Ustanovení o ochraně osobních údajů
The party responsible for processing your personal data on our website is TSG Tourismus Salzburg GmbH. You can find our details in the imprint.
Data Protection Officer
You can contact our Data Protection Officer at privacy@salzburg.info.
Data Protection
We take the protection of your personal data very seriously. We process your personal data in accordance with statutory data protection regulations and this privacy policy. Use of our website is generally possible without providing personal data. Where personal data such as name, address, or email addresses is collected on our pages, this is done on a voluntary basis wherever possible. Unless otherwise stated in this privacy policy, all processing of personal data takes place within the European Union.
Processors, Recipients
We process your personal data with the support of processors who assist us in providing our services, such as web hosting providers or email newsletter delivery service providers. These processors are contractually obliged to protect your personal data strictly and may not process your personal data for any purpose other than providing our services. Your personal data is only passed on to typical business service providers, such as banks in the case of transfers to you, tax advisors if you appear in our accounting records, shipping providers in the case of deliveries to you, and similar parties.
Contact Form
After submitting the contact form, the personal data you have entered will be processed for the purpose of handling your inquiry on the basis of the consent you gave by submitting the form. There is no legal or contractual obligation to provide the personal data. Failure to provide it merely means that you cannot submit your request and we cannot process it.
You have the right to withdraw your consent at any time by written notification, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. You have the right to object at any time by written notification to the use of your personal data for direct marketing purposes. In the event of an objection, your personal data will no longer be processed for direct marketing purposes.
Registration Form
After submitting the registration, the above-mentioned data will be processed for the purpose of fulfilling the contract on the basis of the contract concluded through the registration and for the stated contractual term. Providing the data is necessary for the use of the service. You have the right to object at any time by written notification to the use of your personal data for direct marketing purposes. In the event of an objection, your personal data will no longer be processed for direct marketing purposes.
Competitions
After submitting the competition form, the data you have entered will be processed for the purpose of conducting the competition on the basis of the competition contract concluded thereby until completion of the competition. There is no legal or contractual obligation to provide the personal data. However, providing it is necessary in order to participate in the competition. Failure to provide it merely means that you cannot participate in the competition. The data may be further processed in a manner compatible with the original processing purpose, on the same legal basis, for the purpose of direct marketing in forms not requiring consent, such as addressed postal advertising, until you object. In this case, the data will be passed on to the shipping provider. You have the right to object at any time by written notification to the use of your personal data for direct marketing purposes. In the event of an objection, your personal data will no longer be processed for direct marketing purposes.
Email Newsletter
By ticking the checkbox, you consent to the processing of the personal data you have entered for the purpose of providing information about promotions, news, and events via an email newsletter until withdrawal or objection. Information about the use of the newsletter, such as clicking on individual articles or opening the newsletter, is also logged and summarized for the purpose of optimizing content and distribution. There is no legal or contractual obligation to provide the personal data. Failure to consent merely means that you will not receive an email newsletter. You have the right to withdraw your consent at any time by written notification or by clicking the unsubscribe link in the email newsletter, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. You may also object to the use of your personal data for direct marketing purposes in the same way. In the event of an objection, your personal data will no longer be processed for direct marketing in the form of an email newsletter.
Notice on the Use of Cookies
Software is used on this website to analyze the use of the website.
The evaluation of this data can provide valuable insights into users’ needs. These insights help to further improve the quality of the offering.
In this context, so-called cookies are used. Cookies are data stored in your browser that allow a visitor to be recognized on an anonymous basis. Cookies can generally be rejected or deleted through the appropriate browser settings. The statements made here regarding cookies apply in a similar form to other technical browser functions such as local storage and session storage. Some cookies on this website are necessary for the website to function and are set on the basis of our legitimate interest in the secure and efficient operation of the website. In principle, information is not passed on to third parties for their own business purposes.
Cookies for the purpose of analysis and profiling are only used with your express consent.
To manage consent, we use “CookieYes” by CookieYes Limited, 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom.
For technical reasons, the publicly visible IP address of your device is transmitted to CookieYes, and a strictly necessary cookie containing information about your consent is stored on your device. A data processing agreement has been concluded with CookieYes, meaning that CookieYes may not use the data for its own purposes.
Although the United Kingdom is not a member state of the European Union, the European Commission has determined by decision pursuant to Art. 45 GDPR that the United Kingdom provides a level of data protection comparable to that of the EU. Therefore, no separate legal basis is required for this transfer to a country outside the EU.
You can withdraw any consent given at any time HERE.
Server Log File
This website processes the following personal data in a server log file for the purpose of monitoring technical functionality and increasing the operational security of the web server, on the basis of the controller’s overriding legitimate interest in technical security measures:
- content accessed
- date and time of the server request
- browser type / browser version
- operating system used
- IP address
This data is stored for 8 days and then deleted.
Booking of Overnight Stays and Additional Services
When hotels or additional services, such as guest cards, are booked directly via our website, the information about your booking is passed on to the respective hotel or service provider. This transfer is carried out on the basis of contract performance or pre-contractual measures pursuant to Art. 6(1)(b) GDPR and is necessary for the performance of the contract.
Purchase of the Salzburg Card and Bookings in the Experience Shop
If you book a Salzburg Card through our online shop, the data required for personalizing the card and for invoicing will be processed for the purpose of fulfilling the order.
When booking services in the Experience Shop, such as guided tours, your contact details are passed on to the respective service provider and processed for the purpose of carrying out the booking. The legal basis is contract performance or pre-contractual measures pursuant to Art. 6(1)(b) GDPR. The data will be deleted after expiry of the statutory retention obligations.
Data is transmitted to payment service providers for checking and approving the payment method used and, where applicable, to logistics companies for shipping the card.
If you create a user account in the Experience Shop “booking & more!”, this data is passed on to feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck, and is subsequently processed under the responsibility of feratel.
Additional information on this processing can be found at: https://my.bookingandmore.com/privacy_policy
Privacy Information on Video Surveillance
Video surveillance with recording takes place on the premises of TSG Tourismus Salzburg GmbH, which also include the premises of Salzburg Congress, Paracelsusbad, and the Kurhaus, for the protection of persons and property and for the investigation of accidents, incidents, and criminal offenses. However, no technical personal recognition is used. Privacy information on video surveillance pursuant to Art. 13 GDPR.
Whistleblower System
For confidential or anonymous reporting of indications of unlawful conduct, we use a whistleblower system accessible at: https://whistleblowersoftware.com/secure/TSG The contact details or additional information you enter in connection with reports are processed confidentially. The legal basis for processing is a legal obligation arising from the Austrian Whistleblower Protection Act, HinweisgeberInnenschutzgesetz, HSchG, pursuant to Art. 6(1)(c) GDPR. This also applies to the processing of special categories of data or sensitive data pursuant to Art. 9(2)(g) GDPR.
You have the option to report anonymously, in which case no personal data about you will be processed. Should you decide to submit a confidential report, your name and optional telephone number and email address will be stored and forwarded to the internal reporting office, which will handle your case confidentially and will not share your data within the company.
You also have the option to report orally by recording an audio file, which is uploaded to our servers. You can activate voice distortion to ensure the highest possible level of anonymity.
You also have the option to upload documents to be attached to the case. These documents may contain personal data. Data relating to received reports is retained for a period of five years from the last data transfer, unless a longer retention period is required following the initiation of investigative proceedings. Information is passed on to legal advisors commissioned by us who are subject to professional secrecy and, where applicable, to authorities for the purpose of investigation and initiating proceedings.
Information is also passed on to technical service providers who assist us in providing the whistleblower system. However, they may not use the data for their own purposes and are bound by additional agreements to the strict provisions of the General Data Protection Regulation and the associated high security standards.
For the processing of reports pursuant to the Whistleblower Protection Act, the otherwise existing data subject rights are legally restricted. This particularly concerns the right of access, the right to rectification, the right to erasure, the right to information, the right to restriction of processing, the right to object, and the right to notification of a personal data breach.
Your Rights
You have the right to access, rectification, erasure, and restriction of the processing of personal data. Where the legal basis for processing your personal data is your consent or a contract concluded with you, you also have the right to data portability. You have the right to withdraw any consent you may have given for the processing of your personal data. The lawfulness of the processing of personal data up to the time of withdrawal is not affected by the withdrawal. You have the right to object to the processing of your personal data for direct marketing purposes. In the event of an objection, your personal data will no longer be processed for direct marketing purposes. You also have the right to lodge a complaint with a supervisory authority. Please note that the rights mentioned here are legally restricted in the case of processing reports through the whistleblower reporting system.
Campaigns with the Austrian National Tourist Office
The website of Tourismus Salzburg GmbH, www.salzburg.info, uses cookies and products of Adform A/S, such as Ad Server, DSP, and DMP, for audience-targeted advertising in joint processing within the meaning of Art. 26 GDPR together with the Austrian National Tourist Office. For this purpose, various parameters are collected, such as pages accessed, device type, geographic origin, and recently visited websites, and visitors are grouped into different segments. Using statistical analyses, similar persons are then identified in the global Adform cookie pool in order to address them with targeted advertising for Austrian tourism offerings.
These “lookalikes” may be made available to our cooperation partner, the Austrian National Tourist Office, for Austrian tourism.
Further information about Adform is available at: https://site.adform.com/privacy-center/platform-privacy/product-and-services-privacy-policy/
To exercise your data subject rights pursuant to Art. 15–21 GDPR, you can contact us at:
privacy@salzburg.info
You can also assert your rights against the Austrian National Tourist Office:
Österreich Werbung
Vordere Zollamtsstraße 13
1030 Vienna
Austria
Tel.: +43 1 588 66-0
Fax: +43 1 588 66-40
Email: datenschutz@austria.info
This page also provides an opt-out option. Data stored about you by Adform can be deleted at:
https://site.adform.com/privacy-center/platform-privacy/right-to-be-forgotten
Further Data Processing on This Website
Below, we inform you about the setting of cookies and data transfers to external parties that may occur when using our website.
FriendlyCaptcha
To protect against automated data entries, bots, we use “Friendly Captcha” by Friendly Captcha GmbH, Am Anger 3–5, 82237 Wörthsee, Germany.
For technical reasons, the publicly visible IP address of your device is transmitted to Friendly Captcha.
A data processing agreement has been concluded with Friendly Captcha, meaning that Friendly Captcha may not use the data for its own purposes.
Processing is carried out on the basis of our legitimate interest in preventing automated entries and ensuring high data quality pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 5(1)(d) GDPR.
Facebook Pixel
This website uses Facebook Pixel, a web analytics service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, “Meta”, on the legal basis of your consent for analysis of website use. Some of the data is transferred to the USA. The transfer of data to the USA takes place on the basis of the Data Privacy Framework agreement between the EU and the USA. When our website is accessed, software establishes a connection to Facebook servers and transfers data to Facebook servers, some of which are located in the USA. Facebook Pixel also uses cookies to store information about website users and to analyze how website users use the website.
According to Meta, Facebook will use the collected data to evaluate the use of the website, compile reports on website activities, and provide other services related to website use and internet use. Meta may also transfer this information to third parties where required by law or where third parties process this data on behalf of Facebook.
Detailed information on how Facebook handles user data can be found in Facebook’s privacy policy. You can prevent the collection of your user data by Facebook Pixel on this website by clicking the following link. An opt-out cookie will be set to prevent the collection of your data during future visits to this website: Disable Facebook Pixel.
Integration of Google Services
With your consent, our website uses the following services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel.: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-at@google.com, “Google”, which in turn transfers your data to the USA for further processing. We point out that the USA has a lower level of data protection than the EU and that US companies are obliged to disclose data to courts, law enforcement authorities, supervisory authorities, or security agencies. Within the scope of consent, you have the option to select or deselect individual services. We use Google Sign-In for simplified login to our online shop, Google Analytics for error analysis and statistical evaluations, Google Tag Manager for integrating additional Google services, Google DoubleClick for displaying or distributing online advertising, and Google Adwords Conversion Tracking for measuring clicks and conversions. In addition, with your consent, we embed YouTube videos and Google Maps maps, which are also provided by Google. Google also uses the collected information for its own purposes. Further information can be found at:
https://policies.google.com/technologies/partner-sites
Google Analytics
For error analysis and statistical evaluations of our web offering, and only with your consent, our website uses the Google Analytics analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel.: +353 1 543 1000, Fax: +353 1 686 5660, Email: support@google.com, “Google”, which in turn transfers your data to the USA for further processing. We point out that the USA has a lower level of data protection than the EU and that US companies are obliged to disclose data to courts, law enforcement authorities, supervisory authorities, or security agencies. Google has undertaken to comply with the principles of the EU-US Data Privacy Framework, DPF, in order to achieve a level of data protection comparable to that of the EU. Pursuant to Art. 45 GDPR, no additional legal basis is therefore required for the transfer of data to the USA.
Google Ads
We use the Google Ads service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website in order to show you relevant advertising and measure the success of our advertising campaigns. Google Ads enables us to use so-called conversion tracking and remarketing. Conversion tracking helps us understand whether you found our website through one of our ads and what actions you performed there, such as making a purchase or filling out a contact form. Remarketing allows us to show you targeted advertising on other websites that matches your interests, based on your previous visit to our website.
Data such as your IP address, technical information about your device and browser, visited websites, your interactions with our ads, and, if activated, your Google account data is collected and processed. Google may link this information with other data that Google holds about you, provided you are logged into your Google account.
The use of Google Ads is based on your consent pursuant to Art. 6(1)(a) GDPR.
You can withdraw this consent at any time via our cookie banner or in the privacy settings. Your data may also be transferred to the USA. Google is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection.
Google Maps
This website uses Google Maps to display interactive maps and create directions. Google Maps is a map service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel.: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-at@google.com, “Google”. By using Google Maps, information about the use of this website, including your IP address and the starting address entered as part of the route planner function, may be transferred to Google in the USA. When you access a page of our website that contains Google Maps, your browser establishes a direct connection with Google servers. The map content is transmitted directly by Google to your browser and integrated into the website by the browser. We therefore have no influence over the scope of the data collected by Google in this way. According to our knowledge, this includes at least the following data:
- date and time of the visit to the relevant website
- internet address or URL of the accessed website
- IP address
- starting address entered as part of route planning
The transfer of data is necessary for the correct display of the map and takes place on the basis of your express consent. A data processing agreement has been concluded with Google, meaning that Google may not use the data for its own purposes. Google has undertaken to comply with the principles of the EU-US Data Privacy Framework, DPF, in order to achieve a level of data protection comparable to that of the EU.
Pursuant to Art. 45 GDPR, no additional legal basis is therefore required for the transfer of data to the USA.
Functions and content of the Pinterest service, provided by Pinterest Inc., 651 Brannan St #310, San Francisco, CA 94107, USA, may be integrated into our online offering.
This may include content such as images, videos, or texts, as well as buttons with which users can express their approval of the content, subscribe to the authors of the content, or subscribe to our posts. If users are members of the Pinterest platform, Pinterest may associate the access to the above-mentioned content and functions with the users’ profiles there. Pinterest uses this data for data analysis, displaying personalized advertising, and tracking the success of marketing measures. Data is only transferred to Pinterest if you have given us your consent to do so. Pinterest’s privacy policy can be found at: https://about.pinterest.com/de/privacy-policy Pinterest has committed to complying with the provisions of the EU-US Data Privacy Framework, DPF, which has been recognized by the European Commission as providing adequate protection for personal data. Therefore, pursuant to Art. 45 GDPR, no further legal basis is required for transferring the data to the USA.
Spotify
The Spotify service is included in some parts of our website. When Spotify is used, technical connection data relating to server access, such as IP address, date, time, requested content, and browser information, as well as data for creating usage statistics and for delivering audio content, are processed by Spotify. This only takes place with your consent pursuant to Art. 6(1)(a) GDPR. The data is transferred to Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden.
Information about data protection at Spotify can be found at: https://www.spotify.com/at/legal/privacy-policy/
