Data protection

Privacy Policy

The TVB Tannheimer Tal operates a website to provide information about interesting aspects of the region. Additionally, various services are offered that you can utilize as needed.
In this context, we would like to inform you about the processing of your personal data in accordance with Article 13 of the DSGVO.

 

Data controller

Tourismusverband Tannheimer Tal
Vilsalpseestraße 1
6675 Tannheim
info@tannheimertal.com

Data Protection Officer

Pursuant to Article 37(1)(a) of the DSGVO, the controller is obligated to appoint a Data Protection Officer. Anton Greil has been appointed and can be reached at anton.greil(at)compliant-it.eu."

 

 

 

Representation and Secure Operation of the Website Purpose

Purpose
In order to display the website on the user's device and ensure secure and stable operation, personal data is processed.

Data Subjects
Website visitors

Categories of Data
General information such as the timestamp of the request Technical information such as IP address, requested page, HTTP status code, data transferred, referer URL, browser (language, version, operating system)

Legal Basis
Art 6(1)(f) DSGVO(legitimate interests: secure operation, user information)
Art 6(1)(a) DSGVO (consent for transmission to third countries)

Recipients
Internal entities responsible for processing Data processors according to Art 28 DSGVO

  • Hosting: Tourism Technology GmbH
  • Hosting: Regauer GmbH

Other data providers for displaying information

  • Weather report: wetter.at
  • Webcams: feratel
  • Snow report: eberl-online.de
  • Cross-country skiing report: tourinfra.com
  • Services: tourdata.at
  • Videos: youtube.com (third country)

Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or as part of administrative proceedings
Law enforcement authorities as part of legal obligations

Transfer to Third Countries
Generally, no transfer to third countries
Exception:

  • Consent provided

Participants are located in third countries

Retention Period
Protocol/log data (e.g., timestamp, duration, participants): no storage

Provision
Failure to provide data will result in the inability to process.



ReCaptcha

Purpose

The processing is intended to verify whether the data input is done by a human or an automated program. Our web offerings are thus protected against abusive automated espionage and spam.

Google ReCaptcha is exclusively used on pages where website visitors can enter data (contact form https://www.tannheimertal.com/service/gaesteservice/kontakt, brochure order https://www.tannheimertal.com/prospekte, photo competition https://www.tannheimertal.com/fotowettbewerb).

Affected Parties

Website visitors

Data Categories

Technical information such as webpage, IP address, referrer URL, device settings (browser, language, location), dwell time, mouse movements, keyboard strokes, screen/window resolution, time zone, browser plugins, cookie, fingerprint.

Legal Basis

Art 6 Para 1 lit f DSGVO (legitimate interests: secure operation, protection against abuse and incorrect inputs).

Recipients

Data processors according to Art 28 DSGVO:

Google LLC Legally required recipients (e.g. supervisory and regulatory authorities) Courts, legal representatives for the enforcement of rights or defense against claims or within the scope of official procedures Law enforcement authorities within the scope of obligations to cooperate

Transfer to Third Countries

Data may be transferred to servers of Google LLC in the USA; otherwise, transmission to third countries generally does not occur. To ensure an adequate level of data protection, Google LLC has submitted to the Data Privacy Framework. (https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active)

Storage Duration

Protocol/log data (e.g. time, duration, participant): no storage

Provision

If not provided, the processing cannot be used.



Online shop

Purpose
Sale of cards and books
Catalog request

Concerned parties
Prospective customers, buyers

Categories of data
Contact information such as
Mandatory: Salutation, Name, Address
Optional: Title, Email

Order information such as
Mandatory: Order (quantity, title), Billing method

Legal basis Art 6 Para 1 lit b DSGVO (Contractual performance)

Recipients
Internal departments involved in processing

Data processors under Art 28 DSGVO
Hosting:

  • NumBirds CRM GmbH
  • Regauer GmbH

Legally required recipients (e.g., supervisory and regulatory authorities) Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures Law enforcement authorities in compliance with legal obligations

Transfer to third countries
Generally, no transfer to third countries
Exception: Participants are located in third countries

Retention period
Content data: Invoices: 7 years according to § 132 BAO Remaining content data: 1 year

Protocol/log data (e.g., time, duration, participants): 7 days

Provision
Failure to provide it will result in the processing not being usable.



Booking via HRS

Purpose
Ability to reserve and book accommodations

Concerned parties
Hosts, booking customers, offer customers, prospects

Categories of data
First name, last name, address, state, phone number, email address, date of birth, booking information (arrival, departure, preferences, etc.), hosts, payment information, other data disclosed by the data subject Accommodation master data (name, street, postal code, city, country, email address, phone number, fax, website, host image) Booking customer (name, street, postal code, city, country, email address, phone number, credit card data, booking history, reviews, IP address) Offer customer (name, street, postal code, city, country, email address, phone number, IP address)

Legal basis
Art 6 Para 1 lit b DSGVO(Contractual performance, Contract initiation)

Recipients
Internal departments involved in processing (IT staff)
Data processors under Art 28 DSGVO for hosting:
HRS Destination Solutions Austria GmbH
Atrium Amras, Grabenweg 58, 6020 Innsbruck
Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures
Law enforcement authorities in compliance with legal obligations

Transfer to third countries
Generally, no transfer to third countries
Exception: Participants are located in third countries

Retention period
Content data (e.g., messages): 7 years according to § 132 BAO
Protocol/log data (e.g., time, duration, participants): 7 days

Provision
Failure to provide it will result in the processing not being usable.



Newsletter

Purpose
Advertisement for own products and services via email

Concerned parties
Prospects, newsletter subscribers

Categories of data
General information such as Contact and registration information like salutation, name, email address, country Optional: Address, title, interests

Legal basis
Art 6 Para 1 lit a DSGVO (Consent)

Recipients
Internal departments involved in processing Data processors under Art 28 GDPR

  • NumBirds CRM GmbH

Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures Law enforcement authorities in compliance with legal obligations

Transfer to third countries
Generally, no transfer to third countries
Exception: Participants are located in third countries

Retention period
User data like name, email address, interests With consent: Until revoked
Protocol/log data (e.g., time, duration, participants): 7 days

Provision
Failure to provide it will result in the processing not being usable.



Analysis




Purpose
Analysis of website usage

Affected parties
Website visitors

Categories of data
Information such as truncated IP address, ID (unique identifier), geolocation (estimated location), accessed URL (internet address), visits, operating system, browser, screen resolution, duration of visit, number of actions performed, first visit/returning visit

Legal basis
Art 6 Para 1 lit a DSGVO (Consent via cookie banner)

Recipients
Internal departments involved in processing (IT staff, marketing)
Data processors under Art 28 DSGVO

  • Regauer Media GmbH
  • Tourismus Technologie GmbH

Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures
Law enforcement authorities in compliance with legal obligations

Transfer to third countries
Generally, no transfer to third countries

Retention period
Analysis data: Until consent is revoked
rotocol/log data (e.g., time, duration, participants): 7 days

Provision
Failure to provide has no impact on the use of the website.



Photo Contest

Purpose
Execution, organization of a photo contest

Concerned parties
Participants in the photo contest

Categories of data
Mandatory: Salutation, first name, last name, email address
Voluntary: Title, address

Legal basis
Art 6 Para 1 lit a DSGVO (Consent)

Recipients
Internal departments involved in processing
Data processors under Art 28 DSGVO

Hosting:

  • Regauer Media GmbH
     

Transfer to third countries
Generally, no transfer to third countries Exception: Participants are located in third countries

Retention period
Until revoked

Provision
Failure to provide will result in the processing not being usable



Kontaktformular

Contact
Form Purpose Communication with the TVB (Inquiries, Feedback)

Concerned parties
Users of the contact form (Prospects, Guests)

Categories of data
Contact information such as
Mandatory: Salutation, Name, Email, Inquiry

Legal basis
Art 6 Para 1 lit b DSGVO (Contractual performance)

Recipients Internal departments involved in processing Data processors under Art 28 DSGVO

Hosting:

  • Regauer Media GmbH
     

Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures
Law enforcement authorities in compliance with legal obligations

Transfer to third countries
Generally, no transfer to third countries
Exception: Participants are located in third countries

Retention period
Content data: Until revoked
Protocol/log data (e.g., time, duration, participants): 7 days

Provision
Failure to provide will result in the processing not being usable.



Registration for Bus Trips
 

Purpose
To provide guests with the opportunity to register for bus trips, personal data is collected.

Concerned parties
Individuals who book or wish to book a bus trip

Categories of data
Preferred date, number of persons, first name, last name, email address, phone number, departure date, booking date, IP address, UUID (unique ID/identifier), internal ID, status, timestamp

Legal basis
Art 6 Para 1 lit DSGVO (Contractual performance)

Recipients
Internal departments involved in processing
Service provider (independent data protection controller): Wötzer Reisen, Dorfstraße 13, 6673 Grän

Data processors under Art 28 DSGVO
 

  • Hosting: Regauer GmbH


Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures
Law enforcement authorities in compliance with legal obligations

Transfer to third countries
Generally, no transfer to third countries

Retention period
Protocol/log data (e.g., time, duration, participants): No storage

Provision
Failure to provide will result in the processing not being usable



Cookie Overview

_pk_id.57.d3e1
Analysis purposes

_pk_ses.57.d3e1
Analysis purposes

cookieconsent_status
Technically necessary

cookieConsented-analysis
Technically necessary

cookieConsented-marketing
Technically necessary

cookieConsented-personalization
Technically necessary

 

Notice on Storage Duration
The storage durations mentioned in this privacy policy generally apply. Deviation is only possible under certain conditions, such as to fulfill a legal obligation or to assert, exercise, or defend legal claims.

Rights
Information, correction, deletion, restriction of processing, objection, data portability (Art 13 Para 2 lit b DSGVO)

Right to Complain
If you believe that the processing of your data violates applicable data protection law or otherwise infringes on your data protection rights, you have the right to lodge a complaint with a supervisory authority for data protection (in Austria: Austrian Data Protection Authority, dsb(at)dsb.gv.at) (Art 77 DSGVO).

Automated Decision-Making, Profiling
No automated decision-making No profilin