Important summarized notes
Privacy policy

1. Controller

The controller responsible for the processing of personal data in connection with this website is:

DasPosthotel GmbH
Managing Director: Christina Binder-Egger
Rohrerstraße 4
6280 Zell am Ziller
Austria

Telephone: +43 5282 2236
Email: info@zillerseasons.at

Where other controllers or joint controllers are involved in individual processing activities, we provide information about this in the relevant sections of this Privacy Policy.

2. General Information on Data Processing

We process personal data only where there is a legal basis for doing so.

Depending on the processing activity, the following legal bases may apply in particular:

Art. 6(1)(a) GDPR – Consent:
where you have voluntarily given us your consent to specific processing, for example for certain analytics or marketing services or for receiving our newsletter.

Art. 6(1)(b) GDPR – Contract and pre-contractual measures:
where processing is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract, for example in connection with booking or reservation enquiries.

Art. 6(1)(c) GDPR – Legal obligation:
where we are required to process data in order to comply with legal obligations, for example statutory tax or corporate record-keeping requirements.

Art. 6(1)(f) GDPR – Legitimate interests:
where processing is necessary for the purposes of our legitimate interests or those of a third party, except where such interests are overridden by your interests, fundamental rights or freedoms. The relevant legitimate interest is explained in connection with the respective processing activity.

Where information is stored on or accessed from your terminal device, we additionally comply with the requirements of Section 165(3) TKG 2021. As a general rule, we only use technically non-essential cookies and comparable technologies after you have given your consent.

3. Accessing Our Website and Server Log Files

When you access our website, technically necessary information is automatically transmitted to the server on which our website is hosted.

The following data may be processed in particular:

• IP address of the accessing device
• date and time of access
• page or file accessed
• amount of data transferred
• referrer URL
• browser type and browser version
• operating system used
• hostname and technical device and connection information
• status codes and information concerning the successful or unsuccessful delivery of content

The processing is carried out in order to technically provide the website, ensure its stability and security, identify technical errors and prevent or investigate unauthorised access or attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and technically reliable operation of our online services.

The data is stored only for as long as necessary for the purposes stated above. Data may be retained for a longer period where this is necessary to investigate security-related incidents or for the establishment, exercise or defence of legal claims.

4. Hosting and Technical Service Providers

We use external technical service providers for the operation and provision of our website.

Where these service providers process personal data exclusively on our behalf, such processing is carried out on the basis of a data processing agreement in accordance with Art. 28 GDPR.

In this context, server log data and personal data that you submit through our website may be processed in particular.

Depending on the respective processing activity, the legal basis for using such service providers is Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, efficient and reliable provision of our website and digital services.

5. SSL/TLS Encryption

Our website uses SSL/TLS encryption to protect transmitted data against unauthorised access by third parties.

An encrypted connection can generally be recognised by the fact that the website address begins with “https://”.

Please note that, despite appropriate technical and organisational security measures, completely risk-free transmission of data via the internet cannot be guaranteed.

6. Cookies, Local Storage and Comparable Technologies

Our website uses cookies and, where applicable, comparable technologies such as Local Storage, pixels, tags or other technologies through which information may be stored on or accessed from your terminal device.

Cookies are small data records stored on your device.

We distinguish in particular between the following categories:

Technically Necessary Technologies

These technologies are required in order to provide the website or a function expressly requested by you. They may include, for example, session cookies, security functions, language settings or the storage of your privacy preferences.

Where accessing or storing information on your terminal device is strictly necessary in order to provide a service expressly requested by you, no consent is required under Section 165(3) TKG 2021.

Where personal data is processed in this context, the processing is carried out, depending on the purpose, in particular on the basis of Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Statistics and Analytics

Analytics technologies help us understand how our website is used and how we can improve our services.

Such technologies are used only if you have given your prior consent.

The legal bases are Section 165(3) TKG 2021 and, for the subsequent processing of personal data, Art. 6(1)(a) GDPR.

Marketing

Marketing technologies may be used to analyse the use of our website, measure the effectiveness of advertising campaigns, create target audiences or display interest-based advertising to you.

These technologies are also used only if you have given your prior consent.

The legal bases are Section 165(3) TKG 2021 and Art. 6(1)(a) GDPR.

7. Consent Management and Changing Your Cookie Settings

When you first visit our website, you can use our consent management solution to decide which categories of non-essential technologies you wish to consent to.

Your consent is voluntary and can be withdrawn or changed at any time with effect for the future.

You can do this by reopening the Cookie/Privacy Settings provided on the website.

The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

Your cookie preference itself may be stored so that we can respect your selection and, in particular, any refusal you have expressed.

8. Contacting Us

8.1 Contact Form

If you contact us using a contact form, we process the data you enter as well as technical information associated with your enquiry.

The following data may be processed in particular:

• name
• email address
• telephone number
• content of your message
• information concerning a requested trip, reservation or service
• date and time of the enquiry
• any other information voluntarily provided by you

The processing is carried out in order to handle and respond to your enquiry.

Where the enquiry relates to a contract or serves to take steps prior to entering into a contract, the legal basis is Art. 6(1)(b) GDPR.

For other enquiries, processing is based on our legitimate interest in efficiently handling communications addressed to us in accordance with Art. 6(1)(f) GDPR.

Where consent is expressly obtained, the legal basis is Art. 6(1)(a) GDPR.

As a general rule, we retain your data only for as long as necessary to process your enquiry and, where applicable, for the subsequent business relationship. Statutory retention obligations and further storage required for the establishment, exercise or defence of legal claims remain unaffected.

8.2 Contact by Email or Telephone

If you contact us by email or telephone, we process the data you provide in order to handle your enquiry.

Depending on the content of the enquiry, processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Our legitimate interest lies in efficiently handling communications addressed to us.

9. Enquiries, Reservations and Bookings

If you make an enquiry, reservation or booking, we process the data necessary to handle your enquiry, prepare or perform the contract and organise your stay.

This may include in particular:

• first and last name
• address
• contact details
• arrival and departure dates
• number and, where applicable, age of accompanying travellers
• requested hotel or accommodation
• room and service preferences
• booking and reservation data
• payment and billing information
• correspondence relating to your booking
• preferences and requests voluntarily provided by you

Processing is generally based on Art. 6(1)(b) GDPR.

Where we are legally required to process certain information, processing is based on Art. 6(1)(c) GDPR.

Information voluntarily provided by you may, in individual cases, contain special categories of personal data within the meaning of Art. 9 GDPR, for example information concerning allergies or dietary requirements relating to your health.

Where we process such special categories of personal data, we generally do so only on the basis of your explicit consent pursuant to Art. 9(2)(a) GDPR in conjunction with Art. 6(1)(a) GDPR, unless another statutory legal basis for the processing applies in exceptional circumstances.

Please provide such information only where it is necessary for us to provide the service you have requested.

Booking and billing data is stored in accordance with applicable statutory retention obligations. Other data is deleted or anonymised as soon as it is no longer required for the respective purposes and there are no statutory retention obligations or legitimate grounds for further storage.

10. Web Booking Engine / HotelNetSolutions

We use services provided by

HotelNetSolutions GmbH
Genthiner Straße 8
10785 Berlin
Germany

to provide our online booking functionality.

The booking engine allows you to check availability and prices and to make reservations or bookings.

When using the booking engine, the following data may be processed in particular:

• IP address and technical connection data
• stay and travel data
• name and contact details
• information concerning accompanying travellers
• reservation and booking data
• selected services
• billing and, where applicable, payment information
• requests or messages voluntarily provided by you

Processing is carried out in order to take steps prior to entering into a contract and to process your booking on the basis of Art. 6(1)(b) GDPR.

Where cookies or comparable technologies are strictly necessary for the technical provision of the booking functionality expressly requested by you, they may be used without separate consent in accordance with Section 165(3) TKG 2021.

Analytics or marketing technologies that are not strictly necessary for the booking functionality are used only after you have given your prior consent.

Further information on data protection at HotelNetSolutions can be found in the provider's privacy policy.

11. ReGuest and ReGuest Messenger

We use services provided by ReGuest to process enquiries and communicate with prospective and existing guests.

The provider is:

ReGuest AG
Kuperionstr. 34
39012 Merano
Italy

When using the relevant enquiry, communication or messenger functions, the following data may be processed in particular:

• name and contact details
• content and history of your communications
• information concerning your requested stay
• reservation and booking information
• technical connection data
• date and time of communications
• information voluntarily provided by you

Processing is carried out to handle your enquiry, communicate with you and, where applicable, prepare and perform your booking or stay.

The legal basis is generally Art. 6(1)(b) GDPR. Where the communication does not relate to a contract or pre-contractual measures, processing is based on our legitimate interest in efficient guest communication pursuant to Art. 6(1)(f) GDPR.

Where ReGuest processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

12. Google Tag Manager

We use Google Tag Manager on our website. The provider for users in the European Economic Area is generally:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Tag Manager is used for the technical management and deployment of other website tags and services.

Analytics or marketing services that require consent are triggered through Google Tag Manager only after you have given the relevant consent.

Google Tag Manager itself is not used to independently create user profiles. Where personal data is processed as part of its technical provision, such processing is carried out in accordance with the applicable data protection requirements.

13. Google Analytics

After you have consented to the Statistics/Analytics category, we use Google Analytics.

The provider for users in the European Economic Area is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics enables us to statistically analyse the use of our website. This may include information about pages viewed, interactions, approximate geographical region, technical device and browser information, the source of the website visit and other usage information.

Cookies or comparable technologies may be used for this purpose.

Google Analytics is activated only after you have given your consent.

The legal bases are Section 165(3) TKG 2021 and Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future via the Cookie/Privacy Settings.

In connection with the use of Google services, it cannot be ruled out that personal data may be transferred to companies within the Google group or other recipients outside the European Economic Area.

Where personal data is transferred to appropriately certified recipients in the United States, the transfer may be based on the European Commission's adequacy decision concerning the EU-U.S. Data Privacy Framework.

Where this does not apply, other appropriate safeguards under Chapter V GDPR may be used where required, in particular Standard Contractual Clauses pursuant to Art. 46 GDPR.

Further information about data processing by Google can be found in Google's privacy information.

14. Google Ads and Conversion Measurement

After you have consented to the Marketing category, we use Google Ads and corresponding conversion measurement technologies to measure the effectiveness of our advertising activities.

For example, this may allow us to determine whether a website visit is connected with an advertisement previously displayed and whether certain actions, such as an enquiry or booking, were subsequently carried out.

Cookies, online identifiers and comparable technologies may be used, and information concerning your use of our website may be transmitted to Google.

The service is activated only after you have given your consent.

The legal bases are Section 165(3) TKG 2021 and Art. 6(1)(a) GDPR.

You may withdraw your consent at any time via our Cookie/Privacy Settings.

The principles described in the Google Analytics section apply to possible transfers of data to the United States.

14.1. Microsoft Clarity

After you have consented to the Statistics/Analytics category, we use Microsoft Clarity. Microsoft Clarity is an analytics service provided by Microsoft that helps us better understand how visitors use our website.

The provider for users in the European Economic Area is generally:

Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland

Microsoft Clarity can be used in particular to analyse interactions with our website. This may include information about pages viewed, clicks, scrolling, mouse movements, sessions and technical information concerning the device and browser used. This enables us, for example, to understand how visitors use our website and identify areas where the user experience can be improved.

Cookies or comparable technologies as well as pseudonymous identifiers may be used for this purpose.

Microsoft Clarity is used for analytics requiring consent only after you have given your consent to the corresponding category. The legal bases are Section 165(3) TKG 2021 and Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future via the Cookie/Privacy Settings.

In connection with the use of Microsoft Clarity, personal data may be processed by Microsoft and may, where applicable, be transferred outside the European Economic Area. The principles described in the section “Transfers of Data Outside the EEA” apply to such transfers.

Further information concerning data processing by Microsoft can be found in Microsoft's privacy information.

15. Google Remarketing / Personalised Advertising

Where we use corresponding Google marketing functions and you have consented to the Marketing category, Google technologies may be used to assign visitors to our website to target audiences and display interest-based advertising to them on other websites or services.

Such processing takes place only after you have given your consent.

The legal bases are Section 165(3) TKG 2021 and Art. 6(1)(a) GDPR.

You may withdraw your consent at any time via the Cookie/Privacy Settings.

16. Meta Pixel

After you have consented to the Marketing category, we use the Meta Pixel on our website.

The provider for users in the European Economic Area is generally:

Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland

The Meta Pixel can help us measure the effectiveness of advertisements on Facebook and Instagram and create target audiences for advertising purposes.

In this context, information concerning pages viewed, interactions with our website, browser and device information, IP address and online identifiers may in particular be processed and transmitted to Meta.

If you are logged in to a Meta service, Meta may be able to associate the processed information with your user account.

The Meta Pixel is activated only after you have given your consent.

The legal bases are Section 165(3) TKG 2021 and Art. 6(1)(a) GDPR.

You may withdraw your consent at any time via the Cookie/Privacy Settings.

To the extent that we and Meta jointly determine the purposes and means of the collection and transmission of certain data, we are joint controllers in this respect pursuant to Art. 26 GDPR. Further processing of the transmitted data by Meta is generally carried out under Meta's own responsibility.

Processing may involve transfers of personal data to recipients outside the European Economic Area, in particular to the United States.

Where a recipient is certified under the EU-U.S. Data Privacy Framework, the transfer may be based on the corresponding adequacy decision. Otherwise, appropriate safeguards pursuant to Chapter V GDPR are used where required.

17. Google Maps

Maps provided by Google Maps are embedded on our website.

The provider for users in the European Economic Area is generally:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

When Google Maps is loaded, your IP address, device and browser information and, where applicable, location information may in particular be transmitted to Google.

Where Google Maps is not strictly necessary to provide a specific function expressly requested by you, the service is loaded only after you have given your consent.

In this case, the legal bases are Section 165(3) TKG 2021 and Art. 6(1)(a) GDPR.

You may withdraw your consent at any time via the Cookie/Privacy Settings.

The principles described above apply to possible transfers of personal data to the United States.

18. YouTube

Videos from the YouTube platform are embedded on our website.

The provider for users in the European Economic Area is generally:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

When an embedded YouTube video is loaded or played, personal data such as your IP address, device and browser information and information concerning the page accessed may be transmitted to Google or YouTube.

If you are logged in to YouTube or Google, this information may be associated with your user account.

Where the integration of YouTube content involves access to your terminal device requiring consent or corresponding processing of personal data, such content is loaded only after you have given your consent.

The legal bases are Section 165(3) TKG 2021 and Art. 6(1)(a) GDPR.

You may withdraw your consent at any time via the Cookie/Privacy Settings.

The principles described in the Google Analytics section apply to possible transfers of data to the United States.

19. Vimeo

Videos provided by Vimeo are embedded on our website.

The provider is:

Vimeo.com, Inc.
USA

When a Vimeo video is loaded, your IP address, information concerning the page accessed and device and browser information may in particular be transmitted to Vimeo.

Where the integration of Vimeo triggers technologies requiring consent or corresponding data transfers, the relevant content is loaded only after you have given your consent.

The legal bases are Section 165(3) TKG 2021 and Art. 6(1)(a) GDPR.

You may withdraw your consent at any time via the Cookie/Privacy Settings.

Vimeo states that it participates in the EU-U.S. Data Privacy Framework. Where its requirements are met, transfers of personal data to the United States may be based on the corresponding adequacy decision pursuant to Art. 45 GDPR. Where this does not apply, appropriate safeguards pursuant to Chapter V GDPR are used where required.

20. Google Fonts

The Google Fonts used on our website are hosted locally.

Therefore, merely loading the fonts used on our website does not establish a connection to Google's servers.

21. Smart Host CRM and Guest Communications

We use Smart Host for our customer relationship management (CRM) and for communicating with prospective and existing guests.

Smart Host supports us in particular in managing and structuring guest data and in carrying out and personalising our guest communications. Smart Host may be used in particular to send newsletters, email campaigns and other guest- or stay-related communications.

The following personal data may be processed in particular:

• name and contact details, in particular email address
• booking, reservation and stay data
• information concerning previous and planned stays
• interests, preferences and other information relevant to guest relations
• information concerning communications with us
• information concerning the sending and, where corresponding functions are used, the use of our email communications

Depending on the purpose, processing is carried out on different legal bases.

Where Smart Host is used to handle enquiries, prepare or perform a booking, or communicate with you in connection with an existing contractual relationship, processing is based on Art. 6(1)(b) GDPR.

Where we send you newsletters or promotional email campaigns on the basis of your consent, processing is based on Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, in particular by using the unsubscribe link contained in the respective communication or by contacting us.

Where promotional communications are permitted on another statutory legal basis, this remains unaffected.

Where Smart Host processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Further information concerning data processing by Smart Host can be found in the provider's privacy information.

Smart Host GmbH
Andreasstraße 72
10243 Berlin

21.1. Straiv – Digital Check-in

We use Straiv to provide our digital check-in process.

The provider is:

Straiv GmbH
Industriestraße 23
70565 Stuttgart
Germany

Straiv allows guests to submit the information required for check-in digitally. In this context, the following personal data may be processed in particular:

• first and last name
• contact details
• address
• arrival and departure dates
• booking and reservation data
• information concerning accompanying travellers
• information required for check-in or statutory guest registration requirements
• technical connection and usage data

Processing is carried out for the purpose of organising and providing your stay and the digital check-in process. The legal basis is generally Art. 6(1)(b) GDPR. Where certain information must be processed in order to comply with statutory registration, record-keeping or other legal obligations, processing is based on Art. 6(1)(c) GDPR.

Where Straiv processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Further information concerning data processing by Straiv can be found in the provider's privacy information.

22. Payment Processing

If you select an electronic payment method in connection with a booking or purchase, the data required to process the payment is transmitted to the respective payment service provider or collected directly by that provider.

This may include in particular:

• name
• billing and contact details
• payment amount
• booking or order information
• transaction data
• any other information required for the selected payment method

Processing is carried out to perform the payment transaction requested by you and is therefore generally based on Art. 6(1)(b) GDPR.

The privacy policies of the payment service provider selected by you additionally apply to the actual payment processing.

Sofort / Klarna

Where “Sofort” or a corresponding Klarna payment service is offered as a payment method, payment processing is carried out via the respective Klarna service.

Sensitive authentication information for your online banking is generally entered directly with the payment service provider. We do not receive such login credentials.

Further information concerning the processing of your data can be found in the privacy information of the respective payment service provider.

23. Social Media Presence

We maintain company profiles on various social networks and platforms, in particular Facebook, Instagram, YouTube and Pinterest.

When you visit one of our social media profiles, the operator of the respective platform initially processes personal data. This may include, for example, your IP address, device information, usage data, interactions and information from your user account.

Platform operators may use this information for analytics and advertising purposes, among other purposes, and may create usage profiles.

Where we directly process personal data through our social media profiles – for example, if you send us a message or interact with our posts – processing is carried out, depending on the circumstances, on the basis of Art. 6(1)(b) GDPR, Art. 6(1)(f) GDPR or your consent pursuant to Art. 6(1)(a) GDPR.

Our legitimate interest lies in particular in communicating with prospective and existing guests and presenting our services in a contemporary manner.

For certain processing activities in connection with company pages, we may be joint controllers with the respective platform operator within the meaning of Art. 26 GDPR.

We have only limited influence over the scope and purposes of independent processing carried out by platform operators. Further information can be found in the privacy policies of the respective platforms.

24. Recipients of Personal Data

In connection with the processing activities described in this Privacy Policy, personal data may in particular be transmitted to the following categories of recipients:

• hosting and IT service providers
• providers of booking and reservation systems
• communication and guest management service providers
• payment service providers and banks
• analytics and marketing service providers, where you have given your consent
• tax advisers, auditors and other professional advisers
• authorities and public bodies, where there is a legal obligation to disclose data
• other service providers where this is necessary for the performance of a contract or another legal basis applies

Service providers that process personal data exclusively on our behalf are contractually bound in accordance with Art. 28 GDPR.

25. Transfers of Data Outside the EEA

Some of the service providers we use or companies within their corporate groups may be established outside the European Union or European Economic Area or may process personal data there.

Personal data is transferred to a third country only in compliance with the requirements of Art. 44 et seq. GDPR.

Where an adequacy decision of the European Commission pursuant to Art. 45 GDPR applies to the relevant third country or recipient, the transfer may be based on that decision.

For appropriately certified companies in the United States, the European Commission's adequacy decision concerning the EU-U.S. Data Privacy Framework may apply.

Where no applicable adequacy decision exists, we use appropriate safeguards pursuant to Art. 46 GDPR where required, in particular the Standard Contractual Clauses adopted by the European Commission. Where necessary, additional measures are taken to protect personal data.

Information concerning the appropriate safeguards used in individual cases can be requested from us using the contact details provided in Section 1. The Standard Contractual Clauses adopted by the European Commission are also available via the European Commission's website.

In specific exceptional circumstances, a transfer may take place on the basis of Art. 49 GDPR.

26. Storage Period

As a general rule, we store personal data only for as long as necessary for the respective processing purpose.

In addition, we retain data where statutory retention obligations apply or where this is necessary for the establishment, exercise or defence of legal claims.

The specific storage period therefore depends in particular on the type of data, the purpose of the processing, statutory retention periods and possible limitation periods.

Where specific storage or retention periods apply to individual services or can be configured by us, storage is additionally governed by these settings and the requirements applicable to the respective service.

Once the respective purpose no longer applies and applicable retention periods have expired, personal data is deleted or anonymised unless another legal basis exists for further processing.

27. Your Rights

As a data subject, you have the following rights in particular, subject to the applicable legal requirements:

Right of Access – Art. 15 GDPR

You have the right to request information as to whether and which personal data concerning you we process.

Right to Rectification – Art. 16 GDPR

You have the right to request the rectification of inaccurate personal data and the completion of incomplete personal data.

Right to Erasure – Art. 17 GDPR

You have the right to request the erasure of your personal data where the statutory requirements are met.

Right to Restriction of Processing – Art. 18 GDPR

You have the right, subject to the statutory requirements, to request that the processing of your personal data be restricted.

Right to Data Portability – Art. 20 GDPR

Where the statutory requirements are met, you have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format or, where technically feasible, to have such data transmitted to another controller.

Right to Object – Art. 21 GDPR

Where we process personal data on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time. Following your objection, your personal data will no longer be processed for such purposes.

Withdrawal of Consent – Art. 7(3) GDPR

You may withdraw consent you have given at any time with effect for the future.

The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

To exercise your rights, you can contact us in particular at info@zillerseasons.at.

28. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

In Austria, this is in particular:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria

Further information and current contact details can be found on the website of the Austrian Data Protection Authority.

Your right to pursue other administrative or judicial remedies remains unaffected.

29. No Solely Automated Decision-Making with Legal Effect

Unless expressly stated otherwise in this Privacy Policy, we do not use solely automated decision-making within the meaning of Art. 22 GDPR in connection with this website where such decisions would produce legal effects concerning you or similarly significantly affect you.

30. Data Security

We take appropriate technical and organisational measures to protect personal data, in particular against loss, manipulation, unauthorised access and other unlawful processing.

Our security measures are reviewed and adapted in accordance with technological developments and the respective risks.

31. Changes to this Privacy Policy

We may amend this Privacy Policy if legal requirements, our website, the services used or the nature of our data processing change.

The current version published on this website applies.