Privacy Policy & Disclaimer
Here we would like to describe to you whether and how we process your personal data.
"We" as the person responsible within the meaning of the General Data Protection Regulation ("GDPR") are TMC Tourism Marketing Consulting GmbH, Zieglergasse 15/9, 1070 Vienna, office@tmcconsulting.at.
Status: 01.05.2018
1. General information on data processing and the legal basis
1.1. This data protection declaration describes the type, scope and purpose of the processing of personal data within our range of services and the websites, functions and content associated with it (hereinafter jointly referred to as "website"). This declaration applies regardless of the domains, systems, platforms and devices used (e.g. desktop or mobile).
1.2. The definitions of the terms used here, such as "personal data" or their "processing" can be found in Article 4 GDPR.
1.3. We only process personal data in compliance with the legal provisions (in particular Art. 6 Para. 1 GDPR). Accordingly, data will only be processed if there is legal permission, in particular if the data processing is necessary or required by law to fulfill our contractual services (e.g. processing bookings for flights, hotels, other travel services) or if the user has given their consent or if there is an overriding legitimate interest on our part (e.g. interest in the analysis and optimization of our offer).
2. Categories of data processed and legal basis for processing
2.1. The personal data you provide voluntarily when registering (in particular your e-mail address) will only be processed by us with your (revocable) consent in accordance with Article 6 (1) (a) GDPR.
2.2. Otherwise, as part of our offer, we process the following of your personal data for the execution of the contract (Art 6 Para 1 lit b GDPR) or on the basis of our overriding legitimate interest (Art 6 Para 1 lit f GDPR):
Inventory data (e.g. names and addresses of customers, telephone number, e-mail, passport data, driver's license data if applicable)
Contract data (e.g. booked services (flights/arrival type, hotel & room category, program modules, special dietary requirements to rule out health risks), clerk, payment & cancellation information)
Usage data (e.g. the websites visited on our website)
3. Purposes of data processing
3.1. The personal data mentioned under point 2 are processed for the following purposes:
to carry out the booking of the event/trip made by you or on your behalf and the associated individual services;
to make this website available to you and to further improve this website and make it more user-friendly for you;
to be able to create usage statistics;
to respond to your inquiries;
to inform you about news in the form of a newsletter at your request.
3.2. The personal data you use comes from the information you provided yourself during the booking process on the registration form provided by us or is collected automatically when you visit the website (e.g. IP address).
4. Transmission of data to third parties and third-party providers
4.1. Data is only passed on within the framework of legal requirements. Accordingly, we only pass on data if this is necessary, for example, on the basis of Art 6 Para 1 lit b GDPR for the execution of the contract or due to an overriding legitimate interest in accordance with Art 6 Para 1 lit f GDPR in an economical and effective operation.
4.2. The data is passed on to subcontractors within the EU or the EEA in accordance with the provisions of the GDPR. In the event of transfer to third countries, e.g. long-distance travel, separate, project-related data protection agreements are concluded. The appropriate level of data protection results from:
an adequacy decision by the European Commission in accordance with Article 45 GDPR.
an exception for the specific case according to Art. 49 para. 1 DSGVO.
Binding internal data protection regulations according to Art 47 in conjunction with Art 46 Para 2 lit b GDPR.
Standard data protection clauses according to Art 46 Para 2 lit c and d GDPR.
approved rules of conduct according to Art. 46 Para. 2 lit e in conjunction with Art. 40 GDPR.
an approved certification mechanism according to Art 46 Para 2 lit f in conjunction with Art 42 GDPR.
Contractual clauses approved by the data protection authority in accordance with Article 46 (3) (a) GDPR.
an exception for individual cases according to Art. 49 para. 1 subparagraph 2 DSGVO.
4.3. For the above purposes, we transmit your personal data to the following recipients or categories of recipients:
IT service provider for web hosting and ongoing email traffic: Hetzner Online GmbH, Industriestraße 25, D-91710 Gunzenhausen
5.Google Analytics
5.1. We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountin View, CA 94043, USA (“Google” for short) on our website. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. We use this analysis tool based on our overriding legitimate interest in having easy-to-use website access statistics in a cost-efficient manner, in accordance with Art 6 Para 1 lit f GDPR.
5.2. Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law.
5.3. On our website we use the option of IP anonymization offered by Google Analytics. The IP address is shortened by Google within member states of the European Union or in other contracting states of the EEA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.
5.4. Google uses this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data by Google.
5.5. You can prevent the storage of cookies by setting your browser software accordingly. In addition, you can prevent the data generated by the cookie and related to your use of the online offer being collected by Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:_cc781905-5cde-3194-bb3b -136bad5cf58d_ tools.google.com/dlpage/gaoptout?hl=de.
5.6. You can find more information about the use of data by Google and the setting and objection options on the Google website: google.com/intl/de/policies/privacy/partners _cc781905-5cde-3194-bb3b -136bad5cf58d_("Google's use of data when you use our partners' websites or apps"), google.com/policies/technologies/ads ("Use of data on advertising purposes”), google.de/settings/ads (“Manage information that Google uses to show you advertising”).
6. Cookies & range measurement
6.1. We use so-called cookies on our website. A cookie is a small file or other type of information storage that can be stored on your computer when you visit a website. Basically, cookies are used to offer users additional functions on a website (e.g. facilitating navigation; finding pages that you have previously viewed; storing preferences for a repeat visit). Cookies cannot access, read or change any other data on your computer.
6.2. Most of the cookies on our website are so-called session cookies, which are only stored for the duration of the current visit to the website (e.g. to enable our booking system to be used at all). They are automatically deleted when you leave our website. Persistent cookies, on the other hand, remain on your computer until you manually delete them in your browser. We use such persistent cookies to recognize you the next time you visit our website.
6.3. If you do not want cookies to be stored on your computer, please deactivate the corresponding option in the browser's system settings. You can also block or delete cookies that have already been saved in your browser. However, if you make use of this, restrictions on the use of the website are conceivable.
7. Newsletters
7.1. You have the option of contacting us directly via our website and subscribing to our newsletter. For this we need your e-mail address and your declaration (which can be revoked at any time) that you agree to receive the newsletter.
7.2. In particular, the newsletter contains information on new destinations, new hotels, meeting opportunities and attractions in our selected destinations at home and abroad.
7.3. The final registration takes place via a double opt-in: As soon as you have registered for the newsletter, we will send you a confirmation e-mail with your link to confirm the registration (double opt-in).
7.4. As an existing customer, you can receive newsletters and other information (direct advertising) from us in accordance with Section 107 (3) TKG without registering separately. However, you have the option of rejecting the sending of direct advertising, for example when registering/booking for the event/trip.
8. Right to Object
8.1. You can object to the future processing of your personal data at any time in accordance with the legal requirements; in particular, this possibility exists against processing for the purpose of
direct mail.
9. Duration of storage
9.1. The data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage requirements.
9.2. According to § 132 BAO, for example, we are legally obliged to store accounting documents (e.g. invoices, receipts) for a period of at least 7 years (longer in the case of legal disputes).
9.3. All events and trips organized by us are always photographed/filmed for documentation reasons. After the event, the material will be handed over to the client, who will distribute it to the participants or use it for internal purposes.
9.4. Sensitive data such as health data or special dietary requirements will be deleted immediately after the end of the project.
10. Your rights in connection with the processing of personal data
10.1. Among other things, you are entitled to (i) check whether and which personal data we have stored about you and to receive copies of this data, (ii) correct, supplement or delete your personal data that is incorrect or not processed in accordance with the law to require (iii) to require us to restrict processing, and (iv) to object to processing of your personal data in certain circumstances or to withdraw consent previously given for processing (e.g. newsletter subscription), (v ) to request data transfer, (vi) to know the recipients or categories of recipients to whom your personal data is transmitted, and (vii) to lodge a complaint with the competent authority (in Austria with the data protection authority).
11. Changes to the Privacy Policy
11.1. Since, for example, the legal situation or our services including the associated data processing can change, we reserve the right to adapt this data protection declaration accordingly. However, this only applies to declarations on data processing. If we need your consent for data processing or parts of this data protection declaration contain provisions of the contractual relationship with the users, the changes will only be made with your consent.
11.2. Please inform yourself regularly about the current content of our data protection declaration.