Data Privacy Policy
Responsible for the processing of your personal data on our website is TSG Tourismus Salzburg GmbH.
Our data can be found in Legal notice.
Data Protection Officer
You can reach our data protection officer at privacy@salzburg.info .
Data Protection
We take the protection of your personal data very seriously. We process your personal data in accordance with the statutory data protection regulations and this data protection declaration. The use of our website is usually possible without providing personal data. Insofar as personal data (for example name, address or e-mail addresses) are collected on our pages, this is, as far as possible, always on a voluntary basis.
Unless otherwise stated in this data protection declaration, all processing of personal data takes place within the European Union.
Processors and Recipients
We process your personal data with the support of processors who assist us in providing the services (e.g. web host, email newsletter shipping service). These processors are contractually obliged to strictly protect your personal data and must not process your personal data for any purpose other than to provide our services. Your personal data is only passed on to typical business service providers such as banks (in the case of transfers to you), tax consultants (if you are in our accounting), shipping service providers (in the case of shipment to you), etc.
Contact Form
After sending the contact form, the personal data entered by you will be processed for the purpose of processing your request on the basis of your consent given by sending the form. There is no legal or contractual obligation to provide personal data. The non-provision merely means that you do not transmit your request and we cannot process it. You have the right to withdraw your consent at any time by written notice without affecting the legality of the processing carried out on the basis of the consent until the withdrawal. You have the right to object to the use of your personal data for the purpose of direct marketing at any time by written communication. In the event of an objection, your personal data will no longer be processed for the purpose of direct marketing.
Registration Form
After sending the registration, the above-mentioned data will be processed for the purpose of fulfilling the contract on the basis of the contract concluded with the registration for the specified contract period. The provision of the data is necessary for the use of the service. You have the right to object to the use of your personal data for the purpose of direct marketing at any time by written communication. In the event of an objection, your personal data will no longer be processed for the purpose of direct marketing.
Online Booking System for Coaches
After sending the registration, the above-mentioned data will be processed for the purpose of fulfilling the contract on the basis of the contract concluded with the registration for the specified contract period or for pre-contractual measures. The provision of the data is necessary for the use of the service. You have the right to object to the use of your personal data for the purpose of direct marketing at any time by written communication. In the event of an objection, your personal data will no longer be processed for the purpose of direct marketing.
The data of the user account (of their registration) will be deleted one year after their last registration. Information about bookings is stored within the framework of the statutory storage obligations for at least seven years and deleted after the expiry of the storage obligations.
Prize Draws
After sending the competition form, the data entered by you will be processed for the purpose of carrying out the competition on the basis of the competition contract concluded with it until the competition is concluded. There is no legal or contractual obligation to provide personal data. However, the provision is necessary to participate in the competition. The non-provision merely means that you cannot participate in the sweepstakes. Further processing of the data, which is compatible with the original processing purpose, can take place on the same legal basis for the purpose of direct marketing in non-consent forms, such as the addressed postal dispatch of advertising, except for opposition. In this case, the data is passed on to the shipping service provider. You have the right to object to the use of your personal data for the purpose of direct marketing at any time by written communication. In the event of an objection, your personal data will no longer be processed for the purpose of direct marketing.
Email Newsletter
By ticking the checkbox, you consent to the processing of the personal data entered by you for the purpose of information about actions, news and events by means of an e-mail newsletter until revocation or revocation. An objection. Information about the use of the newsletter, such as clicking on individual articles or opening the newsletter, is also logged and used in summary to optimize the content and the dispatch. There is no legal or contractual obligation to provide personal data. The non-consent only means that you do not receive an email newsletter. You have the right to withdraw your consent at any time by written notification or by clicking on the unsubscription link in the e-mail newsletter, without affecting the legality of the processing carried out on the basis of the consent until the withdrawal. You can also object to the use of your personal data for the purpose of direct marketing in the same way. In case of objection, your personal data will no longer be processed for the purpose of direct marketing in the form of an e-mail newsletter.
Information on the Use of Cookies
This website uses software to analyze the use of the website.
By evaluating this data, valuable insights can be gained about the needs of users. These findings help to further improve the quality of the offer.
In this context, so-called cookies are used. Cookies are data stored in your browser, which enable the recognition of a visitor on an anonymous basis. Cookies can generally be rejected or deleted by appropriate browser settings. The statements made here regarding cookies apply in a similar form to other technical browser functions such as local storage and session storage.
Some of the cookies on this website are necessary for the functioning of the website and are set due to our legitimate interest in the safe and efficient operation of the website. A transfer of information to third parties for their own business purposes does not take place in principle.
Cookies for the purpose of analysis and profiling are only used with your express consent.
For the management of consents we use “CookieYes” of CookieYes Limited, 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom. For technical reasons, the publicly visible IP address of your device is transmitted to CookieYes and on your device absolutely necessary cookie with information about your consent is stored. An agreement for order processing has been concluded with CookieYes, so CookieYes may not use the data for its own purposes. The United Kingdom is not a member of the European Union, but has been approved by the EU Commission by decision according to Art. 45 GDPR found that there is a level of data protection comparable to the EU in the UK. Therefore, no separate legal basis is required for this transfer to a country outside the EU.
You can obtain a given consent at any time HERE revoked.
Server Log File
This website processes the following personal data in a server log file for the purpose of monitoring the technical function and increasing the operational security of the web server on the basis of the overriding legitimate interest of the controller (technical security measures)
- Accessed content
- Date and time of server request
- Browser type / browser version
- Operating system use
- IP address
This data is stored for 8 days and then deleted.
Booking Overnight Stays and Additional Services
When booking hotels or additional services (e.g. guest card) directly via our website, the information about your booking will be passed on to the respective hotel or service provider. This transfer takes place on the basis of the execution of a contract or for pre-contractual measures (Art. 6 para 1 lit b GDPR) and is necessary for the execution of the contract.
Purchasing the Salzburg Card and Bookings in the Experience Shop
If you book a Salzburg Card through our online shop, the data required for the personalization of the card and the accounting will be processed for the purpose of carrying out the order.
When booking services in the Experience Shop (e.g. guided tours), your contact data will be passed on to the respective service provider and processed for the execution of the booking.
The legal basis is the implementation of a contract or for pre-contractual measures (Art. 6 para 1 lit b GDPR). The data will be deleted after expiry of the legal storage obligations. Data shall be transmitted to payment service providers for checking and releasing the used means of payment and, where appropriate, to logistics companies for sending the card.
If you create a user account in the Experience Shop (“booking & more!”), this data will be passed on to feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck and will subsequently be processed under the responsibility of feratel. Additional information about this processing can be found at https://my.bookingandmore.com/privacy_policy
Data Protection Information on Video Surveillance
On the premises of TSG Tourismus Salzburg GmbH, to which the premises of the Salzburg Congress, Paracelsusbads and the Kurhaus, video surveillance with recording takes place for the protection of persons and property values or for the investigation of accidents, incidents and crimes, but this does not include technical personal recognition.
Privacy information on video surveillance pursuant to Art. 13 GDPR
Whistleblowing System
For a confidential or anonymous reporting of indications of unlawful behavior, we use a whistleblower system that https://whistleblowersoftware.com/secure/TSG is achievable. The processing of contact data entered by you or additional information about the submitted information is confidential. The legal basis for the processing is a legal obligation resulting from the Austrian Whistleblower Protection Act (HSchG) (Art. 6 (1) c GDPR). This also applies to the processing of data of a special category or sensitive data according to Art. 9 (2) g GDPR.
You have the opportunity to report anonymously, then no personal data will be processed by you.
If you decide to report confidentially, your name and optional telephone number and email address will be stored and reported to the internal reporting center, which will process your case confidentially and will not share your data with the company.
You have the option to report verbally by recording an audio file that is uploaded to our servers. Here you can activate the voice distortion to ensure maximum anonymity again.
You also have the possibility to upload documents which will be settled in the case. These documents may contain personal data.
Data on messages received shall be retained for five years from the last data transmission, unless longer retention is required after the initiation of investigation procedures.
Information is passed on to legal advisers commissioned by us who are subject to professional secrecy and, if necessary, to authorities for the investigation and initiation of proceedings. It is also passed on to technical service providers who support us in providing the whistleblower system. However, they may not use the data for their own purposes and are bound by additional agreements to the strict provisions of the General Data Protection Regulation and the associated high security standards.
For the processing of information in accordance with the Whistleblower Protection Act, the otherwise existing data subject rights are legally restricted. This applies in particular to the right of access, the right to rectification, the right to erasure, the right to information, the right to restriction of processing, the right to object and the right to notification of a personal data breach.
Your Rights
You have the right to access, rectify, delete and restrict the processing of personal data. Insofar as the legal basis for the processing of your personal data is your consent or a contract concluded with you, you also have the right to data portability. You have the right to withdraw any consent granted for the processing of your personal data. The legality of the processing of personal data until the revocation is not affected by the revocation. You have the right to object to the processing of your personal data for the purpose of direct marketing. In the event of an objection, your personal data will no longer be processed for the purpose of direct marketing. Furthermore, you have the right to complain to a supervisory authority.
Please note that the rights mentioned here are legally limited when processing notices with the whistleblower reporting system.
Campaigns with the Austrian National Tourist Office
The website of Tourismus Salzburg GmbH (www.salzburg.info) sets cookies and products of the company Adform A/S (Ad Server, DSP and DMP) for target group-oriented advertising in joint processing isd Art. 26 GDPR with Austria Advertising. For this purpose, different parameters (accessed pages, device type, geographical origin, most recently visited websites) are recorded and visitors are grouped into different segments. With the help of statistical analyses, similar people are then found in the worldwide Adform cookie pool in order to address them with targeted advertising for Austrian tourism offers. These “loookalikes” will be made available to our cooperation partner Austria Werbung für Österreichische Tourismus. Further information about Adform can be obtained at the following address: https://site.adform.com/privacy-center/platform-privacy/product-and-services-privacy-policy/
For the exercise of your rights acc. Art. 15 - 21 GDPR you can contact us at: privacy@salzburg.info achievable. You can also assert your claims against Austria Werbung:
Austria Advertising
Front customs road 13
1030 Vienna
Austria
Tel: +43 1 588 66-0
Fax: +43 1 588 66-40
Email: : datenschutz@austria.info
On this page you will also find an option for opt-out. Data that has been stored by Adform for your person can be found at https://site.adform.com/privacy-center/platform-privacy/right-to-be-forgotten deleted.
Further Data Processing on This Website
In the following, we inform you about the setting of cookies and data transmissions to external agencies that can be used when using our website.
FriendlyCaptcha
To protect against automated data inputs (bots), we use “Friendly Captcha” from Friendy Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany. For technical reasons, the publicly visible IP address of your device is transmitted to Friendly Captcha. A contract processing agreement has been concluded with Friendly Captcha, so that Friendly Captcha may not use the data for its own purposes. The processing takes place for our legitimate interest in the prevention of automated entries and a high data quality (Art. 6 (1) f GDPR in conjunction with Art.) 5 (1) d GDPR.
Facebook Pixel
This website uses Facebook Pixel, a web analytics service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”) on the legal basis of your consent (analyzing website use). The data is partially transferred to the USA. The transfer of data to the USA takes place on the basis of the “Data Privacy Framework” agreement between the EU and the USA. When our website is accessed, a connection to the servers of Facebook is established via software and data is transmitted to some servers of Facebook located in the USA. Facebook Pixel also uses cookies to store information about the Website User and to analyze the use of the Website Users. According to Meta, Facebook will use the data collected to evaluate the use of the website, to compile reports on website activities and to provide other services related to website use and Internet use. Meta will also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Facebook. Detailed information on the handling of user data on Facebook can be found in the privacy policy of Facebook.
You can prevent the collection of your user data by Facebook Pixel on this website by clicking on the following link. An opt-out cookie is set that prevents the collection of your data during future visits to this website: Disable Facebook Pixel.
Integration of Google Services
With your consent, our website uses the following services from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-at@google.com (“Google”) which in turn transmits your data to the USA for further processing. Please note that the US has a lower level of data protection than the EU and US companies are required to provide data to courts, law enforcement agencies, regulators or security bodies.
As part of the consent, you have the option to select and de-select the individual services.
We use the services Google Sign-In for a simplified login to our online shop, Google Analytics for error analysis and statistical evaluations, the Google Tag Manager for the integration of further Google services, Google DoubleClick for display or Distribution of online advertising and Google Adwords conversion tracking to measure clicks and conversions.
In addition, we integrate YouTube videos and Google Maps maps, which are also provided by Google.
Google also uses the information collected for its own purposes. Further information can be found under https://policies.google.com/technologies/partner-sites
Google Tag Manager
To manage and control individual elements on this website, we use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support@google.com (“Google”) which in turn transmits your data to the USA for further processing. The functions of Google Tag Manager are absolutely necessary for our website. However, the IP address of your device is only transmitted to Google for technical reasons. This is done on the basis of our legitimate interest in a secure, technically reliable and efficient management of the services on our website (Art. 6 para 1 lit. f GDPR). In this regard, a contract processing agreement was concluded with Google, which obliges Google, among other things, not to use the transmitted data for its own purposes. Please note that the US has a lower level of data protection than the EU and US companies are required to provide data to courts, law enforcement agencies, regulators or security bodies. Google is committed to complying with the principles of the EU-US Data Privacy Framework (DPF) in order to achieve a level of data protection comparable to the EU. According to Art. 45 GDPR, no additional legal basis for the transfer of data to the USA is therefore necessary.
Google Analytics
For error analysis and statistical evaluations of our website and only with your consent, our website uses the analysis service Google Analytics of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support@google.com (“Google”) which in turn transmits your data to the USA for further processing. Please note that the US has a lower level of data protection than the EU and US companies are required to provide data to courts, law enforcement agencies, regulators or security bodies. Google is committed to complying with the principles of the EU-US Data Privacy Framework (DPF) in order to achieve a level of data protection comparable to the EU. According to Art. 45 GDPR, no additional legal basis for the transfer of data to the USA is therefore necessary.
Google Ads
On our website we use the Google Ads service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to show you relevant advertising and to measure the success of our advertising campaigns. Google Ads allows us to use so-called “conversion tracking” and “remarketing”. Conversion tracking helps us understand whether you have found our website through one of our ads and what actions you have performed there, such as making a purchase or filling out a contact form. Remarketing allows us to show you targeted advertising on other websites that suits your interests, based on your previous visit to our website.
Data such as your IP address, technical information about your device and browser, visited websites, your interactions with our ads and, if activated, your Google account data are collected and processed. Google may link this information to other information Google has about you if you are logged into your Google account.
The use of Google Ads is based on your consent in accordance with art. 6 par. 1 lit. a GDPR. You can revoke this consent at any time via our cookie banner or in the data protection settings.
Your data can also be transferred to the USA. Google is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection.
Google Ads Customer Match
If you give us your consent, we will use the contact data you provide, in particular your e-mail address and telephone number, also for the formation of target groups for personalized online advertising ("Google Ads Customer Match"). The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which in turn transfers your data to the USA for further processing.
For this purpose, the relevant contact details are converted into hash values before transmission by means of the SHA-256 method and subsequently transmitted to Google. Google compares these hash values with correspondingly prepared data from Google accounts. If a match is found, the Google account in question can be assigned to a target group defined by us. This allows us to show you advertising tailored to your interests, for example when using Google Search, YouTube or other Google services. They are excluded from certain advertising campaigns.
The processing takes place exclusively on the basis of your consent in accordance with art. 6 par. 1 lit. a GDPR. The granting of consent is voluntary and in particular not a prerequisite for you to send a contact form or to make a request to us. You can revoke your consent at any time with effect for the future. The revocation shall not affect the legality of the processing carried out until the revocation. Send us your contact details by e-mail so that we can exclude them from Customer Match.
Please note that the US has a lower level of data protection than the EU and US companies are required to provide data to courts, law enforcement agencies, regulators or security bodies. Google is committed to complying with the principles of the EU-US Data Privacy Framework (DPF) in order to achieve a level of data protection comparable to the EU. According to Art. 45 GDPR, no additional legal basis for the transfer of data to the USA is therefore necessary.
Google Maps
This website uses Google Maps to display interactive maps and to create directions. Google Maps is a mapping service provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-at@google.com (“Google”) By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, can be transmitted to Google in the USA If you visit a website of our website containing Google Maps, your browser establishes a direct connection with Google's servers. The card content is transmitted by Google directly to your browser and integrated into the website. Therefore, we have no influence on the extent of the data collected by Google in this way. According to our knowledge, these are at least the following data:
- the date and time of the visit to the relevant website
- Internet address or URL of the accessed website
- IP address,
- start address entered as part of the route planning.
The transfer of data is necessary for the correct presentation of the card and takes place on the basis of your express consent. An agreement has been concluded with Google for order processing, so that Google may not use the data for its own purposes. Google is committed to complying with the principles of the EU-US Data Privacy Framework (DPF) in order to achieve a level of data protection comparable to the EU. According to Art. 45 GDPR, no additional legal basis for the transfer of data to the USA is therefore necessary.
Within our online offer, functions and content of the service Pinterest can be integrated, offered by Pinterest Inc., 651 Brannan St #310, San Francisco, CA 94107, USA. This can include, for example, content such as pictures, videos or texts and buttons with which users can express their favours regarding the content, subscribe to the content authors or our contributions. If the users are members of the platform Pinterest, Pinterest can assign the call of the above-mentioned content and functions to the profiles of the users there. Pinterest uses this data for data analysis, displaying personalized advertising and tracking the success of marketing efforts. A transfer of data to Pinterest only takes place if you have given us your consent. The privacy policy of Pinterest can be found at: https://about.pinterest.com/de/privacy-policy. PInterest has undertaken to comply with the provisions of the EU-US Data Privacy Framework (DPF), which has been recognised by the EU Commission as providing adequate protection of personal data. Therefore, according to art. 45 GDPR for the transfer of data to the USA no further legal basis is required.
Spotify
Some parts of our website include the Spotify service. When using Spotify, technical connection data of server access (IP address, date, time, requested content, browser information) and data are processed for the production of usage statistics and for the purpose of delivering audio content from Spotify. This is only done with your consent (Art. 6 (1) a GDPR). The data is transmitted to Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden. Information about data protection on Spotify can be found at https://www.spotify.com/at/legal/privacy-policy/
