google here.
VVT Timetable & Tariff: To enable you to quickly and easily search for a public transport connection on our website, we have integrated the timetable search of the Verkehrsverbund Tirol GesmbH (VVT). In the course of using the timetable search, user data is transmitted to VVT servers and cookies are also set directly by VVT (e.g. Google Analytics). You can find more information about VVT's data protection here.
If you contact us via our e-mail address, via our telephone number or contact us in any other way (e.g. via our contact form), e.g. by sending us suggestions, requests or questions or inquiring about lost items in the lost and found office, we will use the personal data you disclose solely for the purpose of processing and responding to your inquiry. In doing so, we rely on our legitimate interests (Article 6(1) litera f of the General Data Protection Regulation). If, in the course of contacting us, you already make specific inquiries about our services or request advice from us in this regard, e.g. in relation to reserving a coach or a steam train, we also rely on the fulfillment of pre-contractual obligations (Article 6(1) litera b) of the General Data Protection Regulation). Without processing your personal data, we would not be able to respond to your request.
The personal data you provide will not be passed on to third parties or disclosed to them. Exceptions to this only exist if we are obliged to transfer or disclose data due to legal regulations or if you have given us your consent to do so in advance.
In the event of misuse of our website, we reserve the right to forward any personal data disclosed to the relevant authorities.
Our photo and video recordings
Purposes and legal basis
When we hold events (e.g., trips, activities, festivals), we reserve the right to take photos and videos and publish them for the purpose of documentation and reporting on our websites (www.zillertalbahn.at as well as www.mobilitaetsplan.at), in our social media (Facebook, Instagram, YouTube) and in our print media (press releases, articles, annual and activity reports). Furthermore, we reserve the right to transmit photos and videos to media companies as part of press releases for the purpose of reporting on our events.
In doing so, we rely on our legitimate interests (Article 6(1) litera f of the General Data Protection Regulation). In individual cases, we may also rely on your implied consent (e.g., for group photos). Without this processing, we would not be able to effectively document and report on our charitable and benevolent corporate purposes and thus to carry out appropriate public relations work.
Data transfer and risks in the case of transfers to a third country
Apart from the above-mentioned publications and transfers, your photos and videos will not be passed on to third parties or disclosed to them. The only exceptions to this are if we involve an external service provider (e.g. printing company) or if you have given us your consent to do so in advance.
Please note that publication in social media (e.g. Facebook, Instagram, YouTube) results in a third-country transfer and there is no sufficient legal protection for European data subjects against this. Specifically, government surveillance programs in the U.S. (such as, in particular, "Section 702" of FISA and E.O. 12333" in conjunction with "PPD-28") provide that providers of electronic communications services in the U.S., such as the corporations "Meta" or "Google," are obligated to make personal data available to U.S. authorities without data subjects being able to legally defend themselves against this. Thus, European data subjects in the USA in particular have no rights to information, deletion or complaint.
Objection to the use of photos and videos
You may be recognizable as a participant in our events in photos and videos. If you do not wish this, please inform our photographers. We will take your wish into account. Should photos or videos of you nevertheless be published, we ask you to inform us at the e-mail address email@example.com.
As part of the application and registration for our events, we will fulfill our obligation to inform you in accordance with Article 13 of the General Data Protection Regulation separately in each case by means of our own "photo notices". Such "photo notices" will also be posted on site in the entrance areas of our events.
If you wish to subscribe to our newsletter and have declared your consent to this as part of the registration process, we will process the personal data you have disclosed for the purpose of including you in the distribution list for our newsletter. In doing so, we rely on your consent (Article 6(1) litera a of the General Data Protection Regulation). Once you have registered for the newsletter, we will send you a confirmation e-mail with a link to confirm your registration ("double opt-in").
By revoking your consent to the email address firstname.lastname@example.org or via the newsletter unsubscribe, you can cancel our newsletter at any time. In this case, we will immediately remove you from the distribution list of our newsletter.
A transmission of the personal data disclosed by you only takes place if we involve external service providers for the processing of our newsletter dispatch. With such external service providers, we have concluded a contract on commissioned processing in accordance with Article 28 of the General Data Protection Regulation. In this contract, we oblige external service providers to maintain the confidentiality of your personal data and to take appropriate data security measures.
If you apply to us, we will process the personal data you disclose and the documents you provide solely for the purpose of reviewing your application and conducting the application process. In doing so, we rely on the fulfillment of pre-contractual obligations and our legitimate interests (Article 6(1) litera b and f of the General Data Protection Regulation). Without processing your personal data, we would not be able to review your application and carry out the application process.
Without your previously declared consent, your application will neither be kept evident nor forwarded to third parties.
Our data storage
Personal data provided by you will only be stored by us for as long as is necessary for the above-mentioned purposes - for which we process the data - in each case.
Due to legal documentation and storage obligations, a longer storage period may result. After the expiry of corresponding periods, your personal data will be deleted, unless there is no other legal basis for longer storage according to the General Data Protection Regulation.
You have the right to obtain information
- whether we process personal data from you,
- for which purposes personal data of yours are processed,
- which categories of personal data are processed from you,
- to which recipients your personal data is transferred, and
- how long personal data of yours will be stored by us (Article 15 of the General Data Protection Regulation).
You have the right to rectification if personal data of yours is processed incorrectly. This also includes completion if personal data of yours is processed incompletely (Article 16 of the General Data Protection Regulation).
You have the right to erasure ("right to be forgotten") if there is no longer a suitable legal basis under the General Data Protection Regulation for processing your personal data (Article 17 General Data Protection Regulation).
Under certain circumstances, you have the right to request the restriction of the processing of your personal data (Article 18 of the General Data Protection Regulation).
You have the right to receive personal data that you have provided to us in a structured, common and machine-readable format and to transfer it to a third party of your choice (data portability), provided that the more detailed requirements for this are met (Article 20 of the General Data Protection Regulation).
If we base the processing of your personal data on our legitimate interests, you have the right to object on grounds relating to your particular situation (Article 21 of the General Data Protection Regulation).
If you have consented to the processing of your personal data, you have the right to withdraw your consent at any time (Article 7(3) of the General Data Protection Regulation).
Detailed information about your rights can be found in the General Data Protection Regulation.
If you believe that the processing of your personal data violates the General Data Protection Regulation or any other provision relevant to data protection, you are free to lodge a complaint with the Austrian data protection authority (https://www.dsb.gv.at/).
Links to other websites
This website contains links to other websites. We are not responsible for the content of these websites.
Our contact details
Zillertaler Verkehrsbetriebe AG
Our external data protection officer is available at the e-mail address email@example.com.