Data protection

Who is responsible for data processing? Who can you contact if you have any questions about data processing and exercising your rights as a data subject? Responsible

for data processing
Wienerwald Tourismus GmbH
Managing Director: Marcus Linford, MA
Hauptplatz 11
3002 Purkersdorf, Austria
Tel +43(0)2231/621 76
office@wienerwald.info

What data is processed? Where does this data come from? 

We process personal data that we receive from you in the course of a business relationship or that you provide to us with your consent. This includes, among other things, newsletter subscriptions, brochure orders, online shop orders, booking enquiries, competitions, registration for the event database or POI database (users) and contact enquiries.

Personal data includes:
Private individuals: name, address, contact details (email, telephone), country
Employees of organisations and partner companies: in the area of business-to-business relationships, in addition to the above data, the company or organisation is also collected and stored.

In addition, the following data may also be included in the personal data in individual cases:
Image data in the context of competitions
Data from the fulfilment of our contractual obligations
Data for the fulfilment of pre-contractual measures

For what purposes is the data processed? On what legal basis is this processing based?

Your personal data will be processed exclusively in accordance with data protection regulations: to fulfil contractual obligations and, where applicable, to fulfil pre-contractual measures (Art. 6 (1) (b) GDPR). The processing of your personal data is necessary in order to be able to fulfil your enquiries and orders in specific cases.

The purposes of data processing are primarily based on the specific enquiry or order and include, among other things:

• Transmission of information materials (brochures, maps, etc.)
• Sending of items ordered in the web shop
• Notifying winners and sending prizes in the context of competitions
• Transmission of data to hosts/providers for the processing of bookings and non-binding enquiries

Within the scope of your consent (Art. 6 para. 1 lit. a GDPR)

If you have given us your consent to process your personal data, this data will only be processed in accordance with the purposes specified in this declaration of consent and to the extent agreed upon.

You may revoke your consent at any time with immediate effect. This does not affect the lawfulness of the processing carried out on the basis of your consent until its revocation. For example, you can unsubscribe from our free newsletter at any time. Either directly in the newsletter or by email at office@wienerwald.info. 

To safeguard our legitimate interests (Art. 6(1)(f) GDPR)

In selected individual cases, in connection with the safeguarding of the legitimate interests of Wienerwald Tourismus GmbH, your data may be stored and processed beyond the fulfilment of the business relationship. In this regard, however, you will always be informed of your opt-out option.

Who receives your data? To whom is your data transferred outside of Wienerwald Tourismus GmbH?

Within Wienerwald Tourismus GmbH, those departments and employees who need your personal data to fulfil pre-contractual measures or contractual obligations and to safeguard the legitimate interests of Wienerwald Tourismus GmbH will have access to it. 

Non-binding enquiries about offers and accommodation can be made via the Wienerwald Tourismus GmbH website. The contact details provided to us (name, address, email address and telephone number) and travel-specific data (arrival/departure date, number of persons, number of children and age of children) will be transmitted to the respective hosts/providers for the purpose of processing the non-binding enquiry. 

In addition, external employees and processors commissioned by us (in particular IT and back-office service providers and printing companies) will receive your personal data if they need it to perform their respective tasks. All processors are contractually obliged to process your personal data only within the scope of the service provision and to treat it confidentially. 

Except for the aforementioned processors, your data will not be passed on to third parties unless there is a legal obligation to do so.

How long will your data be stored and processed? 

We store and process your personal data for the duration of the customer relationship (including use for direct marketing purposes) or until the relevant consent is revoked. In addition, the storage period must comply with the statutory accounting retention periods, e.g. the seven-year retention obligation for accounting documents and records.

What data protection rights do you have as a data subject?

As a data subject, you have the following rights at any time:

• Information, correction, deletion or restriction of the processing of your stored data (after clear identification via a valid identity document).
• Objection to processing and use for direct marketing purposes.
• Data portability in accordance with the requirements of data protection law.

Right to confirmation

As a data subject, you have the right to request confirmation from us (after clear identification via a valid identity document) as to whether we process personal data relating to you. You can contact us at any time at office@wienerwald.info.

Right to information

As a data subject, you have the right to obtain from us (after clear identification via a valid identity document) information about the personal data stored about you and a copy of this information at any time free of charge. You can contact us at any time at office@wienerwald.info. Your right to information includes the following information:

• the purposes of processing,
• the categories of personal data processed by us,
• the recipients or categories of recipients to whom the personal data has been or will be disclosed,
• if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining this duration,
• the existence of your right to rectification or erasure of personal data concerning you or to restriction of processing by us as the controller or your right to object to such processing
• the existence of a right to lodge a complaint with the Austrian Data Protection Authority as the supervisory authority
• if your personal data is not collected from you as the data subject: all available information about the origin of this data

As part of the operation of our websites, we commission software service providers and agencies who may gain access to your personal data in the course of their activities. They have undertaken to comply with the applicable data protection regulations. You can request further information about the service providers we commission at office@wienerwald.info. Furthermore, as a data subject, you have the right to obtain information about whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you as the data subject have the right to obtain information about the appropriate safeguards in connection with the transfer. 

Right to rectification

As a data subject, you have the right to request that we (after clear identification via a valid ID document) immediately correct any inaccurate personal data concerning you. You can contact us at any time at office@wienerwald.info.

Right to erasure (right to be forgotten)

As a data subject, you have the right to request that we (after clear identification via a valid identity document) immediately erase personal data concerning you, provided that one of the following reasons applies and insofar as processing is not necessary:

• Your personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
• As a data subject, you withdraw your consent on which the processing was based in accordance with Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
• As a data subject, you object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or as a data subject, you object to the processing pursuant to Art. 21(2) GDPR.
• Your personal data has been processed unlawfully.
• The erasure of your personal data is necessary to comply with a legal obligation under Union law or the law of the Republic of Austria to which we, as the controller, are subject.

If one of the above reasons applies and you, as the data subject whose personal data is stored by Wienerwald Tourismus GmbH, wish to have this data deleted, you can contact us at any time at office@wienerwald.info. 

Right to restriction of processing

As a data subject affected by the processing of personal data, you have the right to request that we, as the controller (after clear identification via a valid identity document), restrict the processing if one of the following conditions is met:

• The accuracy of the personal data is disputed by you as the data subject for a period that allows us, as the controller, to verify the accuracy of your personal data.
• The processing is unlawful and you, as the data subject, refuse to have your personal data deleted and instead request the restriction of the use of your personal data.
• We, as the controller, no longer need your personal data for the purposes of processing, but you, as the data subject, need it to assert, exercise or defend legal claims.
• You, as the data subject, have objected to the processing pursuant to Art. 21(1) GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh those of the data subject.

If one of the above reasons applies and you, as the data subject whose personal data is stored by Wienerwald Tourismus GmbH, wish to restrict the processing of this data, you can contact us at any time at office@wienerwald.info. 

Your right to data portability

As a data subject affected by the processing of personal data, you have the right to receive the personal data concerning you, which you as the data subject have provided to us as the controller, in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and the processing is carried out using automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, as a data subject exercising your right to data portability pursuant to Art. 20(1) GDPR, you have the right to have your personal data transferred directly from us as the controller to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

To assert your right to data portability, you can contact us at any time at office@wienerwald.info.

Right to object

As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR. You can contact us at any time at office@wienerwald.info. Insofar as we process your personal data for direct marketing purposes, you as the data subject have the right to object at any time to the processing of personal data for such marketing purposes. 

Right to lodge a complaint

You can address your complaints to the Austrian Data Protection Authority at any time: https://www.dsb.gv.at

Are you obliged to provide data?

Your personal data is required in order to carry out the order you have requested (e.g. ordering items, ordering information material) and to fulfil the resulting contract or pre-contractual measures. If you do not wish to provide us with this data, we will unfortunately be unable to carry out the order. In any case, you are not obliged to give your consent to the processing of data that is not relevant to the fulfilment of the contract (e.g. when participating in a competition, you do not have to give your consent to receive the newsletter (your consent is optional).

Cookies, Google Analytics, Google reCaptcha and Google Fonts

General information: When you access this website, Wienerwald Tourismus GmbH stores information about your visit (date, time, pages viewed). This data is used exclusively for statistical purposes and is evaluated in anonymised form only. 

In detail:

Cookies

This website uses cookies. We use cookies to enable the website to function, to compile statistics and to tailor content to your interests. This data is only passed on in pseudonymised form. By clicking on "Allow cookies", you can continue to use our website to its full extent. With your consent, these cookies are also processed and used by third-party providers in the USA. The USA does not currently have an adequate level of data protection, and it cannot be ruled out that government security agencies may issue orders to third-party providers (Google and Meta Platforms, Inc.) to gain access to data for control and surveillance purposes. There are no effective legal remedies or legal protection options against this. Furthermore, the USA does not provide adequate guarantees for the protection of personal data. We only forward your IP address (in truncated form, so that no clear assignment is possible) and technical information such as browser, internet provider, end device and screen resolution to Google or Meta. Further details regarding cookies and their possible subsequent deactivation can be found under Website Use - Cookies.

Google Analytics

If you have given your consent, Google Analytics is used on this website. Wienerwald Tourismus GmbH uses Google Analytics to analyse website usage. The data obtained from this is used to optimise the website and advertising measures and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns. Further information on Google Analytics can be found on the Internet or at www.google.com/analytics. Further information on terms of use and data protection can be found at https://policies.google.com/?hl=de.

Google Analytics is a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google processes the data on website usage on our behalf and is contractually obliged to take measures to ensure the confidentiality of the processed data.

During your visit to the website, the following data, among other things, is recorded:

• The pages you visit, your "click path"
• Your behaviour on the pages (e.g. clicks, scrolling behaviour and length of stay)
• Your approximate location (country and city)
• Your IP address (in abbreviated form, so that no clear assignment is possible)
• Technical information such as browser, internet provider, device and screen resolution
• The source of your visit (i.e. which website or advertising medium brought you to us)
• The referrer URL (which website or advertising medium brought you to this website)

This data is transferred to a Google server in Europe and stored there.

Recipient
The recipient of the data is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as the data processor. Wienerwald Tourismus GmbH has concluded a data processing agreement with Google for this purpose. Google LLC, based in California, USA, and, where applicable, US authorities may access the data stored by Google.

Transfer to third countries
A transfer of data to the USA cannot be ruled out.

Storage period
Google Analytics stores cookies in your web browser for a period of 14 months from your last visit. These cookies contain a randomly generated user ID that can be used to recognise you on future visits to the website.

The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form for an indefinite period.

The legal basis and revocation option
for this data processing is your consent, Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by accessing the cookie settings mentioned above and changing your selection there.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout.

Google Analytics (with anonymisation function)
We have implemented IP address anonymisation from Google Analytics on this website. This function was developed by Google so that this website can comply with the applicable data protection regulations and recommendations of local data protection authorities if they prohibit the storage of the full IP address. The anonymisation or masking of the IP address takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before the data is stored or processed. For more information on IP anonymisation, please visit support.google.com/analytics/answer/2763052.

Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

Google Ads remarketing
We use the remarketing function within the Google Ads service. The remarketing function allows us to present users of our website with advertisements based on their interests on other websites within the Google advertising network (in Google Search or on YouTube, so-called "Google Ads" or on other websites). To do this, we analyse user interaction on our website, e.g. which offers the user was interested in, so that we can display targeted advertising to users on other sites even after they have visited our website. To do this, Google stores a number in the browsers of users who visit certain Google services or websites in the Google Display Network. This number, known as a "cookie", is used to record the visits of these users. This number is used to uniquely identify a web browser on a specific device and not to identify a person; personal data is not stored.

You can prevent participation in this tracking process in various ways:

a) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party advertisements;

b) by installing the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin

c) by deactivating interest-based ads from providers who are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies

d) by using the appropriate cookie settings (see above under "Cookies"). Please note that in this case you may not be able to use all the functions of this website to their full extent.

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at www.networkadvertising.org.

Google Ads Conversion
We use Google Ads Conversion to draw attention to our attractive offers on external websites with the help of advertising material (so-called Google Ads). We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

If you access our website via a Google ad, Google Ads will store a cookie on your device. These cookies usually expire after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (indicating that the user no longer wishes to be targeted) are usually stored as analysis values for this cookie.

These cookies enable Google to recognise your internet browser. If a user visits certain pages of an advertiser's website and the cookie stored on their computer has not yet expired, Google and the advertiser can recognise that the user has clicked on the ad and been redirected to that page. Each advertiser is assigned a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. These evaluations enable us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: By integrating Ads Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and store your IP address.

Google Analytics advertising features In addition to the
standard features, we also use the advanced features of Google Analytics on this website. The Google Analytics advertising features implemented on this website include:

Reports on impressions on the Google Display Network
Google Analytics reports on performance by demographic characteristics and interests
Integrated services for which data is collected for advertising purposes in Google Analytics, including the collection of data via advertising cookies and anonymous identifiers
For this purpose, in addition to the data collected by the Google Analytics analysis tool, additional data about accesses is collected via Google cookies for ad preferences and anonymous identifiers. We use this information to improve our web offerings.

You can prevent the use of Google Analytics advertising features in various ways:

a) by adjusting your browser software settings accordingly

b) via the Google ad settings at https://www.google.com/ads/preferences/?hl=de

c) by using the appropriate cookie settings (see above)

d) by deactivating them on the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

Please note that in this case you may not be able to use all the functions of this offer to their full extent.

Google reCaptcha
To protect your orders via the online form, this website uses the reCAPTCHA service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). The query serves to distinguish whether the input is made by a human or abusively by automated, machine processing. The query includes the transmission of the IP address and, if necessary, other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. By using reCaptcha, you agree that the recognition you provide will be used in the digitisation of old works. However, if IP anonymisation is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. These data are subject to the different data protection provisions of Google. Further information on Google's data protection guidelines can be found at: https://www.google.com/intl/de/policies/privacy/.

Google Fonts External fonts, Google
Fonts, are used on this website. Google Fonts is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). However, we have integrated the external fonts locally, i.e. on our web server. This means that there is no connection to the Google servers and therefore no data transfer to the USA.

YouTube Components from YouTube
are integrated into this website. YouTube is an internet video portal that allows video publishers to upload video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete films and television programmes, as well as music videos, trailers or videos created by users themselves, can be accessed via the internet portal.

YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time one of the individual pages of this website operated by the controller is accessed, on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be found at www.youtube.com/yt/about/de/abgerufen. As part of this technical process, YouTube and Google become aware of which specific subpage of our website is visited by the data subject.

If the data subject is logged in to YouTube at the same time, YouTube recognises which specific subpage of our website the data subject is visiting when they call up a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google receive information via the YouTube component that the data subject has visited our website whenever the data subject is logged into YouTube at the same time as visiting our website; this occurs regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before visiting our website.

The privacy policy published by YouTube, which is available at https://www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.

Adform
This website uses the online marketing tool Adform from Adform A/S Denmark. Adform uses cookies to display relevant ads to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Adform uses a cookie ID to track which ads are displayed in which browser and can thus prevent them from being displayed multiple times. In addition, Adform can use cookie IDs to track conversions related to ad requests. This is the case, for example, when a user sees an Adform ad and later visits the advertiser's website with the same browser and performs an action there. The information obtained in this way can be used by Niederösterreich-Werbung and its tourism industry partners for Adform ads. According to Adform, Adform cookies do not contain any personal information such as email addresses, names or addresses.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Adform server. By integrating the Adform cookie, Adform receives information that you have accessed the relevant part of our website or clicked on one of our advertisements.

In addition, the Adform cookies used enable us to understand whether you perform certain actions on our website after you have accessed or clicked on one of our display/video advertisements on another platform via Adform (conversion tracking). Adform uses this cookie to understand the content you have interacted with on our websites in order to send you targeted advertising at a later date.

Our website also uses cookies and products from Adform A/S (ad server, DSP and DMP) for target group-oriented advertising in joint processing within the meaning of Art. 26 GDPR with Österreich Werbung (www.austria.info). For this purpose, various parameters (pages visited, device type, geographical origin, last visited websites) are recorded and visitors are grouped into different segments. Statistical analyses are then used to find similar people in the global Adform cookie pool in order to target them with advertising for Austrian tourism offers. These "lookalikes" may be made available to our cooperation partner Österreich Werbung for Austrian tourism. Further information about Adform can be found at the following address: site.adform.com/privacy-centre/platform-privacy/product-and-services-privacy-policy/

To exercise your rights as a data subject in accordance with Articles 15–21 of the GDPR, you can contact us at office@wienerwald.info. You can also assert your claims against Österreich Werbung.

Austrian National Tourist Office
Vordere Zollamtsstraße 13, 1030 Vienna, Austria
Tel.: +43 1 588 66-0
Fax: +43 1 588 66-40
Email: datenschutz@austria.info

You will also find an opt-out option on this page. Data stored by Adform about you can be deleted at site.adform.com/privacy-center/platform-privacy/right-to-be-forgotten/.

DV360/CM360
This website uses the DV360 Floodlight tag to measure the effectiveness of our advertising campaigns, limit the frequency with which you see a particular ad, and only show you ads that are relevant to you and your interests. In particular, information about the advertisements you click on and your previous usage behaviour on third-party websites is collected and stored. The cookie ID records which advertisements are displayed in which browser and can thus prevent them from being displayed multiple times. In addition, Google can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Google ad and later visits our website with the same browser and makes a purchase there. The cookies do not contain any personal information such as email addresses, names or addresses.
You can manage and revoke the storage of cookies at any time by adjusting the settings in the consent management solution.  
For more information about Display & Video 360 by Google, please visit marketingplatform.google.com/about/display-video-360/ and support.google.com/displayvideo/answer/9059464, as well as Google's general privacy policy: policies.google.com/privacy;

Facebook Pixel and remarketing/retargeting
Based on your consent, our website uses the Facebook Pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Facebook"). This allows us to track the actions of users after they have been redirected to a provider website by clicking on a Facebook advertisement. This enables us to record the effectiveness of Facebook advertisements for statistical and market research purposes. We cannot view the personal data of individual users. However, the collected data is stored and processed by Facebook. Information controlled by Meta Platforms Ireland Limited is transferred or transmitted to the United States or other third countries for the purposes described in the policy, or stored and processed there.

Facebook may link the data to the data in your Facebook account and use it for its own advertising purposes in accordance with Facebook's data policy. Facebook Conversion Tracking also allows Facebook and its partners to show you advertisements on and outside of Facebook. A cookie is stored on your computer for this purpose. Only users over the age of 13 may give their permission.

Our pages also integrate remarketing tags from Facebook, which establish a direct connection between your browser and the Facebook server. Facebook can thus associate your visit to our pages with your user account. We and our tourism industry partners can use the information obtained in this way to display Facebook ads. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by Facebook. For more information, please refer to Facebook's privacy policy at www.facebook.com/about/privacy/.

Please click here to revoke your consent: https://www.facebook.com/ads/website_custom_audiences/ 

Thinglink We use Thinglink
plugins on our websites for the interactive display of photos. This is a service provided by ThingLink Oy, Business ID 2329185-9, Salomonkatu 17 A, 00100 Helsinki. We have no influence over what data such a plugin collects. Likewise, we have no influence over how the data is used by Thinglink. It can be assumed that at least the IP address and information about the end devices used are collected and used, and it cannot be ruled out that Thinglink may attempt to store cookies on the end devices used. This allows Thinglink to be informed about visits to certain pages on the internet. Users who are logged in to Thinglink at the same time can be identified by Thinglink. For information on the data collected and its use, please refer to Thinglink's privacy policy, which can be viewed at https://www.thinglink.com/terms.

Getsitecontrol
We use the services of the provider GetSiteControl (GetWebCraft Limited, Klimentos 41-42, Klimentos Tower, Flat/Office 25, 1061, Nicosia, Cyprus). GetSiteControl is a programme that displays pop-ups and overlay windows for information purposes and to improve user guidance on the website. The windows can be controlled according to certain rules (e.g. number of page visits). GetSiteControl sets cookies for this purpose. All information on data processing by GetWebCraft Limited can be found in the current privacy policy: https://getsitecontrol.com/privacy 

Goodguys AI Concierge "Lower Austria AI Guide" – Purpose of data processing
In order to provide you with a modern search and chat function on our website, we use the "AI Concierge" tool from Goodguys GmbH (Moeringgasse 20/1, Door 2, 1150 Vienna). 
When you access our chat function by clicking on the AI Concierge icon (if applicable), you will have access to a modern chat feature that answers your questions. No personal data is required from you. You remain anonymous. Your question remains in our chat. Just like in real life, we send the "AI Concierge" on a journey to get the answer for you. Of course, our concierge works with the utmost confidentiality. How does it work?
Our AI concierge sends the question to the servers of Goodguys GmbH (server location: Austria). The identity of the person who asked the question remains confidential, as this is irrelevant for answering it.
In order to deliver the answer to the question in the correct format and to the correct address (your device), the following information is transmitted to these servers:
• Timestamp (time of request),
• Content of the question (and the answer generated from it),
• Country of origin of the browser,
• chat_session_id (the ID assigned to the chat session to record the chat history),
• The default browser language and, if available
, • The region of the browser, 
• Device type according to browser,
• Operating system according to browser, and
• Mobile phone provider used.
Your IP address is not transmitted to Goodguys GmbH. This IP address waits in the chat and is only added again when the AI concierge provides you with the answer in the chat. This means that you do not need to provide any personal data to use the AI concierge functions. All of the above-mentioned processed data remains anonymous to Goodguys GmbH.
For the further development and control of the tool's function (how good is the quality of the answers?), only the questions asked and the answers generated from them are stored without reference to the above-mentioned data (i.e. anonymously). Unfortunately, it is not possible to refer back to questions asked when using this tool. Goodguys GmbH uses currently available generative AI services such as o4-mini from OpenAI to create the answers in the background and integrate them into its own AI processes. Goodguys GmbH does not pass on any personal data to these AI services, only anonymous questions and relevant text passages from our website for the purpose of creating the answers. This allows you to anonymously receive the best content that these AI tools compile for you.
The legal basis for the use of the AI concierge is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. Our legitimate interest lies in offering our website visitors a modern search function and answers to their enquiries as an organisation whose core task is to provide information about tourist offers in our region. We have concluded a data processing agreement with Goodguys GmbH in accordance with Art. 28 GDPR to ensure that all data provided by us in response to your enquiries is only processed to the extent desired by us or by you. Further information on data protection at Goodguys GmbH can be found at: https://goodguys.ai/DSGVO-DSE-goodguys-v230.pdf or in the footer of the website https://goodguys.ai/de/, which is always up to date.

Online chat with the "Lower Austria AI Guide":
When using the "Lower Austria AI Guide" online chat, in addition to your text input, the public IP address of your device is also transmitted to the service provider goodguys gmbh, Moeringgasse 20/1, 1150 Vienna, FN 551957b (https://www.goodguys.ai), and a session cookie will be set, which is necessary for the server to distinguish between individual chat sessions. The processing of the data is necessary for handling your enquiry (Art. 6 (1) b GDPR). This transmission only takes place if you expressly activate the chat function on the website. Goodguys gmbh is not permitted to use this data for its own purposes and is bound by its own agreement on order processing to the strict provisions of the General Data Protection Regulation (GDPR).
If you explicitly ask for the location or position of a place or landmark in the chat, we will show you an interactive map from Google Maps. For this purpose, the public IP address of your device is sent to Google Ireland Ltd. in Dublin, Ireland ("Google"). In a further agreement on order processing, Google has undertaken to use this data only for this purpose and not for its own purposes.
 

Use of social media networks

Our website contains links to social media networks such as Facebook and Twitter. These are not plugins provided by Facebook or Twitter that transmit data to the provider when the page is loaded without the user having any influence. 

The buttons for the social media networks merely contain a link to the social media network, including the transfer of the website to be shared. No user data is transferred from the website to the social media network.

If you are already logged in to the relevant social media service when you click on the button, this will be recognised in the dialogue box for sharing the website, allowing you to share the content directly. If this is not the case, you will be asked to log in to the social media network. From this point on, you will be on the website of the respective social media network.

Clicking on the Facebook button will take you to a website operated by Facebook Inc., 1601 S. California Ave, Palo Ave, CA 04304, USA. Information on the collection, storage and use of your data by Facebook Inc. can be found in the provider's data protection guidelines: http://www.facebook.com/policy.php

Wienerwald Tourismus GmbH cooperates with a wide variety of social network providers. As part of this cooperation, your browser is automatically connected to the selected service provider when you use the respective service (this involves the "embedding" of content such as videos from Vimeo or YouTube or Instagram posts). For example, your IP address, cookies and other information will be transmitted to the respective service provider if you have previously visited their website. This data transfer only takes place when you interact with these social networks. We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transmitted or its use by the social networks. Further information on the use of data by social networks can be found in the privacy policies of the social networks mentioned.

The other social media channels in detail

Instagram

We use functions of the social media network Instagram from Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA, on our website. The functions for embedding Instagram content (embed function) allow us to display images and videos. When you visit pages that use these functions, data (IP address, browser data, date and time, cookies) is transmitted to Instagram, stored and evaluated. If you have an Instagram account and are logged in, this data will be assigned to your personal account and the data stored therein. The privacy policy, which information Instagram collects and how they use it, can be found at https://help.instagram.com/155833707900388.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in improving the quality of our website and in Instagram's legitimate interest in analysing user behaviour for statistical, optimisation and marketing purposes.

YouTube

Our website uses the YouTube button of the social network YouTube, which is operated by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA ("YouTube"). When you visit a page on our website that contains such a button, your browser establishes a direct connection to YouTube's servers. The content of the YouTube button is transmitted directly from YouTube to your browser and integrated into the website. We therefore have no influence on the amount of data that YouTube collects with the button, but we assume that your IP address is also recorded. For the purpose and scope of data collection and the further processing and use of the data by YouTube, as well as your rights in this regard and setting options for protecting your privacy, please refer to YouTube's privacy policy for the YouTube button: https://www.google.de/intl/de/policies/privacy/

If you are a YouTube member and do not want YouTube to collect data about you via our website and link it to your member data stored on YouTube, you must log out of YouTube before visiting our website.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in improving the quality of our website and in YouTube's legitimate interest in analysing user behaviour for statistical optimisation and marketing purposes.

Juicer

We use Juicer to display various posts from social media channels. Juicer itself does not collect any personal data from visitors who visit this feed. You can read the details in Juicer's privacy policy: https://www.juicer.io/privacy

Use of Google Maps

Wienerwald Tourismus GmbH uses Google Maps on its website (and on the websites listed above) in particular to display POIs (points of interest) on an interactive map. Google Maps is operated by Google Inc. By using these websites, you consent to the collection, processing and use of automatically collected data and data entered by you by Google, its representatives or third-party providers. The following link provides information about the data that is transferred when using Google Maps: https://policies.google.com/privacy?hl=de. In addition to the IP address, this includes data such as the GPS data of a smartphone used or search behaviour.

Processing of event data

For the purposes of advertising and providing information, we process event and contact data from publicly accessible sources, including photos and, where applicable, moving images, which are published by registered users in the event calendar at veranstaltungen.niederoesterreich.at. This processing takes place for the duration of the event in question and to safeguard the legitimate interests of the controller, Niederösterreich Werbung GmbH, as well as those third parties (associations and institutions) who have published the event in question in the Lower Austria event calendar.

(Events, functions, etc.)

Images (photos/videos) are taken at various events, in particular at press conferences and other events organised by Niederösterreich Werbung, or at events where people who work on our premises or for us or with our support give presentations or perform.

Invitations and events will indicate in advance that photographs will be taken. If media privilege (§ 9 DSG) does not apply, the photographer will be instructed to obtain consent from small groups that are photographed. If larger groups are photographed at events, the images are used to raise awareness of our organisation and promote its image, and we publish these images on the internet and, where applicable, in printed information about our organisations (legitimate interest).

If you are photographed in a small group or as an individual, the photographer will ask you before taking the picture whether you consent to the processing and will ask you to sign a corresponding declaration of consent as proof of your consent. If you do not agree, you will have the opportunity to step aside so that you are not depicted in the photo. If the media privilege (§ 9 DSG) does not apply, you have the right to revoke your consent at any time with effect for the future.

In the event of revocation, the recordings will be removed if technically possible, and attempts will be made to arrange for their removal from any other media. Printed brochures will not be destroyed after revocation. Upon receipt of the revocation, the data will no longer be processed for the purpose. If the revocation and any prohibition of further use result in costs (changes to the website, destruction of printed information) and there is no legitimate interest in revocation, the costs of the changes shall be borne by the data subject.

There is a right to object within the framework of the statutory provisions if the processing is based on legitimate interest. Since you have entered a public space at these events for an event in which our organisation has an interest in marketing, this expectation must also be taken into account when considering an objection.

If the data is published on our own website, it will be deleted after the expiry of the copyright protection period or upon revocation of consent. If this data is published on social networks, it will only be deleted upon revocation of consent.

For participation in audio/image/video recordings and advertising campaigns by Wienerwald Tourismus GmbH, the following personal data of performers will be processed: photo/video, first name, surname, address. We store personal data for as long as this is necessary for the use of audio/image/video recordings and advertising campaigns or for as long as this is necessary to pursue or defend legal claims.

Data security measures to protect your data

The security of your data is very important to us. We have therefore taken all necessary technical and organisational measures to ensure the security of data processing and to protect your personal data from access by unauthorised third parties as best as possible.

We achieve this on the one hand by using state-of-the-art security software, coding and encryption procedures within our IT infrastructure, and on the other hand by promoting the security of your data through the use of risk-minimising measures (data minimisation in all areas) and preventive protective measures.

Wienerwald Customer Newsletter and Wienerwald Mountain Bike Newsletter

Registration for our newsletter is done using a double opt-in procedure. After registering, you will receive an email asking you to confirm your registration. By activating the link provided, you agree to receive the Wienerwald newsletter with information on excursion destinations, accommodation, offers and tips. 

You also agree to the analysis of the Wienerwald newsletter through individual measurement, storage and evaluation of opening rates and click rates in recipient profiles for the purpose of designing future newsletters in line with the interests of our readers. Consent can be revoked with future effect.

The legality of data processing operations that have already taken place remains unaffected by the revocation. You can unsubscribe from the newsletter by clicking on the unsubscribe link at the end of each newsletter. After you unsubscribe from our newsletter, your email address will be deleted by us or our external service provider. We commission a service provider to send our newsletter. This service provider has undertaken to comply with the applicable data protection regulations. You can request further information about the service provider we commission at office@wienerwald.info.