Effective date: 1 September 2019
Overview and responsible party
The collection and use of your personal data is carried out in strict compliance with data protection regulations. Personal data is only collected, processed and used by us and the service providers commissioned by us if a legal provision permits this or you have given your prior consent.
The responsible party (“we”, “us”, “our”) for data processing on this website (“service”, “page”, “service”) is:
Phone: +49 (0)8022 92240
Here we would like to inform you when and for what purpose we process your data and how you can make use of your data protection rights.
We have tried to present everything clearly and explain it as clearly as possible. However, if in doubt, we will be happy to answer any questions you may have. You can find more information by clicking on the following sub-items.
Data collection, scope, storage period and legal basis
As a matter of principle, we collect and use personal data of our users only insofar as this is necessary for the provision of a functional website as well as our contents and services. The collection and use of our users’ personal data regularly only takes place with the user’s consent.
An exception applies in those cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by legal regulations.
Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.
Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) lit. a EU General Data Protection Regulation (DSGVO) serves as the legal basis for the processing of personal data.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) c DSGVO serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.
Amendment of this declaration
We reserve the right to adapt this data protection declaration. If a revised version is created, we will ensure that this adaptation is clearly announced and provide information about the most important changes. We also indicate when the declaration was last amended.
Data from under 18s
Our services do not address persons under the age of 18 and we do not knowingly collect personal data from persons under the age of 18. If you are a ward of such a person and you become aware that such data has been sent to us, please contact us. If we become aware that we have collected information from anyone under 18 without the consent of a parent or guardian, we will remove that information from our systems.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right of objection
You may object to the future processing of data relating to you in accordance with Art. 21 DSGVO at any time. The objection can be made in particular against the processing for purposes of direct advertising.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.
Information, correction, blocking, deletion
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing as well as, if applicable, a right to correction, blocking or deletion of this data, insofar as this is possible within the framework of the legal storage obligations. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the above address or by e-mail.
Right of complaint to the competent supervisory authority
In the event of violations of data protection law, the data subject has a right of appeal to the competent supervisory authority. The competent supervisory authority in matters of data protection law is the State Data Protection Commissioner of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
We do everything commercially reasonable to protect your data. However, please be aware that no method of data transmission over the Internet can guarantee complete security.
This site always uses SSL or TLS encryption to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
Data collection and use
When using our services (log files & cookies)
Usage data (server log files)
This website collects a series of general data and information each time a website is accessed by a data subject or an automated system. This general data and information is stored in the log files of the web server. The types and versions of browsers used, the operating system used by the accessing system, the website from which an accessing system accesses our website (so-called referrer), the sub-websites which are accessed via an accessing system on our website, the date and time of an access to the website, an Internet protocol address (IP address), the Internet service provider of the accessing system and other similar data and information which serve to avert danger in the event of attacks on our information technology systems may be recorded.
When using these general data and information, no conclusions are drawn about the data subject. Rather, this information is required in order to deliver the content of our website correctly, to optimise the content of the website as well as the advertising for it, to ensure the permanent functionality of our information technology systems and the technology of our website as well as to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. Therefore, the data and information collected anonymously are, where applicable, evaluated statistically on the one hand, and on the other hand, with the aim of increasing data protection and data security, so as to ensure an optimal level of protection for the personal data we process.
The anonymous data of the server log files are stored separately from any personal data provided by a data subject.
Tracking & Cookies
Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser on your next visit.
Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. booking function) are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services.
When registering or sending forms
While using our Services, you may be asked to share personal information with us, which may include, but is not limited to, the following information:
- Your email address
- First and last name
- Your telephone number
The collection of such data is usually based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
Creating a customer account
If you open a customer account, you agree that your inventory data such as name, address, e-mail address as well as your usage data (user name, password) are stored. This enables you to order from us using your e-mail address or your customer number as well as your personal password.
The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.
The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Legal retention periods remain unaffected.
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.
The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.
Comments and contributions
When users leave comments or other contributions, their IP addresses are stored for 7 days on the basis of our legitimate interests as defined in Art. 6 para. 1 lit. f. DSGVO are stored for 7 days.
This is done for our security in case someone leaves unlawful content in comments and posts (insults, prohibited political propaganda, etc.). In this case, we ourselves can be prosecuted for the comment or post and are therefore interested in the identity of the author.
Data transfer and third parties
As a matter of principle, personal data is not shared with third parties. If data is nevertheless shared, this is only done because it is necessary for the fulfilment of an agreement or a legal requirement. With organisations that process your data on behalf of the organisation, precautions are taken to ensure that your data is also well protected there. This is done by means of a so-called processing agreement or a privacy statement in the general terms and conditions of this third party.
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or do so in the context of using third-party services or disclosing or transferring data to third parties, this will only be done if it is done in order to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or allow the processing of data in a third country if the special requirements of Art. 44 ff. DSGVO are met. This means, for example, that the processing is carried out on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).
Data transfer upon conclusion of a contract
Personal data that you provide to us, e.g. when placing an order (e.g. your name, your address or your e-mail address), will only be transferred to third parties if this is necessary in the context of processing the contract, e.g. to the companies entrusted with the delivery of the goods or to the credit institution entrusted with the processing of payments. Further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.
The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
Disclosure of data
We may disclose your personal data under certain circumstances if, taking into account the principles of good faith, we believe that this is necessary to achieve the following objectives:
- to comply with a legal obligation
- to protect and defend the rights or property of our company
- to prevent or investigate possible misconduct involving the Service
- to protect the personal safety of users of the Service or the public
- to avoid liability claims
Transfer of data to third parties
The enquiry form as well as the booking form is provided by easybooking (zadego GmbH, easybooking department, Tschamlerstraße 4, A-6020 Innsbruck, Austria) and integrated on our pages.
The data you enter in the forms will be used by us exclusively to answer the contact in the context of your request to us. We do not use this data for any other purpose than to answer your enquiry. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO on the basis of your voluntarily given consent and, in the case of booking enquiries, on the basis of Art. 6 para. 1 p. 1 lit. b for the implementation of pre-contractual measures.
Information on data transfer to easybooking and processing of your data can be found at https://www.easy-booking.at/wo/Services/com/eBook/legalDocs/legalDoc.php?legalDocName=PrivacyPolicy&legalDocType=widgets&legalDocCategory=guest&localeName=de_AT&content=textHTML&c_id=7830
Analytics (Google Analytics)
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), on our website on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our application within the meaning of Art. 6 (1) f) DSGVO).
Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymisation on this website, your IP address will be shortened so that it can no longer be assigned to a connection.
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
Alternatively, you can prevent the collection by Google Analytics on this site by clicking on the following link. An opt-out cookie will be set, which will prevent the future collection of your data when visiting this website:Google Analytics opt-out
Google is certified under the Privacy Shield agreement and thus guarantees to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Maps (Google Maps)
The integration of the images makes our service more appealing and informative. This constitutes a legitimate interest pursuant to Art. 6 (1) (f) of the DSGVO.