PRIVACY POLICY

1. Contact us
   If you contact us using the form on the website or by email, the data you provide will be stored by us for six months in order to process your request and in the event of follow-up questions. We will not pass this data on without your consent.
   –
2. Voucher shop
   Due to a separate agreement on the processing of personal data within the scope of our online shop, your data will be collected and processed by INCERT eTourismus GmbH & Co KG, Leonfeldner Strasse 328, 4040 Linz as part of order data processing in accordance with Art. 28 GDPR in accordance with the relevant legal requirements on our behalf. As a processor in the event of support measures, Incert eTourismus also has access to your data, but may only use it for the purpose of support measures and not for its own purposes.The following data is processed:
   Name, address, email (contact details) and credit card number of the buyer as well as the order data.The data you provide is required to fulfill the contract or to carry out pre-contractual measures. Without this data, we cannot conclude the contract with you. After the purchase or order process has been canceled, the data stored by us is deleted after 14 days in order to be able to support any problems during the order process. If a contract is concluded, all data from the contractual relationship is stored until the expiry of the tax retention period of 7 years. The data (name, address, ordered voucher, purchased goods and date of purchase) is also stored until the expiry of the product liability (10 years) or until the expiry of the consumer protection law based warranty and redemption period for vouchers (30 years). After a declared objection, Heiltherme Bad Waltersdorf will ensure that the data is deleted from itself and any third parties to whom the data was transmitted. Data processing is carried out on the basis of the legal provisions of Section 96 Paragraph 3 of the Telecommunications Act (TKG) and Article 6 Paragraph 1 Letter a (consent) and/or Letter b (necessary for contract performance) of the GDPR. Data is not transferred to third parties, with the exception of the transfer of credit card details to the processing banks/payment service providers for the purpose of debiting the purchase price and to the transport company/shipping company commissioned by us to deliver the goods.
   –
3. Online shop
   In order to process your personal data for our online shop, your data will be processed for processing by our online shop partner TAC, The Assistant Company, Schildbach 111, 8230 Hartberg, in accordance with Article 28 of the GDPR in accordance with the Data Protection Regulation. As a processor, TAC has access to the data for the purpose of support measures, but it may not be used for other purposes.The following personal data is processed: Salutation, title, first name, last name, address, email address, date of birth, telephone number.Without disclosure of this data, an order or reservation cannot be carried out or the contract cannot be fulfilled.When the contract is concluded, all data is stored for 7 years until the expiry of the tax retention period. The data processing is carried out on the basis of the legal provisions of Section 96 Paragraph 3 TKG and Art. 6 Paragraph 1 Letter a (consent) and/or Letter b (necessary for contract fulfillment) of the GDPR.For the purpose of debiting the purchase price, the credit card data is transmitted to third parties, in this case to the banks/payment service providers designated for this purpose.
   –
4. Web analysis and cookies
   etracker

   The provider of this website uses services from etracker GmbH in Hamburg, Germany (www.etracker.com) to analyze usage data. The etracker consent manager module is used for consent management. The etracker tag manager module can be used to integrate script codes from other tools. When used in combination, the etracker tag manager and consent manager enable the control of certain cookies and services with the appropriate consent. Even if statistical cookies are rejected, usage data is collected in accordance with the legal requirements of the EU General Data Protection Regulation (EU GDPR) and the Telecommunications Digital Services Data Protection Act (TDDDG). Data processing is carried out on the basis of the legal provisions of Art. 6 (1) lit. f (legitimate interest) of the EU GDPR. Our concern within the meaning of the EU GDPR (legitimate interest) is the optimization of our online offering and the legally compliant integration and administration of additional services on our website. Provided that consent has been given, other technologies are used on the basis of Art. 6 (1) (a) of the EU GDPR. Consent can be revoked at any time.

   The web analysis data generated by etracker is processed and stored exclusively in Germany on behalf of the provider of this website and is therefore subject to strict German and European data protection laws and standards. etracker has been independently audited, certified, and awarded the ePrivacyseal data protection seal of approval. As the privacy of our visitors is important to us, data that could potentially be linked to an individual, such as IP addresses, login IDs, or device IDs, is anonymized or pseudonymized as soon as possible. It is not used for any other purpose, combined with other data, or passed on to third parties.

   You can object to the data processing described above at any time by clicking on the slider. Objecting will not have any negative consequences. If no slider is displayed, data collection has already been prevented by other blocking measures.

   
   Further information on data protection at etracker can be found here.
   –

5. Facebook
   Our website uses social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins can be recognized by one of the Facebook logos (white “f” on a blue tile or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.When you visit a website on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser, which integrates it into the website. We therefore have no influence on the extent of the data that Facebook collects using this plugin and therefore inform you according to our current state of knowledge: By integrating the plugin, Facebook receives the information that you have accessed the corresponding page of our website. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plugin, for example by pressing the Like button or leaving a comment, the corresponding information is transmitted from your browser directly to Facebook and stored there. If you are not a member of Facebook, there is still the possibility that Facebook will find out and save your IP address. For the purpose and scope of data collection and the further processing and use of the data by Facebook as well as your rights and setting options to protect your privacy, please refer to Facebook’s privacy policy: www.facebook.com/policy.php. If you are a Facebook member and do not want Facebook to collect data about you via our website and link it to your member data stored on Facebook, you must log out of Facebook before visiting our website. It is also possible to block Facebook social plugins with add-ons for your browser.
   –
6. Newsletter
   You have the option of subscribing to our newsletter via our website. For this we need your email address and your declaration that you agree to receive the newsletter. In order to provide you with targeted information, we also collect and process information you provide voluntarily about your areas of interest, birthday and postcode. As soon as you have registered for the newsletter, we will send you a confirmation email with a link to confirm your registration. We have concluded a corresponding contract for order data processing with Smart Host, Am Kupfergraben 6 A, 10117 Berlin, Germany. You can cancel your subscription to the newsletter at any time by clicking on the unsubscribe button directly in the newsletter. Your data will be stored until revoked.
   –
7. Hotel reservation – Hotel des Heilthermen Resorts Bad Waltersdorf
   a) Online
   From our website you can access the secure booking form “cbooking.de” for the hotel via the “Book” button. This website is operated by Hotelnetsolutions GmbH, 10785 Berlin, Genthiner Str. 8, with whom we have concluded a contract for order processing.
   The entries you make are transferred directly to our hotel reservation program “GMS Hotel Felix” (partner company: GMS Hotelsoftware Division GmbH & Co OG, 5020 Salzburg, Schillerstr. 25) and saved on our internal server.
   b) By phone / in writing
   If you make a reservation by phone or in writing, your data will be processed by our reception staff in the hotel reservation program mentioned. The legal basis for data collection is the accommodation contract.
   The following data will be processed:
   Contact details, booking details, documents related to the stay, additional information and requests according to your information or according to the declaration of consent.The data you provide is required to fulfill the contract or to carry out pre-contractual measures.Your data will be saved for the duration of the statutory retention period and secured in internal IT systems that correspond to the current state of technology and IT security. After the end of the statutory retention period, your data will be deleted.
   –
8. Smart Host
   Smart Host (Smart Host GmbH, Am Kupfergraben 6A, 10117 Berlin, DE) enables the execution of the guest’s booking; the implementation of the guest’s stay; the coordination of the stay with the guest’s wishes and interests; the possibility of offering services in line with the guest’s interests in the future and marketing measures related to the hotel’s services and improving these services. The guest’s data can be evaluated and processed by service providers and their assistants who offer cloud-based software and data processing solutions for the hotel and on behalf of the hotel (for the above purposes).
   –
9. Spa
   If you reserve treatments in the spa by telephone or in writing, your data will be recorded by our reception staff in the TAC reservation program and processed for the purpose of booking and billing appointments. We have concluded a data processing agreement with TAC. The following data is processed:
   Contact details, booking details, documents related to the treatment(s), additional information and requests according to your declaration of consent.The data you provide is required to fulfill the contract or to carry out pre-contractual measures.Your data is stored for the duration of the statutory retention period and secured in internal IT systems that correspond to the current state of technology and IT security. After the end of the statutory retention period, your data is deleted.
   –
10. VIP chip for thermal spa
    When you purchase a VIP chip for thermal spa entry, treatments and consumption, your data is recorded for the purpose of billing services, information about account balance and consumption. This takes place in the POS system of the company TAC, with whom we have concluded a data processing contract.The following data is processed:
    Contact details, date of birth, log of usage and consumption, additional information and requests according to your declaration of consent.The data you provide is required to fulfill the contract or to carry out contractual measures.Your data will be stored for the duration of the statutory retention period and secured in internal IT systems that correspond to the current state of technology and IT security. After the end of the statutory retention period, your data will be deleted.
    –
11. Application process
    The protection of personal data is important to us. Your personal data is processed in accordance with the applicable data protection regulations. Personal data is collected during the application process. The legal basis is the contract (employment relationship) and the legal basis. We only process personal data that is voluntarily disclosed to us, such as contact details (name, address, telephone number, email, etc.) and all data that is required for identification and processing the application process (date of birth, correspondence, etc.). Possible recipients of your data may be departments of the Heilthermen Resort Bad Waltersdorf as part of the application process. Under no circumstances will data be passed on to third parties. The data is stored throughout the entire application process for a maximum of 1 year after the application. We are happy to keep your documents on file if we receive your permission to do so. Please let us know if you object to this retention period or if we may keep your data on file for a longer period.
    –
12. Chatlyn
    You can contact us and ask questions on our website via the chatlyn web widget (“WebChat”). This is provided by Chatlyn GmbH, Renngasse 4 / R4-4, 1010 Vienna, Austria (“chatlyn”). When you visit the website, the chat widget is loaded in the form of a JavaScript file. When you use the chatlyn WebChat on our website, the following personal data is processed:
    – Date and time of access
    – Optional: Email address
    – Browser type, browser version, and browser language
    – Your IP address
    – Session ID
    – Operating system used
    – URL of the website on which WebChat is used
    – Content sent by you
    Depending on the course of the conversation in our WebChat, additional personal data may be processed if you provide it. The type of data depends on your request or the problem you describe to us. Data is only transmitted when you actually start a conversation. The data is processed for the purpose of communicating with you and processing and responding to your request.
    The legal basis for processing your personal data is our legitimate interest in communicating with you and responding to inquiries in accordance with Art. 6 (1) (f) GDPR.

    We store the data we process in the course of communicating with you for as long as it is needed to handle the conversation with you or until the end of a potential business relationship with you. In addition, we retain personal data for as long as any deadlines for asserting legal claims for which the data may be required have not yet expired.
    Your personal data will not be transferred to third countries; the data is stored on our behalf by chatlyn on servers in Germany.
    The following cookies are stored on your device to provide the web chat:

    Name	Content	Purpose	Storage period
    cw_conversation	Randomly generated session ID	Enables the continuation of a conversation across multiple page views	1 year
    cw_snooze_campaigns_till	UNIX timestamp	Prevents the repeated display of widget pop-up notifications	1 hour

    These cookies are technically necessary to provide the WebChat. They are not used for tracking and other websites do not have access to them.

    –

13. Your rights
    You generally have the right to information, correction, deletion, restriction, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated in any way, you can complain to the supervisory authority. In Austria, this is the Data Protection Authority.

Heiltherme Bad Waltersdorf GmbH & Co KG
Thermenstr. 111, A-8271 Bad Waltersdorf
Tel. +43 3333 500-0, E-Mail: office@heiltherme.at

You can reach our data protection coordinator at datenschutz@heiltherme.at

Status: September 16, 2024