In the following we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. B. name, address, e-mail addresses, user behavior. We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological advances.
You can find further information about the collection and processing of your personal data here.
1 Responsible for data processing
The person responsible in accordance with Article 4 (7) of the EU General Data Protection Regulation (GDPR) is Rupert Mayr, Alpendorf 12, 5600 St. Johann im Pongau, office(at)oberforsthofalm.at
2 Your Rights
You have the following rights towards us with regard to your personal data:
2.1 General Rights
You have the right to information, correction, deletion, restriction of processing, objection to processing and data portability. Insofar as processing is based on your consent, you have the right to revoke this with effect for the future.
2.2 Rights in data processing based on legitimate interest
According to Article 21 Paragraph 1 GDPR, you have the right at any time, for reasons arising from your particular situation, to object to the processing of personal data relating to you, which is based on Article 6 Paragraph 1 e GDPR (data processing in the public interest ) or based on Article 6 Paragraph 1 f GDPR (data processing to protect a legitimate interest), to object; this also applies to profiling based on this provision. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
2.3 Direct Mail Rights
If we process your personal data in order to operate direct advertising, you have the right pursuant to Art. 21 (2) GDPR to object at any time to the processing of your personal data for the purpose of such advertising, this also applies to profiling, to the extent that it is related to such direct mail.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes
2.4 Right to lodge a complaint with a supervisory authority
You also have the right to complain to a competent data protection supervisory authority about the processing of your personal data by us. The supervisory authority responsible for us is: Austrian data protection authority, Wickenburggasse 8, 1080 Vienna, phone: +43 1 52 152-0, email: dsb(at)dsb.gv.at
3 Collection of personal data when visiting our website
If you only use the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security. The legal basis for this is Art. 6 Para. 1 f GDPR:
Domain, IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request comes, browser, operating system , and its interface, language and browser software version.
The data is retained for 3 days and then discarded.
4 Contacting us by email or contact form
When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. Insofar as we request entries via our contact form that are not required for establishing contact, we have always marked these as optional. This information is used by us to specify your request and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Art. 6 Para.1 a GDPR. Insofar as this concerns information on communication channels (e.g. e-mail address, telephone number), you also agree that we may also contact you via this communication channel in order to answer your request. You can of course revoke this consent at any time for the future.
We delete the data arising in this context after the storage is no longer necessary, or restrict the processing if there are statutory storage obligations.
5.1 General Information
With your consent according to Art. 6 Para. 1 a DSGVO you can subscribe to our newsletter, with which we inform you about our current offers.
We use the so-called double opt-in procedure to register for our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and automatically deleted after one month.
In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to be able to clarify any possible misuse of your personal data.
The only mandatory information for sending the newsletter is your e-mail address. Providing further, separately marked data is voluntary and is used to be able to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 Para. 1 a GDPR.
You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail or by contacting the data protection officer specified above.
6 Registration and Portal Use
You have the option of registering with us and creating a customer account. For the registration we collect and store the following data from you:
- First name
- E-mail (username)
We use the so-called double opt-in procedure for registration, i. H. Your registration is not complete until you have previously confirmed your registration by clicking on the link contained in a confirmation e-mail sent to you for this purpose. If you do not confirm this within 48 hours, your registration will be automatically deleted from our database. The provision of the aforementioned data is mandatory, you can provide all other information voluntarily by using our portal.
After registration, you will receive personal, password-protected access and can view and manage the data you have stored. Registration is voluntary, but may be a prerequisite for using our services.
If you use our portal, we store your data required to fulfill the contract, possibly also information on the method of payment, until you finally delete your access. Furthermore, we store the data you provide voluntarily for the duration of your use of the portal, unless you delete them beforehand. You can manage and change all information in the protected customer area. The legal basis is Art. 6 Para. 1 a, b and f GDPR.
You can apply to our company electronically, in particular via e-mail. Of course, we will only use your information to process your application and will not pass it on to third parties. Please note that unencrypted emails are not protected against access.
If you have applied for a specific position and it has already been filled, or if we consider you to be equally or even more suitable for another position, we would be happy to forward your application within our company. Please let us know if you do not agree to a forwarding.
Your personal data will be deleted immediately after the application process has been completed, or after a maximum of 6 months, unless you have given us your express consent to store your data for a longer period of time or a contract has been concluded. The legal basis is Art. 6 Para. 1 a, b and f.
8 Use of Social Plugins
This website uses social plugins from the provider(s).
– Facebook (operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
These plugins usually collect data from you by default and transmit it to the server of the respective provider. In order to ensure the protection of your privacy, we have taken technical measures to ensure that your data cannot be recorded by the providers of the respective plugin without your consent. When you call up a page on which the plugins are integrated, they are initially deactivated. The plug-ins are only activated when you click on the respective symbol, and you thereby give your consent for your data to be transferred to the respective provider. The legal basis for using the plugins is Art. 6 Para. 1 a and f GDPR.
After activation, the plugins also collect personal data such as your IP address and send this to the server of the respective provider, where it is stored. In addition, activated social plugins set a cookie with a unique identifier when the relevant website is accessed. This also allows the providers to create profiles of your usage behavior. This also happens if you are not a member of the social network of the respective provider. If you are a member of the provider's social network and you are logged in to the social network during your visit to this website, your data and information about your visit to this website can be linked to your profile on the social network. We have no influence on the exact scope of the data collected from you by the respective provider. For more information about the scope, type and purpose of data processing and about rights and setting options to protect your privacy, please refer to the data protection information of the respective provider of the social network. These can be accessed at the following addresses:
This website uses the following types of cookies, the scope and functionality of which are explained below:
9.1 Transient Cookies
These cookies are automatically deleted when you close your browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
9.2 Prevention of Cookies
You can configure your browser settings according to your wishes and e.g. B. refuse to accept third-party cookies or all cookies. We would like to point out that you may then not be able to use all the functions of this website.
9.3 Legal basis and storage period
The legal bases for possible processing of personal data and their storage period vary and are presented in the following sections.
10 Website Analysis
For the purposes of analyzing and optimizing our websites, we use various services that are presented below. For example, we can analyze how many users visit our site, which information is most in demand or how users find the offer. Among other things, we collect data about the website from which a person concerned came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. This helps us to design and improve our offers in a user-friendly manner. The data collected is not used to personally identify individual users. Anonymous or at most pseudonymous data is collected. The legal basis for this is Art. 6 Para. 1 f GDPR.
10.1 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc, (1600 Amphitheater Parkway Mountain View, CA 94043, USA) Use includes the Universal Analytics operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze a user's activities across devices.
You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by https://tools.google.com/dlpage/gaoptout?hl=de download and install. Opt-out cookies prevent future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt out on all systems used. If you click here, the opt-out cookie will be set: Disable Google Analytics
11 Data Transfer
A transfer of your data to third parties does not take place unless we are legally obliged to do so, or the transfer of data is necessary to carry out the contractual relationship, or you have previously expressly consented to the transfer of your data.
External service providers and partner companies such as online payment providers or the shipping company commissioned with the delivery will only receive your data if this is necessary to process your order. In these cases, however, the scope of the transmitted data is limited to the necessary minimum. Insofar as our service providers come into contact with your personal data, we ensure that they comply with the provisions of the data protection laws in the same way as part of order processing in accordance with Article 28 GDPR. Please also note the respective data protection notices of the providers. The respective service provider is responsible for the content of third-party services, whereby we check the services for compliance with legal requirements within the scope of what is reasonable.
We value processing your data within the EU/EEA. However, we may use service providers who process data outside of the EU/EEA. In these cases, we ensure that an adequate level of data protection is established at the recipient before the transmission of your personal data. This means that a level of data protection is achieved via EU standard contracts or an adequacy decision, such as the EU Privacy Shield, that is comparable to the standards within the EU.
12 Data Security
We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological advances.
As of May 2018