Information obligations
Name and contact details of the person responsible | Contact details of the data protection officer |
Bayerische Zugspitzbahn Bergbahn AG | Bayerische Zugspitzbahn Bergbahn AG Data Protection Officer Olympiastrasse 31 82467 Garmisch-Partenkirchen Germany |
Data categories of data processing
Surname, first name, address, e-mail address, telephone number, travel data if applicable, credit card and account data (IBAN) if applicable
Purposes and legal basis of data processing
Your data will be processed to fulfill the sale of products in the online shop (Art. 6 para. 1 lit. b) GDPR). In addition, your address or e-mail address will be used for the purpose of dialog marketing (Art. 6 para. 1 lit. f) GDPR).
Legitimate interests
The use of your address or e-mail address, which was collected as part of the sale in the online shop, for our own advertising purposes constitutes a legitimate interest.
Storage duration or criteria for determining the duration
The data collected in connection with the purchase is stored to fulfill commercial and tax retention obligations.
Necessity of providing the data
In order to process the sale of products in the online shop, it is necessary for you to provide us with the above-mentioned data. Without the provision of the data, we cannot send or make the products available to you.
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information specified in Art. 15 GDPR. The data subject has the right to obtain from the controller without undue delay the correction of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).
The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure). The data subject has the right to obtain from the controller restriction of processing where one of the conditions listed in Art. 18 GDPR applies, e.g. if the data subject has objected to processing, for the duration of the verification by the controller.
The data subject has the right to object, on legitimate reasons relating to his or her particular situation, at any time to the processing of personal data concerning him or her. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate reasons for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims (Art. 21 (1) GDPR).
Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing (Art. 20 (2) GDPR). If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes (Art. 20 para. 3 GDPR).
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her violates the GDPR (Art. 77 GDPR). The data subject may exercise this right before a supervisory authority in the Member State of their habitual residence, place of work or place of the alleged infringement. In Bavaria, the responsible supervisory authority is the Bavarian State Office for Data Protection Supervision.