Ski Challenge – Privacy Notice
Because your privacy matters
Constructed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (“GDPR”) and the Austrian data protection act (Datenschutzgesetz).
The current version of this Privacy Notice is: August 2023
About this Privacy Notice (“Privacy Notice”)
Produced by Ski Challenge GmbH, Ski Challenge is a virtual 3-D simulation for iOS and Android, in which ski races can be played offline and online.
When it comes to your personal data, safety and transparency take top priority here at Ski Challenge GmbH. We are committed to protecting and respecting your privacy, therefore, it is very important to us that you feel safe during your visit to our website or App and while using our services.
The following Privacy Notice will provide you with an overview of how we guarantee the protection of your privacy, what rights you have, the type of personal data being collected as well as the main purpose of their collection and processing.
Regarding the terms used in this privacy notice, such as “Controller”, “Processor”, “Processing”, or “Personal Data”, etc., their GDPR definitions apply.
This privacy notice is drafted in English and German. In case of conflict, the German version shall be the binding version.
About the Controller
Ski Challenge GmbH, a company registered at Wiedner Hauptstrasse 94|A-1050, Vienna, Austria, Company Registration no: 587965f (“we”, “us”, “our”), assumes the role of Controller for personal data collected within the processing operations described in this Privacy Notice.
Ski Challenge GmbH is part of the Greentube group, which is made up of different entities. When it comes to your personal data, our parent company (Greentube GmbH) and some sister companies may offer certain services further specified in our Terms and Conditions and, as such, may have the role of Processors. However, such processing will always be subject to a respective data processing agreement.
What personal data do we collect about you? Why do we process your personal data and what are legal basis for our use of your personal data?
| What personal data do we collect and process? | Why do we process your personal data? | What is the legal basis for our use of your personal data? |
|---|---|---|
| Registration data: When you are creating an account for the Ski Challenge app, we may process your e-mail address, username and password. | Provide our services: We collect and process this personal data to provide our services and products. | Performance of contract: When we provide you with products or services, or communicate with you about them.
Therefore, the provision of personal data is mandatory, as otherwise our services could not be provided, and you would not be able to enjoy the entertainment experience of our website/app. |
| Tournament data: When participating in a specific tournament, we process, for example: your name, surname, address, e-mail address, age, citizenship, etc. Additionally, we may require data to be able to send your reward (e.g. Address) or information to verify if you are eligible to receive the reward (e.g. copy of ID) | Provide our services: We collect and process this personal data to provide our services in regards to tournaments. To verify if you are eligible to receive a reward issued for the tournament. |
Performance of contract: When we provide you with products or services, or communicate with you about them.
Consent: When we ask your consent to process additional personal data specific for tournaments (e.g., to send your reward). You may withdraw your consent to processing your data at any time. |
| Contact data: When communicating via e-mail, phone, letter, subscribing to our newsletter or visiting our office, we might process, for example: your name, surname, address, e-mail address, country, telephone number etc. | Communicate with you: We collect and process this personal data to communicate with you in relation to our services and send marketing communications. | Performance of contract: When we provide you with products or services, or communicate with you about them.
Consent: When we ask your consent to process your personal data for specific activity (e.g., direct marketing). You may withdraw your consent at any time. Therefore, the provision of Personal Data is mandatory, as otherwise our services could not be provided, and you would not be able to enjoy the entertainment experience of our website/app. |
| Log data: When you use our website or App, we might process, for example: technical information, including the internet protocol (IP) address used to connect your computer to the internet, computer or mobile device information, operating system, browser type, device type, unique device identification number, time of access, date of access, language use etc. | Improve our services and fix errors: We process your personal data to improve our services, fix errors and provide you with a better user experience. | Our legitimate interest: To improve our services and products we are providing you with. |
| Marketing data: If you visit the Ski Challenge website/app or social media platforms, we might process marketing data, for example: information about your behaviour and activity (e.g., clicks, places, actions, amount of time spent on the page, etc.), other relevant data from cookies (see section “How to manage your cookie preferences”). | Improve our services and personalise your experience: We process this personal data to improve our services and products, identify your preferences and personalise your experience with our services. | Our legitimate interest: To improve our services and products, and personalise your experience.
Consent: Where you have agreed to us collecting and processing your personal data for a certain purpose that we communicated to you. You may withdraw your consent at any time. |
| Pictures and videos of the rides: When participating in the Ski Challenge, we might collect pictures and videos of your rides (or parts thereof) as well as the results of the rides, publish such data on the internet and report them in the media channels in any conceivable way, stating the user. | Marketing: We collect your personal data for marketing purposes. | Consent: Where you have agreed to us collecting and processing your personal data for a certain purpose that we communicated to you. You may withdraw your consent at any time. |
| Non-personal usage data: When participating in the Ski Challenge via our app, non-personal usage data the participant does not actively provide will also be permanently processed and stored (e.g., hardware information, game statistics, ad impressions). | Improve our services and prevent disruptions: We will collect non-personal usage data to prevent any disruptions and misuse, and to enable the adaptation and further development of the Ski Challenge app. | Our legitimate interest: To improve our services and products we are providing you with. |
| Personal data (e.g., name, surname, e-mail address etc.) about you that might be necessary for us to comply with various legal obligations. | Comply with our legal obligations: We collect and process your personal data if this is necessary to meet our legal and regulatory obligations, to share it with other organisations (e.g., government authorities). | Our legal Obligation: In some cases, we have legal obligation to collect and process your personal data.
Therefore, the provision of Personal Data is mandatory, as otherwise our services could not be provided, and you would not be able to enjoy the entertainment experience of our website/app. |
Do we make automated decisions about you?
We do not use personal data for fully automated decision-making processes, including profiling within the meaning of Art. 22 GDPR.
Data subject rights
What data subject rights under GDPR do you have?
Right to be informed:
You have the right to be provided with clear, transparent and easily understandable information about your rights and how we use your personal data. Therefore, we provide this privacy notice to explain how we use your personal data.
Right of access:
You have the right to request confirmation from us as to whether we are processing personal data concerning you. If we’re processing your personal data, you have the right to obtain access or receive a copy of your data within a reasonable time. Please see below how to submit such a data access request.
Right to rectification:
You have the right to demand the correction of inaccurate personal data and completion of any incomplete information concerning you.
Right to erasure:
- You have the right to request us to erase personal data concerning you, if:
- the personal data is no longer necessary in relation to the purpose for which they were collected;
- you gave us consent to use your personal data and you have now withdrawn the consent;
- you have objected to the processing of your personal data;
- the personal data have been unlawfully processed;
- the law requires us to delete your personal data.
We may not be able to agree to your request if it conflicts with any potential statutory retention periods or other legal obligations. However, when mentioned retention periods are over, your personal data will be automatically deleted.
Right to object:
You have the right to object to the processing of your personal data for direct marketing purposes. If our legal basis for using your personal data is based on legitimate interest, you also have a right to object to such processing. However, if we are able to provide overriding reasons why we need to process your personal data, we will have to decline your request.
Right to restriction of processing:
You have the right to suspend further use of your personal data. When the processing of your personal data is suppressed, we will restrict the processing or delete your personal data taking into account any applicable legal retention periods.
Right to data portability:
You have the right to obtain and reuse your personal data for your own purposes across different services. This is not a general right and there are statutory exceptions.
How do you exercise your rights?
To exercise any of these rights specified above, you can contact us and submit your request via e-mail at info@ski-challenge.com, or via letter to Ski Challenge GmbH, Wiedner Hauptstrasse 94 | A-1050, Vienna, Austria.
How do you withdraw your consent?
You always have the right to withdraw your consent to Ski Challenge GmbH. Please submit your withdrawal request via e-mail at info@ski-challenge.com, or via letter to Ski Challenge GmbH, Wiedner Hauptstrasse 94 | A-1050, Vienna, Austria.
Please bear in mind that withdrawing your consent does not affect the lawfulness of processing personal data based on consent before your withdrawal.
How will we verify your request?
Your request must provide sufficient information that allows our team to verify you are the person or an authorised representative of a person whose personal data we have collected (e.g., name, surname, your e-mail, other information we may request for verification purposes), and describe your request in sufficient detail so that it allows us to properly evaluate and respond to it.
If your request is submitted by an authorised agent, written permission and information that verifies the identity of the agent must be enclosed with the request. We cannot provide you with the information or exercise your other right if we cannot verify your identity.
To verify your identity, we may request you to provide additional information about yourself. We will only use this information and information provided in the request to verify your identity or authorise your request.
Your requests shall be generally handled within one month of receipt. This period may be extended by two further months based on the complexity and number of requests. We will do our best to respond to your request as quickly as possible, but it may happen that other legal obligations or third-party rights and processes slow down the process. Should this be the case, we will always make sure to notify you about the extension within one month of receipt and inform you of its length and the reasons behind it.
Which Supervisory authority can you file a complaint with?
You have the right to file a complaint with the competent supervisory authority if you believe your rights have been violated under the GDPR. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde).
Recipients of personal data
The provided personal data shall be processed by Ski Challenge GmbH and only, if necessary, will it be processed within Greentube Group companies located in the European Economic Area (EEA). We share your personal data only with the respective service providers (Processors). These processors are providers of IT services, analytics providers/marketing tools, other tools and software solutions, and further providers with similar services. In addition, in some cases, we may need to transfer your personal data to skiing associations and other entities in the field of skiing to provide you with our services. We will only conduct such a transfer if we find that we have a legitimate legal basis for it. In addition, these recipients will have an obligation to inform you if they want to process your data (Art. 14 of GDPR), in which case you may also object to their processing of your personal data and/or to our data transfer.
All data transfers will always be subject to a respective data processing agreement.
We may need to transfer your personal data outside of the EEA or UK to our third-party service providers based in the USA. However, if your personal data is transferred to a country or territory outside of the EEA and to a country which is not subject to an adequacy decision approved by the EU Commission, we will make sure that a contract with strict data protection safeguards (EU Standard Contractual Clauses) is in place before we transfer your personal information.
If you would like to receive more information regarding this, please contact us by sending an e-mail to info@ski-challenge.com.
How do we protect your personal data?
It is important to us to protect your personal data. Any personal information shared with us will be treated with care and appropriate security. We maintains physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of your personal data.
How long do we keep your personal data?
We retain your personal data for as long as necessary to fulfil the purposes mentioned in this Privacy Notice, including a period of time as may be required by our legal obligations.
Unless expressly stated in this Privacy Notice, we will securely delete your personal data or anonymise it so that you cannot be identified anymore once this is no longer needed.
How will we keep you updated about how we use your personal data?
We regularly review and update our Privacy Notice. We will alert you about content changes by placing a notice on our website or in our App.
You can see when this Privacy Notice was last updated by checking the date at the top of this page. You are responsible for periodically reviewing this Privacy Notice.
How to manage your cookie preferences
You can always adjust your cookie settings through the cookie consent manager. You can also manage your cookie preferences through the pop-up cookie banner that appears when you first visit our website. Also, it is possible to manage your cookie preferences by changing your browser settings on your device to refuse the use of some or all non-necessary cookies.
Please bear in mind that blocking and deleting cookies may have an impact on your user experience.
Our Contact Details
Thank you for reading our Privacy Notice.
If you have any further questions about this Privacy Notice or the processing of your personal data, please contact our Data Protection Officer via e-mail at dpo@greentube.com or phone at +43 1 90 171
DOWNLOAD THE GAME NOW!
