Data Protection EU DATAP
The controller responsible for processing your personal data on our website is TSG Tourismus Salzburg GmbH. You can find our company details in the Legal Notice.
Data Protection Officer
You can contact our Data Protection Officer at privacy@salzburg.info
Data Protection
We take the protection of your personal data very seriously. We process your personal data in accordance with the applicable data protection laws and this Privacy Policy. As a rule, our website can be used without providing personal data. Where personal data (such as names, addresses or email addresses) is collected on our website, it is provided voluntarily wherever possible.
Processors and Recipients
We process your personal data with the assistance of processors that support us in providing our services (e.g. web hosting providers and email newsletter distribution services). These processors are required to protect your personal data strictly and may process it only for the purpose of providing our services. Your personal data is disclosed only to customary business service providers, such as banks (if we make transfers to you), tax advisers (if you appear in our accounting records), shipping providers (if items are sent to you), etc.
Contact and Enquiry Form
After you submit the contact form, the personal data you entered is processed for the purpose of handling your enquiry on the basis of the consent you gave by submitting the form. There is no statutory or contractual obligation to provide the personal data. Failure to provide it merely means that you cannot submit your enquiry and we cannot process it. You have the right to withdraw your consent at any time by written notice without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal. You have the right to object at any time, by written notice, to the use of your personal data for direct marketing purposes. If you object, your personal data will no longer be processed for direct marketing purposes.
Information on the Use of Cookies:
This website uses software to analyse use of the website.
Evaluating this data can provide valuable insights into users' needs. These insights help us to improve the quality of our services further.
So-called cookies are used in this context. Cookies are data stored in your browser that allow a visitor to be recognised on an anonymous basis. Cookies can generally be rejected or deleted through the appropriate browser settings. The statements made here in relation to cookies also apply in a similar way to other technical browser functions, such as Local
Storage and Session Storage.
Some cookies on this website are necessary for the website to function and are set on the basis of our legitimate interest in operating the website securely and efficiently. As a rule, no information is disclosed to third parties for their own business purposes in this process.
Cookies for analysis and profiling purposes are used only with your express consent.
To manage consent, we use CookieYes, a service provided by CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom. For technical reasons, the publicly visible IP address of your device is transmitted to CookieYes, and a strictly necessary cookie containing information about your consent is stored on your device. We have entered into a data processing agreement with CookieYes, under which CookieYes may not use the data for its own purposes. Although the United Kingdom is not a member of the European Union, the European Commission has determined by decision under Art. 45 GDPR that the United Kingdom provides a level of data protection comparable to that of the EU. Therefore, no separate legal basis is required for this transfer to a country outside the EU.
You may withdraw any consent you have given at any time HERE.
Server Log File
For the purpose of monitoring technical functionality and increasing the operational security of the web server, this website processes the following personal data in a server log file on the basis of the controller's overriding legitimate interest (technical security measures):
- content accessed
- date and time of the server request
- browser type / browser version
- operating system used
- IP address
This data is stored only temporarily and is then deleted.
Google Tag Manager
To manage and control individual elements on this website, we use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel.: +353 1 543 1000, Fax: +353 1 686 5660, Email: support@google.com ("Google"), which in turn transfers your data to the USA for further processing. The functions of Google Tag Manager are strictly necessary for our website. However, only your device's IP address is transmitted to Google for technical reasons. This is based on our legitimate interest in the secure, technically reliable and efficient management of the services on our website (Art. 6(1)(f) GDPR). We have entered into a data processing agreement with Google in this regard, which, among other things, requires Google not to use the transmitted data for its own purposes. Please note that the USA has a lower level of data protection than the EU and that US companies are required to disclose data to courts, law enforcement agencies, supervisory authorities or security bodies. Google has committed to complying with the principles of the EU-US Data Privacy Framework (DPF) in order to ensure a level of data protection comparable to that of the EU. Therefore, pursuant to Art. 45 GDPR, no additional legal basis is required for the transfer of data to the USA.
Google Analytics
For error analysis and statistical evaluation of our online services, and only with your consent, our website uses Google Analytics, an analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel.: +353 1 543 1000, Fax: +353 1 686 5660, Email: support@google.com ("Google"), which in turn transfers your data to the USA for further processing. Please note that the USA has a lower level of data protection than the EU and that US companies are required to disclose data to courts, law enforcement agencies, supervisory authorities or security bodies. Google has committed to complying with the principles of the EU-US Data Privacy Framework (DPF) in order to ensure a level of data protection comparable to that of the EU. Therefore, pursuant to Art. 45 GDPR, no additional legal basis is required for the transfer of data to the USA.
Google Maps
This website uses Google Maps to display interactive maps and create directions. Google Maps is a mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel.: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-at@google.com ("Google"). When you use Google Maps, information about your use of this website, including your IP address and the (starting) address entered in the route-planning function, may be transmitted to Google in the USA. When you access a page on our website that contains Google Maps, your browser establishes a direct connection to Google's servers. Google sends the map content directly to your browser, which embeds it in the website. We therefore have no influence over the scope of the data collected by Google in this manner. To the best of our knowledge, this includes at least the following data:
- date and time of the visit to the relevant web page,
- internet address or URL of the web page accessed,
- IP address,
- (starting) address entered for route planning.
The transfer of data is necessary to display the map correctly and takes place on the basis of your express consent. We have entered into a data processing agreement with Google, under which Google may not use the data for its own purposes. Google has committed to complying with the principles of the EU-US Data Privacy Framework (DPF) in order to ensure a level of data protection comparable to that of the EU. Therefore, pursuant to Art. 45 GDPR, no additional legal basis is required for the transfer of data to the USA.
YouTube
This website uses YouTube to display videos. YouTube is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. When you use YouTube, information about your use of this website may be transmitted to Google in the USA. When you access a page on our website that contains YouTube videos, your browser establishes a direct connection to Google's servers. Google sends the video directly to your browser, which embeds it in the website. We therefore have no influence over the scope of the data collected by Google in this manner. To the best of our knowledge, this includes at least the following data:
- date and time of the visit to the relevant web page,
- internet address or URL of the web page accessed,
- IP address,
- video accessed and the quality settings used.
We have no influence over Google's further processing and use of the data and therefore cannot accept responsibility for it. YouTube videos are activated only with your consent (Art. 6(1)(a) GDPR).
For information about the purpose and scope of data collection, Google's further processing and use of the data, and your related rights and privacy settings, please refer to Google's Privacy Policy (https://policies.google.com/privacy?hl=de).
Google LLC has committed to complying with the provisions of the EU-US Data Privacy Framework (DPF), which the European Commission has recognised as providing adequate protection for personal data. Therefore, pursuant to Art. 45 GDPR, no additional legal basis is required for the transfer of data to the USA.
Feratel WebTV
Some parts of our website include the Feratel WebTV service. This service displays current webcam footage or other tourist information. Technical data about your device and your IP address is also transmitted to feratel media technologies AG, Maria-Theresien-Strasse 8, 6020 Innsbruck. However, this takes place only with your consent pursuant to Art. 6(1)(a) GDPR. Further information is available at https://webtv.feratel.com/webtv/ds.jsp?lg=de
Privacy Information on Video Surveillance
Video surveillance with recording is used on the premises of TSG Tourismus Salzburg GmbH, which also include the premises of Salzburg Congress, Paracelsusbad and Kurhaus, to protect people and property and to investigate accidents, incidents and criminal offences. The system does not include technical person-recognition functionality.
Privacy information on video surveillance pursuant to Art. 13 GDPR
Whistleblowing System
For confidential or anonymous reporting of suspected unlawful conduct, we use a whistleblowing system available at https://whistleblowersoftware.com/secure/TSG. Any contact details or additional information you enter in connection with a report are processed confidentially. The legal basis for processing is a statutory obligation arising from the Austrian Whistleblower Protection Act (HinweisgeberInnenschutzgesetz, HSchG) (Art. 6(1)(c) GDPR). This also applies to the processing of special categories of personal data or sensitive data under Art. 9(2)(g) GDPR.
You may submit a report anonymously, in which case none of your personal data will be processed.
If you choose to submit a confidential report, your name and optional telephone number and email address will be stored and communicated to the internal reporting office, which will handle your case confidentially and will not disclose your data within the company.
You may submit a report orally by recording an audio file, which will be uploaded to our servers. You can enable voice distortion to ensure the highest possible degree of anonymity.
You may also upload documents to be attached to the case. These documents may contain personal data.
Data relating to reports received is retained for five years from the most recent transfer of data, unless a longer retention period is required after investigative proceedings have been initiated.
Information is disclosed to legal advisers engaged by us who are subject to professional secrecy and, where applicable, to authorities for the investigation and initiation of proceedings. Information is also disclosed to technical service providers that assist us in providing the whistleblowing system. However, these providers may not use the data for their own purposes and are bound by additional agreements to the strict provisions of the General Data Protection Regulation and the associated high security standards.
For the processing of reports under the Austrian Whistleblower Protection Act, the data subject rights that otherwise apply are restricted by law. This applies in particular to the right of access, the right to rectification, the right to erasure, the right to information, the right to restriction of processing, the right to object and the right to notification of a personal data breach.
Your Rights
You have the right of access to, rectification and erasure of your personal data, as well as the right to restriction of its processing. Where the legal basis for processing your personal data is your consent or a contract concluded with you, you also have the right to data portability. You have the right to withdraw any consent you may have given to the processing of your personal data. Withdrawal does not affect the lawfulness of the processing of personal data carried out before the withdrawal. You have the right to object to the processing of your personal data for direct marketing purposes. If you object, your personal data will no longer be processed for direct marketing purposes. You also have the right to lodge a complaint with a supervisory authority. Please note that the rights listed here are restricted by law where reports are processed through the whistleblowing system.