Source: https://dachstein.salzkammergut.at/en/data-protection.html
Timestamp: 2019-04-20 06:59:38+00:00

Document:
The protection of your personal data is vital to us, and when you visit our website www.dachstein-salzkammergut.at, we take great care to protect you. We process your data, which we capture throughout your visit to the website, and through third-party services (Google Analytics), therefore exclusively on the basis of legal regulations (DSGVO, TKG 2003).
In principle, we collect and use the personal data of our users only to the extent necessary for the provision of a functional website and its content and services. The collection and use of personal data of visitors to our website is commonplace, and takes place only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for reasons of fact, and processing of the data is permitted by law.
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. an EU General Data Protection Regulation (GDPR) serves as legal basis. In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b DSGVO serves as legal basis. This also applies to processing operations required to carry out pre-contractual actions. Insofar as processing of personal data is required to fulfil a legal obligation that is subject to our company, Art. 6 para. 1 lit. C DSGVO forms the legal basis. In the event that the vital interests of the data subject or another person require the processing of personal data, Art. 6 para. 1 lit. D DSGVO serves as legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the main interest, Art. 6 para. 1 lit. f DSGVO serves as legal basis for processing.
The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage has been withdrawn. In addition, such storage may be provided by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of data also occurs when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfilment of the contract.
Each time our website is accessed, our system automatically collects data and information from the computer of the person accessing our site. The following data is collected: 1. Information about the browser type and version used. 2. Details of the user's operating system. 3. The user's internet service provider. 4. The user's IP address. 5. Date and time of access. 6. Websites through which the user reaches our website. 7. Websites that are accessed by the user's system by means of our website. The data is also stored in the log files of our system. Storage of this data, together with other personal data of the user, does not take place.
Data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the event of data collection for the purposes of data for the website, it will be deleted when no longer required. Where the data is stored as log files, this takes place after a maximum of seven days. Extended storage of data is sometimes required. In this case, the IP addresses of the users are deleted or made unavailable, so that tracking of the internet user is no longer possible.
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no right of withdrawal on the part of the user.
The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) lit. f DSGVO. The legal basis for the processing of personal data using cookies for analytical purposes is the consent of the user: Art. 6 para. 1 lit. a GDPR.
The purpose of using technically necessary cookies is to facilitate the use of websites by users. Some features of our website cannot be enabled without cookies. For these features to be accessible, it is necessary that the browser is recognised even after a page break. The user data collected by these cookies will not be used to create user profiles. The use of analysis cookies is for the purpose of improving the quality of our website and its contents. By deploying these analysis cookies, we gather information on how the website is used and so we can constantly optimise our services. For these purposes, our legitimate interest in the processing of personal data is pursuant to Art. 6 para. 1 lit. f DSGVO.
This website offers its visitors the opportunity to share individual posts on different social networking sites (Facebook, Instagram, Google+ etc.). Technically speaking, these are not so-called social plug-ins that transmits data of the user when the page is opened, but merely text links that do not transmit any data when the page is accessed.
The sharing functionality does not process any data on our own website. By using (clicking) the respective buttons, the user opens a new browser window with the sharing interface of the respective network and thus the user switches - similar to when selecting a normal hyperlink - to a new domain, whose owners have responsibility for any data protection measures.
Our aim is to offer our users a convenient way to share content. There is no resulting data processing or storage of personal data.
This website does not store any personal social media usage or sharing information, but only collects anonymous statistics (total number of shares).
Email contact data is available on our websites which can be used for contact electronically. In this event, the user's personal data transmitted by e-mail will be stored. There is no disclosure of the data to third parties, unless the specified mail address is linked to a business member of the Inneres Salzkammergut Tourist Authorities, and the enquiry will be sent immediately to the recipient email address. The email address is clearly visible on the enquiry form. The data is used exclusively for processing the communication.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Article 6 (1) lit. f DSGVO. If the intention of the email contact is to conclude a contract, then there is additional legal processing applicable: Art. 6 para. 1 lit. b DSGVO.
The processing of personal data is carried out solely to complete communication electronically. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. As regards personal data sent by email, this is the case when the respective conversation with the user has been concluded. The conversation is considered to have been concluded when it can be inferred from the circumstances that the relevant facts have been clarified.
The user has the possibility at any time to revoke his consent to the processing of personal data. If the user contacts us by e-mail, he may object to the storage of personal data at any time. In such cases, the conversation cannot be continued. The revocation of consent and storage is possible at any time via an informal email stating the relevant data to the specified under the menu item “Contact e-mail address”. Please use "revocation of consent" or "revocation of storage" in the “subject” box. In the event, all personal data stored in the course of contact with us will be deleted.
As the operator of this website, we have a legitimate interest in the simple analysis of the use of our website in order to make it as user-friendly and efficient as possible for you as a user and to be able to continiously develop it further.
This website uses features of the web analytics service Google Analytics, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. For this purpose, cookies are used that allow an analysis of the use of the website by its users. The information generated thereby is transmitted to the server of the provider and stored. We have concluded a corresponding contract data processing contract with the provider. Your IP address is captured but immediately pseudonymised by deleting the last 8 bits. As a result, only an approximate localisation is possible. Our concern in the sense of the DSGVO (legitimate interest) is the continual improvement of our service and our website. Since the privacy of our users is important to us, user data is pseudonymised.
The legal basis for processing data is Art. 6 para. 1 lit. f DSGVO.
We have a legitimate interest in constantly improving the service on our site, and use the analysis data to continually improve our services.
Pseudonymised user data is retained by Google for a period of 24 months.
Users can inhibit the storage of cookies by setting their browser software accordingly; however, this facility notifies users that they might not be able to use all features of the website to the maximum. In addition, users may prevent the collection by Google of the data generated by the cookie and related to its use of the website (including your IP address) as well as the processing of this data by Google by using the browser plug-in available under the following link: download and installation: tools.google.com/dlpage/gaoptout?hl=de.
By accessing the internet via your mobile device, you can disable the collection of cookies - similar to desktop devices – by clicking on the Google button below.
We have entered into a contract processing agreement with the provider.
The controller has incorporated the Matomo component on to this website. Matomo is an open source software tool for web analysis. Web analysis is the collection and analysis of data about the behaviour of visitors to websites. Among other things, a web analysis tool collects information such as from which website an individual reaches a different website (the so-called referrer), which sub - pages of the website were accessed or how often and for which length of stay a sub - page was viewed. Web analysis is used mainly in the optimisation of a website and in providing a cost-benefit analysis of internet advertising.
The software is operated on the server of the controller, and the data protection sensitive log files are stored exclusively on this server.
The purpose of the Matomo component is to analyse visitor flows to our website. Among other things, the controller uses the data and information obtained to evaluate the use of this website in order to compile online reports which demonstrate activity on our website.
Matomo sets a cookie on the information technology system of the person concerned. A definition of what cookies are has been stated above.
By setting cookies, we are able to analyse the use of our website. Each time you visit one of the individual pages on this website, the internet browser on the information technology system of the person concerned is automatically led by the Matomo component to transmit data to our server for the purpose of online analysis. In the course of this technical process, we receive personal data such as the IP address of the person concerned, which among other things serves to help us understand the origin of visitors and clicks.
The cookie stores personally identifiable information, such as access time, the location from which access was made, and the frequency of visits to our website. Every time you visit our website, this personal information, including the IP address of the internet connection used by the data subject, is transmitted to our server. This personal data is stored by us. We do not share this personal information with third parties.
The person concerned can prevent the setting of cookies through our website, as explained above, at any time by means of an internet browser setting, and thus permanently prevent the setting of cookies. Such a setting on the internet browser used would also prevent Matomo from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Matomo can be deleted at any time via an internet browser or other software programme.
Additionally, the data subject is able to object to and prevent detection of the data generated by Matomo whilst using this website. To do this, the person concerned must select the "Do Not Track" function on their browser.
By setting the opt-out cookie, however, it is possible that the website of the controller is no longer fully usable by the individual concerned.
The legal basis for the processing of data after the submission of a request or the order of a brochure is subject to the consent of the user. Please see Art. 6 para. 1 lit. a GDPR.
The collection of the above-mentioned data of the user serves to be able to process the request, or to be able to send the information and map material requested.
The legal basis for the processing of data transmitted in the process of online booking is listed under Art. 6 para. 1 lit. b DSGVO9.
The processing of personal data is solely for concluding the reservation. In the case of an online booking, this also includes the required legitimate interest in the processing of the data.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of a contract, this is stored until the expiry of the tax retention period (7 years).
8. The existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.
You have the right to request information about whether your personal information relates to a third country or an international organisation. In this instance, you can request appropriate guarantees in accordance with. Art. 46 GDPR in connection with the i transfer of information. This right of access may be limited to the extent that it is likely to render impossible or seriously affect the realisation of research or statistical projects and the restriction is necessary for the implementation of research for statistical purposes.
You have the right to rectification and/or completion by the responsible party if your personal data is processed incorrectly or incompletely. The responsible person must make the correction without delay. This right of rectification may be limited to the extent that it is likely to render impossible or seriously affect the realisation of research for statistical purposes and the restriction is necessary for the performance of research or for statistical purposes.
4. If you objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible prevail over your reasons. If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another person or legal party, or for reasons of important public interest, in the Union or a Member State. If conditions are restricted, you will be informed by the person in charge before the restriction is lifted. Its right to restriction of processing may be restricted to the extent that it is likely to render impossible or seriously affect the realisation of the research for statistical purposes and the restriction is necessary for the performance of the research for statistical purposes.
1. Your personal data is no longer necessary for the purposes for which it was initially collected or otherwise processed.
2. You revoke your consent to the processing under. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. DSGVO and there is no other legal basis for processing.
3. You, according to Art. 21 para. 1 DSGVO, object to the processing of your data, and there are no prior justifiable reasons for the processing, or you object under Art. 21 para. 2 DSGVO.
4. Your personal data has been processed unlawfully.
5. The deletion of personal data concerning you is required to fulfill a legal obligation under Union legislation or the law of the Member States to which the controller is subject.
6. The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8(1) GDPR.
Where the person in charge has made the personal data concerning you public and is subject to Article 17 (1) of the GDPR, he/she shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected. Taking into account available technology and implementation costs, persons requesting deletion of all links to such personal data or of copies or replications of such personal data should have this request immediately carried out.
5. In the assertion, exercise or defence of legal claims.
If you have the right of rectification, erasure or restriction of processing, the responsible body is obliged to notify all recipients to whom your personal data has been disclosed of this correction or deletion of the data or restriction of processing. Exceptions to this include where this proves to be impossible or involves a disproportionate effort. You have the right to be kept informed about who has access to your details.
2. The processing is carried out using automated procedures.
In exercising this right, you also have the right to authorise that personal data relating to you is transmitted directly from one person to another, insofar as this is technically feasible. Freedom and the rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
You have the right at any time, for reasons that arise from your particular situation, pursuant to Art. 6 para. 1 lit. e or f DSGVO, to object to the processing of your personal data. This also applies to profiling based on these provisions. The responsible persons will no longer process the personal data concerning you unless he/she can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and personal freedom, or the processing is for the purpose of enforcing, exercising or defending legal claims. If the personal data relating to you is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Irrespective of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications. You also have the right, for reasons that arise from your particular situation to object to the processing of personal data relating to you for scientific or historical research purposes or for statistical purposes where Art. 89 para. 1 GDPR is to be contradicted. The right of objection may be limited to the extent that it is likely to render impossible or seriously affect the realisation of the research or statistical purposes for which it is being used, and that the restriction is necessary for the carrying out of research or for statistical purposes.
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent up until this revocation.
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you violates the DSGVO. The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 6
 Art. 89