Privacy Policy
Data protection and transparent information are of the utmost importance to ÖAMTC Fahrtechnik GmbH as a company within the ÖAMTC network. ÖAMTC Fahrtechnik GmbH is committed to ensuring that customers feel confident, including in the way their personal data is handled. For this reason, a Data Protection Management System (DPMS) has been implemented within the ÖAMTC network to ensure compliance with legal requirements. The following information explains how ÖAMTC Fahrtechnik GmbH handles personal data, as well as what data is collected when you visit this website and how it is used. This Privacy Policy applies to the website https://www.experienceworld-saalfelden.at. Individual pages may contain links to websites operated by other providers, both within and outside the ÖAMTC network, to which this Privacy Policy does not apply. ÖAMTC Fahrtechnik GmbH assumes no liability for such content.
1. Data Controller and Contact Person for Data Protection Matters
The controller for this website under the GDPR is: ÖAMTC Fahrtechnik GmbH, Baumgasse 129, 1030 Vienna, FN 215447i, Vienna Commercial Court. Given the size, diversity, and extensive processing of personal data within the ÖAMTC group (ÖAMTC, regional associations, and other companies), the ÖAMTC considers it necessary to implement a uniform data protection strategy. For this reason, a Data Protection Management System (DPMS) has been implemented throughout the ÖAMTC group, including ÖAMTC Fahrtechnik GmbH. Contact Information – Privacy Policy ÖAMTC Fahrtechnik GmbH Privacy Policy Baumgasse 129 1030 Vienna FN 215447i, Vienna Commercial Court Email: datenschutz@oeamtc.at
2. Data Protection Officers at ÖAMTC
The ÖAMTC has appointed a joint data protection officer for all associations and companies within the ÖAMTC network, including ÖAMTC Fahrtechnik GmbH. Contact Information – Data Protection Officer Austrian Automobile, Motorcycle, and Touring Club (ÖAMTC) Mag. Renate Grabinger Baumgasse 129 1030 Vienna ZVR 730335108 Email: datenschutzbeauftragter@oeamtc.at
3. Definitions
ÖAMTC Fahrtechnik GmbH uses the terminology of the General Data Protection Regulation (GDPR) in its privacy policy. To ensure that this information is easy to read and understand, we explain the terms used at the outset. Personal Data Any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). Examples: name, address, date of birth, email address, license plate number Processing Any operation involving personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction. Example: Storing an email address following a request submitted via the contact form Restriction of Processing Flagging stored personal data with the aim of restricting its future processing. Example: Document data may only be stored for archival purposes (statutory retention period). Profiling Any form of automated processing of personal data that involves using such data to evaluate certain personal aspects, in particular to analyze or predict aspects related to work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or changes in location. Example: Analyses for targeted marketing campaigns Pseudonymization The processing of personal data in such a way that the data subject can no longer be identified without the use of additional information. Data Controller The natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. Example: ÖAMTC Fahrtechnik GmbH Data Processor A natural or legal person, public authority, agency, or other entity that processes personal data on behalf of the controller. Example: hosting service provider, newsletter distribution service Recipient A natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether or not that entity is a third party. Third A natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and the persons authorized to process the personal data under the direct responsibility of the controller or the processor. Data Subject Any identified or identifiable natural person whose personal data is processed by a data controller. Examples: customers, prospective customers, users Consent Any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she signifies agreement to the processing of personal data relating to him or her. Example: Consent to receive the newsletter
4. What rights can you assert against ÖAMTC Fahrtechnik GmbH?
As a data subject within the meaning of the GDPR, you have the following rights:
- Right to Information
- Right to Rectification
- Right to Erasure (Right to Be Forgotten)
- Right to Restriction of Processing
- Right to data portability in accordance with the requirements of data protection law
- Right to Object to Processing
- Rights related to automated decision-making, including profiling
You may exercise your rights at any time by submitting a written request to ÖAMTC Fahrtechnik GmbH, along with a copy of an official photo ID: Post ÖAMTC Fahrtechnik GmbH Privacy Policy Baumgasse 129 1030 Vienna Email datenschutz@oeamtc.at On-site Please submit the completed and signed form at the Driver Training Center. It will be forwarded immediately to the appropriate department. Phone Please understand that we cannot accept requests regarding the exercise of your data protection rights by phone. In addition, you have the right at any time to file a complaint with the data protection authority (www.dsb.gv.at) if you have concerns regarding the processing of your personal data.
5. What data do we process when you visit this website?
In general, you can use this website without providing any personal data. However, if you use certain services offered through the website—such as the contact form or the newsletter—the processing of personal data may be necessary. If there is no legal basis for such processing, we will obtain your consent. Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and Austrian legal provisions (DSG, TKG 2021).
5.1. Access Data (Log Data)
5.1.1. General Information When you visit our website, we store access data in what are known as web server log files. The following data is collected:
- IP address
- Date and time of access
- Browser Type and Version
- Operating system used
- The website from which a connecting system accesses our website (referrer)
- Subpages accessed on our website
- Internet service provider of the accessing system
5.1.2. Purpose of Data Processing This information is needed to display the content of our website correctly, ensure the ongoing functionality of our systems, identify and correct errors, and manage server capacity. In the event of a cyberattack, this information will be provided to law enforcement authorities. The data from the server log files is stored separately from any personal data provided by a data subject. 5.1.3. Retention Period Up to two years. 5.1.4. Legal Basis Art. 6(1)(f) of the GDPR: legitimate interest in providing a secure and functional online service.
5.2. Hosting
This website is hosted by: World4You Internet Services GmbH Hafenstraße 47–51 4020 Linz Austria The hosting provider processes the aforementioned access data as well as all data transmitted via the website on our behalf as a data processor. A data processing agreement has been entered into in accordance with Art. 28 of the GDPR. The servers are located in Austria. Legal basis: Article 6(1)(f) of the GDPR, legitimate interest in the secure and efficient provision of our online services.
5.3. Cookies and Consent Management
5.3.1. General Information We use cookies to enhance your experience on our website and enable certain features. Cookies are small text files that are stored on your device. We use cookies that are not technically necessary only with your consent. We obtain this consent via our consent banner, which appears when you first visit the website. There, you can select individual categories, reject all cookies, or accept all of them. You may revoke or change your consent at any timeby clicking the consent settings icon. It is located on the left side of the screen; on mobile devices, it is on the right. The withdrawal takes effect going forward. If your browser sends an automatic opt-out signal (Global Privacy Control or Do Not Track), we interpret this as a rejection of all non-essential cookies. In this case, neither the consent banner nor the settings icon will be displayed, and only technically necessary cookies will be set. If you would still like to grant consent in this case, please disable the signal in your browser settings or contact datenschutz@oeamtc.at. You can also block the installation of cookies through your browser settings. Disabling cookies may result in limited functionality on our website. 5.3.2. List of Cookies Below is a list of the cookies that may be set on this website. For technical reasons, it is not always possible to provide a complete list of all cookies. Disabling cookies may result in limited functionality on our website. Technically Necessary Cookies
| Name | Vendor | Purpose | Retention period |
|---|---|---|---|
cookiez-user-consent | this website | Saving Your Cookie Settings | 180 days |
wordpress_test_cookie | this website | Checking whether your browser accepts cookies | End of the meeting |
Analytics cookies (only with consent)
| Name | Vendor | Purpose | Retention period |
|---|---|---|---|
_ga | Google Ireland Limited | Distinguishing Between Users for Reach Measurement | 2 years |
_ga_8N49JRJEJG | Google Ireland Limited | Maintaining Session Status in Google Analytics 4 | 2 years |
Functional cookies (only with consent)
| Name | Vendor | Purpose | Retention period |
|---|---|---|---|
__cf_bm | Cloudflare (via elementor.com) | Distinguishes between human visitors and automated access; protects against bots; is set when the accessibility widget loads | 30 minutes |
Marketing cookies (only with consent)
| Name | Vendor | Purpose | Retention period |
|---|---|---|---|
_fbp | Meta Platforms Ireland Limited | Tracking Website Visits for Advertising and Audience Measurement | 3 months |
5.3.3. Consent Management To obtain and document your consent, we use the consent management tool “Cookie Consent” provided by Elementor Ltd., 2 Wolfson Street, Ramat Gan, Israel. Your consent decision is stored in a cookie on your device and, for documentation purposes, is also transmitted to and logged on servers operated by Elementor Ltd. The following information is logged: the time, the content of your decision, the cookie categories you accepted, the country derived from your IP address, and a randomly generated identifier for the consent process. Your IP address itself is not stored. The logs are deleted after 30 days. An adequacy decision by the European Commission is in place for Israel. A data processing agreement with Elementor Ltd. is in place in accordance with Article 28 of the GDPR. Purpose: To provide evidence of consent granted or withheld in accordance with Article 7(1) of the GDPR. Legal basis: Article 6(1)(c) of the GDPR, fulfillment of the obligation to provide evidence. 5.3.4. Legal Basis Technically necessary cookies: Article 6(1)(f) of the GDPR in conjunction with Section 165(3) of the TKG 2021. All other cookies: Article 6(1)(a) of the GDPR, your consent.
5.4. Web Analytics – Google Analytics 4
5.4.1. General Information This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For users in the European Economic Area, Google Ireland Limited is the data controller. Google Analytics uses cookies and similar technologies to analyze the use of our website. The data collected includes, among other things, pages visited, duration of visits, source of traffic, approximate location, device and browser used, as well as interactions such as form submissions. Google Analytics 4 truncates IP addresses within the EU or the EEA before they are transmitted to Google servers. The transfer of data to Google LLC in the United States cannot be completely ruled out. Google LLC is certified under the EU-US Data Privacy Framework, meaning that an adequacy decision by the European Commission serves as the basis for the transfer. Standard contractual clauses are also in place. For more information on how Google handles user data, please visit https://policies.google.com/privacy. 5.4.2. Retention Period User-related data collected in Google Analytics is automatically deleted after 14 months. 5.4.3. Legal Basis Art. 6(1)(a) of the GDPR: the consent you provided via the consent banner. Google Analytics is loaded only after you have given your consent. You may revoke your consent at any time with future effect.
5.5. Burst Statistics
We use the Burst Statistics analytics tool. All processing takes place entirely on our own server; no data is transferred to third parties. The data collected includes pages viewed, referrers, browsers, and operating systems. IP addresses are anonymized or hashed during processing. Purpose: statistical analysis of website usage to improve our offerings. Legal basis: Art. 6(1)(f) of the GDPR; legitimate interest in designing our website to meet user needs.
5.6. Meta Pixel
5.6.1. General Information This website uses the Meta Pixel, a tool provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Through the Meta Pixel, Meta can detect that you have visited our website and what actions you took there, such as viewing certain pages or submitting a form. We use this information to measure the effectiveness of our ads on Facebook and Instagram and to show you relevant ads on these platforms (retargeting). If you are logged into Facebook or Instagram, Meta can associate your visit with your user account. Meta also processes the data for its own purposes. We have no influence over the scope of this processing. For the collection and transfer of data to Meta, we and Meta are joint controllers within the meaning of Article 26 of the GDPR. Meta is solely responsible for the subsequent processing by Meta. Data may be transferred to Meta Platforms Inc. in the United States. Meta Platforms Inc. is certified under the EU-U.S. Data Privacy Framework. Standard contractual clauses are also in place. Meta’s privacy policy: https://www.facebook.com/privacy/policy 5.6.2. Purpose of Processing Measuring the effectiveness of advertising campaigns and serving interest-based ads. 5.6.3. Legal Basis Art. 6(1)(a) of the GDPR: the consent you provided via the consent banner. The Meta Pixel is loaded only after you have given your consent. You may withdraw your consent at any time, effective for the future.
5.7. Maps
On the “Home”, “Location & Directions” and “Contact” pages, we display our location as a static image that is loaded from our own server. We do not use any third-party map services, and no data is transmitted to third parties.
5.8. Videos
Videos on this website are streamed directly from our own server. We do not embed videos from third-party providers such as YouTube or Vimeo, nor do we transfer any data to third parties.
5.9. Fonts
The fonts used on this website are loaded locally from our server. There is no connection to third-party servers, and no data is transmitted to third parties.
5.10. Accessibility Widget
This website offers an accessibility widget provided by Elementor Ltd., 2 Wolfson Street, Ramat Gan, Israel, which allows you to adjust display settings such as contrast or font size. The widget is loaded from a server operated by Elementor Ltd. In the process, your IP address is transmitted to this server, and a cookie from the service provider Cloudflare is set for bot detection. The widget is loaded only after you have given your consent. Purpose: To improve the website’s usability for people with disabilities. Legal basis: Art. 6(1)(a) GDPR, your consent.
6. Online Services on This Website
6.1. Contact and Inquiry Form
6.1.1. General Information On this website, you can contact us using the forms provided or submit an inquiry about our services. In doing so, we process the data you provide: first name, last name, email address, phone number, and the content of your message. 6.1.2. Purpose of the Processing Processing your inquiry, contacting you, and preparing a quote. 6.1.3. Legal Basis Art. 6(1)(b) of the GDPR: taking steps prior to entering into a contract at your request. If your request is not intended to lead to the conclusion of a contract: Art. 6(1)(f) of the GDPR: legitimate interest in responding to inquiries. 6.1.4. Retention Period We will retain your data until your request has been fully processed. If a contract is concluded, the statutory retention periods (UGB, BAO) apply, which are generally seven years. 6.1.5. Recipient The form data is stored in our website database at the hosting provider and is also sent to us via email. To send form and system emails, we use the “Email Deliverability” service (formerly “Site Mailer”) provided by Elementor Ltd., Israel. In this process, the data provided in the form as well as the message metadata (sender, recipient, subject, time, delivery status) are processed and logged. Elementor processes data in Israel, the European Union, and the United States, among other locations. An adequacy decision by the European Commission is in place for Israel. For transfers to other countries, Elementor states that it uses the European Commission’s Standard Contractual Clauses. A data processing agreement has been concluded in accordance with Article 28 of the GDPR. Legal basis: Article 6(1)(b) of the GDPR and Article 6(1)(f) of the GDPR, based on a legitimate interest in reliable and traceable email delivery.
6.2. Newsletter
6.2.1. General Information You can subscribe to our newsletter on our website. To do so, we process your email address and, if provided, your name. Registration is done via a double opt-in process. After you register, you will receive an email in which you must confirm your registration. Only then will you be added to the mailing list. To document your registration, we store the time of registration and confirmation, as well as the IP address used. 6.2.2. Mailchimp, the email marketing service provider Emails are sent via Mailchimp, a service provided by Intuit Inc., 2700 Coast Avenue, Mountain View, CA 94043, USA. Your data is stored on Mailchimp’s servers and is transferred to the United States in the process. The transfer is based on a data processing agreement in accordance with Article 28 of the GDPR and the European Commission’s Standard Contractual Clauses. Please note that the level of data protection in the U.S. is not fully comparable to that in the EU, and access by U.S. authorities cannot be ruled out with certainty. Mailchimp tracks whether and when you open our newsletters and which links you click on within them. This analysis is used to better tailor the newsletter to the interests of the recipients. Mailchimp’s Privacy Policy: https://www.intuit.com/privacy/statement/ 6.2.3. Purpose of the Processing Sending the newsletter with information about our offers and events, and analyzing usage data to optimize the content. 6.2.4. Legal Basis Art. 6(1)(a) of the GDPR: Your consent. 6.2.5. Retention Period and Withdrawal Your data will be stored until you unsubscribe from the newsletter. You can withdraw your consent at any time by using the unsubscribe link in each newsletter or by sending an email to datenschutz@oeamtc.at. Once you withdraw your consent, your data will no longer be processed for the purpose of sending the newsletter. We retain the registration records as proof of your consent.
7. Data Security
We implement appropriate technical and organizational measures within the meaning of Article 32 of the GDPR, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the likelihood and severity of the risk to the rights and freedoms of natural persons. The following measures, among others, are implemented:
- Pseudonymization and Encryption of Personal Data
- Encrypted transmission of all data via SSL/TLS
- Ensuring the confidentiality, integrity, availability, and resilience of the systems and services related to processing
- Ensuring the prompt restoration of the availability of personal data in the event of a physical or technical incident
- Procedures for the regular review, assessment, and evaluation of the effectiveness of technical and organizational measures
8. Links to our social media channels
This website contains links to our profiles on the following platforms:
- YouTube
These are simple links without embedded content or social plugins. When you visit our website, no data is transmitted to these platforms. Only when you click on a link will you be redirected to the respective platform, at which point its privacy policy will apply. We are not responsible for the content or data processing on these platforms.
As of: September 2026