Privacy Policy, dated October 2021
Tegelberg-/Breitenbergbahn
Address: Tegelbergbahn GmbH & Co. KG
Tegelbergstraße 33
87645 Schwangau/Allgäu
VAT Number: DE128288865
Email: info@tegelbergbahn.de
Phone: +49 8362/98360
We collect your personal data because of the following reasons:
The Tickets are personal and we have to be able to check if it is the correct person using theTicket.
In case of refunds or issue of new RFID cards, we will have to be able to identify the correct Ticket holder. And we want you as a customer to have full control with your personal data.
As an online customer you may go to MY ACCOUNT and manage your personal data:
Payment data will be processed for purposes pursuant to directive 2015/2366 (EU) and subsequent changes to payment services in the European internal market (so-called PSD2).
Datenschutzerklährung
1) Information on the collection of personal data and contact details of the responsible person
1.1 We are pleased that you visit our website and thank you for your interest. In the following, we will inform you about the handling of your personal data when using our website. Personal data is any data that can be used to identify you personally.
1.2 The person responsible for data processing on this website within the meaning of the Data Protection Regulation (DSGVO) is Tegelbergbahn GmbH & Co. KG, Tegelbergstraße 33, 87645 Schwangau, Germany, Tel.: + 49 (0) 83 62 / 9 83 60, Fax: + 49 (0) 83 62 / 98 36 20, e-mail: info@tegelbergbahn.de. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential transmission of personal data and other confidential content (e.g. orders or inquiries to the inquiries to the responsible person) an SSL or TLS encryption. You can recognize an connection by the string "https://" and the lock symbol in your browser line. in your browser bar.
2) Data collection when visiting our website
When you use our website for information purposes only, i.e. when you do not register or
register or otherwise transmit information to us, we only collect data that your
data that your browser transmits to our server (so-called "server log files"). When you
our website, we collect the following data, which is technically necessary for us to
necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate
interest in improving the stability and functionality of our website. A
passing on or other use of the data does not take place. We reserve the
however, reserve the right to check the server log files retrospectively, should concrete
indications of unlawful use.
3) Hosting & Content-Delivery-Network
AWS-CloudFront (Amazon)
On our website, we use the Content Delivery Network ("CDN") "AWS
CloudFront" of the service provider "Amazon" (Amazon EU S.a. r.l., 38 avenue John F.
Kennedy, L-1855 Luxembourg).
A content delivery network is an online service that can be used to deliver large
especially large media files (e.g. graphics, page content or scripts) are
through a network of regionally distributed servers connected via the Internet.
and connected via the Internet. The use of the Content Delivery Network from Amazon helps us to
optimize the loading speeds of our website.
The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate
interest in the secure and efficient provision and improvement of the stability and functionality of our website.
stability and functionality of our website.
For more information, please see Amazon's privacy policy at:
https://docs.aws.amazon.com/de_de/AmazonCloudFront/latest/DeveloperGuide/data-protection-summary.html
4) Cookies
In order to make the visit to our website attractive and to enable the use of certain
functions, we use cookies, i.e. small text files that are stored on your end device.
stored on your terminal device. In some cases, these cookies are automatically deleted
automatically deleted after you close your browser (so-called "session cookies").
remain on your end device for a longer period of time and allow you to save page settings
page settings (so-called "persistent cookies"). In the latter case, you can change the
the storage period of the overview of the cookie settings of your web browser.
see.
Insofar as individual cookies used by us also process personal data
are processed, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either
for the performance of the contract, pursuant to Art. 6 para. 1 lit. a DSGVO in the case of a
given consent or according to Art. 6 para. 1 lit. f DSGVO for the protection of our
legitimate interests in the best possible functionality of the website as well as a
customer-friendly and effective design of the site visit.
You can set your browser in such a way that you are informed about the setting of cookies
cookies and decide individually whether to accept them or to refuse the use of cookies
for certain cases or generally exclude.
Please note that the functionality of our website may be limited if you do not accept cookies.
website may be limited.
5) Contact
In the context of contacting us (e.g. via contact form or e-mail), the following data will be collected - exclusively for the purpose of processing and responding to your request and only to the extent to the extent necessary for this purpose - personal data is processed. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f DSGVO. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted if it is clear from the circumstances indicate that the matter in question has been conclusively clarified, and and insofar as there are no legal retention obligations to the contrary
6) Data processing for order processing
6.1 As far as necessary for the execution of the contract for delivery and payment purposes,
the personal data collected by us will be transferred in accordance with Art. 6 para. 1 lit. b
DSGVO to the commissioned transport company and the commissioned credit institution.
passed on.
For the processing of your order, we also work with the following service provider(s)
service provider(s), which support us in whole or in part in the execution of the
in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the
certain personal data to these service providers in accordance with the following information.
6.2 Use of payment service providers (payment services)
- Adyen
If you choose a payment method of the payment service provider Adyen,
the payment will be processed by the payment service provider Adyen, Simon
Carmiggeltstraat 6 - 50, 1011 DJ Amsterdam, The Netherlands, to whom we transfer the information you
the order process together with information about your order (name, address, IBAN, etc.).
order (name, address, IBAN, BIC, invoice amount, currency and
transaction number) in accordance with Art. 6 para. 1 lit. b DSGVO. The passing on
of your data is solely for the purpose of payment processing with the
payment service provider Adyen and only insofar as it is necessary for this purpose.
- giropay
If payment is made via "giropay", the payment will be processed via giropay GmbH, An
der Welle 4, 60322 Frankfurt/Main, to which we pass on the information you provided during the
information provided during the ordering process, together with the information about your order.
The transfer of your data takes place in accordance with Art. 6 para. 1 lit. b DSGVO exclusively for the purpose of
payment processing and only insofar as it is necessary for this purpose. At
the following internet address you will find further information about the
Privacy Policy of giropay GmbH:
https://www.giropay.de/rechtliches/datenschutzerklaerung
- Klarna
If you choose a Klarna payment service, the payment will be processed through
Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34
Stockholm, Sweden (hereinafter "Klarna"). To enable the processing of the payment
your personal data (first and last name, street,
house number, postal code, city, gender, e-mail address, telephone number and
IP address) as well as data related to the order (e.g. invoice amount, article
(e.g. invoice amount, article, delivery type) for the purpose of checking your identity and creditworthiness.
Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this in accordance with Art. 6 Para. 1 lit. a DSGVO during the ordering process.
expressly consented to this during the ordering process. To which credit agencies your data
can be forwarded, you can see here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values).
If score values are included in the result of the credit report, they are based on a scientifically recognized
basis in a scientifically recognized mathematical-statistical procedure.
method. The calculation of score values includes, but is not limited to, address data.
but not exclusively, address data. The information obtained about the statistical
Klarna uses the information obtained about the statistical probability of non-payment for a weighted
decision on the establishment, execution or termination of the contractual relationship.
contractual relationship.
You may withdraw your consent at any time by sending a message to the data
Data Controller or to Klarna. However, Klarna remains
Klarna may continue to be entitled to process your personal data, provided that this is
this is necessary for the processing of payments in accordance with the contract.
Your personal data will be processed in accordance with the applicable
data protection regulations and in accordance with the information in Klarna's
Privacy Policy for Data Subjects Located in Germany
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for affected persons domiciled in Austria
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
treated.
7) Web analytics services
Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google
Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google
(Universal) Analytics uses so-called "cookies", which are text files that are stored on your
stored on your terminal device and which allow an analysis of your use of the website.
website. The information generated by the cookie about your use of this website
website (including the shortened IP address) is usually transferred to a Google server and stored there.
Google and stored there, it may also be transmitted to the servers of Google LLC.
to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()".
extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening the
and excludes a direct reference to a person. Through the extension
your IP address by Google within member states of the European Union or in other
or in other contracting states of the Agreement on the European Economic Area.
Economic Area will be shortened beforehand. Only in exceptional cases will the full IP address be sent to a
server of Google LLC.in the USA and shortened there. On our behalf
Google will use this information for the purpose of evaluating your use of the website, compiling
compiling reports on website activity and for other purposes relating to website activity
website use and internet use and to provide us with other services related to
to us. The IP address transmitted by your browser within the scope of Google (Universal) Analytics is not
IP address transmitted by your browser will not be merged with other data from Google.
Google Analytics also enables the creation of statistics with statements about age and
characteristics", the creation of statistics with statements about age, gender and interests of the site visitors,
gender and interests of the site visitors on the basis of an evaluation of
interest-based advertising and with the involvement of third-party information.
This allows the definition and differentiation of user circles of the website for the purpose of
of the website for the purpose of target-group-optimized marketing measures. Via the
"demographic characteristics" cannot, however, be assigned to a specific person.
person.
Details about the processing triggered by Google Analytics and about how
Google's handling of data from websites can be found here:
https://policies.google.com/technologies/partner-sites
All processing operations described above, in particular the setting of Google
Analytics cookies for reading out information on the end device used,
will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a DSGVO.
have given your express consent to this. Without this consent, the following will not occur
the use of Google Analytics during your visit to the site.
You can revoke your given consent at any time with effect for the future.
To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the
Cookie Consent Tool" provided on the website. We have concluded a contract with Google for the use of
contract with Google for the use of Google Analytics, which obliges
Google is obliged to protect the data of our site visitors and not to pass them on to third
third parties.
For the transfer of data from the EU to the U.S., Google relies on so-called "standard data protection clauses" of the European Commission.
standard data protection clauses of the European Commission, which are intended to ensure compliance
European level of data protection in the USA.
You can find more information about Google (Universal) Analytics here:
https://policies.google.com/privacy?hl=de&gl=de
8) Tools and other
8.1 Cookie-Consent-Tool
This website uses to obtain effective user consents for
cookies and cookie-based applications that require consent.
"Cookie Consent Tool". The cookie consent tool is displayed to users in the form of an interactive user interface
an interactive user interface, on which users can set a checkmark to indicate their
consent for certain cookies and/or cookie-based applications by ticking the box.
applications. By using the tool, all cookies/services requiring consent are only loaded
cookies/services are only loaded if the respective user has given the corresponding
user grants the corresponding consent by setting a check mark. This ensures that such cookies are only loaded
such cookies are set on the respective end device of the user only if consent has been given.
are set.
The tool sets technically necessary cookies to save your cookie preferences.
Personal user data is generally not processed in this process.
If, in individual cases, for the purpose of storing, assigning or logging cookie settings
of cookie settings, personal data (such as the IP address) will be processed in accordance with the
IP address), this will be done in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our
legitimate interest in a legally compliant, user-specific and user-friendly
user-friendly consent management for cookies and therefore in a legally compliant
legally compliant design of our website.
Further legal basis for the processing is Art. 6 para. 1 lit. c DSGVO. We as the responsible party are subject to the legal obligation to make the use of technically not necessary cookies dependent on the respective user consent.
Further information on the operator and the setting options of the
Cookie Consent Tool can be found directly in the corresponding user interface on
our website.
8.2 - Google Maps
On our website we use Google Maps (API) from Google Ireland Limited,
Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a
web service for displaying interactive (land) maps to visually present geographic
information visually. By using this service, you will be shown our
location is displayed and a possible approach is facilitated.
Already when calling up those sub-pages in which the map of Google Maps
information about your use of our website (such as your IP address) is transmitted to and stored by
IP address) is transmitted to and stored by Google on its servers.
This may also result in a transmission to the servers of Google LLC. in the USA. This takes place
whether Google provides a user account via which you are logged in or whether a user account exists.
or whether a user account exists. If you are logged in to Google, your data will be
data is directly assigned to your account. If you do not want the assignment with your profile at
Google, you must log out before activating the button. Google
stores your data (even for users who are not logged in) as usage profiles and evaluates
evaluate them. The collection, storage and evaluation are carried out in accordance with Art. 6 para. 1
lit. f DSGVO on the basis of the legitimate interest of Google in the display of
personalized advertising, market research and / or the needs-based design of
of Google websites. You have the right to object to the formation of these user
user profiles, whereby you must contact Google to exercise this right. If
you do not agree to the future transmission of your data to Google in the context of the use of
Google Maps, you also have the option of completely deactivating the web service of
Google Maps web service by turning off the JavaScript application in your browser.
browser. Google Maps and therefore also the map display on this website
website can then not be used.
You can read Google's terms of use at
https://www.google.de/intl/de/policies/terms/regional.html, the additional
Terms of Use for Google Maps can be found at
https://www.google.com/intl/de_US/help/terms_maps.html
You can find detailed information on data protection in connection with the use of
Google Maps can be found on the Google website ("Google Privacy Policy"):
https://www.google.de/intl/de/policies/privacy/
As far as legally required, we have obtained your consent for the processing of your data as described above.
we have obtained your consent in accordance with Art. 6 (1) a DSGVO. You can revoke your
revoke your consent at any time with effect for the future. To exercise your revocation
exercise your revocation, please follow the aforementioned possibility to make an objection.
an objection.
9) Rights of the data subject
9.1 The applicable data protection law grants you vis-à-vis the controller
the following rights with regard to the processing of your personal data
(rights of information and intervention), whereby reference is made to the respective
For the respective prerequisites for exercising these rights, please refer to the legal basis listed:
.
- Right to information pursuant to Art. 15 DSGVO;
- Right to rectification pursuant to Art. 16 DSGVO;
- Right to erasure according to Art. 17 DSGVO;
- Right to restriction of processing pursuant to Art. 18 DSGVO;
- Right to information pursuant to Art. 19 GDPR;
- Right to data portability according to Art. 20 DSGVO;
- Right to revoke consent given in accordance with Art. 7 (3) DSGVO;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
9.2 RIGHT OF OBJECTION
IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL
DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT
YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS
YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTUREIF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE. WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
10) Duration of the storage of personal data
The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).
When processing personal data on the basis of explicit consent pursuant to Art. 6 (1) a DSGVO, this data is stored until the data subject revokes his or her consent.
If there are legal retention periods for data that is processed within the scope of legal business or similar obligations on the basis of Art. 6 Para. 1 lit. b DSGVO, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no legitimate interest on our part in continuing to store it.
When processing personal data on the basis of Art. 6(1)(f) DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21(1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct marketing based on Art. 6 (1) lit. f DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21 (2) DSGVO.
Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.