DEUTSCH  ENGLISCH

Data protection declaration

basics

In our data protection declaration you can find out which personal data we offer, how and for what purpose on our websites and apps as well as in the context of the provision of our services and process them automatically. In addition, we inform you about your rights as a data processor.

We ask you to read this data protection declaration carefully. By using our products and services which result in the transfer of your personal data to us, you declare that you have been informed of the use of your personal data in accordance with this data protection declaration.

Fundamentals The protection of your personal data is of particular concern to us. If you do not agree to the use of your personal data within the scope of this data protection declaration, please do not make your personal data available to us. In this case, you will not have access to those services and products for the use of which the processing of your personal data is necessary (e.g..: Use of information websites, use of customer loyalty programs, use of event and appointment offers). We collect, process and use personal data of a user without further consent only as far as it is necessary for the conclusion and processing of the contract as well as for billing purposes.

employee training and information

Our employees are trained and sensitized to the daily necessities within the GDPR.

data gathering

In this respect, the collection of data means the collection of data by the data subject himself. In addition to saving and deleting, processing also includes changing, blocking and transmitting personal data. Every use of personal data is useful, as far as it is not about processing. In accordance with the applicable legal provisions, we are entitled to provide information to law enforcement authorities and courts for the purpose of criminal prosecution.

inventory data

Inventory data are personal data that are necessary to establish or change a contractual relationship. This includes, among other things, the name and address, date of birth, telephone number, e-mail address and payment data of the user. We only forward inventory data to third parties if this is necessary for the provision of the service.

traffic data

Traffic data are data that are collected, processed or used in the provision of a telecommunications service.

Data transmission between users and our online offers is highly encrypted according to the current state of the art (TLS, VPN, SSH).

use of our websites and apps

The use of our own website is basically possible without providing personal data. However, different regulations may arise for the use of individual services, to which we refer separately in a suitable place. When you visit our websites, information such as your IP address is transmitted to us. This information includes information about the terminal device used (computer, smartphone, tablet, etc.), the browser used (Internet Explorer, Safari, Firefox, etc.), the time of access to our websites and the amount of data transferred. These data are not used by us to identify the individual user.

The information is processed for system security reasons (to protect against misuse). The information also serves to determine the attractiveness of our websites and to continuously improve their contents and make them even more interesting for you. Log files are processed at the end of the month for anonymous statistics and then deleted

When downloading apps, you need to authenticate yourself in the App Store (e.g. Apple App Store, Google Play Store) with the necessary information. We have no influence on the data collected in the course of the download, in particular your e-mail address and customer number of your store account or device identification number of your end device and are not responsible for this. We only process the device information of the data provided, as far as this is necessary for downloading our apps to your device. They will no longer be processed by us.

personal Information

Personal data is all information relating to an identified or identifiable natural person. Below you will find examples of personal data that we collect and process as part of your use of our products and services, provided there is a legal basis for doing so:

  • name
  • form of address
  • date of birth
  • citizenship
  • contact address(es)
  • telephone number, fax number
  • company details
  • user administration data (account data, user name, user name, password)
  • credit card number and data, bank details
  • email addresses
  • cookies, ip-address
  • location information
  • biometric data (photo)
  • interests (e.g.: events, hobbies, leisure, sports, cultural and culinary preferences)

Note: Not all examples shown here are processed simultaneously.

collection and processing of personal data

We collect and process personal data only to the extent permitted by law. This is the case, for example, if you have given your consent to the processing of personal data concerning you for one or more specific purposes. The processing of your personal data may also be necessary for the fulfilment of a contract or for the fulfilment of a legal obligation applicable to us. We process your data, for example, if you have provided it on your own initiative, for example if you fill out a contact form, register with one of our online products, place an order in our online shop, take part in a competition or contact us in any other way.

We use the personal data provided by you exclusively insofar as your data is necessary for the fulfilment of the respective purpose (e.g. to fulfil a contract, to fulfil a legal obligation, for registration for one of our online products, for sending newsletters, for processing an order in the online shop, for sending information material and advertising, for handling a competition, for carrying out customer analyses, market and opinion research, for answering a question you ask us or for enabling access to certain other information).

We collect and process your personal data for products and services that you can use independently.

data processing on behalf

Even if we hire a processor, we are responsible for protecting your personal data. Your data will be transferred to third parties if we are legally obliged to do so, if the transfer of data is necessary for the execution of the contractual relationship or if you have previously expressly consented to the transfer of your data. External contract processors and partner companies or other cooperation partners only receive your data if this is necessary, for example: to process a contract, your order or a prize draw. Your personal data will not be sold to third parties or marketed in any other way. storage time

Data that you have made available to us exclusively for customer service or for marketing and information purposes (e.g. newsletter) will be stored until you revoke your consent. In the case of a contract conclusion, e.g.: when using our online products, your personal data will be stored after complete contract processing until the expiry of the guarantee, warranty, statute of limitations and statutory retention periods applicable to us, and beyond that until the end of any legal disputes in which the data is required as proof.

storage period

We save data you have provided us with exclusively for customer service or for marketing and informational purposes (eg newsletters) until you revoke your consent. In case a contract is closed - for example when you use one of our online products - your personal data is stored throughout the completion of the contract and the expiration of all applicable warranty, limitation and retention periods as well as throughout all possible litigation where the data can be needed as evidence.

cookies

We use cookies on the websites of our group of companies in order to improve our website and to make it as useful as possible for you. Cookies are small text files that are stored on your electronic device (e.g. computer, smartphone, game console) when you visit our websites and allow your browser to be reassigned. Cookies store information such as your language settings, the duration of your visit to our websites or the information you enter there

This avoids the need to re-enter all necessary data for each use. When you visit our websites, you will receive more information about the use and application of cookies via the cookie notice placed on our websites.

sessions

Sessions (session ID, session number) are created by the server at the beginning of your session. The session must be transferred to your computer with the server's response and must be delivered by the server each time you access it. With the help of the unique session, the data stored on the server side can be uniquely connected to a user each time it is accessed. After a specified time without activity on the websites, you will be automatically logged out and the session will also end.

Google Services

Google Analytics

Google Analytics is used on some pages. This is a web analysis service of Google Inc. ("Google"). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by cookies about your use of our websites is usually transferred to a Google server in the USA and stored there. Information from Google on data protection can be found here:
https://privacy.google.com/intl/de/#

However, if IP anonymisation is activated on our websites, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the websites, to compile reports on website activity and to provide us with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser. However, we would like to point out that in this case you may not be able to use all functions of our websites to their full extent. You can also prevent the collection of data generated by the cookie and relating to your use of the websites (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en

Youtube Videos

Also from Google/Youtube videos are embedded on some pages. On our pages, a connection to YouTube is established at the appropriate point and the corresponding videos are displayed in the player on our pages. For embedding on our pages we use the nocookie tag recommended by Youtube. We cannot check which data is transferred to YouTube and at this point we also refer to the international information of Google:
https://privacy.google.com/intl/de/#

Google Maps

Maps are also embedded on some pages by Google. On our pages a connection to Google is established and the corresponding maps are displayed on our pages. For embedding on our pages we use the tag recommended by Google. We cannot check whether and which data is transferred to Google and at this point we also refer to the international information of Google:
https://privacy.google.com/intl/de/#

Google Fonts

Also from Google online fonts are embedded on some pages. For embedding on our pages we use the tag recommended by Youtube. We cannot check which data is transferred to YouTube and at this point we also refer to the international information of Google:
https://privacy.google.com/intl/de/#

links to other websites

Our websites contain links to other websites. Compliance with the relevant data protection regulations for these websites is the responsibility of the operators of the respective websites and is therefore beyond our sphere of influence. We are therefore not responsible for the data protection strategies or the contents of these other websites.

Digital Services (Facebook, Conversational Interfaces, etc.)

For the use of some offers and services you need an account of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA or at Amazon Media EU S.à r.l. (Société à responsabilité limitée), 5 Rue Plaetis, L-2338 Luxembourg. When you visit Facebook pages, a direct connection is established between your device and the Facebook server. Facebook receives the information that you have called up a certain Facebook page with your IP address. We would like to point out that we are not aware of the content of the data transmitted or how it is used by Facebook. For more information, please visit:
https://www.facebook.com/policy.php

AddThis

If you agree the usage of cookies our website is using "AddThis" to make sharing articles on social media easier, you find the privacy policy of this service here:
https://www.addthis.com/privacy

Twitter

Some functions of the Twitter service are integrated on this website. These functions are provided by Twitter Inc, Twitter, Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA. By activating the plugin or clicking on the link or using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter.

We would like to point out that, as the provider of the pages, we are not aware of the content of the data transmitted or how it is used by Twitter. For more information, please see Twitter's privacy policy at:
http://twitter.com/privacy

As far as within our area of responsibility, the contents on external channels are created and expanded with the greatest care. However, the topicality and correctness is influenced by technical factors such as the Internet connection or the topicality of the operating system used and can therefore not be guaranteed.

your rights

You may exercise the following rights in accordance with the Basic Data Protection Ordinance and the National Data Protection Act with regard to the processing of your data:

right to information

You can request information from us as to whether and if so, which and to what extent we process your personal data.

right to correction

If we process your personal data which are incomplete or incorrect, you can request us to correct and/or complete them at any time, insofar as this data falls within our area of responsibility.

right to cancellation

You may request us to delete your personal data if we process them unlawfully, if the processing interferes disproportionately with your legitimate protection interests, if the personal data is no longer necessary for the purposes for which they were collected, if you have revoked your consent and if there is no other legal basis for the processing or if deletion is necessary to fulfil a legal obligation.

Please note that there may be reasons that prevent immediate deletion, e.g. in the case of legally regulated retention obligations.

right to limitation of processing

You may request us to restrict the processing of your data if

  • you dispute the accuracy of the data for a period of time that allows us to verify the accuracy of the data
  • the processing of the data is unlawful, but you refuse to delete it and instead request a restriction on the use of the data
  • we no longer need the data for the intended purpose, but you still need this data to assert, exercise or defend legal claims, or
  • you have lodged an objection to the processing of the data
  • As of the application for limitation, this data will only be processed with individual consent or for the assertion and enforcement of legal claims.

right to data transferability

You may require us to provide you with the data you have provided to us in a structured, current and machine-readable format, provided that we process this data on the basis of a consent given and revocable by you or for the fulfilment of a contract between us, and this processing is carried out using automated methods.

right of objection

You may at any time object to the processing of personal data concerning you, which is necessary to protect our legitimate interests or those of a third party, for reasons arising from your particular situation. Your data will no longer be processed after the opposition, unless there are compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims. You can object to the sending of advertising at any time without giving reasons.

right of appeal

If you are of the opinion that we violate Austrian or European data protection law when processing your data, please contact us to clarify any questions. They also have the right to contact the competent data protection authority, and from 25 May 2018 also the supervisory authority within the EU.

enforcement of rights

If you wish to assert any of the above rights against us, simply use our contact option. In the course of asserting your rights, we may request additional information to confirm your identity (e.g. the presentation of an official photo ID). This serves the protection of your rights and your privacy, so that no third party receives information about your data.

We will respond to all reasonable requests free of charge and as soon as possible in accordance with applicable law.

contact

the Lounge interactive design GmbH, Ingo Ortner, checkin@thelounge.net

PDF Information der WKO lt. Stand 01/2018