(valid from 01.01.2019)
1. Introduction, validity
i. Pyhrn-Priel Tourismus GmbH
FN 216132t, LG Steyr
Bahnhofstraße 2 , 4580 Windischgarsten
Contact information for inquiries / revocations: Fax: +43 (0) 7562 5266-10 / E-Mail: email@example.com
ii. Tourist Board Pyhrn-Priel Tourist Association
iSd Oö. Tourism law
Bahnhofstraße 2 , 4580 Windischgarsten
iii. Tourist Recreational Facilities Pyhrn-Priel GmbH
FN 237954h, LG Steyr
Hauptstraße 5, 4580 Windischgarsten
and any future other incorporated or acquired legal entities, the majority of which are owned by one or more of the aforementioned entities (TOURISM PYHRN-PRIEL).
1.2. Protection of personal data and compliance with relevant data protection legislation - at the time Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data, on the free movement of data and repealing Directive 95/46 / EC (General Data Protection Regulation - DSGVO) and the Data Protection Act 2018, BGBl I No. 165/1999 in the current version (DSG 2018) - have top priority at TOURISMUS PYHRN-PRIEL. The ADR below contains the information required by Articles 13 and 14 GDPR and provides an overview of which personal data of TOURISMUS PYHRN-PRIEL is processed for which purposes and how TOURISM PYHRN-PRIEL guarantees the protection of such data.
1.3. This ADE can be viewed, printed, downloaded and stored on a storage medium at any time under https://www.urlaubsregion-pyhrn-priel.at/datenschutz.html.
1.4. The terms used in this ADE are defined as defined in Art. 4 GDPR.
2nd person in charge, data protection officer
2.1. Person responsible within the meaning of Art 4 Z 7 DSGVO is the one in point 1.1. cited, contracting party, pre-contractual action or subject to the legal obligation to process data. The website www.urlaubsregion-pyhrn-priel.at (WEBSITE) is operated by Pyhrn-Priel Tourismus GmbH, so that it is responsible for all data processing relating to the WEBSITE. Should the responsibility for data processing between the under point 1.1. In case of doubt, Pyhrn-Priel Tourismus GmbH is responsible.
2.2. Data protection officer of the 1.1. mentioned facilities is:
KPMG Security Services GmbH
FN 356786k, HG Vienna Branch
office Linz, Kudlichstraße 41, 4020 Linz
3. Processing of personal data in general
3.1. TOURISM PYHRN-PRIEL (see Art. 4 no. 2 DSGVO) processes personal data (DATA) of natural persons (AFFECTED) within the meaning of Art. 4 no. 1 GDPR.
3.2. The term AFFECTS is gender neutral and includes all categories of data processing of data subjects. These include in particular members, prospects, customers and other contractual partners of TOURISMUS PYHRN-PRIEL (in particular suppliers, subcontractors and consultants) as well as their contact persons, employees, job applicants and users of the online offer (WEBSITE) of TOURISMUS PYHRN-PRIEL (see further Point 4.).
3.3. TOURISM PYHRN-PRIEL processes DATA in compliance with the data protection principles laid down in Art. 5 ff. DSGVO and only if at least one legality condition within the meaning of Art. 6 DSGVO is fulfilled, in particular if the data processing
- to carry out pre-contractual measures, which are required at the request of the person concerned or necessary for the performance of a contract with the person concerned (Art. 6 (b)),
- to fulfill a legal obligation governing TOURISM PYHRN-PRIEL (Art 6 (c)),
- to protect the overriding legitimate interests of TOURISM PYHRN-PRIEL or a third party (Art. 6 lit. f), or
- in the case of the consent of the person concerned for one or more specific purposes (Article 6 (a)).
3.4. TOURISM PYHRN-PRIEL also processes special categories of personal data within the meaning of Art. 9 (1) GDPR (SENSITIVE DATA). These are personal data showing racial and ethnic origin, political opinions, religious beliefs or beliefs, trade union membership, genetic and biometric data for the unambiguous identification of a natural person, health or sexual or sexual data Orientation of a natural person. SENSIBLE DATA is processed by TOURISMUS PYHRN-PRIEL only if a case of Art. 9 (2) GDPR exists, in particular if required by (labor and social) legal provisions (Art. 9 (2) (b, g, h and j) or if they are voluntarily declared or disclosed by the AFFECTED person (eg in the CVs of jobseekers) (Art. 9 (2) (a) and (e)).
3.5. Data may also be passed on by TOURISM PYHRN-PRIEL only to the extent permitted or required by applicable law, in particular on the basis of a condition referred to in Article 6 GDPR, in SENSITIVE DATA of a case of Article 9 (2) GDPR, or Processor according to Art. 28 DSGVO. Within the facilities of TOURISMUS PYHRN-PRIEL, the entities or staff members receive the data they need to fulfill their contractual, legal and legitimate interests. If required, customers' data are also passed on to the contracting partner of TOURISMUS PYHRN-PRIEL (such as subcontractors, hotels, banking institutes / payment service providers) for the purpose of concluding a contract with the customer. However, DATA will never be used for advertising or marketing purposes. passed.
3.6. An automated decision-making (profiling within the meaning of Art 4 Z 4 DSGVO) does not take place at TOURISMUS PYHRN-PRIEL.
4. Data processing in particular, data categories
4.1. Processing of data of the members of the association
TOURISM PYHRN-PRIEL processes on a legal basis (Article 6 (1) (c) GDPR) DATA of the members of the association and their administrators and, if necessary, persons (staff members) to be assigned to them.
When contacting TOURISMUS PYHRN-PRIEL, the details of the person affected (for example, contact, master and communication data) are processed for the purpose of processing the contact request and processing it in accordance with Article 6 (1) (b) GDPR. In particular, data from interested parties for offers by TOURISMUS PYHRN-PRIEL are only processed to the extent that this is necessary for the transmission of targeted offers to the interested party. To answer any inquiries and follow-up questions, the corresponding data will be stored for a period of six months after the contact is made and then deleted.
4.3. Processing (pre- / post-) contractual relations and communication
For the purpose of processing (pre- and / or) contractual relations, including communication, based on Article 6 (1) (b) GDPR (depending on the nature of the legal relationship, in particular contact, master, contract / order / invoice -, communication and payment data, if necessary also credit card data) of contracting parties as well as their contact persons for the duration according to item 14 processed. For bookings via the webshop see point 8.
4.4. Pyhrn-Priel Cards
TOURISM PYHRN-PRIEL processes on the basis of Article 6 para 1 lit b) DSGVO the inquire of the order of a Pyhrn-Priel-Card (Pyhrn-Priel-AktivCard, SeasonCard, BikeCard, FlyCard and SportarenaCard) required for the provision of services or card use as well as other data voluntarily announced by the aFFECTED person for performance optimization (eg contact, master and payment data as well as place / destination, date / period and scope of offered or used services depending on the type of card. Mandatory DATA will be marked accordingly during the ordering process.
4.5. direct mail
If TOURISM PYHRN-PRIEL receives the e-mail address of AFFECTED in connection with a sale or service, TOURISM PYHRN-PRIEL is entitled, by reason of its legitimate interest, in accordance with Art. 6 (1) (f) GDPR, by e-mail direct mail in the form of information and submissions for own or similar products and services. AFFECTED PARTIES have the right to object at any time (and in particular to the transmission of e-mails) to the processing of data concerning them for the purpose of such advertising (see point 16.8.).
4.6. Employees and job applicants
Furthermore, on a (contractual) and legal basis (Article 6 (1) (b) and (c) GDPR) data (in particular contact, parent, communication, personnel administration and salary accounting data) and on the basis of Article 9 (2) GDPR SENSITIVE DATA (eg social security number and sick leave) are also processed by employees and job applicants. If an online form is made available for applications, the DATA required for the assessment of the application will be marked accordingly. In addition, applicants can voluntarily provide additional information. For the purpose of establishing contact with customers and contractual partners, on the basis of the legitimate interest of TOURISMUS PYHRN-PRIEL in a smooth business process according to Art. 6 (1) (f) DSGVO and § 12 (2) 4 DSG 2018, professional contact details and portrait photos of employees on the WEBSITE to be published.
5.1. If necessary - i.e. If no other condition stated in Art. 6 DSGVO or in the case of SENSITIVE DATA no other case of Art. 9 (2) GDPR is fulfilled, TOURISM PYHRN-PRIEL will obtain the consent of the person concerned. If the PARTICIPANT of TOURISMUS PYHRN-PRIEL volunteers unsolicited data voluntarily (eg to optimize the performance of the Pyhrn-Priel-Cards or in applications and CVs), he grants his express consent to the processing of these DATA by TOURISM PYHRN- PRIEL according to this ADE. The AFFECTED has the right to revoke in whole or in part any consent granted at any time. The revocation must be sent to TOURISM PYHRN-PRIEL (contact details see point 1.1.). Although the revocation of the consent is not bound to any particular form, the declaration of revocation in written form (eg letter, e-mail or fax) is recommended for verification purposes.
5.2. The revocation of the consent of the PARTICIPANT in the processing of DATA leaves the processing of DATA on the basis of other conditions within the meaning of Article 6 GDPR or SENSITIVE DATA of another case of Article 9 (2) GDPR and the lawfulness of the consent to revocation processing is unaffected.
6. WEBSITE, collection of access data and logfiles
6.1. People can visit the WEBSITE without giving any personal information. TOURISM PYHRN-PRIEL (concretely responsible: Pyhrn-Priel Tourismus GmbH) collects and processes in the context of the operation of its WEBSITE only data of a technical nature about every access to the server on which this service is located (server log files), which are operated by TOURISMUS PYHRN- PRIEL using cookies (see point 7) can be processed automatically if the PARTICIPANT accesses or uses the WEBSITE, and which are considered personal or can be used to identify the person or personal data of the person (ACCESS DATA). These include, for example, the IP address, unique device identification, type and version of the operating system and the browser, name of the website accessed, file, date and time of retrieval, referrer URL (previously visited page) and the requesting provider.
6.2. TOURISM PYHRN-PRIEL does not process this ACCESS DATA for the purpose of identifying the person or other personal data of the AFFECTED, but solely for the purpose of providing, tailoring, adapting, improving, maintaining, optimizing and developing the WEBSITE (including functions, services , Modules and features thereof), for error detection and correction, for maintaining system security and for the purpose of internal statistical evaluation, without any inference being drawn to the person of the person concerned (see points 9 and 10 below). There is no profiling within the meaning of Art 4 Z 4 DSGVO.
7.1. Cookies are used on the TOURISM PYHRN-PRIEL WEBSITE. Cookies are files that are stored locally in the cache of the AFFECTIVE Internet browser and that are used in particular to make the WEBSITE more user-friendly, effective and secure (in particular by recognizing the accessing Internet browser) and to analyze (anonymously) the use of the Internet WEBSITE by the AFFECTED.
7.2. Every interested party has the option of deactivating and / or deleting cookies in the settings of his Internet browser, as well as how long they are stored and when they are deleted. The procedure for doing this depends on the Internet browser used by the PARTICIPANT. However, disabling cookies may result in certain features and / or contents of the WEBSITE not functioning or functioning as expected.
8.1. TOURISM PYHRN-PRIEL has a platform on its WEBSITE where interested parties can access Pyhrn-Priel information and records on offers in the Pyhrn-Priel region and book online excursions and / or stays in the region with external service providers. TOURISM PYHRN-PRIEL provides the platform only free of charge and without obligation and enters into no contractual relationship with the interested party. Any contracts are concluded exclusively between the prospective customer and the external service provider. TOURISM PYHRN-PRIEL therefore only collects DATA of the interested party as an AFFECTED on the basis of its legitimate interests within the meaning of Art 6 (1) (f) GDPR (in particular its interest in promoting and supporting regional companies) and forwards them to the external service provider, without that these are stored or otherwise processed by TOURISM PYHRN-PRIEL. The data collected in the course of such a booking of TOURISMUS PYHRN-PRIEL are in particular number of persons, first name and surname, address / address, country, date of birth, e-mail address, arrival / departure date, other information about the excursion / stay and payment information. Mandatory DATA will be marked accordingly in the course of the booking process. In any case, the execution of payment transactions is encrypted.
8.2. TOURISM PYHRN-PRIEL does not review and control the content and documents (posted to it by third parties) posted or placed by external service providers on the platform and does not assume any warranty, responsibility or liability for them in terms of content or data protection.
9. web analytics tools
a. Google Analytics
9a.1. Based on the legitimate interests of TOURISMUS PYHRN-PRIEL within the meaning of Art. 6 (1) (f) GDPR (in particular interest in the analysis, optimization and economic operation of its online services), the WEBSITE uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (GOOGLE), and other third-party web analytics tools, such as Webalizer or AW stats.
9a.3. GOOGLE is certified under the Privacy Shield Agreement, ensuring compliance with the European Data Protection Level (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
9a.4. On behalf of TOURISM PYHRN-PRIEL, GOOGLE will use this information to evaluate the use of the WEBSITE by the AFFECTED, to compile reports on the website activity for TOURISM PYHRN-PRIEL, and to provide other website and internet related services to TOURISMUS PYHRN-PRIEL to provide.
9a.5. Every interested party has the option of deactivating and / or deleting cookies in the settings of his Internet browser, as well as how long they are stored and when they are deleted. The procedure for doing this depends on the Internet browser used by the PARTICIPANT. However, the deactivation of cookies may result in certain features and / or contents of the WEBSITE not functioning or functioning as expected, and possibly not being able to fully utilize all functions of this WEBSITE.
9a.6. In addition, the PARTY may prevent the processing of the data generated by cookies and related to its use by deactivating the browser add-on available at http://tools.google.com/dlpage/gaoptout?hl=en Google Analytics downloads and installs, if it is available to its browser, or by clicking on the Google Analytics Disable link below to set an opt-out cookie that will enable the future collection of data when visiting the WEBSITE prevents:
Deactivate Google Analytics
Activate Google Analytics
9c.1. This website uses tracking provided by Adform A/S. Adform A/S uses a cookie, a text file that is stored anonymously on your computer, to display targeted ads through the Adform platform. The geographical origin, device type and pages accessed are recorded, but not any information that would enable identification of persons. The IDs are assigned to the individual topics anonymously. The data are processed on the basis of our legitimate interest (Article 6(1)(f) GDPR) in providing the best possible information based on the target group.
9c.2. You can deactivate this storage and display by clicking on the "opt-out" button at the following link, asserting your right of withdrawal: https://site.adform.com/de/privacy-center/platform/widerrufsrecht/. You can also delete the personal data controlled by Adform A/S relating to the Adform A/S advertising platform cookie identifier here: https://site.adform.com/privacy-center/platform-privacy/right-to-be-forgotten/.
10. Google Marketing Services, Remarketing
10.1. TOURISM PYHRN-PRIEL uses Google Remarketing on the basis of its legitimate interests within the meaning of Art. 6 (1) lit. f) of the GDPR (in particular interest in the analysis, optimization and economic operation of its online services). Google Remarketing is a Google advertising service that allows you to target advertisers to the site. With Google Remarketing, TOURISM PYHRN-PRIEL can present the APPLICANT on other websites within the Google Display Network (on Google itself, so-called "Google Ads" or other websites) on advertisements based on their interests. For this, the interaction of the AFFECTED on the WEBSITE is analyzed, e.g. which offers the aFFECTED was interested in, in order to be able to display targeted advertising to the PARTICIPANT even after visiting the WEBSITE on other websites.
10.2. For this purpose, when the WEBSITE on which Google Remarketing is active, (re) marketing tags ("web beacons") are integrated into the WEBSITE. With their help, in the internet browser of the AFFECTED cookies are set, which record the visits of the aFFECTED. In particular, the following data is recorded in this file: websites visited by the AFFECTED party, what content the interested party was interested in, which offers the aFFECTED user clicked on, technical information on the browser and operating system of the affected person, referring websites, visit time / length of stay, information on the use of the website Online offer / interaction with the WEBSITE, IP address of the AFFECTED. If the AFFECTIVE then visits other websites, they may be shown the ads they have selected according to their interests.
10.3. The data collected in this way are only used to uniquely identify a web browser and are processed as pseudonyms within the scope of Google Remarketing. The information collected by Google Remarketing will be transmitted to GOOGLE and stored on GOOGLE's servers in the United States.
10.4. AFFECTED PARTICIPANTS WHO WISH TO DISABLE PERSONALIZED ADVERTISING THROUGH GOOGLE REMARKETING MAY DO THIS BY HEREBY: http://www.google.com/ads/preferences. These settings are stored in the Google Account (if they have one) or in the internet browser of the person (if they do not have one). Alternatively, the PARTIES have the option to download and install a browser plug-in at the link below to opt-out of personalized advertising: https://www.google.com/settings/ads/plugin.
11. Integration of services and content of third parties, social plugins
11.1. The TOURISM PYHRN-PRIEL uses third-party plug-ins within its online offer on the basis of its legitimate interests within the meaning of Art 6 para 1 lit f) DSGVO in order to integrate their contents and services (such as videos). When PARTICIPANTS visit the WEBSITE, they connect to the third-party servers, displaying the plug-in. The content of the plugin is transmitted by the respective third party provider directly to the browser of the affected party and integrated into the page. By integrating the plug-ins, the third-party providers receive the information that the browser of the AFFECT has called the WEBSITE, even if it is not registered with the relevant third-party provider or is currently not logged in. The plugin transmits log data to the respective third-party servers. These log data are in particular: IP address, the address of the visited websites, which also contain plugin functions, browser type and settings, date and time of the request, the use of the plugin and cookies.
11.2. The processing of the data by the third party providers takes place within the framework of the respective data protection regulations of the third party providers. TOURISM As the operator of the WEBSITE, PYHRN-PRIEL has no knowledge of the content of the data transmitted to third parties and their processing. In any case, third parties may use so-called pixel tags (invisible graphics, also referred to as "web beacons") for statistical or marketing purposes. In addition, pseudonymous information may be stored in cookies on the device of the AFFECTED, including, but not limited to, technical information about the browser and operating system, referring web pages, visit time, and other information regarding the use of the TOURISM PYHRN-PRIEL online offer connected to other sources.
11.3. If the PARTICIPANT is registered with the third-party vendors and logged into third-party user accounts, the third-party vendor may personally associate user behavior with the AFFECTED. This can prevent the AFFECTED by logging out of his user account beforehand. If an AFFECTANT is not a member of the third-party provider, the third-party provider may still be aware of and store certain DATA. AFFECTED parties can completely prevent the loading of plug-ins with add-ons for their browser, e.g. with the script blocker "NoScript" (http://noscript.net/). Incidentally, the possibility of deactivating cookies is again referred to (see point 7.2.).
11.4. The following presentation provides an overview of the services and social plug-ins included in the WEBSITE and operated by the following third-party providers as well as links to their data protection statements, which contain further information on the processing of DATA and possible conflicts:
- the service "Google reCAPTCHA" operated by GOOGLE (see point 9.1.) to distinguish whether the entry is made by a natural person or abusive by automated and automated processing
- Maps of the service "Google Maps" operated by GOOGLE (see point 9.1.)
- Videos from the "YouTube" platform operated by GOOGLE (see section 9.1.)
11.5. Some third-party vendors are certified under the Privacy Shield Agreement, ensuring compliance with European privacy standards:
- GOOGLE: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
- FACEBOOK: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
- Twitter: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active
12. Brochures, newsletters and notifications
12.1. TOURISM PYHRN-PRIEL will send physical leaflets by post, e-mails and other electronic notices with promotional information, subject to direct mail as described in point 4.5. - only on the basis of the consent of the person concerned. The brochures and e-mail newsletters of TOURISMUS PYHRN-PRIEL contain information about their products, offers, promotions and their business. The PARTICIPANT agrees by ordering brochures or by subscribing to the e-mail newsletter with their delivery or receipt. For the order of brochures, the name and surname as well as an address that can be sent are required. To register for the e-mail newsletter, it is sufficient to enter an e-mail address.
12.2. The registration for the e-mail newsletter is carried out in a so-called double-opt-in procedure, i. the person concerned receives an e-mail after signing up for the e-mail newsletter, in which he is asked to confirm his registration. This confirmation is necessary so that nobody can register with a foreign e-mail address. The registrations for the e-mail newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes saving the login and confirmation times. Likewise, the changes in the data stored by the shipping service provider of the data subject are logged.
12.3. The e-mail newsletter is sent by the shipping service provider TTG Tourismus Technologie GmbH, Freistädter Straße 119, 4041 Linz. TOURISM PYHRN-PRIEL has entered into a contract processing contract with the shipping service provider under which it is obliged to process, protect and not disclose the data of the persons concerned only in accordance with Art. 28 DSGVO on behalf of TOURISMUS PYHRN-PRIEL ( see below point 13).
12.4. The e-mail addresses of the newsletter recipients are stored on the servers of the mailing service provider. The shipping service provider uses this information to send and evaluate the newsletters on behalf of the TOURISMUS PYHRN-PRIEL. Furthermore, the shipping service provider may, according to its own information, enter data in pseudonymous form, i. unassigned to an AFFECTED, to optimize or enhance one's own services, e.g. for the technical optimization of shipping and the presentation of newsletters or for statistical purposes in order to be able to determine from which countries the recipients are coming from. However, the shipping service provider does not use the data of the PARTICIPANTS to write them down or to pass them on to third parties.
12.5. The AFFECTEDs can unsubscribe from e-mail newsletters at any time, ie. revoke their consent. At the same time, their consent to their dispatch by the shipping service provider and the statistical analyzes expire. A separate revocation of the shipment by the shipping service provider or the statistical evaluation is unfortunately not possible. A link to terminate the e-mail newsletter can be found at the end of each e-mail. DATA PARTICIPANTS who have signed up for the email newsletter and have terminated this application will be deleted.
13. Data processing on behalf of TOURISM PYHRN-PRIEL
13.1. If DATA is processed on behalf of TOURISMUS PYHRN-PRIEL, they will only be used by contract processors within the meaning of Art 4 Z 8 GDPR, who offer reasonable guarantees that appropriate technical and organizational measures will be taken to ensure that the processing is carried out in accordance with existing legislation and the protection of the rights of the interested parties. To this end, TOURISM PYHRN-PRIEL concludes corresponding contracts with its processors, which comply with the requirements of Art. 28 DSGVO, and observes Art. 44 et seq. DSGVO for contract processors based in non-EU member states (third countries).
13.2. Disclosure, transfer or transfer of DATA to any person or entity who is not a TOURISMUS PYHRN-PRIEL processor, or is under the direct responsibility of TOURISMUS PYHRN-PRIEL or any of its processors for the processing of DATA (THIRD PARTIES), shall only take place in accordance with applicable law, in particular where there is a condition of legitimacy within the meaning of Art. 6 GDPR or an explicit request by the interested party under Art. 20 GDPR to transmit the data processed by TOURISMUS PYHRN-PRIEL directly to another person in charge.
13.3. The processing of DATA by THIRD PARTIES is not the subject of this ADE and undertakes TOURISM PYHRN-PRIEL has no warranty, responsibility or liability whatsoever.
14. Duration of data processing, storage and storage duration
14.1. TOURISM PYHRN-PRIEL does not process and store DATA on a permanent basis, but only in accordance with the deadlines set forth in the applicable legislation, but at least for as long as this is for the purpose of implementing pre-contractual measures and complete (pre- / post-) contractual processing Relationships between the PARTICIPANT and TOURISM PYHRN-PRIEL (including the expiration of any warranty, guarantee, expiry and limitation periods as well as the legal termination of any official or judicial proceedings). TOURISM PYHRN-PRIEL stores DATA in a form that allows the AFFECT to be identified only for as long as it is necessary for the purposes for which it is being processed.
14.2. The data underlying the Pyhrn-Priel-Cards are stored for the validity period of the respective card, otherwise for a maximum of 48 months and then deleted.
14.3. If and insofar as DATA is processed for the purpose of anonymous internal statistical analysis, it will only be stored until the end of the evaluation or analysis, but for a maximum of 24 months, and then deleted. Session cookies are stored only temporarily for the duration of the access or use by the aFFECTED person; persistent cookies until the viewer removes them from their browser.
14.4. Subject to the existence of other legality conditions within the meaning of Art. 6 DSGVO, stored data will be deleted immediately and not further processed as a result of a revocation of the consent pursuant to Art. 7 (3) GDPR or a legitimate objection pursuant to Art. 21 DSGVO.
15. Security of data processing
15.1. The TOURISM PYHRN-PRIEL, taking into account the criteria of Art. 32 DSGVO, shall take appropriate and appropriate technical and organizational measures (TOMs) in accordance with APPENDIX ./1 for the security of data and data processing and shall ensure that the DATA is protected against unauthorized or unlawful processing and Loss, damage and alteration are protected.
15.2. The TOM are subject to technical progress and further development. TOURISM PYHRN-PRIEL is therefore entitled, at its sole discretion, to modify, reduce or extend the existing TOM at any time, or to implement alternative, adequate TOMs.
15.3. In the event of a breach of data protection, TOURISMUS PYHRN-PRIEL will notify the AFFECTED immediately if the breach is likely to result in a high risk to the individual's rights and freedoms and if there is no exemption under Art. 34 (3) GDPR.
16. Rights of the AFFECTED
16.1. TOURISM PYHRN-PRIEL preserves the rights of the person concerned in accordance with the applicable legislation. According to the current legal situation, the person concerned has the rights stated in the GDPR and DSG 2018. The interested party may assert his rights by sending a specific request - recommended in writing (eg letter or e-mail) - to TOURISMUS PYHRN-PRIEL (for contact details see point 1.1.). If the applicable legislation provides for deadlines for the execution of the request, these will be met by TOURISMUS PYHRN-PRIEL.
16.2. Right to secrecy
TOURISM PYHRN-PRIEL preserves the fundamental right of the person concerned to privacy in accordance with § 1 Abs 1 DSG 2018 and the right to data secrecy in accordance with § 6 DSG 2018 and has also concluded with her staff corresponding secrecy agreements.
16.3. Right to information and information
Under the conditions set out in Articles 13 to 15 of the GDPR, the AFFECTIVE has the right to information and information about the processing of its data by TOURISM PYHRN-PRIEL and its rights.
16.4. Right to correction and completion
Under the conditions of Art. 16 DSGVO the person concerned has the right to correction of incorrect and completion of incomplete DATA concerning him.
16.5. Right to delete
Under the conditions of Article 17 GDPR, the AFFECTANT has the right to demand the immediate deletion of DATA concerning him.
16.6. Right to restriction of processing
Under the conditions of Art. 18 GDPR, the AFFECTANT has the right to demand the restriction of the processing of his DATA.
16.7. Right to data portability
Under the terms of Article 20 of the GDPR, the AFFECTANT has the right to obtain the DATA relating to him provided by TOURISM PYHRN-PRIEL in a structured, common and machine-readable format and to transmit that DATA to another person in charge or TOURISM PYHRN-PRIEL to require that the data processed by TOURISMUS PYHRN-PRIEL be transferred directly to another party, as far as technically feasible and provided that this does not affect the rights and freedoms of others.
16.8. right to
Under the conditions of Article 21 of the GDPR, the AFFECT has the right, at any time, to object to the processing of data relating to its specific situation, which is based on Article 6 (1) (e) or (f) GDPR , In the case of a legitimate objection, TOURISM PYHRN-PRIEL will no longer process the data subject of the objection affected by the opposition, unless it can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the person concerned or the processing serves the purpose Assertion, exercise or defense of legal claims. If the party concerned opposes processing for direct marketing purposes, its data will no longer be processed for that purpose.
16.9. Right not to be subjected to an automated decision
Under the conditions of Article 22 of the GDPR, the AFFECTED party has the right not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on it or, in a similar manner, significantly affects it.
Pursuant to Article 7 (3) of the GDPR, the interested party has the right to revoke his consent to the processing of data concerning him at any time, without prejudice to the lawfulness of the processing on the basis of the consent to revocation.
16.11. Right to appeal
Under the conditions of Art. 77 DSGVO in conjunction with § 24 DSG 2018, without prejudice to any other administrative or judicial remedy, the interested party has the right to complain to the relevant supervisory authority (data protection authority).
17.11. Right to a judicial remedy
Under the conditions of Art. 79 DSGVO in conjunction with § 27 DSG 2018, without prejudice to any other administrative or extrajudicial remedy, the interested party has the right to an effective legal remedy against a legally binding decision of the supervisory authority (right of appeal to the Federal Administrative Court).
17.1. Despite all precautions and measures taken by TOURISM PYHRN-PRIEL, it can not be ruled out that there will be data disclosure, loss, damage or alteration and that the affected person will suffer damage. TOURISM PYHRN-PRIEL assumes no responsibility or liability for any damages or consequential damages arising out of or in connection with data disclosure, loss, damage or alteration, unauthorized and / or manipulative access to or interference with data processing and transmission, and violations of data protection regulations ( DSGVO, DSG 2018), which were not unlawfully and culpably caused by her or their attributable persons. In particular, TOURISMUS PYHRN-PRIEL assumes no responsibility or liability for any damages incurred by the AFFECTED through the use of its DATA by GOOGLE or any other third party. The TOURISM PYHRN-PRIEL WEBSITE contains links to other websites the content of which TOURISMUS PYHRN-PRIEL has no influence. TOURISM PYHRN-PRIEL assumes no responsibility or liability for this content. The content and accuracy of the information provided there is the sole responsibility of the respective provider of the linked website.
17.2. If the AFFECTED consumer is within the meaning of the Consumer Protection Act (KSchG), TOURISM PYHRN-PRIEL shall be liable to the AFFECTED for damages - with the exception of personal injury as well as material and financial loss as a result of a breach of contractual primary obligations - only in the case of intent or gross negligence.
17.3. If the AFFECTANT is not a consumer within the meaning of the KSchG, TOURISM PYHRN-PRIEL shall be liable to the affected for damages - with the exception of personal injury - only in case of intent and gross negligence and the liability for mere financial losses, consequential damages, damages from claims of third parties and loss of profit is excluded.
17.4. The liability of TOURISMUS PYHRN-PRIEL is in any case limited to the amount of liability insurance available for the specific case of damage.
17.5. The foregoing exclusions or limitations of liability also apply to TOURISMUS PYHRN-PRIEL owners, bodies and their members, employees, agents and responsible assistants, as well as to contracted processors and to all persons recruited by them.
18. Applicable law, jurisdiction
This ADE is subject to substantive Austrian law, excluding the conflict of laws rules of international private law. For consumers within the meaning of the Consumer Protection Act, this choice of law applies only insofar as it does not deprive the protection granted by mandatory provisions of the law of the state in which the consumer has his habitual residence. For data protection disputes or disputes arising out of or in connection with this ADE, including disputes about their validity, the exclusive jurisdiction of the competent court at the headquarters of Pyhrn-Priel Tourismus GmbH is agreed, as far as the non-mandatory law (in particular the KSchG or the Regulation (EU) No 1215/2012 - EUTRO).
19. Cooperation with supervisory authorities
TOURISM PYHRN-PRIEL is committed to working with the relevant regulatory authorities to handle any complaint concerning the processing of the DATA that it can not resolve with the PARTY concerned.
20. ADE changes, severability clause
20.1. TOURISM PYHRN-PRIEL regularly reviews the adherence and timeliness of this ADE, and reserves the right to amend or supplement it at any time and without cause, including, but not limited to, compliance with applicable law and interest of the data subject (in particular the transparency of the processing concerning him). If the AFFILIATE's consent is required or contains elements of the ADE Contractual Relationships with AFFECTED PARTIES, the changes will only be made with the consent of the PARTICIPANT.
20.2. Modified or supplemented ADE are published on the WEBSITE of TOURISMUS PYHRN-PRIEL (see contact details point 1.1.) And can therefore be retrieved, printed and downloaded electronically at any time by the interested party.
20.3. Should individual provisions of this ADE be or become ineffective, this will not affect the validity of the remaining provisions.
21. Further information
THE CONFIDENCE OF THE AFFECTED IN TOURISM PYHRN-PRIEL AND ITS PERFORMANCE IS TOURISM PYHRN-PRIEL A SPECIAL concern. For questions on the processing and use of the data, TOURISM PYHRN-PRIEL is listed under point 1.1. contact information is available.
Attachments to this ADE form an integral part of it.