II. What data do we process when you visit our website?
When you visit our Website the following data might be processed:
Time and duration of access,
IP address and visited pages on our website including entry and exit pages,
Device data: We may store personal data from your device. Such data includes geolocation data, IP address, unique identifiers (e.g. MAC address);
data that you enter via a contact form,
The processing of this data is necessary to ensure the security of the operation of the website and to guarantee the functionality of the website from a technical point of view. The collection of this data is partly carried out via technical cookies. These technical cookies are only used to the extent necessary (§ 96 Abs 3 TKG). The processing of this data is justified by our legitimate interest in the operation of our website (Art 6 para. 1 lit f GDPR).
For the operation of our website and web stores it may be necessary to disclose your data to the following recipients:
II.1. Currently used „technical“ Cookies
These technical cookies are activated as soon as you visit our homepage.
The following cookies are used on our platform on the basis of our legitimate interest (Art 6 para. 1 lit f GDPR):
II.2. Currently used „advertising-Cookies“
In addition to the "technical cookies" described above, we also use so-called advertising cookies (including "statistical cookies"). These advertising cookies enable us to better understand and evaluate your interests. With the help of the advertising cookies, we can combine your "surfing behavior" across the boundaries of our website with data from other websites. This enables us to better understand the interests of our homepage visitors and to address them more specifically.
We respect that not every visitor to the website wants this. For this reason, we only process your data in the course of advertising cookies if you agree to this (Art 6 Paragraph 1 lit a GDPR). You can revoke this consent at any time, whereby the data processing carried out up to the time of revocation remains justified.
Currently the following advertising cookies are used:
III. Why do we process data if we are in a business relationship?
In the course of our business relationship with customers or suppliers, we process data on the basis of contractual (handling of the contractual relationship with you, pre-contractual obligations, invoicing of services, dispatch of documents, communication for handling the contract) and legal obligations (legally required storage within the meaning of § 132 BAO) (Art 6 para. 1 lit b and c GDPR) as well as on the basis of our legitimate interests or on the basis of legitimate interests of third parties (Art 6 para. 1 lit f GDPR), namely
- for the purpose of internal administration and management of your business case to the extent necessary (e.g: processing of your business case, transfer of your business case to different departments, filing, archiving purposes, correspondence with you);
- for the purpose of direct advertising (e.g: mailing, e-mailing, satisfaction surveys, letters of congratulations, statistical evaluations);
We would like to expressly inform you that you can object to the processing of your data for the purpose of direct advertising.
- assertion and defence of legal claims
in each case to the required extent. The processing of your data serves the initiation, maintenance and handling of our business relations. If you do not provide us with this data, we will unfortunately not be able to process your business case.
The processing of data to transfer Newsletter is based on your consent (Art 6 Abs 1 lit a GDPR).
IV. How long do we store your data?
We will only store your data for as long as it is necessary for the purposes for which we have collected your data. In this context, legal storage obligations must be taken into account (e.g. for tax reasons, contracts and other documents from our contractual relationship must always be stored for a period of seven years (§ 132 BAO)). In justified individual cases, such as for the assertion and defense of legal claims, we can also store your data for up to 30 years after the end of the business relationship.
We store data of interested parties for up to three years from the time of the last contact by the interested party.
V. Who might receives your data?
In the course of our business relationship, it may be necessary for us to transfer your data to the following recipients:
VI. Gathering of data from external sources (Art 14 GDPR)
In the course of a business relationship, or an initiation thereof, it is naturally necessary to conduct research about the business partner. This is done exclusively to the extent necessary for this purpose. In this context data can be retrieved and processed from the following sources:
Our company does not obtain data from external sources.
VII. Do we process data via Profiling (via Art 13 para 2 lit f GDPR)?
No automated decision making or profiling takes place in our company.
VIII. Information about your data subject right
We would like to inform you that, provided the legal requirements are met:
You have the right to request information about which data are processed by us (see in detail Art 15 of the GDPR).
You have the right to ask for the correction or completion of incorrect or incomplete data concerning you (see in detail Art 16 of the GDPR).
The right to have your data deleted (see in detail Art 17 of the GDPR).
You have the right to object to the processing of your data that is necessary to meet our legitimate interests or those of a third party. This applies in particular to the processing of your data for advertising purposes.
You have the right to obtain the transmission of the data you have provided in a structured, common and machine-readable format.
If we process your data based on your consent, you have the right to revoke this consent at any time by post or e-mail. This does not affect the lawfulness of the data processing carried out up to this point in time (Art 7 (3) of the GDPR).
IX. Do you have a right to appeal?
If, contrary to expectations, your right to lawful processing of your data is violated, please contact us by post or e-mail. We will make every effort to process your request immediately. You also have the right to lodge a complaint with the supervisory authority for data protection matters responsible for you.
X. How can you get in contact with us?
If you have any further questions about the processing of your data, you are welcome to contact our data protection coordinator by e-mail or by post (see address below).
Controller in terms of Art 4 number 7 GDPR:
TravelLab Solutions GmbH
T +43 1 388 38 83 10
F +43 1 388 38 83 99
Registered company number: FN 428684 v
Member of the Austrian Chamber Court
Business purpose: Travel Agency – Tour Operator
Author: Lawyer Dr. Tobias Tretzmüller, LL.M (IT-LAW);
Any use of this privacy statement, or any part thereof, without the consent of the author constitutes a copyright infringement.