Data transfer to the USA
Through the services integrated in this website, Google Tag Manager, Google Analytics, Google Maps and YouTube, your data will (at least in some cases) also be transferred to the USA. Authorities or secret services in the USA can access your data without giving you legal recourse. The ECJ has therefore determined that there is no sufficient level of data protection in the sense of Art. 44 to 50 GDPR for data transfers from the EU to the USA. For this reason, the legal basis for the use of this service is your express consent pursuant to Art. 49 (1) lit. a GDPR.
Change the cookie settings in your web browser
How the web browser you are using handles cookies, i.e. which cookies are allowed or rejected, can be determined in the settings of your web browser. You can delete cookies already stored on your computer / device yourself at any time. Where exactly these settings are located depends on the respective web browser. Detailed information on this can be called up using the help function of the respective web browser.
In addition, it is possible to generally object to cookies and similar tracking technologies using the services listed below by setting your individual preferences - which technologies you want to allow for usage and interest-based advertising:
2.3. Communication with us
Contact form and email
On our website, we offer you the option of contacting us by email and / or using a contact form. In this case, the information you provide will be processed for the purpose of processing your contact based on the legal basis of contract fulfilment in accordance with Art. 6 (1) lit. b GDPR. There is no legal or contractual obligation to provide this personal data. Failure to provide it simply means that you do not submit your request and we cannot process it. The data will only be passed on to third parties if this is stated on the website or in this data protection declaration or is necessary for the fulfilment of the contract or if this is required by statutory provisions. We only save your data for as long as is expedient for processing your inquiries or for any queries you may have.
2.4. Online Shop (s) / Booking Portal (s)
For the purpose of providing contractual services as well as their payment and execution in the context of online purchases, bookings and prospectus orders, we process your personal master data, contract and payment data and communication data (IP address and server log files) on the basis of the legal bases of Art. 6 (1) lit. b GDPR (fulfilment of the contract) as well as Art. 6 (1) lit. c GDPR (legal obligation for invoicing and archiving).
We store this data as long as the purpose requires it, statutory provisions provide for this (retention period of invoices according to § 132 BAO for 7 years; voucher orders until the expiry of the redemption period for 30 years) or we store this data on the basis of the legal basis of Art. 6 (1) lit. f GDPR (legitimate interest) to defend against possible liability claims. If you cancel the order process, we will save the data to clarify possible problems during the order process for 14 days.
There is no legal or contractual obligation to provide personal data. Failure to provide them simply means that we cannot process your bookings / orders.
Online Bookings Kognitiv
For the processing of online bookings, we process your personal data in order to be able to provide you with the booked services with the help of our service provider Kognitiv (Neubaugasse 10/15, A-1070 Vienna). For this purpose, we store and process inventory data, communication data, contract data, payment data of our customers, interested parties and other business partners. The processing takes place for the purpose of providing contractual services or for the fulfilment of pre-contractual services on the basis of the legal basis of Art. 6 (1) lit. b GDPR (booking processes) and Art. 6 (1) lit. c GDPR (legally required retention periods of bookings or invoices). For this purpose, the data fields marked as required are required for the establishment and fulfilment of the contract. We disclose your personal data in the context of this data processing to third parties (hotel partners or other tourist service providers) on the legal basis of Art. 6 (1) lit. b GDPR (if it is necessary for the processing of a booking process), or on the basis of our legitimate interest according to Art. 6 (1) lit. f GDPR for the use of appropriate booking software. We have concluded a corresponding agreement with the company Kognitiv in accordance with Art. 28 GDPR as a data processor, which ensures that your data is processed exclusively within the scope of our order. For more information about Kognitiv's privacy, please visit: https://kognitiv.com/legal/privacy-policy/.
2.5. Links to other External Online Shops
SalzburgerLand Card Online Shop
In order to enable our users to quickly buy tickets online with the SalzburgLand Card, we link to the online ticket shop of SalzburgLand Tourismus GmbH (Wiener Bundesstraße 23, A-5300 Hallwang). This link is integrated into the page using an HTML link. Clicking on the link opens a new window of the browser. On this page, you can purchase the SalzburgerLand Card online, stating your specific data. Further information on the purpose and scope of the data collection and the further processing and use of the data by SalzburgLand Tourismus GmbH as the data controller for the further processing of your personal data as well as setting options for the protection of your privacy can be found in the data protection information of SalzburgLand Tourismus GmbH: https://www.salzburgerland.com/en/imprint-data-privacy-disclaimer/.
SalzburgCard Online Shop
In order to enable our users to buy SalzburgCard tickets online, we link to the online ticket shop of Salzburg Tourismus GmbH (Auerspergstraße 6, A-5020 Salzburg). This link is integrated into the page using an HTML link. Clicking on the link opens a new window of the browser. On this page you can purchase the Salzburg Card online by entering your specific data. Further information on the purpose and scope of the data collection and the further processing and use of the data by Salzburg Tourismus GmbH as the data protection officer for the further processing of your personal data as well as setting options for the protection of your privacy can be found in the data protection information of Salzburg Tourismus GmbH: https://cardstatic.feratel.com/doc/cardwebshop/scc01/DataProtection_de.pdf.
2.6. Web Analysis - Statistical Analyses of our Website
Google Tag Manager
We use the service of the provider Google Ireland Limited ("Google") (Gordon House, Barrow Street, Dublin 4, Ireland) to be able to manage website tags via a common tool of Google. The Google Tag Manager tool itself (which implements the tags) is a domain that does not set cookies and does not collect any other personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will remain in place for all tracking tags implemented with Google Tag Manager. Further information on Google's data protection can be found at: https://policies.google.com/privacy?hl=en-GB.
2.7. Integration of other Third-Party Services and Content
We integrate content or functions of third parties within our website. This always presupposes that the providers of this content or functions perceive the IP address of the users. Without the IP address, they would not be able to send the content to the browser of the respective user. The IP address is therefore required for the presentation of this content. We endeavor to use only such content whose respective providers use the IP address only for the delivery of the content. However, we have no influence on whether the third-party providers store the IP address, e.g. for statistical purposes. The legal basis for the use of these services, insofar as they are necessary for the functioning of our website, is our legitimate interest in accordance with Art. 6 (1) lit. f GDPR, otherwise your consent according to Art. 6 (1) lit a GDPR. Information on the purpose and scope of the further processing and use of the data by the providers of the embedded services/content as well as further information within the meaning of the Art. 13 and 14 GDPR can be found under the information links listed below. The following services/content are embedded in our website:
3. Other Data Processing in Business and Customer Contact
In this section we inform you about other data processing processes outside our website.
3.1. Job Applications
The contact data and application documents transmitted to us in the course of a job application will be processed by us exclusively internally for the purpose of selecting suitable candidates for an employment relationship. There is no legal or contractual obligation to provide the personal data. Failure to do so will only result in you not submitting your request and we will not be able to process it. The personal data transmitted in this way will be stored by us in accordance with the statutory provisions for a maximum of 6 months, in the case of the explicit consent of the applicant to keep the documents in evidence, for a maximum of 2 years.
3.2. Online Presence in Social-Media
In addition to our website, we maintain online presences within social networks and platforms: Facebook, Instagram and YouTube in order to communicate with customers and business partners and to connect to them via these networks to be able to inform about our services. When accessing the respective networks and platforms, the terms and conditions and the data protection guidelines of the respective operators of these networks apply.
Your personal data provided for participation in our competitions (e-mail address, name, address) will be used by us exclusively to identify a winner, inform him of the prize and send him prizes. Your data will not be passed on to third parties. The legal basis for the processing of your personal data is the fulfilment of the contract in accordance with Article 6 (1) lit. b GDPR. There is no legal or contractual obligation to provide the personal data. Failure to provide the data will only result in you not being able to participate in the competition. Your data will be stored for the duration of the competition and – for the processing of any prizes and claims for damages – for a maximum of 3 years thereafter and then deleted. By participating, you also agree that your name will be published on our website as well as on our public social media channels in the event of winning.
3.4. Guest/Visitor WiFi
We offer freely accessible visitor Wi-Fi in in our offices. In order to provide the services of the hotspot for you, the use of personal data of your end device is required. In this context, the MAC addresses (Media Access Control Address) of end devices may also be stored temporarily. Furthermore, we may store log data ("log files") about the type and scope of use of the services for 7 days. This data cannot be assigned directly to your person, but directly to your used device and thus also indirectly to your person. To provide this offer, we use the services of ETS - EDV & Technik Stöckl (Glanstraße 6, A-5082 Grödig) as our data processor. We have concluded a corresponding agreement with our processor in accordance with Art. 28 GDPR, which ensures that your data is processed exclusively within the scope of our order.
3.5. Registration for Events and Guest Programme
It is possible to register for events of different providers in our region in our information offices. For this purpose, we process your personal data (name, e-mail address and telephone number). This data will be processed by us on the basis of the legal basis of Art. 6 (1) lit. b GDPR (contract fulfilment/pre-contractual measures) and also passed on to the respective organizer. This data will be deleted or destroyed by us after the event.