Do we make automated decisions about you?
We do not use personal data for fully automated decision-making processes, including profiling within the meaning of Art. 22 GDPR.
Data subject rights
What data subject rights under GDPR do you have?
Right to be informed:
You have the right to be provided with clear, transparent and easily understandable information about your rights and how we use your personal data. Therefore, we provide this privacy notice to explain how we use your personal data.
Right of access:
You have the right to request confirmation from us as to whether we are processing personal data concerning you. If we’re processing your personal data, you have the right to obtain access or receive a copy of your data within a reasonable time. Please see below how to submit such a data access request.
Right to rectification:
You have the right to demand the correction of inaccurate personal data and completion of any incomplete information concerning you.
Right to erasure:
- You have the right to request us to erase personal data concerning you, if:
- the personal data is no longer necessary in relation to the purpose for which they were collected;
- you gave us consent to use your personal data and you have now withdrawn the consent;
- you have objected to the processing of your personal data;
- the personal data have been unlawfully processed;
- the law requires us to delete your personal data.
We may not be able to agree to your request if it conflicts with any potential statutory retention periods or other legal obligations. However, when mentioned retention periods are over, your personal data will be automatically deleted.
Right to object:
You have the right to object to the processing of your personal data for direct marketing purposes. If our legal basis for using your personal data is based on legitimate interest, you also have a right to object to such processing. However, if we are able to provide overriding reasons why we need to process your personal data, we will have to decline your request.
Right to restriction of processing:
You have the right to suspend further use of your personal data. When the processing of your personal data is suppressed, we will restrict the processing or delete your personal data taking into account any applicable legal retention periods.
Right to data portability:
You have the right to obtain and reuse your personal data for your own purposes across different services. This is not a general right and there are statutory exceptions.
How do you exercise your rights?
To exercise any of these rights specified above, you can contact us and submit your request via e-mail at email@example.com, or via letter to Ski Challenge GmbH, Wiedner Hauptstrasse 94 | A-1050, Vienna, Austria.
How do you withdraw your consent?
You always have the right to withdraw your consent to Ski Challenge GmbH. Please submit your withdrawal request via e-mail at firstname.lastname@example.org, or via letter to Ski Challenge GmbH, Wiedner Hauptstrasse 94 | A-1050, Vienna, Austria.
Please bear in mind that withdrawing your consent does not affect the lawfulness of processing personal data based on consent before your withdrawal.
How will we verify your request?
Your request must provide sufficient information that allows our team to verify you are the person or an authorised representative of a person whose personal data we have collected (e.g., name, surname, your e-mail, other information we may request for verification purposes), and describe your request in sufficient detail so that it allows us to properly evaluate and respond to it.
If your request is submitted by an authorised agent, written permission and information that verifies the identity of the agent must be enclosed with the request. We cannot provide you with the information or exercise your other right if we cannot verify your identity.
To verify your identity, we may request you to provide additional information about yourself. We will only use this information and information provided in the request to verify your identity or authorise your request.
Your requests shall be generally handled within one month of receipt. This period may be extended by two further months based on the complexity and number of requests. We will do our best to respond to your request as quickly as possible, but it may happen that other legal obligations or third-party rights and processes slow down the process. Should this be the case, we will always make sure to notify you about the extension within one month of receipt and inform you of its length and the reasons behind it.
Which Supervisory authority can you file a complaint with?
You have the right to file a complaint with the competent supervisory authority if you believe your rights have been violated under the GDPR. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde).
Recipients of personal data
The provided personal data shall be processed by Ski Challenge GmbH and only, if necessary, will it be processed within Greentube Group companies located in the European Economic Area (EEA). We share your personal data only with the respective service providers (Processors). These processors are providers of IT services, analytics providers/marketing tools, other tools and software solutions, and further providers with similar services. In addition, in some cases, we may need to transfer your personal data to skiing associations and other entities in the field of skiing to provide you with our services. We will only conduct such a transfer if we find that we have a legitimate legal basis for it. In addition, these recipients will have an obligation to inform you if they want to process your data (Art. 14 of GDPR), in which case you may also object to their processing of your personal data and/or to our data transfer.
All data transfers will always be subject to a respective data processing agreement.
We may need to transfer your personal data outside of the EEA or UK to our third-party service providers based in the USA. However, if your personal data is transferred to a country or territory outside of the EEA and to a country which is not subject to an adequacy decision approved by the EU Commission, we will make sure that a contract with strict data protection safeguards (EU Standard Contractual Clauses) is in place before we transfer your personal information.
If you would like to receive more information regarding this, please contact us by sending an e-mail to email@example.com.
How do we protect your personal data?
It is important to us to protect your personal data. Any personal information shared with us will be treated with care and appropriate security. We maintains physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of your personal data.
How long do we keep your personal data?
We retain your personal data for as long as necessary to fulfil the purposes mentioned in this Privacy Notice, including a period of time as may be required by our legal obligations.
Unless expressly stated in this Privacy Notice, we will securely delete your personal data or anonymise it so that you cannot be identified anymore once this is no longer needed.
How will we keep you updated about how we use your personal data?
We regularly review and update our Privacy Notice. We will alert you about content changes by placing a notice on our website or in our App.
You can see when this Privacy Notice was last updated by checking the date at the top of this page. You are responsible for periodically reviewing this Privacy Notice.
How to manage your cookie preferences
You can always adjust your cookie settings through the cookie consent manager. You can also manage your cookie preferences through the pop-up cookie banner that appears when you first visit our website. Also, it is possible to manage your cookie preferences by changing your browser settings on your device to refuse the use of some or all non-necessary cookies.
Please bear in mind that blocking and deleting cookies may have an impact on your user experience.
Our Contact Details
Thank you for reading our Privacy Notice.
If you have any further questions about this Privacy Notice or the processing of your personal data, please contact our Data Protection Officer via e-mail at firstname.lastname@example.org or phone at +43 1 90 171