Privacy Policy

1. Data Controller

Zillertaler Gletscherbahnen GmbH & Co KG
Hintertux 794
6294 Tux
Tyrol, Austria

Website: https://www.hintertuxergletscher.at

Event Organisation

The Hintertux Park Opening is organised by Zillertaler Gletscherbahnen GmbH & Co KG.

Operational organisation, event management, marketing and certain customer services are supported by Sport Huber GmbH.

Technical Service Provider

The website, online ticket shop and digital services are designed, developed and technically maintained by:

newcommerce.tirol

newcommerce.tirol acts as a technical service provider and processes personal data solely on behalf of the controller where required and in accordance with applicable data protection laws.

Services include:

Website development
WooCommerce maintenance
Event registration system
Hosting administration
Security monitoring
Software updates
Technical support
Database maintenance
Backup management

A Data Processing Agreement (Art. 28 GDPR) has been concluded where legally required.

Website Hosting

Our website is hosted on secure servers located in Germany and/or within the European Economic Area (EEA).

The hosting infrastructure includes industry-standard security measures such as:

encrypted HTTPS communication (SSL/TLS)
firewalls
intrusion detection and prevention
regular software updates
encrypted backups
access control mechanisms
server monitoring
malware protection
redundancy and disaster recovery procedures

Personal data stored on our servers is protected against unauthorized access, accidental loss, destruction or disclosure.

Where third-party hosting providers are used, they process personal data exclusively on our behalf under Data Processing Agreements in accordance with Article 28 GDPR.

Server log files may automatically record:

IP address
browser type
operating system
date and time
requested URL
referring website
HTTP status code

These log files are used exclusively to ensure system security, diagnose technical problems and protect against misuse.

Stripe

Payment Processing

Payments are securely processed by Stripe Payments Europe Ltd.

Depending on the selected payment method, personal data may be transmitted to Stripe, including:

Name
Billing address
Email address
Telephone number
Payment amount
Order information
Payment identifier
Fraud prevention information

Complete payment card information is processed directly by Stripe and is never stored on our servers.

Stripe may process personal data within the European Union and, where necessary, transfer data internationally using appropriate safeguards, including the EU Standard Contractual Clauses.

https://stripe.com/privacy

MailPoet

If you subscribe to our newsletter, we use MailPoet to manage subscriptions and deliver emails.

MailPoet processes:

email address
name (if provided)
subscription preferences
IP address
subscription date
newsletter engagement (opens and clicks)

Newsletter statistics help us improve our communications and better understand which information is most relevant to our subscribers.

You may unsubscribe at any time using the unsubscribe link contained in every newsletter.

Print-on-Demand

Merchandise Fulfilment

Merchandise ordered through our online shop is produced and shipped by Printful.

To fulfil your order we may share:

name
shipping address
email address
ordered products
shipping method

Printful processes this information exclusively for manufacturing, packaging and delivery.

https://www.printful.com/privacy-policy

Google reCAPTCHA

To protect our website, online shop and registration forms from spam, automated abuse and fraudulent activity, we use Google reCAPTCHA.

Google may collect technical information including:

IP address
browser information
operating system
device information
mouse movements
interaction behaviour

This processing is necessary to distinguish human visitors from automated systems and to ensure the security of our services.

https://policies.google.com/privacy

Terms:

https://policies.google.com/terms

WooCommerce Orders

When you purchase tickets or merchandise, we collect information necessary to process your order, including:

Name
Billing address
Shipping address (if applicable)
Email
Telephone number
Order history
Purchased tickets
Merchandise ordered
Payment status

This information is retained for accounting, tax and legal compliance purposes.

Event Registration

When registering for the Hintertux Park Opening we process participant information necessary for:

event administration
accreditation
ticket validation
customer support
event communications
fraud prevention
legal compliance

Where participation involves minors, parents or legal guardians are responsible for providing the required personal information and any necessary consents.

Photography, Video Recording and Media Coverage

The Hintertux Park Opening is a public sporting and lifestyle event. During the event, photographs, video recordings and audio recordings may be created by the organizer, accredited media representatives, sponsors and authorized service providers.

These recordings may include participants, spectators, volunteers and staff.

The recordings may be used for the following purposes:

event documentation;
promotion of future events;
publication on the official event website;
social media platforms;
press releases;
television and online broadcasts;
printed advertising materials;
sponsor presentations;
promotional videos;
historical event archives.

Whenever required by applicable law, processing is based on your consent. Otherwise, processing is based on our legitimate interest in documenting and promoting the event in accordance with Article 6(1)(f) GDPR.

If you have legitimate reasons to object to the publication of identifiable photographs of yourself, please contact us.

Social Media

Content relating to the Hintertux Park Opening may be published on official social media channels including, but not limited to:

Instagram
Facebook
TikTok
YouTube
Vimeo

Please note that these platforms operate under their own privacy policies and may process personal data outside the European Economic Area.

Live Streaming

Certain competitions, award ceremonies or public activities may be live streamed or recorded for later publication.

By entering publicly accessible event areas, participants and spectators acknowledge that they may appear in such broadcasts.

Competition Results and Rankings

For sporting competitions, contests and other official activities, the following information may be published:

participant name;
nationality;
competition category;
ranking;
competition results;
score;
bib number where applicable.

Publication of results is necessary for the proper organisation and documentation of the event.

Media Accreditation

Journalists, photographers, filmmakers and media representatives may apply for media accreditation.

Personal information submitted during accreditation is processed solely for accreditation management, security, communication and media coordination.

International Data Transfers

Certain service providers used by the organizer, including payment processors, newsletter providers, cloud infrastructure providers and social media platforms, may process personal data outside the European Economic Area.

Where such transfers occur, appropriate safeguards are implemented in accordance with Chapter V GDPR, including the European Commission's Standard Contractual Clauses or other legally recognised transfer mechanisms.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law.

Typical retention periods include:

Event registrations: until completion of the event and any statutory retention obligations.
Orders and invoices: in accordance with Austrian accounting and tax legislation.
Newsletter subscriptions: until you unsubscribe.
Customer enquiries: until your request has been resolved.
Server log files: only as long as necessary for security purposes.
Competition results and historical event documentation: where justified for sporting records and event history.

Security of Processing

We implement appropriate technical and organisational measures to safeguard personal data, including:

encrypted SSL/TLS communication;
secure hosting within the European Union;
access control systems;
role-based access permissions;
regular software updates;
firewall protection;
malware monitoring;
encrypted backups;
security logging;
continuous monitoring of critical systems.

Only authorised personnel and carefully selected service providers have access to personal data where required to perform their duties.

Your Rights Under the GDPR

Subject to applicable law, you have the right to:

request access to your personal data;
request correction of inaccurate information;
request deletion of your personal data;
request restriction of processing;
object to certain processing activities;
request data portability;
withdraw consent at any time where processing is based on consent;
lodge a complaint with a competent supervisory authority.

Requests may be submitted to:

support@hintertuxparkopening.com

Supervisory Authority

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

For Austria, the competent authority is:

Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria

Website: https://www.dsb.gv.at

Contact for Privacy Requests

For any questions regarding this Privacy Policy or the processing of your personal data, please contact:

Zillertaler Gletscherbahnen GmbH & Co KG
Hintertux 794
6294 Tux
Tyrol, Austria

Email: support@hintertuxparkopening.com