Privacy policy

1. legal basis

The EU General Data Protection Regulation, the Data Protection Act 2000 and the Data Protection Amendment Act 2018 serve the right to protection of personal data. We process your data exclusively on the basis of the statutory provisions (GDPR, DSG 2018, TKG 2003).

2. basic principles

2.1 The data protection manager for Sport Nenner and Skibuy.at is Sebastian Mader. If you have any questions, please contact the data protection manager directly at office@sportnenner.at. Sport Nenner is a sole proprietorship. The owner is Stefan Mader.

2.2 It is particularly important to us to protect and securely store all personal data that you entrust to us. This document tells you more about how we use and process your personal data.

3. purpose limitation, legal basis, storage duration and data recipients

3.1 Collected personal data is required for the fulfillment of the contract and billing for online reservations of sports equipment on www.sportnenner.at or online purchases of sports equipment on www.skibuy.at. It is also possible to enter your own contact details for additional services (e.g. newsletter).

3.2 The legal basis for the processing of your personal data is, on the one hand, the performance of a contract (e.g. when purchasing online at www.skibuy.at or reserving skis at www.sportnenner.at), legitimate interests, the fulfillment of our legal or contractual obligations and, on the other hand, your consent (e.g. contact form, newsletter subscription, cookies). Failure to provide the data may have various consequences.

3.3 We process your personal data (name, delivery and billing address, e-mail address, telephone numbers [optional], date of birth [if required], weight, height, riding ability [rental data according to ÖNORM 11088; if required], payment details, individual message texts) to the extent necessary for the duration of the entire business relationship (initiation, processing and termination of a contract). ÖNORM 11088; if required], payment details, individual message texts), if necessary, for the duration of the entire business relationship (from the initiation, processing to the termination of a contract) and beyond that in accordance with the statutory retention and documentation obligations arising from the Austrian Commercial Code (UGB), the Federal Fiscal Code (BAO) and until the end of any legal dispute or expiry of limitation periods for warranty and product liability, etc. (if required).

3.4 As part of the operation of our websites, we commission server hosters who may gain access to your personal data in the course of their activities if they require the data to perform their respective services. These providers have undertaken to comply with the applicable data protection regulations. Furthermore, data relevant for business processing (shipping information, payment instructions, correspondence) are forwarded to processors - if necessary. Data processing contracts have been concluded in accordance with Art. 28 GDPR. You can request further information on the processors commissioned by us at office@sportnenner.at

4. Newsletter

4.1 You can register for our newsletter on the website using the double opt-in procedure. After registering, you will receive an e-mail asking you to confirm your registration. It is not possible to send our newsletter without providing this data. You can unsubscribe from the newsletter by clicking on the unsubscribe link at the end of each newsletter.

4.2 We commission processors to send our newsletter. These processors have undertaken to comply with the applicable data protection regulations. An order processing contract has been concluded in accordance with Art. 28 GDPR. You can request further information on the processors commissioned by us at office@sportnenner.at

5th Denominator Club

5.1 Data collection when applying for a card

Customers can apply for the Nenner Club Card in any of our stores. After receiving the card, registration on our website club.sportnenner.at/register is required. The following personal data is collected in the process:

• Card number: for unique identification in the system
• Personal data of the group leader and group members: form of address, title, first name, surname, date of birth (purpose: personal address, comparison with existing data to eliminate duplicates)
• Residential address of the group leader (purpose: data reconciliation, postal notifications, invoicing; if consent has been given: 1-2 times a year by post)
• E-mail address (purpose: contact and transactional e-mails; if consent has been given: monthly newsletter)
• Telephone number (purpose: contact and transactional calls; if consent has been given: Reservation information via WhatsApp/SMS)

5.2 Data processing and profiling

We reserve the right to use the data collected for profiling purposes in order to improve our services, create personalized offers and analyze purchasing behavior. This includes the creation of customer profiles based on purchase history, preferences and interactions with our services. The legal basis for this is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in optimizing our business processes and improving the customer experience.

5.3 Processors

As part of the Nenner Club program, we work with the following processors:

• Supabase (hosting in Frankfurt, Germany): Storage, management and processing of personal data for the provision of services (self-management of customer account, management of reservations and loyalty point balance). DPA: https://supabase.com/legal/dpa
• Keyweb AG (Neuwerkstraße 45/46, Erfurt, Germany): Maintenance of the web server (access exclusively for maintenance purposes, data and processing remain legally with us)
• advarics GmbH (Grabenweg 58, 6020 Innsbruck, Austria): Synchronization of customer data with the POS system
• Wintersteiger AG (J.-M. Dimmelstrasse 9, 4910 Ried im Innkreis, Austria): Maintenance of the POS system (access exclusively for maintenance purposes, data and processing remain legally with us)
• Brevo: Sending newsletters and transactional messages in connection with our services. Terms of use: https://www.brevo.com/de/legal/termsofuse/
• Intercom (EU hosting): Data synchronization of customer data for personal contact and provision of a digital mailbox. DPA: https://www.intercom.com/legal/data-processing-agreement

All named processors are contractually obliged to comply with data protection regulations and process personal data exclusively in accordance with our instructions.

6 Consent and right of withdrawal

6.1 If your consent is required for the processing of your data, we will only process it after you have given your express consent.

6.2 In principle, we do not process any data of minors, unless the collection is absolutely necessary for the fulfillment of the contract, as is the case when booking ski equipment for minors according to ÖNORM 11088. By giving your consent, you confirm that you have reached the age of 14 or that you have the consent of your legal representative.

6.3 You can withdraw your consent at any time by sending an e-mail to the following address: office@sportnenner.at. In such a case, the data previously stored about you will be deleted or anonymized and subsequently only used for statistical purposes without personal reference. Please note that it may be necessary for legal reasons for your data to be stored for a certain period of time despite the right to erasure (e.g. invoices in the course of online rental/sales - see point 3). The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

7. data security

Sport Nenner & skibuy.at uses technical and organizational security measures to protect the stored personal data against accidental or intentional manipulation, loss or destruction and against access by unauthorized persons. Our security measures are continuously improved in line with technical progress.

8. your rights

8.1 You have the right (subject to applicable law) to (i) verify whether and what personal data we hold about you and obtain copies of such data, (ii) request the rectification, completion or erasure of your personal data that is inaccurate or not processed in accordance with the law, (iii) require us to restrict the processing of your personal data, and (iv) in certain circumstances, object to the processing of your personal data or withdraw the consent previously given for the processing, (v) request data portability, (vi) know the identity of third parties to whom your personal data is transferred, and (vii) lodge a complaint with the competent authority.

8.2 You have the right to information from Sport Nenner (office@sportnenner.at) about the personal data concerned at any time. Insofar as there is no legal obligation to retain data, you have the right to delete this data and to object to its processing. You also have the right to correct the data.

 Please contact us regarding your rights at office@sportnenner.at or write to:

Sport Nenner
Sebastian Mader-Erhart
Hintertux 767
6294 Hintertux

9. cookies and web tracking