Privacy Policy

1. The data controller is:
Stiftung Sicherheit im Skisport
, Hubertusstr. 1
, 82152 Planegg
, Tel: +49 89 85790-275
, Email: info@stiftung.ski

Joint controllers are interski Vermittlungs-, Reise- und Verlags- GmbH and DSV aktiv/Freunde des Skisports e. V.; information regarding the essentials of joint controllership can be provided upon request in accordance with Art. 26 of the GDPR. 

1.2 The controller has appointed a data protection officer:

Please direct all inquiries, requests for information, revocations of consent, objections, and other questions regarding data processing to:

Anton Schmucker
Hubertusstraße 1
82152 Planegg
Email: anton.schmucker@ski-online.de

1.1 Scope of Processing

Every time you visit our website, our system automatically collects data and information from the computer system you use as a user (“data subject”) to access our website. This data is stored and processed on our server in a log file. The following personal data is collected in this process:

1. Browser type and version
2. User’s operating system
3. User’s Internet service provider
4. User’s IP address
5. Date and time of access
6. Websites from which the user’s computer system accessed our website
7. Websites accessed by the user’s computer system via our website

1.2 Purpose of Processing

The IP address is a string of numbers that uniquely identifies your computer system at the time you visit our website. The IP address is used to receive and send data packets and enables a user to access a website. The temporary storage of the IP address on our server is necessary to transmit the page content to the user’s computer system after the user accesses our website, so that the user can view the content.

The data is stored in log files to ensure the website functions properly and to identify any transmission errors that may occur. In addition, we use this data to optimize the website and ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

1.3 Legal Basis for Processing

Processing is based on our legitimate interests pursuant to Article 6(1)(f) of the GDPR.

1.4 Legitimate Interests

If processing is based on Article 6(1), first sentence, letter f of the GDPR, we are required to disclose the legitimate interests we pursue. We have a legitimate economic and reputational interest in the public image of our company.

1.5 Recipients or Categories of Recipients

Personal data is disclosed to our IT department and to our contractors who are commissioned to host and provide the IT resources necessary for the operation of the website.

1.6 Transfers to Third Countries

We do not intend to transfer personal data abroad.

1.7 Duration of Storage

Personal data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this occurs when the respective session ends. The user’s IP address must remain stored for the duration of the session to enable use of the website.

If data is stored in the log file, the data collected therein will be deleted after seven days at the latest. Storage beyond this period is possible. In this case, users’ IP addresses are deleted or anonymized so that the computer system from which the request was made can no longer be identified.

1.8 Right to Object and Right to Erasure

As a data subject, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is based on Article 6(1), first sentence, (e) or (f) of the GDPR (Article 21(1) of the GDPR). In this case, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms as a data subject, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

The processing of personal data to provide the website and to generate the log file is strictly necessary for the operation of the website in order to administer and maintain it. The user therefore cannot object to this type of processing.

1.9 Obligation to Provide Data (Art. 13(2)(e) GDPR)

Providing your data for the processing of log files is voluntary. If you do not provide your data, we may not be able to address your computer system, and you may not be able to use our website.

2.1 Scope of Processing

We use so-called cookies on our website. Cookies are text files that are stored in the web browser or by the web browser on the user’s computer system as soon as a user visits our website. Cookies contain distinctive character strings that enable the browser to be uniquely identified when the website is visited again.

We use cookies to make our website more user-friendly. Certain elements of our website require that the visiting web browser can be identified even after navigating to a different page within our website.

2.2 Purpose of Processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary for the web browser to be recognized even after navigating to a different page. These technically necessary cookies collect, store, and transmit data to us to enable our website to be retrieved from the database and to store the shopping cart in connection with membership applications or the bookshop. 

The user data collected through technically necessary cookies is not used to create user profiles.

2.3 Legal Basis for Processing

Processing is based on our legitimate interests pursuant to Art. 6(1)(f) of the GDPR.

2.4 Legitimate Interests

If processing is based on Article 6(1)(f) of the GDPR—that is, on a balancing of interests—we are obligated to disclose the legitimate interests we are pursuing. We have a legitimate economic and non-commercial interest in the public image of our company and in promoting our services—in particular, memberships—and the sale of books. This requires providing a website that complies with generally accepted technical standards for users and enables them to use our website easily in a manner tailored to their interests and needs.

2.5 Recipients or Categories of Recipients

The data collected by cookies is disclosed to our IT department and to our contractors who are commissioned to host and provide IT resources.

2.6 Transfer to Third Countries

We do not intend to transfer personal data abroad.

2.7 Duration of Storage

Personal data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data processing for the purpose of providing the website, this occurs when the respective session ends. Cookies are stored on the user’s computer system and transmitted from there to our server. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your web browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically.

2.8 Right to Object and Right to Erasure

The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them that is based on Article 6(1)(e) or (f) of the GDPR (Article 21(1) of the GDPR). The controller will no longer process the personal data from that point on, unless it can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims. If cookies are disabled for our website, it may no longer be possible to fully use all of the website’s features, such as the online store’s shopping cart.

2.9 Obligation to Provide Data (Art. 13(2)(e) GDPR)

Providing your data for the processing of cookies is voluntary. If you do not provide your data, we may not be able to address your computer system, and you may not be able to use our website at all or to its full extent.

3.1 Scope of Processing

You can contact us by mail, email, fax, phone, and text message (communication), as well as through donations. By providing your personal data—in particular, your membership number with one of our joint controllers, your name, address, contact information, and other content-related data—you can contact us, and we can respond to you and process your personal data. In the case of a donation, we also process your bank details, the purpose of the donation, and the amount of the donation.

3.2 Purpose of Processing

Your personal data is processed to identify you, to associate your message—if applicable—with an existing membership agreement with a joint controller or another contractual relationship, and to process and respond to your message. Your personal data, which you provide to us via communication channels, is processed for the purpose of handling and responding to your inquiry or donation.

3.3 Legal Basis for Processing

If you have given us your consent to process your personal data specified in Section 3.1 for the purposes specified in Section 3.2, the processing is based on your consent pursuant to Art. 6(1), Sentence 1, lit. a of the GDPR.

The processing of your personal data as described above may, in individual cases, be necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures taken in response to your inquiry, in accordance with Article 6(1), first sentence, lit. b of the GDPR.

The processing of personal data is also based on our legitimate interests pursuant to Article 6(1), first sentence, subparagraph (f) of the GDPR.

3.4 Legitimate Interests

If the processing is based on Article 6(1)(f) of the GDPR—that is, on a balancing of interests—we are obligated to disclose the legitimate interests we are pursuing. We have a legitimate business interest in being reachable via our communication channels for the purpose of processing and responding to inquiries. By collecting donations, we pursue non-commercial interests to promote charitable causes, in particular research and environmental projects, accident prevention measures, and safety in skiing.

3.5 Recipients or Categories of Recipients

Your personal data is processed within our organization and, if necessary, may be transferred to external recipients to the extent required to appropriately process your inquiry.

3.6 Transfer to Third Countries

We do not intend to transfer personal data abroad.

3.7 Retention Period

Personal data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. A contact request submitted outside the scope of an existing membership agreement, any other contract, or for the purpose of initiating contracts will be automatically deleted after 3 months, [MM1] beginning on the day we receive your request. Invoices must be retained for 10 years.

3.8 Right to Object and Right to Erasure

The data subject has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data concerning them that is based on Article 6(1)(e) or (f) of the GDPR (Article 21(1) of the GDPR). The data controller will no longer process the personal data from that point on, unless it can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.

3.9. Obligation to Provide Data (Art. 13(2)(e) GDPR)

To the extent that your personal data is required through the use of communication channels to enter into a membership agreement, a distance sales contract, supplemental insurance, or any other contract, such processing is necessary for the conclusion of the contract.  Otherwise, the provision of your personal data is voluntary. If you do not provide your personal data, we may not be able to process or respond to your inquiries, applications, or requests.

Ensuring data security is a top priority for us. We therefore implement appropriate technical and organizational measures, in particular to protect your personal data from risks associated with data transmission and to prevent unauthorized access by third parties. Our data security measures are regularly reviewed and updated in line with the current state of the art. The processing of personal data via our website and through a dealer portal for our sales partners is secured using HTTPS encryption.

1. Right to Withdraw Consent: You have the right, pursuant to Article 7(3) of the GDPR, to withdraw your consent at any time by notifying the controller. As a result, data processing based on this consent may no longer continue in the future.

2. Right of access: Pursuant to Article 15 of the GDPR, you have the right to request information about your personal data processed by the controller. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right to lodge a complaint; the origin of your data, if it was not collected by us; and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details.

3. Right to Rectification: You have the right, pursuant to Article 16 of the GDPR, to request without undue delay the rectification of inaccurate personal data or the completion of your personal data stored by the controller.

4. Right to erasure and the right to be forgotten: You have the right, pursuant to Article 17 of the GDPR, to request the erasure of your

personal data stored by the controller, unless processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.

5. Right to Restriction of Processing: In accordance with Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data to the extent that you contest the accuracy of the data, the processing is unlawful but you oppose its erasure, and we no longer need the data, but you need them to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR.

6. Right to Data Portability: Pursuant to Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller.

7. Right to lodge a complaint: You may lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR. As a general rule, you may contact the supervisory authority at your usual place of residence, your workplace, or the location of the controller’s headquarters.

8. Right to Object: If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data, provided there are grounds for doing so arising from your particular situation. Below, we explain how you can exercise your right to object, if applicable.