The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Nordika Tyrol GmbH
Hocheggstraße 720
6100 Seefeld in Tirol
Austria
Company Register No.: FN 571423d
Register Court: Regional Court of Innsbruck
Email: mmelzer@nordikatyrol.at
The protection of personal data is important to us. We process personal data exclusively in accordance with the applicable data protection legislation, in particular the General Data Protection Regulation, the Austrian Data Protection Act and the Austrian Telecommunications Act 2021.
Personal data means any information relating to an identified or identifiable natural person. This may include, for example, an IP address, contact details or technical usage data.
This website is intended solely to provide general information about our company. It does not include a contact form, user account, ordering function or payment function.
When you access this website, your browser transmits technically necessary data to the web server. The following information may be processed and stored in server logs:
These data are processed to make the website technically available, ensure the stability and security of the system, identify technical errors and prevent abusive access.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and technically error-free operation of our website.
Server logs are deleted or anonymised as soon as they are no longer required for technical operation and security monitoring. They are retained for longer only where there are specific indications of a security incident or unlawful use. In such cases, the relevant data may be retained until the matter has been fully resolved.
Server logs are not used to create personal usage profiles.
We use the following IT service provider for hosting and technical support of the website:
INet-Konzept – Oliver Brandes
Sommers Weg 8
25336 Klein Nordende
Germany
Email: info@inet-konzept.de
Website: www.inet-konzept.de
The IT service provider processes personal data generated through the operation of the website on our behalf. Such processing is carried out in accordance with Article 28 GDPR.
As a general rule, the service provider may process the data only on our instructions and only to the extent necessary for hosting, technical maintenance, security and troubleshooting.
If the IT service provider engages additional technical sub-processors or cloud services, it is required to comply with data protection requirements and ensure an appropriate level of data protection.
The IT service provider engaged by us is established in Germany. Data generated during the normal operation of the website are therefore generally processed within the European Union or the European Economic Area.
If the IT service provider uses additional service providers within its technical infrastructure and personal data are processed outside the European Economic Area, such processing may take place only in compliance with Articles 44 et seq. GDPR.
A transfer may be based, in particular, on an adequacy decision by the European Commission or on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
This website uses only cookies that are strictly necessary for its technical provision, security and functionality.
Cookies are small text files that are stored on or read from a visitor's device. Strictly necessary cookies may be used, for example, to maintain a connection while a page is being accessed, implement security settings or provide technical website functions.
Strictly necessary cookies are stored and accessed on the basis of Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). Consent is not required for such cookies.
Where the use of these cookies involves the processing of personal data, the legal basis for such processing is Article 6(1)(f) GDPR. Our legitimate interest lies in providing a secure, stable and functional website.
Session cookies are generally deleted when the browser is closed. Where strictly necessary cookies are stored for a longer period, they are deleted as soon as their technical purpose no longer applies.
Cookies are not used for the following purposes:
Because this website uses only strictly necessary cookies, no cookie consent banner is required.
Visitors can configure their browser to display, restrict or delete cookies. If strictly necessary cookies are completely blocked, some website functions may be limited.
No web analytics or marketing services are used on this website. In particular, user behaviour is not analysed for advertising purposes and no personal usage profiles are created.
We do not use social media plugins that automatically transmit personal data to social network operators merely when the website is accessed.
The website does not contain a contact form. If you contact us using a published email address, by telephone or by other means, we process the data you provide in order to handle your enquiry.
This may include, in particular:
Where the contact relates to steps prior to entering into a contract or to the performance of a contract, Article 6(1)(b) GDPR is the legal basis.
For other enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in handling incoming enquiries properly and in a traceable manner.
The data are deleted once the enquiry has been fully handled and no statutory retention obligations, contractual requirements or legitimate interests require continued storage.
Personal data are disclosed only to recipients whose involvement is necessary for operating the website, handling an enquiry or complying with legal obligations.
These recipients may include, in particular:
Personal data are not disclosed for advertising purposes.
We retain personal data only for as long as necessary for the relevant processing purpose.
Data may also be retained where statutory retention obligations apply, where they are required for the establishment, exercise or defence of legal claims, or where retention is necessary to investigate a specific security incident.
Once the relevant purpose no longer applies and applicable retention periods have expired, the data are deleted or anonymised.
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or disclosure.
The website is generally transmitted in encrypted form via HTTPS. An encrypted connection can be identified, in particular, by the use of “https://” in the browser's address bar.
Despite appropriate safeguards, complete protection against all risks cannot be guaranteed when data are transmitted over the internet.
Subject to the applicable legal requirements, data subjects have, in particular, the following rights:
Under Article 15 GDPR, you may request confirmation as to whether we process personal data concerning you and, if so, access to those data.
Under Article 16 GDPR, you may request the rectification of inaccurate personal data and the completion of incomplete personal data.
Under Article 17 GDPR, you may request the erasure of your personal data, provided that no legal or other legitimate grounds require continued processing.
Under Article 18 GDPR, you may request restriction of processing where the statutory requirements are met.
Where the statutory requirements are met, you may request under Article 20 GDPR that data you have provided be transmitted to you in a structured, commonly used and machine-readable format.
Under Article 21 GDPR, you may object, on grounds relating to your particular situation, to processing based on Article 6(1)(e) or (f) GDPR.
Following a valid objection, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing or the processing is required for the establishment, exercise or defence of legal claims.
Where processing is based on consent, you may withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing based on consent before its withdrawal.
To exercise your rights, you may contact us using the contact details provided in Section 1.
If you believe that the processing of your personal data infringes data protection legislation, you have the right to lodge a complaint with a data protection supervisory authority.
The supervisory authority competent for Austria is:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria
Telephone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at
Your right to lodge a complaint with another supervisory authority competent under Article 77 GDPR remains unaffected.
No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place in connection with this website.
The technical data transmitted automatically when the website is accessed are necessary for the operation and display of the website. Without these data, the website cannot be provided technically, or cannot be provided in full.
Otherwise, there is no statutory or contractual requirement to provide personal data when using the website solely for informational purposes.
We reserve the right to amend this Privacy Policy if the website, the technical services used or the legal requirements change.
The version published on this website at the relevant time applies.
Last updated: October 2026