We have written this privacy statement (version 20.01.2023-122396023) in order to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (data for short) we as the controller – and the processors (e.g. providers) commissioned by us – process, will process in the future and what lawful options you have. The terms used are to be understood as gender-neutral.
In short, we inform you comprehensively about the data we process about you.
Data protection statements usually sound very technical and use legal terminology. This privacy statement, on the other hand, is intended to describe the most important things to you as simply and transparently as possible. As far as transparency is concerned, technical terms are explained in a reader-friendly way, links to further information are provided and graphics are used. In this way, we inform you in clear and simple language that we only process personal data in the course of our business activities if there is a corresponding legal basis. This is certainly not possible by providing the most concise, unclear and legalistic explanations possible, as is often standard practice on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative and perhaps there is one or two pieces of information you did not know.
If you still have questions, we would like to ask you to contact the responsible office mentioned below or in the imprint, to follow the links provided and to look at further information on third party sites. You will of course also find our contact details in the imprint.
This data protection declaration applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (order processors). By personal data, we mean information within the meaning of Art. 4 No. 1 DSGVO, such as a person’s name, email address and postal address. The processing of personal data ensures that we can offer and invoice our services and products, whether online or offline. The scope of this privacy policy includes:
all online presences (websites, online shops) that we operate
social media sites and email communications
mobile apps for smartphones and other devices
In short, the data protection declaration applies to all areas in which personal data is processed in the company via the aforementioned channels in a structured manner. If we enter into legal relationships with you outside of these channels, we will inform you separately where applicable.
In the following privacy statement, we provide you with transparent information on the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which enable us to process personal data.
As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016, which you can of course read online on EUR-Lex, the gateway to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679.
We only process your data if at least one of the following conditions applies:
Consent (Article 6(1)(a) DSGVO): You have given us your consent to process data for a specific purpose. An example would be the storage of your entered data of a contact form.
Contract (Article 6(1)(b) DSGVO): In order to fulfil a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a sales contract with you, we need personal information in advance.
Legal obligation (Article 6(1)(c) DSGVO): If we are subject to a legal obligation, we process your data. For example, we are legally obliged to keep invoices for accounting purposes. These usually contain personal data.
Legitimate interests (Article 6(1)(f) DSGVO): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data in order to operate our website in a secure and economically efficient manner. This processing is therefore a legitimate interest.
Other conditions, such as the performance of recordings in the public interest and the exercise of official authority as well as the protection of vital interests, do not usually arise for us. If such a legal basis should be relevant, it will be indicated at the appropriate place.
In addition to the EU Regulation, national laws also apply:
In Austria, this is the Federal Act on the Protection of Individuals with regard to the Processing of Personal Data (Data Protection Act), or DSG for short.
In Germany, the Federal Data Protection Act, or BDSG for short, applies.
If other regional or national laws apply, we will inform you about them in the following sections.
If you have any questions regarding data protection or the processing of personal data, you will find the contact details of the responsible person or office below:
T&T Ferienresidenzen GmbH
Torsten Schlingelhof
Munich Street 22
A-6130 Schwaz
E-mail: office@ferienresidenzen.at
Phone: +4933123703683
The fact that we only store personal data for as long as is absolutely necessary for the provision of our services and products applies as a general criterion with us. This means that we delete personal data as soon as the reason for processing the data no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased to exist, for example for accounting purposes.
Should you wish your data to be deleted or revoke your consent to data processing, the data will be deleted as soon as possible and insofar as there is no obligation to store it.
We will inform you about the specific duration of the respective data processing below, provided we have further information on this.
Pursuant to Articles 13, 14 of the GDPR, we inform you about the following rights you have in order to ensure fair and transparent processing of data:
According to Article 15 DSGVO, you have a right of access to whether we process data about you. If this is the case, you have the right to receive a copy of the data and to know the following information:
the purpose for which we are processing it;
the categories, i.e. types, of data being processed;
who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
how long the data will be stored;
the existence of the right to rectification, erasure or restriction of processing and the right to object to processing;
that you can lodge a complaint with a supervisory authority (links to these authorities can be found below);
The origin of the data if we have not collected it from you;
whether profiling is carried out, i.e. whether data is automatically analysed to arrive at a personal profile of you.
You have a right to rectification of data under Article 16 of the GDPR, which means that we must rectify data if you find errors.
You have the right to erasure (“right to be forgotten”) under Article 17 of the GDPR, which specifically means that you may request the deletion of your data.
According to Article 18 of the GDPR, you have the right to restriction of processing, which means that we may only store the data but not use it any further.
According to Article 20 of the GDPR, you have the right to data portability, which means that we will provide you with your data in a standard format upon request.
You have a right to object under Article 21 of the GDPR, which entails a change in processing after enforcement.
If the processing of your data is based on Article 6(1)(e) (public interest, exercise of official authority) or Article 6(1)(f) (legitimate interest), you may object to the processing. We will then check as soon as possible whether we can legally comply with this objection.
If data is used to carry out direct advertising, you can object to this type of data processing at any time. We may then no longer use your data for direct marketing.
If data is used for profiling, you can object to this type of data processing at any time. We may no longer use your data for profiling thereafter.
You may have the right under Article 22 of the GDPR not to be subject to a decision based solely on automated processing (for example profiling).
You have the right to complain under Article 77 of the GDPR. This means that you can complain to the data protection authority at any time if you believe that the data processing of personal data violates the GDPR.
In short, you have rights – do not hesitate to contact the controller listed above at our office!
If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can complain to the supervisory authority. For Austria, this is the data protection authority, whose website can be found at https://www.dsb.gv.at/. In Germany, there is a data protection commissioner for each federal state. For more information, you can contact the Federal Commissioner for Data
Protection and Freedom of Information (BfDI). The following local data protection authority is responsible for our company:
Österreich Datenschutzbehörde
Head: Dr. Andrea Jelinek, M.D.
Address: Barichgasse 40-42, 1030 Vienna
Telephone number: +43 1 52 152-0
E-mail address: dsb@dsb.gv.at
Website: https://www.dsb.gv.at/
Communication Summary
👥 Affected parties: Anyone who communicates with us by phone, email or online form.
📓 Data collected: e.g. telephone number, name, e-mail address, form data entered. You can find more details on this in the respective contact type used
🤝 Purpose: Handling communication with customers, business partners, etc..
📅 Storage period: duration of the business case and legal requirements
⚖️ Legal basis: Art. 6 para. 1 lit. a DSGVO (Consent), Art. 6 para. 1 lit. b DSGVO (Contract), Art. 6 para. 1 lit. f DSGVO (Legitimate Interests)
When you contact us and communicate by phone, email or online form, personal data may be processed.
The data is processed for the handling and processing of your question and the related business transaction. The data is stored for as long as it is required by law.
Persons concerned
* All those who seek contact with us via the communication channels provided by us are affected by the aforementioned processes.
Telephone
* When you call us, the call data is stored pseudonymously on the respective end device and with the telecommunications provider used. In addition, data such as name and telephone number may subsequently be sent by e-mail and stored for the purpose of responding to enquiries. The data is deleted as soon as the business case has been closed and legal requirements permit.
E-mail
* If you communicate with us by e-mail, data may be stored on the respective end device (computer, laptop, smartphone,…) and data is stored on the e-mail server. The data is deleted as soon as the business transaction has been completed and legal requirements permit.
Online forms
* If you communicate with us using online forms, data is stored on our web server and may be forwarded to an e-mail address of ours. The data will be deleted as soon as the business transaction has been completed and legal requirements permit.
Legal basis
* The processing of data is based on the following legal grounds:
* Art. 6 para. 1 lit. a DSGVO (consent): You give us your consent to store your data and to further use it for purposes related to the business case;
* Art. 6 para. 1 lit. b DSGVO (contract): There is a need for the performance of a contract with you or a processor such as the telephone provider, or we need to process the data for pre-contractual activities such as preparing a quotation;
* Art. 6 para. 1 lit. f DSGVO (Legitimate Interests): We want to conduct customer enquiries and business communications in a professional manner. For this purpose, certain technical facilities such as e-mail programmes, exchange servers and mobile operators are necessary in order to be able to operate the communication efficiently.
Cookies Summary
👥 Data subjects: Visitors to the website
🤝 Purpose: depends on the cookie. More details can be found below or from the manufacturer of the software that sets the cookie.
📓 Verarbeitete Daten: Abhängig vom jeweils eingesetzten Cookie. Mehr Details dazu finden Sie weiter unten bzw. beim Hersteller der Software, der das Cookie setzt.
📅 Storage time: depends on the cookie, can vary from hours to years
⚖️ Legal basis: Art. 6 para. 1 lit. a DSGVO (Consent), Art. 6 para. 1 lit.f DSGVO (Legitimate Interests)
What are cookies?
Our website uses HTTP cookies to store user-specific data.
Below we explain what cookies are and why they are used so that you can better understand the following privacy policy.
Whenever you browse the internet, you use a browser. Popular browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.
One thing cannot be denied: Cookies are really useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are also other cookies for other applications. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, effectively the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.
Cookies store certain user data about you, such as language or personal page settings. When you return to our site, your browser transmits the “user-related” information back to our site. Thanks to cookies, our site knows who you are and offers you the setting you are used to. In some browsers each cookie has its own file, in others such as Firefox all cookies are stored in a single file.
There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie is to be evaluated individually, as each cookie stores different data. The expiry time of a cookie also varies from a few minutes to a few years. Cookies are not software programmes and do not contain viruses, Trojans or other “pests”. Cookies also cannot access information on your PC.
For example, this is what cookie data can look like:
Name: _ga
Value: GA1.2.1326744211.152122396023-9
Purpose:Differentiation of website visitors
Expiry Date: After 2 years
A browser should be able to support these minimum sizes:
* At least 4096 bytes per cookie
* At least 50 cookies per domain
* At least 3000 cookies in total
What are the different types of cookies?
The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.
We can distinguish between 4 types of cookies:
Essential cookies
These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user places a product in the shopping basket, then continues surfing on other pages and only later goes to the checkout. These cookies do not delete the shopping cart even if the user closes his browser window.
Purpose cookies
These cookies collect information about user behaviour and whether the user receives any error messages. In addition, these cookies are also used to measure the loading time and the behaviour of the website with different browsers.
Goal-oriented cookies
These cookies provide a better user experience. For example, locations entered, font sizes or form data are saved.
Advertising cookies
These cookies are also called targeting cookies. They are used to provide the user with individually adapted advertising. This can be very practical, but also very annoying.
Usually, when you visit a website for the first time, you are asked which of these types of cookies you would like to allow. And of course, this decision is also stored in a cookie.
If you want to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.
Purpose of processing via cookies
The purpose ultimately depends on the cookie in question. More details can be found below or from the manufacturer of the software that sets the cookie.
What data is processed?
Cookies are small helpers for many different tasks. Unfortunately, it is not possible to generalise about what data is stored in cookies, but we will inform you about the data processed or stored in the following privacy policy.
Storage duration of cookies
The storage period depends on the respective cookie and is specified further below. Some cookies are deleted after less than an hour, others can remain stored on a computer for several years.
You can also influence the storage period yourself. You can delete all cookies manually at any time via your browser (see also “Right to object” below). Furthermore, cookies that are based on consent will be deleted at the latest after revocation of your consent, whereby the legality of the storage remains unaffected until then.
Right of objection – how can I delete cookies?
You decide how and whether you want to use cookies. Regardless of which service or website the cookies originate from, you always have the option of deleting, deactivating or only partially permitting cookies. For example, you can block third-party cookies but allow all other cookies.
If you want to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:
Chrome: Delete, activate and manage cookies in Chrome
Safari: Managing Cookies and Website Data with Safari
Firefox: Delete cookies to remove data that websites have placed on your computer.
Internet Explorer: Delete and manage cookies
Microsoft Edge: Delete and manage cookies
If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. In this way, you can decide for each individual cookie whether you allow the cookie or not. The procedure varies depending on the browser. The best way is to search for the instructions in Google using the search term “delete cookies Chrome” or “deactivate cookies Chrome” in the case of a Chrome browser.
Legal basis
The so-called “Cookie Guidelines” have been in place since 2009. These state that the storage of cookies requires your consent (Article 6 para. 1 lit. a DSGVO). Within the EU countries, however, there are still very different reactions to these directives. In Austria, however, this directive was implemented in § 96 para. 3 of the Telecommunications Act (TKG). In Germany, the Cookie Directive has not been implemented as national law. Instead, this directive was largely implemented in § 15 para.3 of the Telemedia Act (TMG).
For cookies that are absolutely necessary, even if there is no consent, there are legitimate interests (Article 6 para. 1 lit. f DSGVO), which in most cases are of an economic nature. We want to provide visitors to the website with a pleasant user experience and for this purpose certain cookies are often absolutely necessary.
Where cookies are used that are not strictly necessary, this is only done with your consent. The legal basis in this respect is Art. 6 para. 1 lit. a DSGVO.
In the following sections, you will be informed in more detail about the use of cookies, insofar as the software used uses cookies.
We always try to make our privacy policy as clear and understandable as possible. However, this is not always easy, especially when it comes to technical and legal topics. It often makes sense to use legal terms (such as personal data) or certain technical terms (such as cookies, IP address).
However, we do not want to use these without explanation. Below you will now find an alphabetical list of important terms used that we may not have sufficiently addressed in the previous privacy statement. If these terms have been taken from the GDPR and are definitions, we will also quote the GDPR texts here and add our own explanations if necessary.
Definition under Article 4 of the GDPR
For the purposes of this Regulation:
“consent” of the data subject means any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to personal data relating to him or her being processed;
Explanation: As a rule, such consent is given on websites via a cookie consent tool. You are probably familiar with this. Whenever you visit a website for the first time, you are usually asked via a banner whether you agree or consent to the data processing. In most cases, you can also make individual settings and thus decide for yourself which data processing you allow and which you do not. If you do not consent, no personal data of yours may be processed. In principle, consent can of course also be given in writing, i.e. not via a tool.
Definition under Article 4 of the GDPR
For the purposes of this Regulation, the term:
“personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Explanation: Personal data is therefore all data that can identify you as a person. This is usually data such as:
Name
Address
E-mail address
Postal address
Telephone number
Date of birth
Identification numbers such as national insurance number, tax identification number, identity card number or matriculation number.
Bank data such as account number, credit information, account balances, etc.
According to the European Court of Justice (ECJ), your IP address is also personal data. IT experts can use your IP address to determine at least the approximate location of your device and subsequently you as the connection owner. Therefore, the storage of an IP address also requires a legal basis within the meaning of the GDPR. There are also so-called “special categories” of personal data that also require special protection. These include:
racial and ethnic origin
political opinions
religious or ideological convictions
trade union membership
genetic data such as data taken from blood or saliva samples
biometric data (which is information on mental, physical or behavioural characteristics that can identify an individual).
health data
data on sexual orientation or sexual life
Definition under Article 4 of the GDPR
For the purposes of this Regulation, the term:
“profiling” means any automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or change of location;
Explanation: Profiling involves gathering various pieces of information about an individual in order to learn more about that individual. In the web sector, profiling is often used for advertising purposes or for credit checks. Web or advertising analysis programmes, for example, collect data about your behaviour and interests on a website. This results in a special user profile that can be used to target advertising to a specific group.
All texts are protected by copyright.
Source: Created with the data protection generator from AdSimple
Copyright © 2022 | Website made by Boostly 
