Data protection
TRAVEL AGENCY PRIVACY POLICY
With this data protection information we inform you about the type, scope and purpose of the collection and processing of your personal data by our company.
The party responsible for data processing is: alfred holzknecht travel services consulting & events
2. purposes of data processing
This data protection information relates to all processing operations that are relevant to you as an interested party, customer, website visitor or newsletter subscriber.
The purposes for which we process your personal data can be summarised as follows
- our business activities (operation of a travel agency)
- Marketing (as well as information by electronic mail including SMS)
- newsletters
- Contact form on the website and other enquiries (e.g. by email)
- Cookies and website tracking
3. business activity (operation of a travel agency)
We process your personal data in connection with your interest in or use of our services, namely
- Your master data (e.g. surname, first name, home address, email address, telephone number, date of birth, gender, country of origin)
- Data from travel documents presented, e.g. passport, identity card or driving licence (e.g. type of document, document number, date of issue, issuing authority, duration, nationality, other passport data),
- Data on the payment method and other data associated with the payment (e.g. payment method, payment amount, card number, cardholder),
- data relating to your booking or requested service (e.g. destination, date of booked or requested arrival and departure, booked hotel including booked or requested rooms, your language, if applicable your vehicle registration number (to determine parking authorisation), number of persons),
- other data provided or requested by you in connection with your booking or requested service (e.g. data of fellow travellers (if you provide us with such data), contact persons, conditions, special services, frequent flyer number, personal preferences, tourist guides, gastronomy, rental vehicles, transfers, registration processing, insurance, events, tours, accreditations, vouchers, billing and its verification (B2B, B2C, FIT), ticket booking).
We do not engage in profiling or automated decision-making that produces legal effects concerning you or significantly affects you in any other way.
We may also receive personal data from sources other than directly from the data subject. This is the case, for example, if a person making a booking or a booking platform provides us with this data. In this case, we assume that the person for whom the booking was made already has the information about the data processing in our company (due to the forwarding of the information by the person making the booking) or that the effort involved in providing the information separately is disproportionately high.
We base the processing of the above-mentioned data on the following legal bases:
- the necessity of the respective processing for the fulfilment of the contract or for the implementation of pre-contractual measures (Art 6 para 1 lit b GDPR),
- your consent, if you have given us such consent (Art. 6 para. 1 lit. a GDPR)
- the fulfilment of legal obligations (e.g. under accounting, tax and customs law, contracts, reporting, etc.) to which we are subject (Art 6 para 1 lit c GDPR)
- the pursuit of our overriding legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR (e.g. improving our customer service or pursuing our own legal interests, etc.).
The following applies to the storage period of your data:
If there are statutory retention obligations or other legal obligations to retain data, we will store your data in accordance with these obligations. We store accounting data (‘books and records’ and associated documents as defined in Section 132 of the Federal Fiscal Code) for a period of approximately 7 years.
If processing is based on your consent, we will store the data in accordance with the consent given, but for no longer than 3 years after the last contact with you.
We store data from interested parties or enquirers (e.g. by email or via our contact form) that do not lead to any bookings for a maximum period of 3 years after the last contact.
All other data will be deleted by us after 3 years at the latest.
If further storage is necessary after expiry of these periods for the assertion, exercise or defence of legal claims (e.g. in the context of legal proceedings), we will continue to store the data until the legally binding conclusion.
4. marketing (and information by electronic mail including SMS)
We use marketing to inform you and the public about our services.
Your personal data may be processed in the course of our marketing activities (e.g. name, residential or e-mail address, date of birth, data from your last booking/enquiry).
In the case of electronic marketing to existing customers, we process your data exclusively in accordance with the relevant statutory provisions. Your data is processed for this purpose on the basis of our overriding legitimate interests (‘marketing’), but only if you have given us your contact information in the course of a purchase or when using a service and we advertise our own similar products or services with this electronic mailing. When collecting the contact data, we draw your attention to this type of data processing and the mailing and give you the opportunity to refuse this type of marketing when collecting the data and for each mailing.
In the case of other electronic direct marketing, you give us your consent in advance, which you can revoke at any time.
You have the right to object to processing based on legitimate interest at any time or to withdraw any consent you have given (see section ‘Rights of data subjects’). In this case, we will no longer contact you for marketing purposes. Revocation (consent) or objection (legitimate interests) does not affect the lawfulness of the processing carried out up to that point. The processing (further storage) of customer data, e.g. to fulfil the obligations of accounting regulations, remains in place.
We base the processing of this data on the following legal bases
- the pursuit of our overriding legitimate interests within the meaning of Art. 6 (1) (f) GDPR (e.g. for postal mailings or electronic marketing to existing customers)
- Your separate consent within the meaning of Art. 6 para. 1 lit. a GDPR, if you have given us such consent (e.g. for other direct advertising, e.g. by email, messenger, etc...)
If the processing is based on our overriding, legitimate interests, these interests consist of presenting our services or our offer to you and thus increasing our sales (marketing). This applies to postal marketing and our marketing to existing customers.
In the case of electronic marketing, we differentiate between electronic marketing to existing customers and other direct advertising.
We store marketing data that is processed on the basis of your consent until you withdraw your consent or all marketing data is deleted no later than 3 years after the last contact.
5. newsletter
You have the option of subscribing to our newsletter. To subscribe to the newsletter, you must provide us with your e-mail address.
The electronic registration for the newsletter only becomes effective when you confirm a registration link that you receive by e-mail. This serves to verify that you have completed the registration. Data processing in connection with our newsletter is carried out exclusively on the basis of your consent (Art 6 para 1 lit a GDPR).
You have the option to revoke this consent at any time (see section ‘Rights of data subjects’). You will also find all the information you need to easily unsubscribe from the newsletter in each individual newsletter that you receive from us. The lawfulness of the processing of the data up to the time of cancellation or unsubscription is not affected by a cancellation.
We generally store data in connection with our newsletter until consent is withdrawn or this data is deleted at the latest 3 years after the last contact.
6. contact form on the website and other enquiries (e.g. by e-mail)
You can send us enquiries about our services or general enquiries using the contact form on our website or by email.
We will process the contact details and other data provided by you in order to process your enquiry. The legal basis for this processing is either Art. 6 para. 1 lit. b GDPR (contract initiation, contract fulfilment) or Art. 6 para. 1 lit. f GDPR (our overriding, legitimate interests in smooth communication and documentation in the case of general enquiries).
We store this data for a maximum period of 3 years after the last contact, although the storage period may be longer if the enquiry leads to the conclusion of a contract (see section: ‘Business activities (operation of a travel agency)’).
7 Cookies and website tracking
When you visit our website, you will be asked whether you authorise the use of cookies. Cookies are small text elements that are used to store information in web browsers. We use cookies to ensure the functionality of our website, to make it more user-friendly and to improve IT security.
You can prevent the storage of cookies by selecting the appropriate settings in your browser or subsequently delete cookies via your browser if they have already been set. However, we would like to point out that actively deactivating such cookies may impair the functionality of our website and it may not be possible to use all the functions of our website (e.g. recognising entered data in the event of a crash, pre-filled forms that are stored in your browser, calling up images or videos).
We must use technically necessary or functional cookies in order to make our website usable for you. The legal basis for the setting of technically necessary cookies is our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR, namely to ensure the operability of our website and IT security.
We only use cookies that are not technically necessary if you have given us your prior consent (Art. 6 para. 1 lit. a GDPR). These are, for example, cookies that recognise you the next time you visit our website and are stored on your end device. The information recognised and stored by cookies is also used to analyse your usage behaviour. They help us to improve our website and determine which areas of our website are visited by which users and attract the most attention.
8. categories of recipients / transfer to third countries
We transfer your personal data to the following recipients or categories of recipients:
- to third-party companies that provide services to you, e.g. car hire companies, airlines, hotels
In principle, we do not intend to transfer your data to an international organisation or recipients in third countries.
If you make use of a service that requires the transfer of data (e.g. for flight or hotel bookings) to a recipient in an unsafe third country, we will inform the recipient accordingly.
9. rights of data subjects / objection / contact
As a data subject within the meaning of the GDPR, you have the right to information, rectification, erasure, restriction and data portability, in each case within the scope of the statutory provisions.
If you have given us your consent to process your data, you have the right to withdraw this consent at any time. This does not affect the lawfulness of the processing of the data up to the point of revocation. The consequence of a revocation is that we will no longer process your data for the above-mentioned purposes or the purposes stated in the consent from this point onwards.
If the processing of your data is based on our legitimate interests, you have the right to object to the processing. If you have reasons arising from your particular situation that speak against this processing, we will no longer process your data unless we have compelling legitimate grounds for the processing that outweigh your interests, rights and freedom, or the processing serves the assertion, exercise or defence of legal claims. If your data is processed for direct marketing purposes, this data will no longer be processed for these purposes once you have objected.
To exercise your rights, please contact:
Alfred Holzknecht alfred@alfredholzknecht.at
With regard to the processing of your data by us, you can also lodge a complaint with a supervisory authority at any time. In Austria, this is the Austrian Data Protection Authority (www.dsb.gv.at).