Privacy Policy & Data Processing Notice

1. Data Controller Identification

The data controller responsible for the processing of personal data collected via Vaulttickertonictrailis.online is:

Vaulttickertonictrailis Alpine Garments GmbH
Company Registration Number: FN 482910 x
Registered Office: Herrengasse 14, 6020 Innsbruck, Tyrol, Austria
Designated Data Protection Officer (DPO): [email protected]

2. Categories of Personal Data Collected

We process personal data only to the extent necessary to deliver high-quality technical editorial content, respond to client consultations, and maintain secure network operation. These categories include:

• Contact Information: When submitting an inquiry through our contact portal, we collect your name, email address, topic preference, and the substantive content of your message.
• Technical Connection Logs: Your IP address, browser user-agent header, access timestamps, HTTP status codes, and referring URL are captured automatically by our web servers to ensure network defense against brute-force attacks and DDoS vectors.
• Cookie and Consent State: We store your selected preferences regarding non-essential cookie tracking via local browser storage (key: vtt_cookie_consent).

3. Legal Bases for Processing (GDPR Art. 6)

We rely on the following lawful processing grounds under Article 6(1) of the GDPR:

• Consent (Art. 6(1)(a)): For optional analytics cookies and non-essential performance tracking explicitly consented to via our consent banner.
• Contractual / Pre-Contractual Measures (Art. 6(1)(b)): To review, process, and respond to direct inquiries submitted via our contact forms.
• Legitimate Interests (Art. 6(1)(f)): For maintaining server security, debugging network outages, verifying firewall performance, and preventing fraudulent submissions.

4. Third-Party Processors and International Transfers

We do not sell, rent, or lease personal data to marketing brokers. Personal information is only shared with vetted data processors who adhere to European data adequacy standards or standard contractual clauses (SCCs). These include server infrastructure providers located within the European Economic Area (EEA) and encrypted transactional mail providers.

5. Data Retention Periods

Connection server logs are retained on rotating security logs for a maximum of 30 days before automated deletion. Contact inquiries and correspondence are retained for 24 months to satisfy commercial verification standards, unless a longer statutory retention period (e.g. 7-year Austrian tax retention under § 132 BAO for contractual billing) applies.

6. Your Rights Under GDPR and Austrian Law

As a data subject, you hold fundamental rights enforceable at any time:

1. Right of Access (Art. 15): Request confirmation whether your personal data is processed, alongside a copy of said data.
2. Right to Rectification (Art. 16): Correct incomplete or inaccurate personal records.
3. Right to Erasure ('Right to be Forgotten' - Art. 17): Request deletion of data no longer necessary for initial collection purposes.
4. Right to Restriction of Processing (Art. 18): Restrict processing under specified legal disputes.
5. Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
6. Right to Object (Art. 21): Object at any time to processing based on legitimate interest grounds.

To exercise these rights, email [email protected]. You also retain the right to lodge a formal complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, Austria, [email protected]).

7. California Consumer Privacy Act (CCPA) Provisions

For visitors residing in California, we confirm that Vaulttickertonictrailis does not sell personal information as defined by California Civil Code § 1798.140. California residents retain the right to request disclosure of categories of information collected, the right to deletion, and freedom from discriminatory treatment for exercising their privacy choices.