Data protection declaration and information in accordance with Art 13 and 14 GDPR

Data processing purposes:

Contact form:

If you contact us via the form on the website or by email, we will store the data you provide for six months for the purpose of processing your inquiry and in case of follow-up questions. We will not pass on this data without your consent.

Analysis purposes:

Data is collected and used for analysis purposes. This data processing is not personal (see information on cookies below).

Registry:

When registering, the user's email address and password are stored. If a purchase is subsequently made, the email address is linked to the data determined during the purchase process. The data you provide is required to set up the user account. Data processing takes place for the duration of the user account's existence. When the user account is deleted, the email address and password are deleted, as is the link to the purchase transaction data.

IT-Security

When visiting this website, log files are also stored which contain the IP address and other data relating to access to the website (e.g. date, time, user agent, referrer). Data processing is limited in time (maximum 30 days) and only for the purpose of protecting against DDOS attacks or other interference with the functionality of the website and any underlying database systems.

Cookies:

This website uses so-called cookies. These are small text files that are stored on your device with the help of your browser. They do not cause any harm. This site uses so-called session cookies. These are generated when you access the website and are automatically deleted afterwards. They serve to recognize your browser if you visit the same website again within a short period of time, allowing previously made settings to be applied again. No personal data is stored or processed in this process. Cookies are used to make the website more user-friendly. Some cookies remain stored on your device until you delete them. This allows the website operator to recognize your browser the next time you visit. If you do not wish this, you can configure your browser to inform you when cookies are set and allow them only in individual cases. However, disabling cookies may limit the functionality of the

Social Media:

**If Facebook social plugins are used on this website, they are operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA).** These plugins are recognizable by the Facebook logo or by the terms “Like”, “Share”, or “Gefällt mir”, displayed in Facebook’s colors (blue and white). Information about all Facebook plugins can be found at the following link: [https://developers.facebook.com/docs/plugins/](https://developers.facebook.com/docs/plugins/) The plugins are only activated when you click on the corresponding buttons. As long as they are displayed in grey, the plugins remain inactive. You have the option to activate the plugins manually each time you visit the website. Once activated, the plugins establish a direct connection between your browser and Facebook’s servers. This connection is only made after activation of the plugin. The website operator has no influence on the nature or extent of the data transmitted by the plugin to Facebook Inc. servers. For more information, please refer to: [https://www.facebook.com/help/186325668085084](https://www.facebook.com/help/186325668085084) The plugin informs Facebook Inc. that you, as a user, have visited this website. It is possible that your IP address may be stored. If you are logged into your Facebook account while visiting this website, the collected information may be linked to your account. If LinkedIn social plugins are used on this website, they are operated by LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA. These plugins can be recognized by the LinkedIn logo or the “Share” button. Information about LinkedIn plugins can be found at: https://developer.linkedin.com/plugins The plugins are only activated when you click on the corresponding buttons. As long as they are displayed in grey, the plugins remain inactive. You have the option to activate the plugins manually each time you visit the website. Once activated, the plugins establish a direct connection between your browser and the LinkedIn servers. The website operator has no influence on the nature or scope of the data that the plugin transmits to LinkedIn Corporation. Further information can be found here: https://www.linkedin.com/legal/privacy-policy The plugin informs LinkedIn Corporation that you, as a user, have visited this website. It is possible that your IP address and other usage data may be stored. If you are logged into your LinkedIn account while visiting this website, the collected information may be linked to your LinkedIn profile.

Legal basis:

Data on this website is processed exclusively on the basis of the statutory provisions (GDPR, TKG 2003). Data processing (online shop, product reviews, booking tool, and user account) is carried out in accordance with Art. 6 (1)(b) GDPR (for the purpose of fulfilling a contract). If analytics tools are used, data processing is based on Art. 6 (1)(f) GDPR (legitimate interest). The legitimate interest in data processing is the improvement of the website and the measurement of the effectiveness of online advertising. The use of IT data security measures is also based on Art. 6 (1)(f) GDPR (legitimate interest). The legitimate interest in data processing is the protection of our own IT systems. The use of social media plugins takes place only with your consent. The legal basis for this is therefore Art. 6 (1)(a) GDPR. Consent must be granted again each time the website is accessed. Your Rights You have the right to access, rectification, erasure, restriction of processing, data portability, withdrawal of consent, and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have been infringed in any other way, you may lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde).