Data privacy statement and consent to the use of data
for the websites and online shop of Salzwelten GmbH, company registration number 55025w, Salzbergstraße 21, 4830 Hallstatt
The protection of your privacy is important to us. Salzwelten GmbH will strictly abide by the statutory data protection provisions when processing your personal details. We have also taken technical and organisational measures to protect your details against loss, manipulation or unauthorised access.
The data privacy statement below applies to all use of the websites of Salzwelten and the online shop at www.salzwelten.at. In this we provide information for you about the most important aspects of the processing of your personal data.
2. Responsible body and contact
The body responsible for processing your personal details is Salzwelten GmbH, company registration number 55025w, Salzbergstraße 21, 4830 Hallstatt.
If you have questions about the processing of your personal data or data protection, please contact firstname.lastname@example.org or send us your query by post.
3. Collection, processing and use of your personal data and the legal bases
3.1. We will process the following personal data:
When you visit our websites, the following personal data are processed: your IP address, login details, location details and information about your operating system or browser. We also store details of access to our websites in server logfiles, such as the name of the file requested, date and time of access, duration of the visit, data volume transferred and the requesting provider. The data is collected using various technologies, and mainly by means of cookies (see Point 7).
If you register on our websites, we will process the personal data you voluntarily provide yourself during registration.
We will process the personal data stated above on the basis of our overriding legitimate interest (Art. 6 Para. 1 (f) GDPR), which consists in achieving the purposes stated in 4.1. Such processing can be necessary in respect of entering into a contract or for the performance of a contract (Art. 6 Para. 1 (b) GDPR).
When you contact us via the contact form on our website or by email, we will process your personal data which you voluntarily provide to us in the context of contacting us. The data that we will collect is evident from the respective input forms. This can include in particular your name, your email address, your phone number and your postal address.
We will process the personal data stated above on the basis of our overriding legitimate interest (Art. 6 Para. 1 (f) GDPR), which consists in achieving the purposes stated in 4.2. Such processing can be necessary in respect of entering into a contract or for the performance of a contract (Art. 6 Para. 1 (b) GDPR).
Online shop and online ticket shop
When you complete an order in our online shop, we will process the personal data which you voluntarily provide to us in the context of ordering in the online shop. This includes in particular your name, your email address, your phone number, your invoicing and delivery address and your payment information.
When you order an online ticket in our online ticket shop, we will process the personal data which you voluntarily provide to us in the context of ordering in the online ticket shop. This includes in particular your email address and phone number, and your payment information.
We will process the personal data stated above on the basis of our overriding legitimate interest (Art. 6 Para. 1 (f) GDPR), which consists in achieving the purposes stated in 4.3. Such processing can be necessary in respect of entering into a contract or for the performance of a contract (Art. 6 Para. 1 (b) GDPR). Without processing your data in this way we cannot conclude the contract with you.
If you have agreed to receive our newsletter, we will use your email address and as applicable your name for sending you a monthly newsletter about tours, events and opening times, offers, discount promotions and competitions, as well as goods and services. You can register for our newsletter by ticking the checkbox provided for this below the contact form, or alternatively at the end of the order process in the online shop.
The content of the newsletter comprises information about tours, events and opening times, offers, discount promotions and competitions, as well as goods and services from Salzwelten GmbH and our parent company Salinen Austria AG (www.salinen.com).
You can withdraw your consent to our sending the newsletter at any time with future effect by contacting us using our contact form at www.salzwelten.at or emailing email@example.com. Every newsletter also contains a link for unsubscribing. If you withdraw your consent, this will lead to the deletion of the data we collected in connection with sending the newsletter.
We will process the personal data stated above exclusively on the basis of your consent (Art. 6 Para. 1 (a) GDPR).
3.2. There is no obligation to actually provide the details we ask you for on our websites and in our online shop. However, if you do not do so, it will not be possible for you to use all the functions of the website or, as the case may be, complete an order in the online shop.
4. Purpose of data processing
We will process your personal data for the following purposes:
- To be able to provide you with user-friendly websites and further develop and improve these websites;
- To be able to compile usage statistics;
- To be able to recognise, prevent and investigate attacks on our websites.
4.2. Contact form
- To be able to deal with your enquiry;
- To be able to contact you to initiate any possible business.
4.3 Online shop and online ticket shop
- To be able to provide you with a simple and convenient buying process;
- To be able to process and implement your order.
- To be able to provide you with information and offers.
5. Transmission of your personal data
For the purposes mentioned above, your personal data will be transmitted to the following recipients:
- IT service providers instructed by us;
- Tax advisers instructed by us for the fulfilment of our tax obligations;
- When you complete an order in our online shop, your payment details will be sent to the payment services provider you selected during the order process;
- Your dispatch details will be sent to the transport or mail order company instructed by us to deliver the goods you have ordered.
The personal data processed by us is stored on a server in Austria belonging to Salinen Austria AG.
Your data will be passed on to authorities if there should be a legal obligation for us to do so.
6. Storage period
6.1. We will only store your personal data for as long as we reasonably consider to be necessary in order to achieve the purposes stated in Point 4 and is permissible in accordance with the applicable law. In all events we will store your personal data for as long as there are statutory retention obligations or if the limitation periods for potential legal claims have not yet expired.
6.2. In detail we will store your personal data as follows:
We will store your data for a period of three months. Longer storage will take place insofar as this is necessary to investigate identified attacks on our websites.
If you register on our websites, in all events we will store your data as long as your account exists and after this for as long as the legal requirements stipulate.
We will store your data for six months in case you have further follow-up questions. Longer storage will take place only insofar as this is necessary to be able to deal with your enquiry.
Online shop and online ticket shop
If you abandon your order, the personal data you have provided during the purchase process will be deleted. If you conclude a contract, the personal data from the contractual relationship will be stored until the expiry of the retention period prescribed by tax law (currently seven years). Your name, your address, the goods you bought and the purchase date will be stored until the expiry of the product liability (currently ten years).
If you agree to us sending you our newsletter, in all events we will store your data for as long as you wish to receive the newsletter.
8. Web analysis
This website uses Google Analytics, a web analytics service provided by Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (www.google.de). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyse how you use the site. The information generated by the cookie about your use of this website will normally be transmitted to and stored by Google on a server in the USA. In connection with the transmission of data to the USA, the EU Commission has issued an adequacy decision (EU-US privacy shield) which establishes that the USA guarantees an appropriate level of data protection for the transfer of data from the EU to US companies.
If the IP anonymization on this website is enabled, your IP address will, however, be abridged by Google beforehand within the member states of the European Union or in other states signatory to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to Google for storage on a server in the USA and abridged there.
The IP anonymization on this website is enabled as Google Analytics has been extended to include the code “gat._anonymizelp();” to ensure that IP addresses are collected in anonymized form (known as IP masking) and to rule out any direct connection to particular persons.
On behalf of the operator of this website, Google will use this information for evaluating your use of the website, compiling reports on website activity and providing other services for website operators relating to website activity and internet usage. Google will not associate your IP address transmitted by your browser in the context of Google Analytics with any other data held by Google. You may refuse the storage of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website.
You can also prevent the acquisition of data relating to the use of the website (including your IP address) generated by the cookies and the processing of such data by Google by downloading and installing the browser plug-in from the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
As an alternative to the browser plug-in, and in particular for browsers on mobile end devices, you can also prevent data collection by Google Analytics by clicking on this link. This will place an opt-out cookie on your end device which will prevent the future collection of your data when you visit this website. The opt-out cookie will apply only in this browser and only for our website, and will be placed on your device. If you delete the cookies in your browser, you will need to place the opt-out cookie on your device again.
9. Use of social media plugins
We use social plugins from facebook.com and youtube.com on our website. These are embedded in our websites links to our channels on the respective social media platforms. If you click on a social plugin or leave a comment, the corresponding information is transmitted directly from your browser to the respective social media provider and stored there. If you have a user account on the respective social media platform and at the same time you are logged in, you can assign the call of our page to your account. Even if you are not logged in or do not have a user account, your browser sends information (such as your IP address, which web pages you visited) that is stored by the social media provider. For details on the handling of your personal data and your rights in this regard, please refer to the privacy statements of the respective social media providers. If you do not want these to be assigned to your respective user account via the data generated via our web pages, you must log out of the social media provider before visiting our web pages.
Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). An overview of the plugins of Facebook and their appearance can be found here: developers.facebook.com/docs/plugins
In this context, we also point out the general problem of social media plugins. If, as a website operator, no special precautions are taken, social media plugins automatically transfer personal data to the operator of the social media service. However, there is no legal basis for such a transfer of personal data (in particular the IP address) to the social media service.
10. Your rights
10.1. You have the right to request information about your personal data that we have stored. If your data should be incorrect, incomplete or not relevant, you have the right to the correction or deletion of this data. You also have the right to the restriction of the processing of your data and the right to data portability. If there are legitimate interests on your part, you further have a right to object to particular data processing.
Please contact us using the contact form or by email.
10.2 If you believe that your rights have been infringed during the processing of your data, as well as the rights mentioned above you have the right to complain to the competent supervisory authority. The Austrian data protection authority is the supervisory authority as defined in the GDPR, which is competent for reviewing any complaint submitted by you.