Declaration of information requirements

Data privacy statement

Version: 01.06.2021

The protection of your personal data is very important to us. Therefore, we process your data solely on the basis of statutory regulations (GDPR, Austrian Telecommunications Act (TKG) 2003). In this privacy statement, we provide you with information about the most important aspects of data processing within our website.

1. Contacting us

If you contact us via the form on the website or by e-mail, your data will be stored for six months to process the request and in case of any follow-up questions. We will not share this information without your consent.

Your personal data will only be used to answer your request. If we do not have a united offer for the period you have requested, we will forward your request to the appropriate host in our town with the request to answer your request.

2. Cookies

2.1 Technical and functional cookies

We place exclusively the following technical and functional cookies to ensure the basic functions and smooth operation of the website. These cookies are automatically deleted again by closing the website and are not stored on your computer.

We use the following cookies:

_GoogleMaps
Stores your connection to Google Maps for the entire homepage.
Cookie duration: 365 Tage

_YouTube
Stores your connection to YouTube for the entire homepage.
Cookie duration: 365 Tage

modalShown
Speichert Ihre getätigte Auswahl in der CookieBar für die gesamte Homepage.
Cookie Laufzeit: 365 Tage

2.2 Webanalyse

Google Analytics with IP anonymization (Google Inc.)

Google Analytics is a web analytics service provided by Google LLC or Google Ireland Limited, depending on the location from which you access this website ("Google"). Google uses the information collected to track and investigate how this website is used, to report on its activities, and to share those activities with other Google services.

Google may use the information collected to contextualize and personalize ads on its own advertising network.

IP anonymization has been enabled on this website so that Google can previously truncate the IP address of users within European Union member states or other signatory states to the European Economic Area Agreement. Only in exceptional cases will the full IP address be transmitted to and truncated by Google on servers in the United States.

Collected personal data: Cookie; usage data.

Processing location: USA – privacy statement – Opt Out. Privacy Shield-Mitglied.

Through the sevices integrated in this website, Google Analytics, Google Maps and Youtube, your data will (at least in some cases) also be transferred to the USA. Authorities or secret services in the USA can access your data without giving you legal recourse. The ECJ has therefore determined that there is no sufficient level of data protection in the sense of Art 45ff GDPR for data transfers from the EU to the USA. For this reason, the legal basis for the use of this service is your express consent pursuant to Art. 49 Par.1 lit. a GDPR in conjunction with Art. 6 Par. 1 lit. a GDPR.

3. Hosting

We use an external web hosting service to operate our website.

Hosting provider
With the support of the following processors, we process personal connection data for the purpose of data and system stability for a maximum duration of seven days.

The statutory basis for processing is our legitimate interest pursuant to Article 6, para. 1, lit. f GDPR (technical security measures).

Service: Web- u. Mail Hosting
Operator: WDW WerbeDesign Wanger e.U.
Data privacy statement: https://www.wdw.at/datenschutz.htm

Access data
In the context of hosting, for the purpose of monitoring technical function and to increase the web host’s operating security, we process the following personal user data in a server log file for a maximum duration of seven days, on the statutory basis of legitimate interest pursuant to Article 6, para. 1, lit. f GDPR (technical security measures):• Website visited

Time and date of access
Amount of transmitted data in bytes
Source/link from which you reached the page
Browser used
Operating system used
IP address used

The collected data is used simply for statistical analyses and to improve the website. However, the website operator reserves the right to retroactively review the server log files if specific indications suggest unlawful use.

4. Map service

On this website, we offer map providers in the form of iFrame nesting. This allows us to display interactive maps directly on the website and to enable convenient use of map functions.

Google Maps
As a joint controller alongside Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, we process connection data and browser data for the purpose of displaying an interactive map for the duration that the map is shown. In doing so, we allow Google Maps to place cookies on the user’s computer and to create a user ID to identify the unique user as part of the advertising network that Google operates.

The statutory basis for the processing is consent given by you, pursuant to Article 96, para. 3 TKG, in conjunction with Article 6, para. 1, lit. a GDPR.

If continuing independent processing of the data, particularly as part of Google’s advertising network, is carried out by Google Maps, Google Maps is the sole controller of this. Further details can be found in the Google Maps privacy policy.

5. Audio and video services

On this website, we offer video and audio services in the form of iFrame nesting. By doing this, we are able to show you multimedia content directly on the website.

YouTube
For integrating videos, our website uses the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Normally, when calling up a page with embedded videos, your IP address has already been sent to YouTube and cookies have been installed on your computer. However, we have integrated our YouTube videos with an advanced data protection mode (in this case, YouTube continues to make contact with Google’s DoubleClick service, but personal data is not analysed, in accordance with Google’s data privacy policy). Therefore, YouTube no longer stores information about users, unless they view the video. If you click on the video, your IP address is sent to YouTube and YouTube learns that you have watched the video. If you are logged into YouTube, this information shall also be attached to your user account (this can be prevented by logging out of YouTube before calling up videos).

From this point, we have no knowledge of potential collection and use of your data by YouTube and have no influence on this.

The statutory basis for the processing is consent given by you, pursuant to Article 96, para. 3 TKG, in conjunction with Article 6, para. 1, lit. a GDPR.

If continuing independent processing of the data, particularly as part of YouTube/Google’s advertising network, is carried out by YouTube/Google, YouTube/Google is the sole controller of this.

More information can be found in YouTube’s privacy policy.

6. Facebook page

If you visit our Facebook page, personal data (documentation of usage behaviour) will be processed by Facebook through the use of cookies. Anonymised, statistical data about website activity will be created from this information and provided to us automatically (Insights). In accordance with Article 26 of the European General Data Protection Regulation, we are jointly responsible for this data processing alongside Facebook. We base this on our legitimate interest. Without processing this data, it would not be possible for us to provide and optimise our presence on Facebook. More information can be found on the Facebook information page.

We are not provided with any personal data. At the same time, the data is also stored and processed by Facebook itself, so that Facebook is able to make a connection to the respective Facebook profile. Facebook can use this data for its own advertising purposes, in accordance with the Facebook data policy. The consent for this is the responsibility of Facebook and cannot be influenced by us. More information about the collection and use of data by Facebook and your rights and options to protect your privacy in this regard can be found in the Facebook data policy.

7. Online Booking

Destination management system: feratel Deskline

Due to a special business agreement for the processing of personally identifiable data, under specific circumstances your data will be collected and processed by the company feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck within the scope of contractual data processing consistent with Art 28 GDPR and in compliance with all applicable legal statutes.

fertal agency services for lodgings and tourism activities

The data provided by you in the course of an enquiry/booking will be collected by feratel’s Destination Management System and then forwarded to lodging/activity providers for the purposes of purveying said accommodations or holiday activities.

Enquiry Pool - feratel

On our website, you have the opportunity to submit a non-binding request which will automatically be forwarded to our lodging providers. Within 48 hours, you will then receive personally customized holiday offers directly from the businesses in question. This request is processed by the feratel Destination Management System.

Brochure Orders - feratel

Brochure orders are forwarded to the feratel Destination Management System.

As a company providing contracted support services, feratel has access to your data. However, feratel may only use this data within the scope of the aforementioned support services and not for its own purposes.

8. Data erasure and storage duration

As a matter of principle, we delete personal data of natural persons as soon as the purpose of storage no longer applies. Storage can also take place if this is ordered by laws or other regulations to which we are subject. In such cases, the data will be deleted when the storage period prescribed by the aforementioned standards expires, unless it is necessary for further storage of the data for the conclusion or performance of a contract.

9. Transfer of personal data to recipients or contract processors

We only disclose personal data to third parties within the scope of our data processing on the basis of the legal permission of Art. 6 DSGVO (e.g. on the basis of Art. 6 lit b DSGVO, if it is necessary for the processing of a booking process, or on the basis of our legitimate interest pursuant to Art. 6 lit f DSGVO for web hosts or web designers). If we commission third parties with the processing of data, this is done exclusively on the basis of an order processing agreement on the basis of Art. 28 DSGVO, which ensures that your data is processed by our order processors in accordance with data protection regulations.

This applies in particular to the following contract processors:

Buchungssystem: feratel media technologies AG, Maria-Theresien-Straße 8, A-6020 Innsbruck/Austria
Advertising agency: WDW WerbeDesign Wanger e.U., Hammerlweg 1, 5071 Wals-Siezenheim/Austria
Host / members of our tourism association:
Depending on the enquiry or booking, only the personal data necessary to provide the desired service will be transmitted to our member companies (hosts or other tourist service providers).

10. Your rights

You are entitled to the following rights regarding your personal data stored by us:

Information
Correction
Deletion
Restriction
Portability
Withdrawal and objection

To contact us regarding the above, please get in touch at (info@puch-salzburg.at).

If you believe that the processing of your data has been a violation of your data privacy or your data protection rights have been breached in another way, you are entitled to complain to the relevant supervisory authority. In Austria, this is the Data Protection Authority (dsb@dsb.gv.at).

11. You can contact us using the following details:

Tourismusverband Puch bei Salzburg | Halleiner Landesstraße 111 | 5412 Puch bei Hallein / Austria
T.: +43 6245 84166 | E.: info@puch-salzburg.at