Data protection

Data protection declaration and information according to Artt 12ff GDPR

The companies of the Heli Austria Group (Heli Austria GmbH, Heli Tirol GmbH, „MARTIN“ Flugrettung GmbH, Heli Austria Flight Academy GmbH, Heli Air AG) process personal data of natural persons. This is necessary so that we can provide our services to you. We process personal data of natural persons in the following cases

1. you have ordered products via our online store:</h3 1.1 Who is responsible for data processing? The online store is operated by Heli Austria GmbH. It is therefore responsible for data processing within the meaning of the General Data Protection Regulation (GDPR). 1.2 For what reason is your data processed (purpose of processing)? The data you provide on the online store screen is required to process your order and deliver the desired goods to you. We do not assume that you are affected, but unfortunately there are also black sheep among online store users who do not pay for the goods ordered. In this case, we use the data to collect outstanding debts. 1.3 To whom do we pass on your data? We pass on your data (name, address, delivery item) to suppliers so that your order can be delivered. For the collection of outstanding debts, the necessary data will first be forwarded to debt collection agencies and, if necessary, to legal representatives and courts. 1.4 Will the data be transferred to a third country? In principle, we do not transfer any data to a country outside the EU/EEA. However, this may be necessary in individual cases:

  • if we have to deliver goods to a third country based on your order
  • if a user of the online store does not pay for the goods they have ordered and the transfer is necessary to collect the outstanding debt

1.5 How long will your data be stored? The data will be stored by us until the expiry of the guarantee, warranty, compensation and statutory retention periods applicable to the business case (§ 132 BAO and § 212 UGB). In addition, the data may be stored until the end of any legal disputes in which it is required as evidence.

2. we have provided transportation services for you with one of our rescue helicopters following an emergency:</h3 2.1 Who is responsible for the data processing? Rescue services are provided by Heli Austria GmbH, Heli Tirol GmbH, „MARTIN“ Flugrettung GmbH and Heli Air AG. Rescue flights in the province of Tyrol are carried out by Heli Tirol GmbH, while rescue flights in the rest of Austria are generally flown by Heli Austria GmbH and „MARTIN“ Flugrettung GmbH. Rescue flights in Switzerland are carried out by Heli Air AG. The party providing the rescue service is responsible for data processing. Which company is responsible for processing your data can be seen from the invoice sent to you for the transportation service. 2.2 Why is your data processed (purpose of processing)? We process your data in order to provide you with the best possible assistance quickly and professionally. For this purpose, it is necessary that your health data (i.e. the health data that we collect in the course of our assignment) is also processed. We do not assume that you are affected, but unfortunately there are also black sheep who do not pay for our services, even among people for whom we often provide life-saving assistance through rescue transport. In this case, we use the data to collect outstanding debts. Furthermore, data processing is necessary in order to record our services and to settle accounts with statutory social insurance providers, among others. 2.3 Who we pass your data on to If it is possible to bill our services to the statutory social insurance provider or a federal state, the data required for billing will be forwarded to them. We assign our claims to A.B.S. Factoring AG. This company is based in Austria. The invoice recipient must pay the outstanding amount to A.B.S. Factoring AG and not to us. This can be seen on the respective invoice. For this purpose, we will transfer your invoice data (name, address, order number, outstanding amount) to A.B.S. Factoring AG. For the collection of outstanding receivables, the necessary data will first be forwarded to a debt collection agency and – if necessary – to legal representatives and courts. 2.4 Will the data be transferred to a third country? In principle, we do not transfer any data to a country outside the EU/EEA. If Heli Air AG provides rescue services in Switzerland, the data will be processed in Switzerland. Switzerland has been recognized by the European Commission as a safe third country in accordance with Art 45 GDPR. Data is only transferred to third countries in individual cases if this is necessary for the collection of outstanding claims. This means, in particular, if the service recipient (i.e. the person who has claimed the rescue service) is resident in a third country. 2.5 How long will your data be stored? The data will be stored by us until the expiry of the guarantee, warranty, compensation and statutory retention periods applicable to the business case (§ 132 BAO and § 212 UGB). In addition, the data may be stored until the end of any legal disputes in which it is required as evidence.

3. we have provided services for you (assembly flights, film and photo flights, VIP and cab flights, transport flights, etc.) with one of our helicopters on the basis of your order:</h3 3.1 Who is responsible for the data processing? The data is processed by a company of the Heli Austria Group. This depends on who you have given the order to. If you are unsure, your contractual partner can be seen on the offer you have received or on the invoice. 3.2 Why is your data processed (purpose of processing)? The processing of the data provided by you is necessary for the processing of the respective order (provision of the service, communication with the client, invoicing, etc.). We do not assume that you are affected, but unfortunately there are also black sheep among our contractual partners who do not pay for the services we provide. In this case, we use the data to collect outstanding debts. 3.3 To whom do we pass on your data? We assign our receivables to A.B.S. Factoring AG. This is based in Austria. The invoice recipient must pay the outstanding amount to A.B.S. Factoring AG and not to us. This can be seen on the respective invoice. For this purpose, we will transfer your invoice data (name, address, order number, outstanding amount) to A.B.S. Factoring AG. We may pass on your data to business partners if this is necessary to process your order. Upon conclusion of an insurance contract for the delivery/service or the occurrence of an insured event, the data will be forwarded to the respective insurer. For the collection of outstanding debts, the necessary data will first be forwarded to debt collection agencies and, if necessary, to legal representatives and courts. 3.4 Will the data be transferred to a third country? In principle, we do not transfer any data to a country outside the EU/EEA. If Heli Air AG provides services, the data is processed in Switzerland. Switzerland has been recognized by the European Commission as a safe third country in accordance with Art 45 GDPR. Data is only transferred to third countries in individual cases if this is necessary for the collection of outstanding claims. I.e. above all if the client is domiciled in a third country. 3.5 How long will your data be stored? The data will be stored by us until the expiry of the guarantee, warranty, compensation and statutory retention periods applicable to the business case (§ 132 BAO and § 212 UGB). In addition, the data may be stored until the end of any legal disputes in which it is required as evidence.

4. flight school

4.1 Who is responsible for data processing? The data is processed by Heli Austria Flight Academy GmbH. 4.2 Why is your data processed (purpose of processing)? The processing of the data provided by you is necessary for the execution of the training contract concluded with you. We do not assume that you are affected, but unfortunately there are also black sheep among our contractual partners who do not pay for the training services we provide. In this case, we use the data to collect outstanding debts. 4.3 To whom do we pass on your data? We assign our receivables to A.B.S. Factoring AG. This is based in Austria. The invoice recipient must pay the outstanding amount to A.B.S. Factoring AG and not to us. This can be seen on the respective invoice. For this purpose, we will transfer your invoice data (name, address, order number, outstanding amount) to A.B.S. Factoring AG. We may pass on your data to business partners if this is necessary to process your order. Upon conclusion of an insurance contract for the delivery/service or the occurrence of an insured event, the data will be forwarded to the respective insurer. For the collection of outstanding debts, the necessary data will first be forwarded to debt collection agencies and, if necessary, to legal representatives and courts. 4.4 Will the data be transferred to a third country? In principle, we do not transfer any data to a country outside the EU/EEA. Data is only transferred to third countries in individual cases if this is necessary to collect outstanding debts. This means, in particular, if the client is domiciled in a third country. 4.5 How long will your data be stored? The data will be stored by us until the expiry of the guarantee, warranty, compensation and statutory retention periods applicable to the business case (§ 132 BAO and § 212 UGB). In addition, the data may be stored until the end of any legal disputes in which it is required as evidence.

5. data processing in connection with accessing this website

5.1 Cookies This website uses „cookies“ to simplify the use of our website and communication and to better adapt our internet presence to your needs. A „cookie“ is a small text file that is stored on your hard disk by a website. Cookies do not cause any damage to your computer and do not contain viruses. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted. 5.2 Google Analytics and Google Remarketing and Google Convers Tracking This website uses Google Analytics, Google Convers Tracking and Google Remarketing from Google Ireland Limited („Google“). Google uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookies about your use of this website (including your IP address) is transmitted to a Google server and stored there. It cannot be ruled out that data processing will take place outside the scope of EU law. Google has joined the Privacy Shield (https://www.privacyshield.gov/EU-US-Framework), so that Google guarantees compliance with EU data protection standards. We do not store any of your data that is collected in connection with these services. This website uses the IP anonymization option offered by Google Analytics. Your IP address will therefore be shortened/anonymized by Google as soon as Google receives your IP address. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to us. Third-party providers, including Google, use stored cookies to serve ads based on a user’s previous visits to our website. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. The IP address transmitted by your browser as part of these Google services will not be merged with other data by Google. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted. You can also deactivate the use of cookies by Google Remarketing: https://adssettings.google.com/anonymous?sig=ACi0TCgJbph0gZghUpVuJZL_3PCSoZnu7aS9RdxK5NCNpFvnGjhiVMjtBBSGyqn69iJUfUYRgJA7FJEFvgpfehvhOAOwlL7uPyJCHT9xQzdb8c6tZhqdDxQ&hl=en Alternatively, you can also deactivate the use of cookies by third-party providers: http://optout.networkadvertising.org/?c=1 5.3 Google Maps We use the Google Maps service on this website. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under point 5.2 of this declaration is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. 5.4 CheckEffect This website uses CheckEffect, a web analysis tool from ncm.at. CheckEffect is the tool for successful tourism online marketing, developed by tourism experts according to the needs of the tourism industry. CheckEffect uses cookies. The information generated by the cookie about your use of this website (including your IP address) is stored on a server of the company ncm.at. ncm.at will use this information to evaluate the use of the website. The evaluation is used to provide the website operator with a detailed insight and reports on search terms, search engines or cost-benefit calculations of individual advertisements, campaigns and paid links. CheckEffect compares this data anonymously with websites of similar companies and provides an industry comparison. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. 5.5 Use of the tweet button from Twitter Our website uses the „Tweet“ button of the social network Twitter, which is operated by Twitter Inc, 750 Folsom Street, Suite 600, San Francisco, CA 94107, United States („Twitter“). The button can be recognized by the dark blue bird and the word „Tweet“ on a light blue background. When you access a web page on our website that contains such a button, your browser establishes a direct connection to the Twitter servers. The content of the „Tweet“ button is transmitted by Twitter directly to your browser, which integrates it into your Twitter message. We therefore have no influence on the scope of the data that Twitter collects with the button, but we assume that your IP address is also recorded. The purpose and scope of the data collection and the further processing and use of the data by Twitter as well as your rights in this regard and setting options for protecting your privacy can be found in Twitter’s data protection information: http://twitter.com/privacy. If you are a Twitter member and do not want Twitter to collect data about you via our website and link it to your member data stored on Twitter, you must log out of Twitter before visiting our website. 5.6 „Share“, „Like“ button Our website has buttons on some pages for sharing and/or marking with „Like“ the page content on the social media platforms Facebook, Pinterest, Twitter. The buttons are ideally designed to protect the personal data of our website visitors, as the script (computer program) behind the buttons does not collect or process any personal data. Precise information about the function of the buttons is provided by heise Verlag as the publisher of the IT magazine c’t and as the developer of the buttons. Website visitors who want to share our page and/or mark it with „like“ are taken directly to the „share“ pages of the respective social media platform when they click on the buttons. Only there/then are the scripts required to share/mark the page content loaded. The business and data protection conditions agreed by the website visitor with the respective social media platforms then apply. The respective platforms Facebook, Pinterest and Twitter provide detailed information about this.

6. General information on data processing:

6.1 Contact details:

  • Heli Austria GmbH: Heliport 5600 St. Johann im Pongau Tel: + 43 6462 4200 E-Mail: fly@heli-austria-at
  • Heli Tirol GmbH: Tiroler Bundesstraße 1 6462 Karres E-mail: fly@heli-tirol.at
  • „MARTIN“ air rescue GmbH: Heliport 5600 St. Johann im Pongau Tel: +43 6462 4200 E-mail: fly@heli-austria.at
  • Heli Austria Flight Academy GmbH: Airfield Bad Vöslau Flugfeldstraße, airfield 1 2542 Kottingbrunn Tel:+43 676 880 10 611 academy@heli-austria.at
  • Heli Air AG: Airfield area 2 8753 Mollis Glarus North Phone: +41 55 612 13 22 E-mail: info@heliair-swiss.ch

6.2 We would like to point out that under the General Data Protection Regulation (GDPR) you are entitled to the following rights as a data subject:

  • Right to information about the processing of your data (Art. 15 GDPR): We will be happy to provide you with detailed information about our processing of your data.
  • Right to rectification of your data (Art. 16 f GDPR): Do you believe that the data we process is incorrect? We will be happy to process your request to correct your data.
  • Your data is no longer necessary for the purposes for which it was collectedRight to erasure of your data (Art. 16 f GDPR): You have the right to request that we erase your data. The prerequisite for erasure is
    • The data processing is based exclusively on your express consent and you withdraw this consent.
    • You object to the data processing and there are no overriding legitimate grounds for the processing.
    • Your data is being processed unlawfully.
    • Erasure is necessary for compliance with a legal obligation under Union or Austrian law.We ask for your understanding that we cannot comply with your request for erasure if the processing is necessary:
      • to exercise the right to freedom of expression;
      • to fulfill a legal obligation under the law of the European Union or Austrian law;
      • for reasons of public interest in the area of public health;
      • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, insofar as the erasure would render impossible or seriously impair the achievement of these purposes;
      • for the establishment, exercise or defense of legal claimsRight to lodge a complaint with the supervisory authority (Art 77 GDPR): If – despite our efforts – you are of the opinion that our data processing is not lawful, you can lodge a complaint with the competent supervisory authority. In Austria, the data protection authority is responsible for such complaints. You can find more information about the data protection authority here.

You can send us all inquiries and requests either by post or by email to the contact details given above (see point 6.1). We ask for your understanding that we reserve the right to charge you an appropriate administrative fee for our expenses or not to process the request in the case of manifestly unfounded or – especially in the case of frequent repetition – excessive requests. 6.3 The provision of your data is necessary for the provision of our services and the fulfillment of our contractual obligations. If you do not provide the data, we will not be able to provide our services to you</strong

ADDITIVE+ VOUCHERS

On our website you have the possibility to buy vouchers. To process your purchase and to save and store your data we use software provided by ADDITIVE s.n.c., 39011 Lana (BZ), Italy (“ADDITIVE”). Through the use of these services and systems your data will be processed and stored, at least in part, also outside of the EU or the EEC. The adequate level of data protection is based on an adequacy decision taken by the European Commission (“Privacy Shield”) or on data processing agreements.

The data you provide is required to fulfil the contract or to carry out pre-contractual measures. Without this data we cannot conclude a contract with you. The data will not be transferred to an outside third party, except for your credit card data which will be transferred to the payment provider and to our tax accountant to fulfil our tax obligations.

The data processing takes place in accordance with the requirements of art. 6 para. 1 lit a (consent) and/or lit b (processing necessary for the performance of a contract) of the GDPR.

To the 2026 Winter Games