Data protection

The TVB Tannheimer Tal operates a website to provide information about interesting aspects of the region. Additionally, various services are offered that you can utilize as needed.
In this context, we would like to inform you about the processing of your personal data in accordance with Article 13 of the DSGVO.

Tourismusverband Tannheimer Tal
Vilsalpseestraße 1
6675 Tannheim
info@tannheimertal.com

Pursuant to Article 37(1)(a) of the DSGVO, the controller is obligated to appoint a Data Protection Officer. Anton Greil has been appointed and can be reached at anton.greil(at)compliant-it.eu."

Representation and Secure Operation of the Website Purpose

Purpose
In order to display the website on the user's device and ensure secure and stable operation, personal data is processed.

Data Subjects
Website visitors

Categories of Data
General information such as the timestamp of the request Technical information such as IP address, requested page, HTTP status code, data transferred, referer URL, browser (language, version, operating system)

Legal Basis
Art 6(1)(f) DSGVO(legitimate interests: secure operation, user information)
Art 6(1)(a) DSGVO (consent for transmission to third countries)

Recipients
Internal entities responsible for processing Data processors according to Art 28 DSGVO

• Hosting: Tourism Technology GmbH
• Hosting: Regauer GmbH

Other data providers for displaying information

• Weather report: wetter.at
• Webcams: feratel
• Snow report: eberl-online.de
• Cross-country skiing report: tourinfra.com
• Services: tourdata.at
• Videos: youtube.com (third country)

Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or as part of administrative proceedings
Law enforcement authorities as part of legal obligations

Transfer to Third Countries
Generally, no transfer to third countries
Exception:

• Consent provided

Participants are located in third countries

Retention Period
Protocol/log data (e.g., timestamp, duration, participants): no storage

Provision
Failure to provide data will result in the inability to process.

Online shop

Purpose
Sale of cards and books
Catalog request

Concerned parties
Prospective customers, buyers

Categories of data
Contact information such as
Mandatory: Salutation, Name, Address
Optional: Title, Email

Order information such as
Mandatory: Order (quantity, title), Billing method

Legal basis Art 6 Para 1 lit b DSGVO (Contractual performance)

Recipients
Internal departments involved in processing

Data processors under Art 28 DSGVO
Hosting:

• NumBirds CRM GmbH
• Regauer GmbH

Legally required recipients (e.g., supervisory and regulatory authorities) Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures Law enforcement authorities in compliance with legal obligations

Transfer to third countries
Generally, no transfer to third countries
Exception: Participants are located in third countries

Retention period
Content data: Invoices: 7 years according to § 132 BAO Remaining content data: 1 year

Protocol/log data (e.g., time, duration, participants): 7 days

Provision
Failure to provide it will result in the processing not being usable.

Booking via HRS

Purpose
Ability to reserve and book accommodations

Concerned parties
Hosts, booking customers, offer customers, prospects

Categories of data
First name, last name, address, state, phone number, email address, date of birth, booking information (arrival, departure, preferences, etc.), hosts, payment information, other data disclosed by the data subject Accommodation master data (name, street, postal code, city, country, email address, phone number, fax, website, host image) Booking customer (name, street, postal code, city, country, email address, phone number, credit card data, booking history, reviews, IP address) Offer customer (name, street, postal code, city, country, email address, phone number, IP address)

Legal basis
Art 6 Para 1 lit b DSGVO(Contractual performance, Contract initiation)

Recipients
Internal departments involved in processing (IT staff)
Data processors under Art 28 DSGVO for hosting:
HRS Destination Solutions Austria GmbH
Atrium Amras, Grabenweg 58, 6020 Innsbruck
Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures
Law enforcement authorities in compliance with legal obligations

Transfer to third countries
Generally, no transfer to third countries
Exception: Participants are located in third countries

Retention period
Content data (e.g., messages): 7 years according to § 132 BAO
Protocol/log data (e.g., time, duration, participants): 7 days

Provision
Failure to provide it will result in the processing not being usable.

Newsletter

Purpose
Advertisement for own products and services via email

Concerned parties
Prospects, newsletter subscribers

Categories of data
General information such as Contact and registration information like salutation, name, email address, country Optional: Address, title, interests

Legal basis
Art 6 Para 1 lit a DSGVO (Consent)

Recipients
Internal departments involved in processing Data processors under Art 28 GDPR

• NumBirds CRM GmbH

Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures Law enforcement authorities in compliance with legal obligations

Transfer to third countries
Generally, no transfer to third countries
Exception: Participants are located in third countries

Retention period
User data like name, email address, interests With consent: Until revoked
Protocol/log data (e.g., time, duration, participants): 7 days

Provision
Failure to provide it will result in the processing not being usable.

Analysis

Purpose
Analysis of website usage

Affected parties
Website visitors

Categories of data
Information such as truncated IP address, ID (unique identifier), geolocation (estimated location), accessed URL (internet address), visits, operating system, browser, screen resolution, duration of visit, number of actions performed, first visit/returning visit

Legal basis
Art 6 Para 1 lit a DSGVO (Consent via cookie banner)

Recipients
Internal departments involved in processing (IT staff, marketing)
Data processors under Art 28 DSGVO

• Regauer Media GmbH
• Tourismus Technologie GmbH

Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures
Law enforcement authorities in compliance with legal obligations

Transfer to third countries
Generally, no transfer to third countries

Retention period
Analysis data: Until consent is revoked
rotocol/log data (e.g., time, duration, participants): 7 days

Provision
Failure to provide has no impact on the use of the website.

Advanced Web Analytics (with Cookies)

Processing (B)
Extended Web Analysis (with cookies)

Purpose
Analysis of website usage with Matomo to analyze and improve the use of the website more effectively. The more precise statistics obtained through cookies are used for targeted improvement of our offer.

Revocation
You can object to the analysis with cookies via the cookie banner at any time.

Affected
Website visitors

Data categories
Information such as timestamps, browser, operating system, device type, anonymized IP address, (estimated) geolocation, screen resolution, origin (e.g., Google), user ID, visited page, duration of visit, first visit

Legal
basis Art 6 Abs 1 lit a DSGVO (Consent)

Recipient
Internal entities responsible for processing (IT staff, marketing)

Data
processors according to Art 28 DSGVO Regauer Media GmbH Tourismus Technologie GmbH Legally required recipients (e.g., supervisory and control authorities) Courts, legal representatives for the enforcement of rights or defense against claims or in the context of administrative proceedings Law enforcement authorities within the scope of legal obligations

Transfer to third countries
Generally, no transfer to third countries

Storage duration Analysis data: please inquire with Regauer Protocol/log data (e.g., timestamp, duration, participants): 7 days

Photo Contest

Purpose
Execution, organization of a photo contest

Concerned parties
Participants in the photo contest

Categories of data
Mandatory: Salutation, first name, last name, email address
Voluntary: Title, address

Legal basis
Art 6 Para 1 lit a DSGVO (Consent)

Recipients
Internal departments involved in processing
Data processors under Art 28 DSGVO

Hosting:

• Regauer Media GmbH
   

Transfer to third countries
Generally, no transfer to third countries Exception: Participants are located in third countries

Retention period
Until revoked

Provision
Failure to provide will result in the processing not being usable

Kontaktformular

Contact
Form Purpose Communication with the TVB (Inquiries, Feedback)

Concerned parties
Users of the contact form (Prospects, Guests)

Categories of data
Contact information such as
Mandatory: Salutation, Name, Email, Inquiry

Legal basis
Art 6 Para 1 lit b DSGVO (Contractual performance)

Recipients Internal departments involved in processing Data processors under Art 28 DSGVO

Hosting:

• Regauer Media GmbH
   

Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures
Law enforcement authorities in compliance with legal obligations

Transfer to third countries
Generally, no transfer to third countries
Exception: Participants are located in third countries

Retention period
Content data: Until revoked
Protocol/log data (e.g., time, duration, participants): 7 days

Provision
Failure to provide will result in the processing not being usable.

Registration for Bus Trips
 

Purpose
To provide guests with the opportunity to register for bus trips, personal data is collected.

Concerned parties
Individuals who book or wish to book a bus trip

Categories of data
Preferred date, number of persons, first name, last name, email address, phone number, departure date, booking date, IP address, UUID (unique ID/identifier), internal ID, status, timestamp

Legal basis
Art 6 Para 1 lit DSGVO (Contractual performance)

Recipients
Internal departments involved in processing
Service provider (independent data protection controller): Wötzer Reisen, Dorfstraße 13, 6673 Grän

Data processors under Art 28 DSGVO
 

• Hosting: Regauer GmbH

Legally required recipients (e.g., supervisory and regulatory authorities)
Courts, legal representatives for the enforcement of rights or defense against claims, or within the scope of administrative procedures
Law enforcement authorities in compliance with legal obligations

Transfer to third countries
Generally, no transfer to third countries

Retention period
Protocol/log data (e.g., time, duration, participants): No storage

Provision
Failure to provide will result in the processing not being usable

Cookie Overview

_pk_id.57.d3e1
Analysis purposes

_pk_ses.57.d3e1
Analysis purposes

cookieconsent_status
Technically necessary

cookieConsented-analysis
Technically necessary

cookieConsented-marketing
Technically necessary

cookieConsented-personalization
Technically necessary

Notice on Storage Duration
The storage durations mentioned in this privacy policy generally apply. Deviation is only possible under certain conditions, such as to fulfill a legal obligation or to assert, exercise, or defend legal claims.

Rights
Information, correction, deletion, restriction of processing, objection, data portability (Art 13 Para 2 lit b DSGVO)

Right to Complain
If you believe that the processing of your data violates applicable data protection law or otherwise infringes on your data protection rights, you have the right to lodge a complaint with a supervisory authority for data protection (in Austria: Austrian Data Protection Authority, dsb(at)dsb.gv.at) (Art 77 DSGVO).

Automated Decision-Making, Profiling
No automated decision-making No profilin