Data protection
Privacy Policy
The TVB Tannheimer Tal operates a website to provide information about interesting aspects of the region. Additionally, various services are offered that you can utilize as needed.
In this context, we would like to inform you about the processing of your personal data in accordance with Article 13 of the DSGVO.
Data controller
Tourismusverband Tannheimer Tal
Vilsalpseestraße 1
6675 Tannheim
info@tannheimertal.com
Data Protection Officer
Pursuant to Article 37(1)(a) of the DSGVO, the controller is obligated to appoint a Data Protection Officer. Anton Greil has been appointed and can be reached at anton.greil(at)compliant-it.eu."
Representation and Secure Operation of the Website Purpose
Purpose
In order to display the website on the user's device and ensure secure and stable operation, personal data is processed.
Data Subjects
Website visitors
Categories of Data
General information such as the timestamp of the request Technical information such as IP address, requested page, HTTP status code, data transferred, referer URL, browser (language, version, operating system)
Legal Basis
Art 6(1)(f) DSGVO(legitimate interests: secure operation, user information)
Art 6(1)(a) DSGVO (consent for transmission to third countries)
Recipients
Internal entities responsible for processing Data processors according to Art 28 DSGVO
- Hosting: Tourism Technology GmbH
- Hosting: Regauer GmbH
Other data providers for displaying information
- Weather report: wetter.at
- Webcams: feratel
- Snow report: eberl-online.de
- Cross-country skiing report: tourinfra.com
- Services: tourdata.at
- Videos: youtube.com (third country)
Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or as part of administrative proceedings
Law enforcement authorities as part of legal obligations
Transfer to Third Countries
Generally, no transfer to third countries
Exception:
- Consent provided
Participants are located in third countries
Retention Period
Protocol/log data (e.g., timestamp, duration, participants): no storage
Provision
Failure to provide data will result in the inability to process.
ReCaptcha
Purpose
The processing is intended to verify whether the data input is done by a human or an automated program. Our web offerings are thus protected against abusive automated espionage and spam.
Google ReCaptcha is exclusively used on pages where website visitors can enter data (contact form https://www.tannheimertal.com/service/gaesteservice/kontakt, brochure order https://www.tannheimertal.com/prospekte, photo competition https://www.tannheimertal.com/fotowettbewerb).
Affected Parties
Website visitors
Data Categories
Technical information such as webpage, IP address, referrer URL, device settings (browser, language, location), dwell time, mouse movements, keyboard strokes, screen/window resolution, time zone, browser plugins, cookie, fingerprint.
Legal Basis
Art 6 Para 1 lit f DSGVO (legitimate interests: secure operation, protection against abuse and incorrect inputs).
Recipients
Data processors according to Art 28 DSGVO:
Google LLC Legally required recipients (e.g. supervisory and regulatory authorities) Courts, legal representatives for the enforcement of rights or defense against claims or within the scope of official procedures Law enforcement authorities within the scope of obligations to cooperate
Transfer to Third Countries
Data may be transferred to servers of Google LLC in the USA; otherwise, transmission to third countries generally does not occur. To ensure an adequate level of data protection, Google LLC has submitted to the Data Privacy Framework. (https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active)
Storage Duration
Protocol/log data (e.g. time, duration, participant): no storage
Provision
If not provided, the processing cannot be used.
Online shop
Purpose
Sale of cards and books
Catalog request
Concerned parties
Prospective customers, buyers
Categories of data
Contact information such as
Mandatory: Salutation, Name, Address
Optional: Title, Email
Order information such as
Mandatory: Order (quantity, title), Billing method
Legal basis Art 6 Para 1 lit b DSGVO (Contractual performance)
Recipients
Internal departments involved in processing
Data processors under Art 28 DSGVO
Hosting:
- NumBirds CRM GmbH
- Regauer GmbH
Legally required recipients (e.g., supervisory and regulatory authorities) Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures Law enforcement authorities in compliance with legal obligations
Transfer to third countries
Generally, no transfer to third countries
Exception: Participants are located in third countries
Retention period
Content data: Invoices: 7 years according to § 132 BAO Remaining content data: 1 year
Protocol/log data (e.g., time, duration, participants): 7 days
Provision
Failure to provide it will result in the processing not being usable.
Booking via HRS
Purpose
Ability to reserve and book accommodations
Concerned parties
Hosts, booking customers, offer customers, prospects
Categories of data
First name, last name, address, state, phone number, email address, date of birth, booking information (arrival, departure, preferences, etc.), hosts, payment information, other data disclosed by the data subject Accommodation master data (name, street, postal code, city, country, email address, phone number, fax, website, host image) Booking customer (name, street, postal code, city, country, email address, phone number, credit card data, booking history, reviews, IP address) Offer customer (name, street, postal code, city, country, email address, phone number, IP address)
Legal basis
Art 6 Para 1 lit b DSGVO(Contractual performance, Contract initiation)
Recipients
Internal departments involved in processing (IT staff)
Data processors under Art 28 DSGVO for hosting:
HRS Destination Solutions Austria GmbH
Atrium Amras, Grabenweg 58, 6020 Innsbruck
Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures
Law enforcement authorities in compliance with legal obligations
Transfer to third countries
Generally, no transfer to third countries
Exception: Participants are located in third countries
Retention period
Content data (e.g., messages): 7 years according to § 132 BAO
Protocol/log data (e.g., time, duration, participants): 7 days
Provision
Failure to provide it will result in the processing not being usable.
Newsletter
Purpose
Advertisement for own products and services via email
Concerned parties
Prospects, newsletter subscribers
Categories of data
General information such as Contact and registration information like salutation, name, email address, country Optional: Address, title, interests
Legal basis
Art 6 Para 1 lit a DSGVO (Consent)
Recipients
Internal departments involved in processing Data processors under Art 28 GDPR
- NumBirds CRM GmbH
Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures Law enforcement authorities in compliance with legal obligations
Transfer to third countries
Generally, no transfer to third countries
Exception: Participants are located in third countries
Retention period
User data like name, email address, interests With consent: Until revoked
Protocol/log data (e.g., time, duration, participants): 7 days
Provision
Failure to provide it will result in the processing not being usable.
Analysis
Purpose
Analysis of website usage
Affected parties
Website visitors
Categories of data
Information such as truncated IP address, ID (unique identifier), geolocation (estimated location), accessed URL (internet address), visits, operating system, browser, screen resolution, duration of visit, number of actions performed, first visit/returning visit
Legal basis
Art 6 Para 1 lit a DSGVO (Consent via cookie banner)
Recipients
Internal departments involved in processing (IT staff, marketing)
Data processors under Art 28 DSGVO
- Regauer Media GmbH
- Tourismus Technologie GmbH
Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures
Law enforcement authorities in compliance with legal obligations
Transfer to third countries
Generally, no transfer to third countries
Retention period
Analysis data: Until consent is revoked
rotocol/log data (e.g., time, duration, participants): 7 days
Provision
Failure to provide has no impact on the use of the website.
Photo Contest
Purpose
Execution, organization of a photo contest
Concerned parties
Participants in the photo contest
Categories of data
Mandatory: Salutation, first name, last name, email address
Voluntary: Title, address
Legal basis
Art 6 Para 1 lit a DSGVO (Consent)
Recipients
Internal departments involved in processing
Data processors under Art 28 DSGVO
Hosting:
- Regauer Media GmbH
Transfer to third countries
Generally, no transfer to third countries Exception: Participants are located in third countries
Retention period
Until revoked
Provision
Failure to provide will result in the processing not being usable
Kontaktformular
Contact
Form Purpose Communication with the TVB (Inquiries, Feedback)
Concerned parties
Users of the contact form (Prospects, Guests)
Categories of data
Contact information such as
Mandatory: Salutation, Name, Email, Inquiry
Legal basis
Art 6 Para 1 lit b DSGVO (Contractual performance)
Recipients Internal departments involved in processing Data processors under Art 28 DSGVO
Hosting:
- Regauer Media GmbH
Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures
Law enforcement authorities in compliance with legal obligations
Transfer to third countries
Generally, no transfer to third countries
Exception: Participants are located in third countries
Retention period
Content data: Until revoked
Protocol/log data (e.g., time, duration, participants): 7 days
Provision
Failure to provide will result in the processing not being usable.
Registration for Bus Trips
Purpose
To provide guests with the opportunity to register for bus trips, personal data is collected.
Concerned parties
Individuals who book or wish to book a bus trip
Categories of data
Preferred date, number of persons, first name, last name, email address, phone number, departure date, booking date, IP address, UUID (unique ID/identifier), internal ID, status, timestamp
Legal basis
Art 6 Para 1 lit DSGVO (Contractual performance)
Recipients
Internal departments involved in processing
Service provider (independent data protection controller): Wötzer Reisen, Dorfstraße 13, 6673 Grän
Data processors under Art 28 DSGVO
- Hosting: Regauer GmbH
Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures
Law enforcement authorities in compliance with legal obligations
Transfer to third countries
Generally, no transfer to third countries
Retention period
Protocol/log data (e.g., time, duration, participants): No storage
Provision
Failure to provide will result in the processing not being usable
Cookie Overview
_pk_id.57.d3e1
Analysis purposes
_pk_ses.57.d3e1
Analysis purposes
cookieconsent_status
Technically necessary
cookieConsented-analysis
Technically necessary
cookieConsented-marketing
Technically necessary
cookieConsented-personalization
Technically necessary
Notice on Storage Duration
The storage durations mentioned in this privacy policy generally apply. Deviation is only possible under certain conditions, such as to fulfill a legal obligation or to assert, exercise, or defend legal claims.
Rights
Information, correction, deletion, restriction of processing, objection, data portability (Art 13 Para 2 lit b DSGVO)
Right to Complain
If you believe that the processing of your data violates applicable data protection law or otherwise infringes on your data protection rights, you have the right to lodge a complaint with a supervisory authority for data protection (in Austria: Austrian Data Protection Authority, dsb(at)dsb.gv.at) (Art 77 DSGVO).
Automated Decision-Making, Profiling
No automated decision-making No profilin