Data Privacy Policy

TSG Tourismus Salzburg GmbH is responsible for the processing of your personally identifiable data on our website.
Our corporate data may be found in the Imprint/Legal Notice.

Data Privacy Officer

Our data privacy officer may be contacted by email at privacy@salzburg.info.

Data Protection

We take the protection of your personally identifiable data very seriously. We process your personally identifiable data according to the provisions of current data privacy laws as well as those of the privacy policy at hand. In general, use of this website is possible without providing personally identifiable data. Insofar as personally identifiable data (such as name, postal or email addresses) is collected, this occurs, to the greatest extent possible, purely on a voluntary basis.
Unless otherwise stated within this data privacy policy, all processing of personally identifiable data occurs within the European Union.

Contracted Data Processing, Recipients

We process your personally identifiable data with the assistance of contractors who support us in providing our services (e.g. Web hosts, email newsletter services). These contractors are contractually obligated to strictly ensure the confidentiality of your personally identifiable data and may not use your personally identifiable data for any purposes other than providing our services. Your personally identifiable data will only be transmitted to industry-typical service providers, such as banks (should we need to transfer funds to you, for example), tax consultants (if you appear in our books), shipping providers (if you ask us to send something to you by post), etc.

Cookies

This website uses cookies. Cookies make websites more user-friendly and efficient. A cookie is a small text file that serves to store information. Upon visiting a website, the website may place a cookie on the computer of the website visitor. Should the user visit that same website at a later point in time, the website can read the data on the previously stored cookie and thus determine, for example, if the user has indeed visited the website before and what areas of the website were of particular interest to said user. For

Changing Your Cookie Settings

The user can determine how the web browser treats cookies as well as which cookies are allowed or blocked by changing the settings of their web browser. Precisely where those settings are located varies according to the web browser in question. Detailed information on the subject can be found under the “Help” menu of each browser. If you choose to restrict the function of cookies, under certain circumstances you will no longer be able to avail yourself of this website’s complete functionality.

Server Log Files

In order to monitor the technical functionality and improve the operational reliability of the Web server and subject to our overriding legitimate interest (technical security measures), our website processes the following personally identifiable data in a Server Log File:

• accessed content
• date and time of server request
• browser type/browser version
• operating system used
• IP address

This data is only stored temporarily and subsequently deleted.

Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, 4 Barrow St, D04 E5W5 Dublin, Ireland (“Google”) on the basis of your consent (analysis of website use). We have entered into a data processing contract with Google for them to do so. When you access our website, the software automatically establishes a connection to the servers of Google and data is transmitted to those Google servers, some of which are located in the USA. Google Analytics also uses cookies in order to store information about website users and to analyze use of the website. Our website uses the function "IP anonymization". By doing so, if you are located within a member state of the European Union or in a signatory state of the European Economic Area, your IP address will first be truncated and thus anonymized by Google. Only in exceptional cases will your full IP address first be transmitted to a Google server in the USA, where it is then truncated. According to Google, Google will use the data collected in order to analyze website use, compile reports about website activities and provide us with additional services related to website use and Internet use in general. Furthermore, Google may under certain circumstances transmit this information to third parties, insofar as this is legally permissible or if the third party is contracted to process data on behalf of Google. Detailed information about how user data is handled by Google Analytics may be found in the privacy policies of Google and Google Analytics.
Any transmission of data to the USA is subject to the adequacy clause as laid out by the European Commission in Art. 45 par. 1 of the GDPR. Within the scope of this, companies who have earned “Privacy Shield” certification are deemed to guarantee an adequate level of data privacy. Google is certified under the “Privacy Shield”.

Google Analytics Deactivation

• You can prevent the collection of your user data by Google Analytics in general and on all websites by downloading and installing the browser plug-in which is available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en
• You can prevent the collection of your user data by Google Analytics on this website only by clicking on the following link: Cookies-Settings

Facebook Pixel

This website uses Facebook Pixel, a Web analysis service provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”) on the legal foundation of your expressed consent (analysis of website use). Some of the data is transferred to the USA. Transmission of data to the USA is conducted in accordance with the guidelines of the Privacy Shield. When you access our website, software establishes a connection to the servers of Facebook and some data is transmitted to Facebook servers located in the USA. Facebook Pixel also uses cookies in order to store information about the website user and in order to analyze use of the website by website users. According to Facebook, Facebook will use the collected data in order to analyze use of website, compile reports about website activities as well as to provide other services associated with website use and use of the Internet in general. Furthermore, Facebook may transfer this information to third parties, insofar as this is legally prescribed or in so far as third parties are contracted by Facebook to process the data. More detailed information about how Facebook handles user data can be found in their own data privacy policy at Facebook.

• You can prevent collection of your user data on our website in general by changing your browser settings to “Do Not Track”. Our website notes the “Do Not Track” signal which your web browser sends to all websites.
• You can prevent the collection of your user data on our website by Facebook Pixel by clicking on the following link. This will install an opt-out cookie that will prevent your data being collected whenever you visit our website in future: Deactivate Facebook Pixel.

YouTube

This website utilizes YouTube in order to display videos. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you use YouTube, information about your use of this website may be transmitted to Google. If you open a webpage that is part of our Internet presence and which contains a YouTube video, your browser will establish a direct connection with the servers of Google. The video will then be transmitted directly from Google to your browser and integrated into the webpage. As a consequence, we have no influence on the scope of data collected by Google in this way. Our current state of knowledge indicates that Google collects at least the following data:

• Date and time of day of your visit to the webpage in question,
• Internet address or URL of the webpage you have accessed,
• IP address,
• Selected video and any quality-settings you have applied.

We have no influence on how data is further processed or used by Google and can therefore accept no responsibility for the aforementioned.
If you do not want Google to collect, process or use information about you by means of our Internet presence, you may choose to deactivate JavaScript in your browser settings. In that case, you may potentially be unable to play videos.
The purpose and extent of data collection, as well as how that data is processed and used by Google, and your associated rights and settings options in order to protect your personal privacy, can be found in Google’s own data privacy policy (https://policies.google.com/privacy?hl=en).
Google LLC is an active participant in the Privacy Shield agreement (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), thereby guaranteeing that it will, in compliance with the adequacy clause of the EU commission as stipulated in Art. 45 GDPR, comply with European data privacy laws and maintain an appropriate level of data privacy.
 

Whistleblower system

We use a whistleblower system, which can be accessed at https://whistleblowersoftware.com/secure/TSG, for the confidential or anonymous reporting of potentially unlawful behaviour. Processing of your contact details or additional information on the reports submitted is confidential. The legal basis for the processing is a legal obligation stipulated by the Austrian Whistleblower Protection Act (HSchG) (Art. 6 (1) c GDPR). This also applies to the processing of special category data or sensitive data in accordance with Art. 9 (2) g GDPR.

You have the option of reporting anonymously, in which case no personal data about you will be processed.

If you decide to report confidentially, your name, optional telephone number and email address will be stored and reported to the internal reporting office, which will process your case confidentially and will not pass on your data within the company.

You have the option of reporting verbally by recording an audio file, which will be uploaded to our servers. You can activate voice distortion to ensure maximum anonymity.

You also have the option of uploading documents to be attached to the case. These documents may contain personal data.

Data on reports received will be stored for a period of five years from the last data transmission, unless longer storage is required following the initiation of investigation proceedings.

Information is passed on to legal advisors commissioned by us who are subject to professional secrecy and, if necessary, to authorities for the investigation and initiation of proceedings. Data is also passed on to technical service providers who support us in providing the whistleblowing system. However, these service providers may not use the data for their own purposes and are bound by additional agreements to the strict provisions of the General Data Protection Regulation and the associated high security standards.

For the processing of information in accordance with the Whistleblower Protection Act, the otherwise existing rights of data subjects are restricted by law. This applies in particular to the right of access, the right to rectification, the right to erasure, the right to information, the right to restriction of processing, the right to objection and the right to be notified of a personal data breach.