Privacy policy
Privacy Policy
This website is operated by Sport Bachler Gesellschaft m.b. H. (FN106077x), hereinafter referred to as “we“, “us“ and “INTERSPORT“, with registered office in Ramsau 167, 8972 Ramsau am Dachstein. As Data Controller in accordance with Art. 4 (7) of the GDPR, we describe in this Data Privacy Notice which data we collect from you when you visit our website and for which purposes we process such data.
The protection of your personal data is very important to us. We strictly adhere to the statutory provisions as set forth in the Data Protection Act and the GDPR when collecting and processing your personal data.
In the following, we inform you in detail about the scope and purpose of our data processing as well as your rights as data subject. Therefore, please read our Data Privacy Notice thoroughly before you continue using our website and provide your consent to data processing if applicable.
For all relevant contact data, please refer to Point 12 of this Data Privacy Notice.
1. Personal data
In general, you can use our website without disclosing any personal data. However, the use of individual services can be subject to deviating provisions which we will point out to you separately. If you wish to use our booking and lending services, it will, in particular, be necessary to provide us with certain data for this purpose.
Thus - apart from the cookies described in detail hereinafter - we generally only collect and store such data which you provide to us yourself by entering them into our input screen or through any other active interaction with our website.
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, your address, telephone number or date of birth, but also any items and services that you book through our booking platform.
2. Use of cookies
a. In case of a merely informative use of our website, i.e. if you do not use any of our services or transfer information in any other way to us, we will only collect personal data that your browser transfers to our server. If you wish to visit our website, we will collect the following data, which are technically necessary for us to display our website to you and to ensure its stability and security based on our legitimate interest in accordance with Art. 6 (1) sentence 1 point (f) of the GDPR:
- IP address
- date and time of the request
- time zone difference to Greenwich Mean Time (GMT)
- content of the request
- access status / http status code
- the transferred data volume
- website from which the request originates
- browser used
- operating system and its interface
- language and version of the browser software
b. In addition to the above-mentioned data, cookies will be stored on your computer when you use our website; these are small text files that are stored on your hard disk as assigned by the browser that you use and which allow the entity placing the cookies (in this case, us), to transfer certain information. On the one hand, we need these cookies to recognise you as a user of the website and on the other hand, to be able to make the bookings that you place through the shopping basket while using our services transparent.
Our website uses the following types of cookies, the scope and functionality of which are explained below:
- Transient cookies
Transient cookies will automatically be deleted when you close your browser. This includes, in particular, session cookies that store a so-called session ID with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognised if you return to our website, and these session cookies will be deleted when you log out or close the browser.
- Persistent cookies
Persistent cookies will be deleted automatically after a pre-defined period, which can be different depending on the cookie. However, you may delete the cookies in your browser settings at any time.
You have the option to change your browser settings in a way in which you will, for example, be able to reject the acceptance of third party cookies or of all cookies. However, we have to notify you that in such a case, you may no longer be able to use all functions of our website.
We also use cookies on our website so as to be able to identify you on any subsequent visits, if you have an account with us - otherwise you need to newly log in for each visit.
c. On our website, we also use so-called local storage functions (also called "local data"). This means that data is stored locally in the cache of your browser, which continues to exist and can be read even after you close the browser - as long as you do not delete the cache or data is stored within the session storage.
Third parties cannot access the data stored in the local storage. If special plug-ins or tools use the local storage functions, you are informed within the description of the respective plug-in or tool.
If you do not wish plug-ins or tools to use local storage functions, you can control this in the settings of your respective browser. We would like to point out that this may result in functional restrictions.
3. Collection and processing of personal data & storage period
We use the booking system of INTERSPORT AUSTRIA Gesellschaft m.b.H., Flugplatzstraße 10, 4600 Wels (“ISA”) to register the reservation, to complete the booking in accordance with the contract, and to maintain our services.
We use any personal data that we collect through the above-mentioned cookies or by your explicit provision for the purpose of maintaining our website services, to enable the bookings you make through the booking tool of ISA and, subsequently, for direct marketing purposes. While certain data you provide on the booking tool of ISA will be collected for the purpose of taking steps prior to entering into a contract or for the performance of a contract, we process data to maintain our services and for marketing purposes on the basis of our legitimate interest.
In certain tools it is possible that you provide us with data and grant consent for an intended data processing, but, in such case, we will give you a separate notice. Otherwise, we will use the personal data provided by you exclusively to fulfil the purpose of processing indicated in each case, e.g. to send advertising and information material to existing customers by observing the TKG [Telecommunications Act].
The purpose of the processing of your data is , essentially, the operation of our website and the targeted provision of company-specific information, including the presentation of goods and services we offer (marketing). Any further use of your data only takes place to the extent that you provided us with your prior and express consent. You can withdraw your consent at any time with effect for the future - as set forth in more detail below.
In general, we store data which you provided us with only for customer support or for marketing and information purposes, until expiry of five years after our last communication. However, we will erase your data before expiry of such period if you so request to the extent this is not prevented by applicable statutory provisions.
In the event of a contract initiation or conclusion, we will process your personal data after the full performance of the contract until the expiry of the guarantee, warranty, limitation and statutory retention periods to which we are subject, and until conclusion of any legal disputes for which we need the data as legal evidence.
4. INTERSPORT Rent
Our website utilises the booking platform of ISA, which is also used by other INTERSPORT dealers in Germany, Austria, Switzerland or Italy that you can find and select using the link https://www.intersportrent.at/en/locations.
When we reserve sporting goods for you, it is necessary to collect some personal data, such as your contact details and details of your weight, height, shoe size and riding skills, as well as details of those travelling with you who are also making a reservation. Such information is necessary to tailor sporting goods to your needs in advance of your on-site reservation and to provide you with the greatest possible comfort and safety. You are welcome to contact our sites directly if you do not wish to provide such information on our website.
After your reservation request has been made in our system a contractual relationship is usually established between you and our company. You can pay for the selected products via one of our payment providers.
After successful completion of the reservation and, if applicable, payment, we carry out the fine-tuning and handover of the reserved goods on-site.
It is possible that we not only collect this data from you on www.intersport-bachler.at ourselves and update it in the process but also via your details on other platforms such as www.intersportrent.at, www.intersportrent.de, www.intersportrent.ch, www.intersportrent.it, www.intersportrent.com or via cooperation partners from the B2B sector, via partners from our affiliate programme or travel providers cooperating with us (https://www.intersportrent.at/en/cooperations).
We process the personal data that you provide in the course of the reservation process ourselves for the duration of any statutory retention periods, but in any case for five years. We also do this in your interest, in order to be able to offer you the products you have used and hopefully found to be good, such as skis, ski boots or other sports equipment, again in the configuration suitable for you in any subsequent reservations.
5. Use of your data for direct marketing purposes
When you visit our site or use our reservation service, we collect some personal data, which we also process for legitimate interest to analyse your user behaviour and send you customised direct advertising.
In any case, as part of our marketing activities, we take care to advertise in a targeted and tailored manner. Accordingly, through the applications described in our cookie banner and our marketing, we record which customers and prospects are interested in which products and how often they actually enter into a contractual relationship with us. Influenced by this, we also coordinate advertising measures in order, for example, to inform regular customers more frequently about our product range. On the other hand, we select the content and scope of advertising measures for occasional interested parties according to other aspects.
We use the data provided by you and generated via analytics and marketing tools to subsequently inform you, on the one hand, about possible upgrades to your previous reservation (e.g., further possible equipment components) or to send you other tailored advertisements based on your usage behaviour.
You can find information about the analytics and marketing tools used under section 8 of this privacy policy.
6. Newsletter
You have the option to subscribe to our free newsletter. With this newsletter, you can regularly receive all the latest news and information about our company and tailored advertising on the sports articles available at our stores and our locations.
You can only sign up for a newsletter once you have created an optional customer account. As a new customer, after submitting your reservation request you will receive an e-mail informing you that you can open a customer account. If you wish to open a customer account, you can initiate this by clicking on the activation link contained in the e-mail. Subsequently, you can confirm the account activation. Once you have opened a customer account, you can then sign up for newsletters by agreeing to receive them. When you first register for the newsletter, we save the date and time of your registration in order to be prepared for security reasons in the event that a third party misuses your e-mail address and subscribes to our newsletter without your knowledge. No other data is collected or processed by us for the newsletter subscription; the data is used exclusively for the subscription of the newsletter.
Unless you object, we will transmit your data within our company and to the sites cooperating with us for the purpose of analysing your user behaviour and, based on this, to send you information for advertising purposes. Within the group of companies, the data that you provided to us for the purpose of receiving the newsletter will be matched with data that we may collect elsewhere (e.g., when you purchase a product or book a service) in order to enable customised advertising.
This linkage is essentially also carried out via cookies, which are stored in our system depending on how you react to our newsletter. These provide us with information about which contents and articles of our newsletter were particularly interesting for the recipients and should therefore be promoted as a service in the interest of our customers in the future.
The data collected and linked in this way is managed by us in a central customer database maintained by ISA and used as part of an individualised campaign management system "DynaCampaign" to plan, control and implement (partially) automated and customised marketing campaigns.
Your newsletter registration data will not be passed on to third parties who do not belong to the group of INTERSPORT companies or are connected with INTERSPORT in the course of a franchise agreement. You can unsubscribe from our newsletter at any time. You will find information on how to unsubscribe in your customer account and in each individual newsletter.
7 Data transfer to the USA
We occasionally offer some services in the course of which data is or may be transferred to the USA. The transfer of data to the USA has always led to legal challenges in recent years. There are several legal bases for a legally compliant data transfer to the USA, whereby we generally rely on two different legal bases:
Data transfer based on the existence of an adequacy decision
On 10 July 2023, the European Commission adopted a new adequacy decision pursuant to Art. 45 GDPR for the USA - namely the EU-U.S. Data Privacy Framework.
However, this adequacy decision only applies to those data importers in the USA that are registered on the Data Privacy Framework List (https://www.dataprivacyframework.gov/s/participant-search).
We check for each of our service providers who are to receive personal data in the USA as data importers whether they are registered on the Data Privacy Framework List. If this is the case, this is stated in our privacy policy for the respective service provider.
You can find the EU Commission's press release on the EU-U.S. Data Privacy Network at: https://ec.europa.eu/commission/presscorner/detail/en/ip_23_3721.
Consent
However, if a data importer is not registered in the Data Privacy Framework List, it is necessary - unless there is another justification, such as the fulfilment of contractual obligations - that you consent to the use of your data collected via these services, including in the USA (Art. 49 para. 1 lit. a GDPR).
This is because we are not yet able to assess how jurisdiction will develop as a result of the EU-U.S. Data Privacy Network. We collect this consent - depending on the service - via our cookie banner or separately by means of a corresponding declaration of consent directly before using a service offered.
Your consent is required as, according to the most recent official and court decisions and the case law of the ECJ, the USA is not recognised as having an adequate level of data protection when processing personal data (C-311/18, Schrems II). These official and court decisions are particularly critical of the fact that access by US authorities (FISA 0702) is not comprehensively restricted by law, does not require authorisation by an independent body and there are no relevant legal remedies available to those affected in the event of such interventions.
Apart from the contracts concluded with US service providers, we have no direct influence on the access of US authorities to personal data that is transferred to service providers in the USA when using these services. Even if we assume that our service providers take the necessary steps to guarantee the promised level of protection in accordance with the contractual agreements concluded with us, access by US authorities to data processed in the USA is nevertheless conceivable.
We therefore request your consent to the processing of data in the USA before using such services. We will point out separately for each service or application that there is a possibility of data being transferred to the USA. that there is a possibility of data transfer to the USA.
8. Tools and applications used
8.1 Links to other websites
Our website also includes links to other websites such as those of our affiliate partners, our locations and other cooperation partners; this is solely done for information purposes, unless a joint responsibility applies for the reservation portal. These websites are not under our control and are therefore not covered by the provisions of this data privacy notice. If you activate a link, the operator of such website may collect data on you and process them in accordance with their data privacy notice, which may deviate from ours.
8.2 Google tools
We use various Google tools on our website. You can prevent the installation of cookies from Google in various ways, in particular by rejecting the service when visiting our websites in the cookie banner or by setting your browser software accordingly.
Details on how to individually reject cookies can be found in the cookie banner on our website. We would like to point out that in this case you may not be able to use all the functions of our websites to their full extent. Based on the web analysis and marketing tools described below and used by us, your browser automatically establishes a direct connection to the Google server with your consent. We have no influence on the scope of the information transmitted in this context and the further use of the data by Google. The scope and purposes of the processing known to us are described in the respective tools.
Google also processes your data in the USA. Before you give your consent to the storage of cookies through the use of Google, please read the relevant information in our privacy policy. Google LLC is registered in the Data Privacy Framework List. Further information on the purpose and scope of data collection and its processing by Google, as well as further information on your rights and setting options in this regard, can be obtained from Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA.
8.2.1 Google Analytics
We use the Google Analytics analysis tool on our website. Google Analytics is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The cookies used in this process generate information about your use of this website and are usually transferred to a Google server and stored there.
Google uses this information on our behalf to evaluate your use of our website, to compile reports on website activity, and to provide other services related to website and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
The storage of cookies required by Google Analytics can be prevented by our cookie banner or by a corresponding setting of your browser software; however, this may result in you not being able to use all functions of this website to their full extent. You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as its transmission and processing by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
You can also access the terms of use of Google Analytics and information on data protection via the following link: https://marketingplatform.google.com/about/analytics/terms/de/.
For information on how Google Analytics handles user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en&sjid=9611618555255177641-EU
8.2.2 Google Tag Manager
We use the service Google Tag Manager on our website. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
When the Tag Manager is started, your browser establishes a connection to Google's servers, which are mainly situated in the US. This informs Google that our website has been accessed via your IP address. You can find out exactly where Google data centers are located here: https://www.google.com/about/datacenters/inside/locations/
Google Tag Manager is used to manage website tags via an interface. This enables us to embed code snippets such as tracking codes or conversion pixels into our website without interfering with the source code. In this process, Tag Manager data is only transferred, it is neither collected nor stored. The Tag Manager itself is a cookie-less domain and does not process any personal data, because it is used solely to manage other services used on our website based on our legitimate interest according to Art 6 paragraph 1 lit f GDPR. The Tag Manager triggers other tags which in turn collect data under specific circumstances. However, the Tag Manager has no access to this data. If you have chosen to deactivate cookies on our site in general or to deactivate specific cookies, this will remain in effect for all tracking tags that are implemented using the Tag Manager.
To prevent this service, you can install a JavaScript blocker. However, this may result in the website no longer functioning as usual.
For more information about data protection, refer to the following Google websites:
Privacy Policy: https://policies.google.com/privacy
FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html
Use Policy Google Tag Manager: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/
8.2.3 Google Maps
We use the services of Google Maps on our website to show you the locations of our stores and contractual partners and to enable you to make a quick selection. With this tool, we can show you a corresponding interactive map directly on the website and provide you with convenient use of the map function.
The company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for the European area. Every time the “Google Maps” component is accessed, Google sets a cookie in order to process user settings and data when displaying the page on which the “Google Maps” component is integrated. As a rule, this cookie is not deleted when the browser is closed but it expires after a certain time, unless you delete it manually beforehand.
If you do not agree with this processing of your data, you can deactivate the “Google Maps” service and thus prevent the transfer of data to Google. To do this, you must deactivate the Java Script function in your browser. However, we would like to point out that you will then not be able to use “Google Maps” or only to a limited extent in this case.
The use of “Google Maps” and the information obtained via “Google Maps” is subject to the Google Terms of Use and the Terms and Conditions for Google Maps. For more information, please see Google’s privacy policy, which you can access here: https://www.google.com/policies/privacy/
You can find out exactly where Google data centres are located here: https://www.google.com/about/datacenters/inside/locations/
You can find the data processing terms and conditions for Google products and the standard contractual clauses for data transfers to third countries at https://business.safety.google/adsprocessorterms/
8.2.4 YouTube
On our website we use the service „YouTube“ to give you an interactive word of advice for a varied and unforgettable holiday. Using this tool allows us to show you to watch videos conveniently without leaving our website.
YouTube ist operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland ("YouTube").
We have activated the extended data protection mode on YouTube. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch a video. However, the disclosure of data to YouTube partners is not excluded by the extended data protection mode.
As soon as you start a YouTube video, a connection to YouTube's servers is established. This tells YouTube which of our pages you have visited. If you are logged into your YouTube account, you thereby enable YouTube to assign your surfing behaviour directly to your personal profile. This can be prevented by logging out of your account.
Furthermore, YouTube can save various cookies on your end device after starting a video or use comparable technologies (e.g. device fingerprinting). YouTube also uses the local storage on your end device. In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts.
YouTube is used in the interest of an appealing presentation of our website. This represents a legitimate interest within the meaning of Art. 6 paragraph 1 lit. f GDPR. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 paragraph 1 lit. a GDPR; the consent can be revoked at any time for the future.
The applicable privacy policy of YouTube can be found at: https://www.google.com/policies/privacy/, Opt-out option: https://adssettings.google.com/authenticated
8.2.5 Google Ads
The service Google Ads is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") and is used on this website for the purpose of analyzing, optimizing and economically operating our online offering.
Google Ads is Google's in-house online advertising system.
It is important for us to know whether an interested visitor ultimately becomes our customer. In order to be able to measure this, there is the so-called "conversion tracking". Furthermore, we would like to be able to address visitors to our website again and in a targeted manner. We achieve this through so-called "remarketing (retargeting)".
Google Ads is used for both "conversion tracking" and "remarketing", i.e. we can see what happened after you clicked on one of our ads. In order for this service to work, cookies are used and visitors are sometimes added to remarketing lists in order to be served only with certain advertising campaigns.
Our aim is to use Google Ads to target the offer of our website to those visitors who are actually interested in our offer. The data from "conversion tracking" enables us to measure the benefit of individual advertising measures and optimise our website for our visitors.
When you visit our website, Google receives the information that you accessed our website and will place cookies. Your data will, in this context, also be transferred to the USA and analysed there. If you are logged in to your Google account, your data can directly be assigned to it. If you do not want the data to be associated with your Google profile, you must log out.
We have no influence on how Google uses the data. According to information from Google, however, the data is stored in encrypted form on secure servers.
Participation in conversion tracking by Google Ads is based on your consent pursuant to Art. 6 paragraph 1 lit a GDPR. You can revoke this consent at any time with effect for the future.
You can find more information about Google AdWords and Google Conversion Tracking and Remarketing in Google's privacy policy: https://policies.google.com/privacy.
More information about Google's data use:
Google advertising setting: https://adssettings.google.com/authenticated
Google Advertising Products Data Processing Terms: https://privacy.google.com/businesses/adsservices/
Google Ads Controller Data Protection Terms including standard contractual clauses: https://business.safety.google/adscontrollerterms/
8.2.6 Google Marketing Platform / Google Ad Manager (former Doubleclick)
We use the service Google Marketing Platform / Google Ad Manager provided by Google on our website for purposes of analysis and optimisation and for the commercial operation of our website. This tool is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
This service works by means of a pseudonymous identification number (pID), which is received by and assigned to your browser. This pID enables the service to detect which ads have already been displayed to you and which have been accessed.
This data is used to display ads throughout a website be enabling Google to identify which pages you have visited. The information collected is transferred to a Google server in the USA and stored there for analysis. Google is only allowed to transfer data to third parties in accordance with legal regulations or in the context of contractual data processing. Under no means is Google permitted to add your data to other data that it has collected.
The processing of your data is subject to your consent in the sense of Art 6 paragraph 1 lit. a of the GDPR. You can withdraw this consent at any time, with effect for the future.
You can find out exactly where Google data centres are located here: https://www.google.com/about/datacenters/inside/locations/
For more information about how Google uses your data, and about options for settings and withdrawal of consent, refer to the Google Privacy Policy at https://policies.google.com/technologies/ads as well as the settings for Google ad display under https://adssettings.google.com/authenticated
Data processing conditions for Google advertising products: Information on services Data processing conditions between data controllers and standard contractual clauses for third country transfers of data: https://business.safety.google/adscontrollerterms
8.3 Meta-Pixel
We use the Meta-Pixel provided by the social networks Facebook and Instagram on our website for purposes of analysis and optimisation and for the commercial operation of our website. This tool is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Meta‘).
Meta-Pixel makes it possible for Meta to identify visitors of our website as target groups for displaying ads. Therefore, we use Meta-Pixel to display our ads only to users who have shown interest in our online product offering, or who show certain characteristics (e.g. interests in specific topics or products that are determined based on the websites they have visited), which we share with Meta (i.e. ‘custom audiences’). By using Meta-Pixel, we also want to ensure that our ads match the potential interests of users and do not cause any inconvenience. Furthermore, by using Meta-Pixel, we can evaluate the effectiveness of ads for statistical and market research purposes by seeing whether the user was redirected to our website after clicking on an ad (i.e. ‘conversion’).
Your actions are stored in one or more cookies. These cookies enable Meta to match your user data (such as IP address, user ID) with the data of your Facebook account. The collected data is anonymous and not visible to us and can only be used in the context of advertisements. You can prevent the linking with your Facebook and Instagram account by logging out before you take any action.
The processing of your data is based on your consent within the meaning of Art 6 paragraph 1 lit. a GDPR. You can revoke this consent at any time with effect for the future.
Further information on how Meta processes personal data, including the legal basis on which Meta relies and the possibilities for exercising the rights of data subjects vis-à-vis Meta, can be found in the Meta Data Policy at https://www.facebook.com/policy.php
If you want to control what kind of adverts are displayed to you on Facebook and Instagram, you can go to the page Meta has set up for this purpose and follow the instructions on configuring user-targeted adverts: https://www.facebook.com/settings?tab=ads
The settings chosen will be applied across all platforms, meaning that they will apply to all devices from your desktop to mobile.
Meta processes data in accordance with its privacy policy. For general information about the presentation of ads, refer to: https://www.facebook.com/policy.php
You can find more specific, detailed information about Meta-Pixel and how it works on Meta’s Help pages: https://en-gb.facebook.com/business/help/742478679120153?id=1205376682832142
8.4 Feratel
On our website we use the ISA reservation tool, which has integrated webcams from Feratel to give you impressions of ski resorts. If you interact with these plug-ins of Feratel, Feratel will store different personal data such as, e.g., your IP address and the type and scope of your use of Feratel’s services. We have no influence on the processing of your data by Feratel; for details, please refer to the data privacy provisions of feratel media technologies AG, 6020 Innsbruck, Maria-Theresien-Strasse 8, Austria, at https://www.feratel.at/en/privacy-policy/.
8.5 Tidio Chat
On our website we use the ISA reservation tool, which has integrated live chat software provided by Tidio Ltd. 220C Blythe Road, W14 0HH, London, United Kingdom ("Tidio"). The chat is integrated in the source code via a script. By using this website you automatically use the services of TidioChat.
The data collected includes: Chat history, IP address at the time of the chat and country of origin. If you are a logged in customer and the information exists, the following additional data is transmitted: Name / user name, email address, origin (zip code, city, country of origin).
Purpose and extent of data collection and further processing and use of data by Tidio as well as your rights and settings options to protect your privacy can be found in the privacy policy of Tidio Ltd.: https://www.tidiochat.com/en/privacy-policy.
8.6 WebCare
In order to obtain consent for the use of cookies on our website in accordance with data protection regulations, we use the Consent Banner of DataReporter WebCare. This is a service provided by DataReporter GmbH, Zeileisstraße 6, 4600 Wels, Austria ("DataReporter"). More information about this company can be found at www.datareporter.eu. The Consent Banner records and stores the consent to cookie use for the respective user of our website. Our Consent Banner ensures that statistical and marketing cookies are only set when the user has given his express consent to their use.
We store information on the extent to which the user has confirmed the use of cookies. The user's decision can be revoked at any time by calling up the setting for cookies and managing the declaration of consent. Existing cookies will be deleted after revocation of the consent. A cookie is also set to store information on the status of the user's consent, which is indicated in the cookie details. Furthermore, the IP address of the respective user is transmitted to DataReporter's server for calling this service. The IP address is neither stored nor associated with any other data of the user, it is only used for the correct execution of the service. The use of the above data is therefore based on our legitimate interest in the legally compliant design of our website in accordance with Art. 6 paragraph 1 lit. f GDPR.
Further information can be found in the DataReporter data protection declaration at https://www.datareporter.eu/de/privacystatement.html Please feel free to send your enquiries about this service to office@datareporter.eu.
WebCare Consent Conserve:
On our website, we have activated the WebCare Consent Conserve function. The provider of this service is DataReporter GmbH, Zeileisstraße 6, 4600 Wels, Austria ("DataReporter").
The WebCare Consent Conserve function enables us both to prove the consent of users of our website via our Consent Banner and to make the users' personal consent history transparent and traceable.
This function generates a unique Consent ID for each user and records every action concerning consent or revocation via our Consent Banner in connection with the Consent ID. The history of the user's decisions is stored in a protected memory area and can be viewed by the user at any time. For us as the website operator, an assignment of a history to a specific person can only take place after knowledge of the respective Consent ID.
Each action via the Consent Banner of a user is stored for 60 days and then automatically deleted. The storage location for the Consent ID is Frankfurt / Germany (EU). No logs are kept on the server that store the IP or other personal data, except for the Consent ID and the data on the actions.
The use of this function is due to our documentation and accountability obligations according to Art 5 GDPR. We assume that these obligations to provide evidence regarding the consent of data subjects will also be strengthened in view of the expected ePrivacy Regulation in the online sector.
More information on this function can be found in the provider's help section at: https://help.datareporter.eu/docs/webcare/webcare_consent_conserve/
Further information on data protection can be found at: https://www.datareporter.eu/de/privacystatement.html
WebCare Statistics:
We have activated the WebCare Statistics function on our website. The provider of this service is DataReporter GmbH, Zeileisstraße 6, 4600 Wels, Austria ("DataReporter").
The WebCare statistics function enables us to anonymously record the interactions of the users of our website with our Consent Banner. The statistics only record whether the Consent Banner was opened and which actions were carried out (purposes of consent, revocation). Only statistical data and no activities related to the specific user are stored. The visitor's IP address is only used for the purpose of the connection and is completely deleted after the connection is terminated.
The use of the WebCare statistics function is based on our legitimate interest in reviewing the performance of our Consent Banner and the related user-friendliness and accessibility of our online offer.
The statistical data is stored for 30 days, older data is automatically deleted.
You can find more information about this function in the provider's help section at: https://help.datareporter.eu/docs/webcare/webcare_consent_statistic/
Further information on data protection can be found at: https://www.datareporter.eu/de/privacystatement.html
8.7 Hosting
In the process of hosting our website, we store all data related to the operation of our website. This is necessary for enabling operation of our website. Therefore, we process this data on the legal grounds of our legitimate interest in optimising our website as described under Art. 6 paragraph 1 lit. f of the GDPR. To provide access to our website, we use the services of web hosting providers, to whom we supply the aforementioned data within the context of contractual processing in accordance with art. 28 of the GDPR.
8.9 Contact
Whenever you contact us, your information is used to process and handle your contact request in the course of fulfilling pre-contractual rights and obligations in accordance with Art. 6 paragraph 1 lit. b of the GDPR. To handle and answer your request it is necessary for us to process your data; otherwise we are unable to answer your request or only able to partially answer it. Your information can be stored in a database of customers and leads on the grounds of our legitimate interest in direct marketing as described in Art. 6 paragraph 1 lit. f of the GDPR.
9. Transfer of data to INTERSPORT dealers
Our company is part of a Europe-wide sales network with numerous cooperation partners and franchisees in Germany, France, Switzerland and Austria. It is important for us to be able to offer you the best possible service and comprehensive support, therefore, we jointly use and mutually transfer your personal data with contract partners in Germany, Italy, Switzerland and France to perform our contractual duties and for marketing purposes. But external processors or other cooperation partners will only receive your data to the extent that this is required for contract performance or if we have a legitimate interest therein.
Within the INTERSPORT Austria group of companies, data is processed partly by way of processing on behalf of a controller in accordance with Art. 28 GDPR, but partly also as "joint controllers" within the meaning of Art. 26 GDPR. We regularly conclude agreements with ISA in accordance with Article 26 GDPR on joint responsibilities (e.g. for joint activities for marketing purposes) or processing on behalf of a controller. All these agreements are based on the principle that you can contact both us and the ISA to clarify open questions or to protect your rights. You can find a list of our INTERSPORT Rent dealers at https://www.intersportrent.at/en/locations
10. Security
We employ numerous technical and organisational security measures in order to protect your personal data against manipulation, loss, destruction and access by unauthorised third parties. Our security measures are subject to ongoing improvements in accordance with technological developments on the internet.
11. Your rights
In accordance with the General Data Protection Regulation and the Data Protection Act, you as data subject have the following rights and remedies:
- Right to Access (Art. 15 of the GDPR)
As data subject affected by the data processing activities, you are entitled to request information as to whether and, if so, which personal data relating to you is processed. For your own protection – to prevent unauthorised parties from obtaining information on your data – we will verify your identity in an appropriate manner.
- Right to Rectification (Art. 16) and Erasure (Art. 17 of the GDPR)
You are entitled to request immediate rectification of inaccurate personal data relating to you or – taking into account the purposes of data processing – completion of incomplete personal data as well as erasure of your data to the extent the criteria under Art. 17 of the GDPR have been fulfilled.
- Right to Restriction of Processing (Art 18 of the GDPR)
Under the applicable statutory conditions, you are entitled to restriction of processing of all personal data collected. From the date of the request for restriction, such data will only be processed subject to your individual consent or for the establishment and exercise of legal claims.
- Right to Data Portability (Art. 20 of the GDPR)
You can request unhindered and unrestricted transfer of collected personal data to you or a third party.
- Right to Object (Art. 21 of the GDPR)
You have the right to object, on grounds relating to your particular situation, at any time, to any processing of the personal data relating to you which is necessary to safeguard our or a third party’s legitimate interests. After such objection, your data will no longer be processed, unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is made for the establishment, exercise or defence of legal claims. You can object to data processing for the purpose of direct marketing with effect for the future at any time.
- Withdrawal of Consent
Should you have provided us with a separate consent to the processing of your personal data, you may withdraw that consent at any time. Such withdrawal applies to the lawfulness of the processing of your personal data after you declared it towards us.
If you take a measure to assert your rights under the GDPR set forth above, INTERSPORT shall provide a statement on the measure requested or comply therewith without undue delay, however no later than within one month after receipt thereof.
We will react to all reasonable requests free of charge and as fast as possible, subject to the statutory provisions.
The data protection supervisory authority is competent for requests regarding a breach of the right to access, breach of the right to secrecy, rectification or erasure.
12. Contact Information
Sport Bachler Gesellschaft m.b.H.
Ramsau 167
8972 Ramsau am Dachstein
Phone: 0043 3687 81914
Email: office@intersport-bachler.at
Register of companies no.: FN106077x
Commercial Court of registration: Leoben
VAT ID no.: ATU43457905
Last update: November 2023