privacy policy

Datenschutzerklärung

soulbach alps experiences gmbh · soulbach.at

Last updated: March 2025 | Applicable law: GDPR (EU) 2016/679 and Austrian DSG

1. Controller / Verantwortlicher

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and the Austrian Federal Act concerning the Protection of Personal Data (DSG) is:

soulbach alps experiences GmbH

Florianiweg 455

5753 Saalbach, Austria

E-Mail: kebing@soulbach.at

Phone: +43 664 233 8000

Website: https://soulbach.at

For all data protection matters, you may contact us directly at the above address or by email.

2. General Principles of Data Processing

We take the protection of your personal data very seriously. We process personal data only to the extent necessary and in accordance with the applicable legal requirements — in particular the GDPR and the Austrian DSG.

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, email address, and phone number.

We do not sell, rent, or trade your personal data to third parties. Data is shared with third parties only where necessary to provide our services and only on the basis of a valid legal ground under Article 6 GDPR.

3. Categories of Data, Purposes, and Legal Basis

3.1 Website Visits — Server Log Files

When you visit our website, your browser automatically transmits certain technical data to our web server. This includes:

IP address (anonymised after processing)
Date and time of the request
Browser type and version
Operating system
Referrer URL (the page you visited before)
Amount of data transferred

Legal basis: Article 6(1)(f) GDPR — legitimate interest in operating and securing the website. This data is not used to identify individual users and is deleted automatically after 7 days.

3.2 Contact Form

When you use our contact form, we collect the information you provide, which may include:

First name and last name
Email address
Phone number or WhatsApp contact (if provided voluntarily)
Preferred travel season and experience type
Free-text description of your enquiry

Legal basis: Article 6(1)(b) GDPR — processing is necessary to take steps at your request prior to entering into a contract, and Article 6(1)(a) GDPR — your consent given by actively submitting the form.

We use this data exclusively to respond to your enquiry and, where applicable, to prepare a personalised travel consultation. We do not use it for any other purpose without your explicit consent.

Retention period: We retain this data for as long as necessary to process your enquiry and for up to 3 years thereafter for documentation purposes, unless a longer retention period is required by law.

3.3 Direct Communication (Email, Phone, WhatsApp, WeChat)

If you contact us directly by email, phone, WhatsApp, or WeChat, we process the personal data you provide in order to handle your enquiry and communicate with you.

Legal basis: Article 6(1)(b) GDPR — pre-contractual or contractual necessity, and Article 6(1)(f) GDPR — our legitimate interest in responding to customer enquiries.

Please note: WhatsApp and WeChat are services of third-party providers (Meta Platforms Ireland Ltd. and Tencent Holdings Ltd. respectively). When you contact us via these channels, those providers process your data according to their own privacy policies. We recommend you review their respective policies before using these channels.

3.4 Cookies and Tracking

Our website is built on the Wix platform (Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel). Wix may set cookies — small text files stored on your device — that are technically necessary for the website to function correctly.

In addition, Wix may use analytics cookies to collect anonymised statistical data about website usage. Where non-essential cookies are used, we will present a cookie consent banner before any such cookies are set.

You may withdraw your consent at any time by adjusting your browser settings to refuse or delete cookies. Please note that disabling cookies may affect the functionality of certain website features.

Legal basis for necessary cookies: Article 6(1)(f) GDPR — legitimate interest. Legal basis for analytics cookies: Article 6(1)(a) GDPR — your consent.

For full information on how Wix processes data, please refer to the Wix Privacy Policy at: https://www.wix.com/about/privacy

3.5 No Booking or Payment Processing

This website is currently a presentation site only. We do not process bookings, reservations, or payments through this website. No financial data is collected.

4. Data Transfers to Third Countries

Our website is hosted on the Wix platform. Wix.com Ltd. is headquartered in Israel, which is considered a third country for GDPR purposes. Israel has been granted an adequacy decision by the European Commission, meaning it provides an adequate level of data protection.

If you contact us via WeChat, please be aware that WeChat is operated by Tencent Holdings Ltd., which is headquartered in China. Data processing may therefore occur in China. China does not currently have an EU adequacy decision. You use this communication channel voluntarily and at your own discretion. We recommend using email or WhatsApp where data protection is a priority for you.

We do not transfer your personal data to any other third countries without your explicit consent or a valid legal basis under Article 46 GDPR.

5. Your Rights as a Data Subject

Under the GDPR, you have the following rights with respect to your personal data:

Right of access (Article 15 GDPR): You may request confirmation of whether we process your personal data and, if so, obtain a copy of that data.
Right to rectification (Article 16 GDPR): You may request correction of inaccurate or incomplete personal data.
Right to erasure (Article 17 GDPR): You may request deletion of your personal data, subject to applicable legal retention obligations.
Right to restriction of processing (Article 18 GDPR): You may request that we restrict the processing of your data under certain circumstances.
Right to data portability (Article 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
Right to object (Article 21 GDPR): You may object at any time to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.
Right to withdraw consent (Article 7(3) GDPR): Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

To exercise any of these rights, please contact us at: kebing@soulbach.at

We will respond to your request within one month of receipt. This period may be extended by a further two months in complex cases, in which case we will notify you accordingly.

We may need to verify your identity before processing your request. We will not charge a fee for reasonable requests.

6. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR or applicable Austrian data protection law, you have the right to lodge a complaint with the competent supervisory authority.

The supervisory authority in Austria is:

Österreichische Datenschutzbehörde (DSB)

Barichgasse 40-42

1030 Wien, Austria

Phone: +43 1 521 52-0

E-Mail: dsb@dsb.gv.at

Website: https://www.dsb.gv.at

You also have the right to lodge a complaint with the supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

Our website uses SSL/TLS encryption (indicated by 'https://' in your browser's address bar), which protects data transmitted between your browser and our server.

While we take all reasonable measures to protect your data, no transmission over the internet can be guaranteed to be completely secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

8. Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us and we will delete that information promptly.

9. Links to Third-Party Websites

Our website may contain links to external websites operated by third parties. This Privacy Policy applies solely to our website. We have no control over and assume no responsibility for the privacy practices or content of third-party websites. We encourage you to review the privacy policy of any website you visit.

10. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in legal requirements or our data processing practices. The current version will always be available on this website.

We recommend that you review this policy periodically. Where changes are material, we will take reasonable steps to notify you.

soulbach alps experiences gmbh · Florianiweg 455, 5753 Saalbach, Austria

info@soulbach.at · +43 664 233 8000 · soulbach.at