SkiMIS – Ski Resort Management

SkiMIS

Privacy policy

Translation for information purposes. In case of discrepancies, the German version prevails.

Controller

Medatec Computer Ges.m.b.H., Lochbachstraße 6, 6971 Hard, Austria
Email: info@skimis.at · Phone: +43 681 842 49 637

Protecting your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, Austrian Data Protection Act DSG 2018, Telecommunications Act TKG 2021).

Hosting and server log files

This website is operated by us on our own servers in Austria. When you visit it, technically necessary data (IP address, date and time, page requested, browser) is logged to ensure secure and stable operation and to detect attacks (Art. 6(1)(f) GDPR). These logs are deleted after 30 days at the latest, unless a specific security incident requires longer retention.

Cookies, tracking and fonts

This website does not set cookies and does not use any analytics or marketing services. Fonts are served locally from our server; there is no connection to Google Fonts or other third parties.

Appointment booking via Calendly

For online booking you can use Calendly (Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA). The calendar is only loaded when you click “Load calendar”. From that moment, data (including IP address, browser information and the booking details you enter such as name, email address and topic) is transferred to and processed by Calendly. The legal basis is your consent (Art. 6(1)(a) GDPR) and pre-contractual measures (Art. 6(1)(b) GDPR). Calendly is certified under the EU-US Data Privacy Framework; standard contractual clauses are also in place. Details: calendly.com/privacy.

Contact by email or phone

If you contact us, we process your details solely to handle your enquiry and any follow-up questions (Art. 6(1)(b) and (f) GDPR). We keep the correspondence for as long as necessary to handle it and to document the business relationship, but no longer than six years after the last contact, unless statutory retention obligations apply.

App and web app "SkiMIS AI Interpreter"

The SkiMIS AI Interpreter (app for iOS and Android and web version at translate.skimis.at or translate.medatec.at) translates conversations between our staff and their counterparts live into another language.

  • Voice and text (AI translation): During a conversation your voice is captured by your device's microphone while you are speaking. The recording is sent to Microsoft Azure (Microsoft Ireland Operations Ltd., data centre in Germany) for speech recognition; if Azure is unavailable, to OpenAI (OpenAI, L.L.C., 1455 3rd Street, San Francisco, CA 94158, USA) instead. The recognised text and the last few sentences of the conversation as context are sent to OpenAI, which translates it. The speech output of the translation is produced by Microsoft Azure or, depending on the settings, by OpenAI. We do not store audio. OpenAI may retain the data for up to 30 days for abuse monitoring; OpenAI and Microsoft do not use it to train their AI.
  • Conversation records: We store the recognised text of every contribution and its translation together with date, time, duration, languages and – for conversation requests – your name and topic on our server (Amazon Web Services, data centre in Frankfurt). The purpose is to document the consulting services provided to our clients (Art. 6(1)(b), (c) and (f) GDPR). Only the staff member involved can access a record. At their request we send the text to OpenAI to create a summary. Records and summaries are deleted after 12 months at the latest. Audio and camera images are not stored.
  • Meeting recording: Our staff can have the app transcribe a meeting they attend; the device lies on the table. The speech of everyone present is captured, including an interpreter. The audio is sent to Microsoft Azure (as a fallback to OpenAI) for speech recognition and is not stored; we store the recognised text like a conversation record (see above). The staff member informs all participants before the recording starts. The legal basis is our legitimate interest in documenting the services provided (Art. 6(1)(f) GDPR); you may object to the recording at any time.
  • Camera (optional): Only if you switch on the camera, a low-resolution video is sent directly to your counterpart and is not stored. The camera is also used to scan QR codes.
  • Conversation requests: If you request a conversation, your name, topic and language are passed to the chosen staff member. A request that is not accepted expires after 30 minutes. You send the request link yourself (e.g. via WhatsApp or e-mail); the terms of the respective provider apply.
  • Connection and billing data: To establish the connection our server briefly processes the IP address and connection data. For each conversation we log start, duration, languages, the responsible staff member and the conversation label (for requests: name and topic) – without the content (which is kept only in the conversation record, see above). We keep this information for billing and documentation for a maximum of six years.

The app servers run on Amazon Web Services in Frankfurt (EU); connections are encrypted. Data processing agreements are in place with OpenAI and Microsoft; EU standard contractual clauses apply to the transfer to OpenAI in the USA. The legal basis is the performance of the conversation you requested (Art. 6(1)(b) GDPR) and our legitimate interest in secure operation and correct billing (Art. 6(1)(f) GDPR). Before the first conversation the app shows which data is sent to OpenAI and Microsoft and asks for your consent; without consent no conversation takes place. You can withdraw your consent at any time in the app settings. The app contains no advertising and no analytics or tracking tools; guests do not need an account. The translation is produced by artificial intelligence and may contain errors.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent at any time with effect for the future. If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

Image credits

  • Title image: Marc Guellerin / Unsplash
  • Credo (chairlift Diedamskopf): Diedamskopf Alpin Tourismus GmbH
  • Schetteregg ski resort: Markus Gmeiner / Egger Liftgesellschaft mbH & Co KG
  • Diedamspark: Diedamskopf Alpin Tourismus GmbH & Co KG
  • Broken River: Broken River Ski Club
  • Portrait Matthias Schmid: Bettina Gmeiner-Winder
  • Ski rental: Intersport Harms, Bramberg
  • Ala-Too Resort (site survey Ak-Bulak, winter panorama Tian Shan), Brocken/Schierke: SkiMIS

The photos are used with the consent of the respective rights holders or under the stated licence.