Privacy policy

Basics

This privacy policy applies to all persons who use the services of Hausschachen GmbH. We hereby inform you about the type, scope and purpose of the collection and use of your personal data by our company. We respect your privacy and endeavour to strictly comply with the legal requirements for the processing of your personal data (EU Regulation No. 679/2016 (GDPR), DSG 2000, DSG 2018 and TKG 2003). All your personal data is processed on this basis. By using our services and granting consent in accordance with this declaration, you confirm that you have reached the age of 14 and are able to give valid consent or that you already have effective consent from your legal guardian or custodian.

Information in accordance with Art 13 GDPR

Your personal data, in particular

Your master data (surname, first name, address, e-mail address, telephone and fax number, date of birth, customer number) as well as language and vehicle licence plate number,
the data in travel documents (passport number, passport data, date of birth, issuing authority, duration, nationality) and identity documents (ID card, driving licence, etc. including issuing authority and duration),
the data on payment type and in connection with payments, in particular with EC cards, credit cards and bank cards,
the length of stay requested by you and the destinations, hotels, contact persons, conditions, special services, health data, frequent flyer number, personal preferences associated with the stay, which you disclose to us, and
special categories of data such as health data and data on special needs and marriage/partnership,
are required for our services. This also includes bookings of seat fees, travel, tourist guides, catering, rental vehicles, transfers, registration processing, insurance, events, tours, accreditations, vouchers including customer creation, billing and their verification (B2B, B2C, FIT), ticket bookings. This data is therefore stored and processed by us for these purposes and, if necessary, transferred to third parties with whom we work to provide the most effective and best possible service for our customers - this may also include service providers in third countries as processors, software and agency service providers. We do not use profiling or automated decision-making. The legal bases for these data processing processes are

the fulfilment of our pre-contractual and contractual obligations towards you,
Consents obtained from you,
statutory, contractual or other legal obligations on our part (e.g. documentation rights and obligations under accounting, tax and customs law, contracts, reporting, legal disputes) and Section 96 TKG and
our legitimate interests (e.g. the improvement of our customer service, including in the area of direct advertising or the protection of our own legal interests).
The duration of storage is determined by the duration of our business relationship, the consents you have given and, in addition, the statutory retention obligations and legal obligations applicable to us. We emphasise that in the case of regular cooperation for our best possible customer service, we endeavour to know your customer wishes already communicated to us so well that we can satisfy you continuously and permanently.

Our websites

When you visit our website, your access data is automatically collected and stored. This access data may include, in particular, the page accessed, the files viewed, the date and time of access, the IP address of the user, data of the accessing computer, in particular the browser and operating system, as well as the amount of data and the notification of successful access. This access data is used by us for internal statistical purposes in order to ensure the security of our website and to optimise it. If an illegal act is suspected, the access data is analysed to preserve evidence. Furthermore, IP addresses are also stored in error log files which are necessary to analyse errors in server operation. By entering your personal data in one of our contact forms, you consent to the transmission to and storage and processing by us for the duration of the processing of this specific enquiry. This applies in particular to your enquiries via the contact form, chat and emails that you send us. We need this data to process your enquiry and in these cases we also store your IP address for the purpose of preserving evidence. The data will be stored for as long as is necessary to deal with any additional or subsequent questions you or we may have. If you create a web account with us, we will make your contract data available to you online. You must store your access data carefully and ensure that no unauthorised persons have access to the account. We accept no liability whatsoever for unauthorised access that is attributable - even if only in part - to misconduct on your part. The legal basis for this data processing is your consent, our pre-contractual and contractual obligations towards you, our legitimate interests and legal obligations of all kinds and § 96 TKG.

Newsletter

You are free to subscribe to our newsletter. The registration, for which you must provide your e-mail address and give your consent to receive the newsletter, can only become effective when you confirm a registration link that you receive by e-mail. In order to be able to provide you with targeted information in the newsletter that is of particular interest to you, we allow you to provide information on specific interests, key dates, locations, regions and the like when you register. In every newsletter you receive, you will find all the information you need to unsubscribe from the newsletter. The content of our website has been carefully compiled and checked several times, but we accept no liability for the topicality, accuracy and completeness of the information provided. Claims for damages due to the use or non-use of the information or due to the use of incorrect or incomplete information are excluded. All offers are subject to change and non-binding. We reserve the right to change, supplement or delete the offer or parts thereof without prior notice or to temporarily or permanently cease publication of the website. The content and programming of our website are protected by copyright and ancillary copyright. Any duplication - even in extracts - and public reproduction, in particular the copying of texts, graphics and photos, is prohibited without our prior written consent.

Newsletter - Mailchimp

The newsletter is sent using the mailing service provider "MailChimp", a newsletter mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the mailing service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The shipping service provider is used on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f. GDPR and an order processing contract pursuant to Art. 28 para. 3 sentence 1 GDPR. The mailing service provider may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimise or improve its own services, e.g. to technically optimise the mailing and presentation of the newsletter or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

Transmission to third parties / obligations of processors

Your personal data may be processed by us within the Group, taking into account the permitted purposes of use,
to processors (e.g. for our electronic advertising in the form of newsletters) and to third parties who need to be involved in the provision of the services you have requested, all of whom have undertaken to us to comply with the applicable data protection standards,
transmitted. If compliance with European data protection standards is not possible - for example because standard contractual clauses, adequacy decisions or certifications are not guaranteed in a specific case - we will inform you in good time and also obtain the necessary consent from you.

Stripe

We offer the option of processing the payment transaction via the payment service provider Stripe, ℅ Legal Process, 510 Townsend St., San Francisco, CA 94103 (Stripe). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we pass on the following data to Stripe insofar as it is necessary for the fulfilment of the contract (Art. 6 para. 1 lit. b. GDPR).

Name of the cardholder
E-mail address
Customer number
Order number
Bank details
Credit card details
Period of validity of the credit card
Credit card verification number (CVC)
Date and time of the transaction
Transaction amount
Name of the provider
Location

The processing of the data specified in this section is neither legally nor contractually required. Without the transmission of your personal data, we cannot process a payment via Stripe. [You have the option of choosing a different payment method.]

Stripe assumes a dual role as controller and processor for data processing activities. As the controller, Stripe uses your transmitted data to fulfil regulatory obligations. This corresponds to Stripe's legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the fulfilment of the contract (pursuant to Art. 6 para. 1 lit. b GDPR). We have no influence on this process.

Stripe acts as a processor in order to complete transactions within the payment networks. Within the scope of the order processing relationship, Stripe acts exclusively in accordance with our instructions and has been contractually obliged to comply with the data protection regulations within the meaning of Art. 28 GDPR.

Stripe has implemented compliance measures for international data transfers. These apply to all global activities where Stripe processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).

Further information on objection and removal options vis-à-vis Stripe can be found at: https://stripe.com/privacy-center/legal

Your data will be stored by us until payment processing has been completed. This also includes the period required for the processing of refunds, receivables management and fraud prevention. [In accordance with [§ 147 AO / § 257 HGB], we have a statutory retention period of [X] years for the following documents: [ ]]

Legal information
Address
Stripe Payments Europe Limited 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland Attention: Stripe Legal

Cookies

We use cookies, which are small text elements that are used to store information in web browsers. Cookies are recognised the next time you visit our website and contribute significantly to making the use of our services more convenient for you.

Currently, only technically necessary cookies are set.

Web analysis and server log files

Our website uses functions of the web analysis service AWStats. The information generated in this way is stored on the servers of WVNET GmbH, Edelhof 3, 3910 Zwettl. The provider collects data about every access to the online offer (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. The provider uses the log data without allocation to the person of the user or other profiling in accordance with the legal provisions only for statistical evaluations for the purpose of operation, security and optimisation of the online offer. However, the provider reserves the right to check the log data retrospectively if there is a justified suspicion of unlawful use based on concrete evidence. Our concern within the meaning of the GDPR (legitimate interest) is the improvement of our offer and our website. As the privacy of our users is important to us, the user data is pseudonymised. The user data is stored on the servers of WVNET GmbH for the duration of the website.

Webcam

To view our live webcam of Hausschachen we use the Hungarian service provider IPCamLive. Only the data technically required for a web stream (IP) is transmitted. IPCamLive does not use cookies.

Provider: IPCamLive Kft, IPCamLive.com Ltd, Hungary, Infopark, 1117 Budapest Neumann János utca 1/B.
Privacy policy of ipcam https://www.ipcamlive.com/privacy

Contact us

You can request information about your personal data stored by us free of charge at any time. As a data subject, you also have the right to cancellation, information, deletion, correction, restriction and transfer of your personal data, provided that there is no legal obligation on our part to retain it. For more information on your rights as a data subject, please contact us at webmaster@hausschachen.at. We will be happy to help you. The Austrian Data Protection Authority (DSB), Wickenburggasse 8-10, 1080 Vienna, is the competent supervisory authority for complaints.

Miscellaneous

We have implemented organisational and technical protective measures, which we evaluate on an ongoing basis and adapt as necessary, in order to protect your personal data that we store and process. We reserve the right to amend this privacy policy at any time and adapt it to new developments. The new version applies from the time it is made available on our website.