Data Protection EU DATAP
Data Privacy Policy
TSG Tourismus Salzburg GmbH is responsible for the processing of your personally identifiable data on our website.
Our corporate data may be found in the Imprint/Legal Notice.
Data Privacy Officer
Our data privacy officer may be contacted by email at privacy@salzburg.info.
Data Protection
We take the protection of your personally identifiable data very seriously. We process your personally identifiable data according to the provisions of current data privacy laws as well as those of the privacy policy at hand. In general, use of this website is possible without providing personally identifiable data. Insofar as personally identifiable data (such as name, postal or email addresses) is collected, this occurs, to the greatest extent possible, purely on a voluntary basis.
Unless otherwise stated within this data privacy policy, all processing of personally identifiable data occurs within the European Union.
Contracted Data Processing, Recipients
We process your personally identifiable data with the assistance of contractors who support us in providing our services (e.g. Web hosts, email newsletter services). These contractors are contractually obligated to strictly ensure the confidentiality of your personally identifiable data and may not use your personally identifiable data for any purposes other than providing our services. Your personally identifiable data will only be transmitted to industry-typical service providers, such as banks (should we need to transfer funds to you, for example), tax consultants (if you appear in our books), shipping providers (if you ask us to send something to you by post), etc.
Contact Form
After you have submitted the contact form, the personally identifiable information you have provided will be processed in order to respond to your request subject to the permission you expressed by submitting the form to us. You are under no legal or contractual obligation to provide personally identifiable data. Failure to do so will merely result in your being unable to send us your request and our being unable to process it. You have the right to revoke your consent at any time in writing. This shall in no way affect the legality of our having processed your information pursuant to your permission until the point of revocation. You have the right to revoke your consent to the use of your personally identifiable data for the purposes of direct advertising in writing at any time. In the eventuality that you revoke your consent, your personally identifiable data will no longer be used for the purposes of direct advertising.
Registration Form
Subsequent to your having submitted registration, the aforementioned data will be processed in order to fulfill the contract on the basis of the contract which was entered into pursuant to your having submitted said registration for the period of the agreement or until all pre-contractual measures have been taken. The aforementioned data must be provided in order to make use of our services. You have the right to object in writing to use of your personally identifiable data for the purposes of direct advertising. In that case, your personally identifiable data will no longer be used for the purposes of direct advertising.
E-Mail-Newsletter
By selecting the checkbox, you consent to the processing of the personally identifiable data you provided for the purpose of sending you information about special offers, news and/or events by means of an email newsletter until such time as you rescind or revoke that consent. You are under no legal or contractual obligation to provide personally identifiable data. Failure to do so will merely result in your being unable to receive the email newsletter. You have the right to revoke your consent at any time, either in writing or by clicking on the unsubscribe link contained in the email newsletter. This shall in no way affect the legality of our having processed your data until such point as your consent was revoked. Similarly and in the same ways, you may revoke your consent to the use of your personally identifiable data for direct advertising purposes. In the event you decide to revoke your consent, your personally identifiable data will no longer be used for direct advertising purposes in the form of an email newsletter.
Cookies
This website uses cookies. Cookies make websites more user-friendly and efficient. A cookie is a small text file that serves to store information. Upon visiting a website, the website may place a cookie on the computer of the website visitor. Should the user visit that same website at a later point in time, the website can read the data on the previously stored cookie and thus determine, for example, if the user has indeed visited the website before and what areas of the website were of particular interest to said user. For more information about cookies, we suggest visiting WIKIPEDIA.
Changing Your Cookie Settings
The user can determine how the web browser treats cookies as well as which cookies are allowed or blocked by changing the settings of their web browser. Precisely where those settings are located varies according to the web browser in question. Detailed information on the subject can be found under the “Help” menu of each browser. If you choose to restrict the function of cookies, under certain circumstances you will no longer be able to avail yourself of this website’s complete functionality. (Changing Your Cookie Settings)
Server Log Files
In order to monitor the technical functionality and improve the operational reliability of the Web server and subject to our overriding legitimate interest (technical security measures), our website processes the following personally identifiable data in a Server Log File:
- accessed content
- date and time of server request
- browser type/browser version
- operating system used
- IP address
This data is only stored temporarily and subsequently deleted.
Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, 4 Barrow St, D04 E5W5 Dublin, Ireland (“Google”) on the basis of your consent (analysis of website use). We have entered into a data processing contract with Google for them to do so. When you access our website, the software automatically establishes a connection to the servers of Google and data is transmitted to those Google servers, some of which are located in the USA. Google Analytics also uses cookies in order to store information about website users and to analyze use of the website. Our website uses the function "IP anonymization". By doing so, if you are located within a member state of the European Union or in a signatory state of the European Economic Area, your IP address will first be truncated and thus anonymized by Google. Only in exceptional cases will your full IP address first be transmitted to a Google server in the USA, where it is then truncated. According to Google, Google will use the data collected in order to analyze website use, compile reports about website activities and provide us with additional services related to website use and Internet use in general. Furthermore, Google may under certain circumstances transmit this information to third parties, insofar as this is legally permissible or if the third party is contracted to process data on behalf of Google. Detailed information about how user data is handled by Google Analytics may be found in the privacy policies of Google and Google Analytics.
Any transmission of data to the USA is subject to the adequacy clause as laid out by the European Commission in Art. 45 par. 1 of the GDPR. Within the scope of this, companies who have earned “Privacy Shield” certification are deemed to guarantee an adequate level of data privacy. Google is certified under the “Privacy Shield”.
- You can prevent the collection of your user data by Google Analytics in general and on all websites by downloading and installing the browser plug-in which is available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en
- You can prevent the collection of your user data by Google Analytics on this website only by clicking on the following link: Cookie-Settings
Matomo (Piwik)
This website uses the web analysis tool Matomo in order to analyze use of this website by the user on the basis of our overriding legitimate interest (analysis of website use). This tool is installed on our Web server. Data is not shared with third parties. This website uses the function “IP anonymization”, which truncates your IP address and thus anonymizes your data.
Matomo Deactivation
- You can prevent the collection of your user data on our website in general by changing your web browser settings to “Do Not Track”. Our website will automatically respond to the “Do Not Track” signal, which your web browser sends to all websites
- You can prevent the collection of your user data on this website by Matomo, by clicking on the following link: Cookie-Settings . This will install an opt-out cookie which will prevent collection of your data should you visit our website in future: Deactivate Matomo.
YouTube
This website utilizes YouTube in order to display videos. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you use YouTube, information about your use of this website may be transmitted to Google. If you open a webpage that is part of our Internet presence and which contains a YouTube video, your browser will establish a direct connection with the servers of Google. The video will then be transmitted directly from Google to your browser and integrated into the webpage. As a consequence, we have no influence on the scope of data collected by Google in this way. Our current state of knowledge indicates that Google collects at least the following data:
- Date and time of day of your visit to the webpage in question,
- Internet address or URL of the webpage you have accessed,
- IP address,
- Selected video and any quality-settings you have applied.
We have no influence on how data is further processed or used by Google and can therefore accept no responsibility for the aforementioned.
If you do not want Google to collect, process or use information about you by means of our Internet presence, you may choose to deactivate JavaScript in your browser settings. In that case, you may potentially be unable to play videos.
The purpose and extent of data collection, as well as how that data is processed and used by Google, and your associated rights and settings options in order to protect your personal privacy, can be found in Google’s own data privacy policy (https://policies.google.com/privacy?hl=en).
Google LLC is an active participant in the Privacy Shield agreement (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), thereby guaranteeing that it will, in compliance with the adequacy clause of the EU commission as stipulated in Art. 45 GDPR, comply with European data privacy laws and maintain an appropriate level of data privacy.
Share Buttons
Many pages of our website use buttons intended for the sharing of content by means of social media platforms Facebook, Google Plus, Linkedin, Pinterest, Tumblr, Twitter and XING. With respect to the protection of our website visitors’ personally identifiable data, these buttons are ideally designed, since the script (computer program) behind the buttons neither compiles nor processes personally identifiable data. Precise information (in German) about button functionality is provided by Heise Verlag, which is the publisher of IT magazine c’t and the developer of the buttons. Website visitors wishing to share our site and who click on the buttons are immediately redirected to the “share” pages of the respective social media platforms. Only there are the scripts necessary to share content downloaded to your computer. At that point, the terms of business and data privacy policies already agreed upon between the website visitor and the social media platform in question shall apply. Detailed information about this can be found on the respective websites of Facebook, Linkedin, Pinterest, Twitter, XING.
Booking of accommodations and additional services
When you make a direct booking for hotels or additional services (e.g. guest cards) by means of our website, information about your booking will be shared with the hotel or service provider in question. This occurs on the legal basis of contract performance or taking pre-contractual measures (Art.6 par.1 lit a GDPR) required for performance of said contract.
Whistleblower system
We use a whistleblower system, which can be accessed at https://whistleblowersoftware.com/secure/TSG, for the confidential or anonymous reporting of potentially unlawful behaviour. Processing of your contact details or additional information on the reports submitted is confidential. The legal basis for the processing is a legal obligation stipulated by the Austrian Whistleblower Protection Act (HSchG) (Art. 6 (1) c GDPR). This also applies to the processing of special category data or sensitive data in accordance with Art. 9 (2) g GDPR.
You have the option of reporting anonymously, in which case no personal data about you will be processed.
If you decide to report confidentially, your name, optional telephone number and email address will be stored and reported to the internal reporting office, which will process your case confidentially and will not pass on your data within the company.
You have the option of reporting verbally by recording an audio file, which will be uploaded to our servers. You can activate voice distortion to ensure maximum anonymity.
You also have the option of uploading documents to be attached to the case. These documents may contain personal data.
Data on reports received will be stored for a period of five years from the last data transmission, unless longer storage is required following the initiation of investigation proceedings.
Information is passed on to legal advisors commissioned by us who are subject to professional secrecy and, if necessary, to authorities for the investigation and initiation of proceedings. Data is also passed on to technical service providers who support us in providing the whistleblowing system. However, these service providers may not use the data for their own purposes and are bound by additional agreements to the strict provisions of the General Data Protection Regulation and the associated high security standards.
For the processing of information in accordance with the Whistleblower Protection Act, the otherwise existing rights of data subjects are restricted by law. This applies in particular to the right of access, the right to rectification, the right to erasure, the right to information, the right to restriction of processing, the right to objection and the right to be notified of a personal data breach.
Your Rights
You have the right to receive information about the personally identifiable data which has been collected about you, to have this data deleted as well as restrict the processing thereof. Insofar as the legal foundation for the processing of your personally identifiable data is based on your consent or in a contract which has been entered into with you, you have the right to have your data provided to you or your agent in a customary form. You have the right to revoke your consent to the processing of your personally identifiable data, insofar as your consent has been granted. The legality of the processing of your personally identifiable data until such point as your consent may have been revoked shall in no way be affected by the revocation. You have the right to object to the processing of your personally identifiable data for the purposes of direct advertising. Should you indeed object, your personally identifiable data will no longer be processed for direct advertising purposes. Furthermore, you have the right to submit a complaint to the competent governmental oversight office.
Please note that the rights mentioned here are restricted by law when processing information using the whistleblower reporting system.