Privacy policy

Last updated: December 02, 2025

The media owner of this website, the Stubai Tirol Tourist Board as a public corporation, takes the protection of your personal data very seriously. This privacy policy informs you, the users of the websites www.stubai.at, www.schlick2000.at (www.stubai.at/skigebiete/schlick2000), www.serlesbahnen.com (www.stubai.at/skigebiete/serlesbahnen) and www.elfer.at (www.stubai.at/skigebiete/elfer), about the type, scope and purpose of the processing of any personal data in the context of our internet activities.

Personal data in this context is all information with which you as a user:can be personally identified on our website (theoretically, possibly also via detours or by linking various data), including your IP address. As we strive to provide services of outstanding quality and want to continue to offer you the best possible service and perfect performance in the future, we process data and activities from inquiries, bookings, voucher purchases or when you visit our website.

All our data processing and the terms used in our privacy policy are based on the legal requirements of the EU General Data Protection Regulation ("GDPR") and the other relevant national legal provisions (in particular the Data Protection Act, the Telecommunications Act 2021 and the Tyrolean Tourism Act 2006).

The use of contact data published in the context of the imprint obligation or the data protection declaration for sending unsolicited advertising and information material is hereby prohibited. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Responsible

Stubai Tirol Tourism Association KöR
Stubaitalhaus, village 3
6167 Neustift, Tyrol
Austria
info@stubai.at
t: +43 501 881 0
f: +43 501 881 199

Contact details data protection officer:
datenschutz@stubai.at
t: +43 501 881 0

Data collection on our website / at our events

On the one hand, personal data is collected from you if you expressly provide it to us, on the other hand, data, in particular technical data, is collected automatically when you visit our website. Some of this data is collected to ensure that our website functions properly. Other data may be used for analysis purposes. However, you can generally use our website without having to provide any personal data.

We would also like to inform you that images, video and sound recordings may be made at public events organized by the tourism association. These image/video and sound recordings may be used and published by the tourism association without any time, place or content restrictions, in particular on the Internet, on its own website and social media channels, in print media, on the radio, in any known or future medium, in particular for reporting purposes or public relations work without any time limit.
The legal basis for this can be found in § 3 Tyrolean Tourism Act 2006 and Art. 6 para. 1 lit. e GDPR and Art. 6 para. 1 lit. f GDPR.

Data collection

User enquiries

When contacting the operator (e.g. via contact form or email), the following user details may be stored for the purpose of processing the inquiry and in the event that follow-up questions arise: Title, first and last name, postal address, e-mail address, telephone number and data relating to the inquiry (e.g. period of stay, number of persons).

The personal data collected in this way will be deleted by the operator within 40 months of completion of the processing of the request. The personal data provided by the user will only be processed and used by the operator to the extent that it is necessary for processing the inquiry and/or providing the requested service or is covered by consent or other legal bases in accordance with Article 6 GDPR.

In the course of this data processing, the operator may forward the personal data collected to the following third parties

web-crossing GmbH
Web design and programming
Eduard-Bodem-Gasse 9
6020 Innsbruck, Austria
www.web-crossing.com

feratel media technologies AG
Maria-Theresien-Straße 8, 6020 Innsbruck, Austria
System provider back office, guest database and booking tool,
www.feratel.at

Members/accommodation providers of the Stubai Tirol tourism association

Depending on the request or booking, the personal data will be forwarded to the member companies / landlords of the tourism association, which are necessary to fulfill the requested service.

We remain responsible for the protection of your data even if we use a data processor. We only use processors outside the European Union, subject to express consent or contractual necessity, if an adequacy decision has been issued by the European Commission for the third country in question or if suitable guarantees or binding internal data protection regulations are in place with the processor.

Booking data (TOSC5)

On our website stubai.at we use the booking tool TOSC5 from Feratel Media Technologie AG to offer our users the opportunity to book accommodation and other tourist services directly online.

The data is processed for the purpose of processing bookings and providing our users with a convenient and efficient booking option.
The processing of data in the context of the use of the TOSC5 booking tool is based on the preliminary or contractual fulfillment in accordance with Art 6 para 1 lit b GDPR. By using the booking tool and submitting a booking, it is necessary for your data to be processed.
The processed data includes, in particular, contact information (such as name, address, email address, telephone number) and booking details (such as booked accommodation, length of stay, payment information, number of people, age, etc.).

For bookings via our in-house incoming travel agency (Stubai Touristik, stubaitouristik@stubai.at, +43 501 881 170) we are your contractual partner, for all other bookings this is the respective accommodation provider.

The data will be stored for as long as is necessary to process the booking and to comply with statutory retention obligations (seven years). This data will then be deleted the next time it is deleted.

Data will only be transmitted to third parties if this is necessary to fulfill the booking (e.g. to the booked accommodation) or is required by law.

Registration

Registration is not required to use our website. However, after registering on this website, users will receive additional access to further offers, additional services or services related to vacations in the Stubai Tirol tourism region.

By registering, users give their conclusive consent in accordance with Art. 6 para. 1 lit. a GDPR that the personal data they have entered (first name, surname, user name, email address) will be stored by the operator and used for the provision of additional, service-oriented content. The personal data will be stored for the duration of the registration and for a maximum of 7 months thereafter and then deleted. Premature deletion by the data subject is possible at any time by sending an email to info@stubai.at. The user will receive more detailed information on the additional content during the registration process.

Competitions & surveys

Personal data (first name, surname, e-mail address) is collected when participating in a competition or survey offered on this website. By participating in the competition or a survey, users give their conclusive consent in accordance with Art. 6 para. 1 lit. a GDPR that the personal data entered may be stored by the operator and used to carry out the competition or survey and to determine and notify the winners. They will be stored for the duration of the competition, but for a maximum of 40 months thereafter, and then deleted. By participating, users agree that their name may be published on this website and on the public social media channels of the Stubai Tirol Tourist Board (Facebook, Instagram, etc.) if they win. Additional conditions and data processing may be displayed separately for some competitions or surveys and may supplement this point.

Newsletter and weather newsletter

You can subscribe to our newsletter and weather newsletter on our website. In the newsletters, we inform you about innovations to our services, news and interesting facts. In the weather newsletter, we inform you daily by e-mail about the current weather and snow conditions. When you subscribe to the newsletter and/or the weather newsletter, we collect and store the data that you provide to us in the input mask (e.g. surname, first name, e-mail address, etc.). Subscription to the newsletter or weather newsletter is only possible with your consent. We use the double opt-in procedure for registration. After registering, the user receives a confirmation and authorization e-mail to the e-mail address provided with a request to click on the link contained therein. This ensures that only authorized users of the specified email address can register for the newsletter or weather newsletter. The personal data will be automatically deleted 40 months after you unsubscribe from the newsletter.

You can easily revoke your consent at any time using the unsubscribe function in the newsletter or weather newsletter sent to you or by sending an email to info@stubai.at. The legal basis for the processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. We use the data exclusively for sending newsletters or weather information. It will not be passed on to third parties.

We use the "NumBirds" service from NumBirds CRM GmbH, 6020 Innsbruck, Brixnerstraße 3/3 to create these newsletters and weather newsletters. To protect the confidentiality of your personal data, we have concluded a data processing agreement with the company.

Data protection notice for the Feratel rating system

As part of the Feratel review system, guests can submit reviews of their stay or a booked experience. The data collected in the process is processed by feratel media technologies AG. It is not necessary to provide personal data such as name or e-mail address in order to submit a review. It is possible to enter a nickname; however, this is purely voluntary. In addition to the rating text, only the visitor type is requested (e.g. "With friends", "Single", "Couple", "Family", "Group", etc.).

All data entered in the course of the rating will be saved in connection with your booking and stored in the Feratel Deskline Expertclient. The rating is then published anonymously on stubai.at together with the selected trip type and - if specified - the nickname of the respective provider.

The data is processed and stored exclusively in accordance with the legal requirements of the GDPR. You have the right to information, correction or deletion of the rating at any time, which can be requested informally via the contact options mentioned in the imprint or in the data protection declaration.

Please note that the rating entries are always stored permanently in order to ensure the most comprehensive and representative presentation of guest opinions. The evaluation e-mail sent to the guest, which is only sent after express consent, is deleted completely and on the server side no later than 30 days after it is sent. Your rights as a data subject naturally remain unaffected by this.

Dealing with comments and contributions

If you leave a post or comment on our blog, your IP address will be saved. This serves us, as the website operator, for security reasons: If your text violates applicable law or morality, we would like to be able to trace your identity. In this case, the legal basis is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Your IP address will be automatically deleted after 40 months.

Data protection for applications and in the application process

The controller collects and processes the personal data of applicants for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case if applicants submit corresponding application documents to the controller by electronic means, for example by e-mail or via the web form on the website. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted seven months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests of the controller or the data subject has expressly consented to the retention of their data. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (GIBG).

Transfer of personal data

Your personal data will not be transferred to third parties for purposes other than those listed in this privacy policy, unless

(i) you have given your express consent to this in accordance with Art 6 para 1 lit a GDPR;

(ii) it is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 lit. b GDPR

(iii) there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 lit. c GDPR and this is permitted by law

(iv) it is necessary for the performance of a task carried out in the public interest pursuant to Article 6(1)(e) GDPR

(v) disclosure is necessary for the purposes of the legitimate interests pursued or for the establishment, exercise or defense of legal claims in accordance with Article 6(1)(f) GDPR and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.

Cooperation with processors

We carefully select our service providers who process personal data on our behalf. If we commission third parties to process personal data on the basis of an order processing contract, this is done in accordance with Art. 28 GDPR.

Transfer to third countries

If we process data in a third country or if this is done in the context of using third-party services or disclosing or transferring data to other persons or companies, this is only done on the basis of the legal bases described above for the transfer of data.

Subject to express consent or contractual necessity, we process or have the data processed in accordance with Art. 44 to 49 GDPR only in third countries with a level of data protection recognized as adequate or on the basis of special guarantees, such as a contractual obligation through so-called standard contractual clauses of the EU Commission, the existence of certifications or binding internal data protection regulations.

Data transfer to the USA

If we transfer data to the USA at all or if we use a service provider based in the USA, the necessary legal basis for this is the EU-US data protection framework or the EU standard contractual clauses or your consent.

Where US providers offer the option, we also choose to process data on EU servers. This should also technically ensure that the data is located within the European Union and cannot be accessed by US authorities.

Furthermore, we carefully examine European alternatives to the US tools used. However, this is a process that does not happen overnight, as it also has technical and economic consequences for us. US service providers are only used if the use of European tools and / or the deactivation of US tools is not possible for us for technical and / or economic reasons.

We take the following measures for the use of US tools:

Our service providers should certify themselves for the EU-US data protection framework that now applies.

We endeavor to conclude standard contractual clauses with US service providers that are not certified in accordance with the adequacy decision and to demand additional guarantees. In particular, we require the use of technologies that make it impossible to access data, e.g. the use of encryption that cannot be broken by US services or anonymization or pseudonymization of data where only the service provider can make the assignment. At the same time, we require additional information from the service provider if data is actually accessed by third parties or that the service provider exhausts all legal remedies until access to data is granted at all.

Furthermore, where possible and where necessary under certain circumstances, your consent is requested before a US tool is used and you can obtain transparent information in advance about how this service works.

Embedded external content (iFrames) and links

Our website contains links to third-party websites, in some cases also as iFrame solutions. We are not responsible for the compliance of these providers with the provisions of the GDPR. We therefore recommend that you also enquire about the privacy policy of these companies or obtain information via the links below.

Ticket Shop

(for schlick2000.at, elfer.at, serlesbahnen.com)

We have integrated the online booking platform Starjack from SJack GmbH into our website for the sale of our mountain railway tickets / vouchers / event tickets. Registration on the Starjack platform is required to order our tickets online. The following data is processed during registration or when purchasing tickets on the legal basis of contract fulfillment in accordance with Art. 6 para. 1 lit b GDPR: Salutation, first and last name, address, e-mail address, date of birth and a portrait photo for season/annual tickets. Your login information, technical background of your browser and your orders are also stored in accordance with the applicable tax and company law regulations. The payment process is carried out via third-party providers (SIX Payments, Paypal, Sofort-Überweisung, etc.). There is no legal obligation on your part to provide this data. If you do not provide the data, we will not be able to provide you with the desired tickets via our online store. The use of corresponding online booking software is based on the legal basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in being able to make our tickets available to our customers quickly and from any location. The purchase creates a contract between you and SJack GmbH. The processing of your personal data is carried out by SJack GmbH as the controller under data protection law. We assume no liability for the entire online ticket ordering process via the Starjack gateway and all associated data protection issues.

On the legal basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you can give as part of this ordering process independently of the purchase of the tickets, we receive your e-mail address (including title, first name and surname) from SJack GmbH for sending you our newsletter. Your consent can be revoked at any time free of charge by clicking on the "Unsubscribe link" at the end of each mailing. The legality of the data processing operations that have already taken place up to that point remains unaffected by the revocation. Further information on our newsletter can be found in this data protection information.

The responsible independent controller is:

SJack GmbH / starjack
Sale of online ski passes
Am Bühel 6
6830 Rankweil, Vorarlberg, Austria
www.starjack.com
Privacy policy: www.starjack.com/data-privacy/

Map service Google Maps

This website uses Google Maps to display map information. When Google Maps is used, Google also collects, processes and uses data about the use of the Maps functions by visitors to the website. You can change your settings in the data protection center on the Google website so that you can manage and protect your data.

The responsible independent controller is:

Google Ireland Limited
Map Services
Gordon House, Barrow Street,
Dublin 4, Ireland
www.google.at
Privacy policy: www.google.at/intl/de/policies/privacy

Webcam Player / Live Stream

Live streams of the webcams installed in our area are made available in a player on our website. The respective operators of these webcams are responsible for these webcams.

Any data processing is only carried out for the desired technical provision of the player and in the interest of a useful experience of our online offer for you and is based on our legitimate interest within the meaning of Art 6 para 1 lit f GDPR.

The responsible independent controller is

feratel media technologies AG
Presentation of live streams by means of WebCams
Maria-Theresien-Straße 8
6020 Innsbruck, Tyrol, Austria
www.feratel.at
Privacy policy: webtv.feratel.com/webtv/ds.jsp

or

Panomax GmbH
Presentation of live streams via WebCams
Landesstraße 23
5302 Henndorf am Wallersee, Salzburg, Austria
www.panomax.com
Privacy policy: www.panomax.com/datenschutz.html

Storage period

If no explicit storage period is specified when data is collected (e.g. as part of a declaration of consent), we are obliged to delete personal data in accordance with Art. 5 para. 1 lit. e GDPR as soon as the purpose of its processing no longer exists. In this context, we would like to point out that statutory retention obligations to which we are subject constitute a legitimate purpose for the further processing of the personal data collected.

We generally store and retain data in personal form until the end of a business relationship or until the expiry of applicable guarantee, warranty or limitation periods, and beyond that until the end of any legal disputes in which the data is required as evidence, or in any case until the end of the third year (or at least 40 months) after the last contact.

Our measures to protect your personal rights

As mentioned at the beginning, we take the protection of your personal data very seriously and use it exclusively to stay in contact with you and to optimize our service and tailor it to your wishes and needs.

In order to prevent improper access to the stored data, theft, disclosure, modification or destruction, we take technical and organizational measures in accordance with the GDPR.
For example, our employees are trained accordingly and are obliged to maintain confidentiality and use your data in accordance with the law.

With service providers to whom we disclose personal data for communication purposes (newsletters, mailings, etc.) or for commercial purposes (bookkeeping, accounting, booking route, data management systems, etc.), we have concluded order processing agreements to protect the confidentiality of your personal data. Agreements concluded for order processing

Our website contains links to third-party websites, in some cases also as iFrame solutions. We are not responsible for the compliance of these providers with the provisions of the GDPR. We therefore recommend that you also enquire about the privacy policy of these companies.

Protection of children

This website is aimed at adults. We do not currently market any special areas for children. As a result, we do not knowingly collect information to determine age, nor do we knowingly collect personal data from children under the age of 14. However, we caution all visitors to our website under the age of 14 not to disclose or provide any personal information through our services except with the permission of their parent or guardian. In the event that we become aware that a child under the age of 14 has provided us with personal data, we will delete the child's personal data from our files to the extent technically feasible.

Your rights

Rights of data subjects

Data subjects have the right:

(i) in accordance with Art 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;

(ii) in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us

(iii) in accordance with Art. 17 GDPR, to request the erasure of your personal data stored by us under certain circumstances, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims

(iv) in accordance with Art. 18 GDPR, to demand the (temporary) restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it, we no longer need the data but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR

(v) in accordance with Art. 20 GDPR, to receive from us your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its direct transmission to another controller However, this only applies to your personal data that we process on the basis of your consent or on the basis of a contract using automated procedures;

(vi) in accordance with Art. 21 GDPR, if your personal data is processed on the basis of our legitimate interest, to object to the processing of your personal data if there are reasons for this arising from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation;

(vii) in accordance with Art. 7 (3) GDPR, to withdraw your consent given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future. Among other things, you have the option of revoking your consent to the use of cookies on our website with effect for the future by accessing our cookie settings;

(viii) in accordance with Art 77 GDPR, to complain to a supervisory authority about the unlawful processing of your data by us. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

In Austria, this is the
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna, Austria
Phone: +43 1 52 152-0, dsb@dsb.gv.at

Assertion of data subject rights

You yourself decide on the use of your personal data. Should you therefore wish to exercise any of the above rights against us, you are welcome to contact us by e-mail at datenschutz@stubai.at or by post or telephone.

Please help us to clarify your request by answering questions from our responsible employees regarding the specific processing of your personal data. If there are reasonable doubts about your identity, we may request a copy of your ID.

If you have any questions about data protection, please contact us at datenschutz@stubai.at or using the other contact details provided in this privacy policy.

Technologies on our website

Cookies and local storage

We use cookies on our website to make our website more user-friendly and functional. Some cookies remain stored on your end device.

Cookies are small data packets / text files that are exchanged between your browser and the / our web server when you visit our website. They do not cause any damage and are only used to recognize website visitors. Cookies can only store information that is provided by your browser, i.e. information that you have entered into the browser yourself or that is available on the website. Cookies cannot execute code and cannot be used to access your end device.

The next time you visit our website with the same device, the information stored in cookies may subsequently be sent back either to us ("first-party cookie") or to a third-party web application to which the cookie belongs ("third-party cookie"). The stored and returned information enables the respective web application to recognize that you have already accessed and visited the website with the browser of your end device.

We divide cookies into the following categories depending on their purpose and function:

Technically necessary cookies, also known as essential cookies, to ensure the technical operation and basic functions of our website. This type of cookie is used, for example, to maintain your settings while you navigate the website; or they can ensure that important information is retained throughout the session (e.g. login, shopping cart, cookie settings).

Statistics cookies to understand how visitors interact with our website by collecting and analyzing information anonymously only. This provides us with valuable insights to optimize both the website and our products and services.

Marketing cookies to set targeted advertising activities for users on our website.

Depending on the storage period, we also divide cookies into session and persistent cookies. Session cookies store information that is used during your current browser session. These cookies are automatically deleted when you close your browser. No information remains on your end device. Persistent cookies store information between two visits to the website. This information is used to recognize you as a returning visitor on your next visit and the website responds accordingly. The lifespan of a permanent cookie is determined by the provider of the cookie.

The legal basis for the use of technically necessary cookies is based on our legitimate interest in the technically flawless operation and smooth functionality of our website. Our website cannot function properly without these cookies. The use of statistics and marketing cookies requires your consent. You can revoke your consent to the use of cookies at any time for the future. Consent is voluntary. If it is not given, there are no disadvantages. Further information about the cookies we actually use (in particular about their purpose and storage duration) can be found in this privacy policy and in the information about the cookies we use in our cookie banner. If marketing cookies are permitted, this permission also applies to statistics cookies.

You can also set your Internet browser so that the storage of cookies is generally prevented on your end device or you are asked each time whether you agree to the setting of cookies. Once cookies have been set, you can delete them at any time. You can find out how all this works in detail in the help function of your browser.

Please note that a general deactivation of cookies may lead to functional restrictions on our website.

We also use so-called local storage functions (also known as "local storage") on our website. Data is stored locally in your browser's cache, which can still be accessed and read even after you close the browser - unless you delete the cache or it is session storage.

Third parties cannot access the data stored in the local storage. If special plugins or tools use the local storage functions, this is described in the respective plugin or tool.

If you do not want plugins or tools to use local storage functions, you can control this in the settings of your respective browser. We would like to point out that this may result in functional restrictions.

Presence on social media platforms

We maintain so-called fan pages or accounts or channels on the networks listed below in order to provide you with information and offers within social networks and to offer you further ways to contact us and find out about our offers. In the following, we will inform you which data we or the respective social network process in connection with your accessing and using our fan pages/accounts. The individual social media platforms on which we maintain pages are Flickr, Pinterest, Facebook, Instagram, TikTok, YouTube and X.

If you wish to contact us via Messenger or via direct message via the respective social network, we generally process your user name through which you contact us and, if necessary, store other data provided by you insofar as this is necessary to process/answer your request.

The legal basis is Article 6(1)(f) GDPR, which is necessary to safeguard the legitimate interests of the controller.

We receive automated statistics regarding our accounts via Insights functionalities. The statistics include the total number of page views, likes, information on page activity and post interactions, reach, video views/views and information on the proportion of men/women among our fans/followers.

The statistics only contain aggregated data that cannot be linked to individual persons. They are not identifiable to us.

In order to view the content of our fan pages or accounts, you do not need to be a member of the respective social network and therefore no user account is required for the respective social network.

Please note, however, that the social networks also collect and store data from website visitors without a user account (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies when the respective social network is accessed, over which we have no influence whatsoever. Details on this can be found in the privacy policy of the respective social network.

If you wish to interact with the content on our fan pages/accounts, e.g. comment on, share or like our posts/contributions and/or wish to contact us via messenger functions, you must first register with the respective social network and provide personal data.

We have no influence on the data processing by the social networks when you use them. To the best of our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network, as well as for the analysis of user behavior (using cookies, pixels/web beacons and similar technologies) on the basis of which advertising based on your interests is displayed both within and outside the respective social network. It cannot be ruled out that your data will also be stored by the social networks outside the EU/EEA and passed on to third parties.

Information on the exact scope and purposes of the processing of your personal data, the storage period/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use of the social networks can be found in the data protection provisions/cookie guidelines of the social networks. There you will also find information on your rights and options to object.

Flickr, Inc. Attention: Privacy Manager 67 E Evelyn Ave, Ste 200 Mountain View, CA 94041, USA
https://www.flickr.com/help/privacy

Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland and Pinterest, Inc. 651 Brannan St., San Francisco, CA 94107, USA.
https://policy.pinterest.com/de/privacy-policy

Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Meta Platforms, Inc, 1601 Willow Road
94025 Menlo Park, USA
https://www.facebook.com/privacy/explanation

https://de-de.facebook.com/help/instagram/155833707900388

TikTok Technology Limited, 10 Earlsfort Terrace Dublin, D02 T380, Ireland
https://www.tiktok.com/legal/page/eea/privacy-policy/de

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC (USA)
https://www.youtube.com/intl/ALL_at/howyoutubeworks/user-settings/privacy/

X Corp. , 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
https://x.com/de/privacy

Server log files

For technical reasons, in particular to ensure a functional and secure website, we process technically necessary data about access to our website in so-called server log files, which your browser automatically transmits to us.

The access data that we process includes

  • Name of the website accessed
  • browser type and version used
  • the operating system used by the visitor
  • the page previously visited by the visitor (referrer URL)
  • Time of the server request
  • amount of data transferred
  • Host name of the accessing computer (IP address used)

This data is not assigned to any natural person and is only used for statistical evaluations and for the operation and improvement of our website as well as for the security and optimization of our website. This data is only transmitted to our website host. This data is not combined or merged with other data sources. If there is any suspicion of unlawful use of our website, we reserve the right to check this data retrospectively. The data processing is based on our legitimate interest in the technically error-free presentation and optimization of our website.

The access data is deleted shortly after the purpose has been fulfilled, usually after a few days, unless further storage is required for evidence purposes. Otherwise, the data will be stored until an incident has been finally clarified.

SSL encryption

When you visit our website, we use the widely used SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the status bar of your browser. The use of this procedure is based on our legitimate interest in the use of suitable encryption techniques.

We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments and kept up to date with the state of the art.