PRIVACY POLICY

1. Contact us
   If you contact us using the form on the website or by email, the data you provide will be stored by us for six months in order to process your request and in the event of follow-up questions. We will not pass this data on without your consent.
   –
2. Voucher shop
   Due to a separate agreement on the processing of personal data within the scope of our online shop, your data will be collected and processed by INCERT eTourismus GmbH & Co KG, Leonfeldner Strasse 328, 4040 Linz as part of order data processing in accordance with Art. 28 GDPR in accordance with the relevant legal requirements on our behalf. As a processor in the event of support measures, Incert eTourismus also has access to your data, but may only use it for the purpose of support measures and not for its own purposes.The following data is processed:
   Name, address, email (contact details) and credit card number of the buyer as well as the order data.The data you provide is required to fulfill the contract or to carry out pre-contractual measures. Without this data, we cannot conclude the contract with you. After the purchase or order process has been canceled, the data stored by us is deleted after 14 days in order to be able to support any problems during the order process. If a contract is concluded, all data from the contractual relationship is stored until the expiry of the tax retention period of 7 years. The data (name, address, ordered voucher, purchased goods and date of purchase) is also stored until the expiry of the product liability (10 years) or until the expiry of the consumer protection law based warranty and redemption period for vouchers (30 years). After a declared objection, Heiltherme Bad Waltersdorf will ensure that the data is deleted from itself and any third parties to whom the data was transmitted. Data processing is carried out on the basis of the legal provisions of Section 96 Paragraph 3 of the Telecommunications Act (TKG) and Article 6 Paragraph 1 Letter a (consent) and/or Letter b (necessary for contract performance) of the GDPR. Data is not transferred to third parties, with the exception of the transfer of credit card details to the processing banks/payment service providers for the purpose of debiting the purchase price and to the transport company/shipping company commissioned by us to deliver the goods.
   –
3. Online shop
   In order to process your personal data for our online shop, your data will be processed for processing by our online shop partner TAC, The Assistant Company, Schildbach 111, 8230 Hartberg, in accordance with Article 28 of the GDPR in accordance with the Data Protection Regulation. As a processor, TAC has access to the data for the purpose of support measures, but it may not be used for other purposes.The following personal data is processed: Salutation, title, first name, last name, address, email address, date of birth, telephone number.Without disclosure of this data, an order or reservation cannot be carried out or the contract cannot be fulfilled.When the contract is concluded, all data is stored for 7 years until the expiry of the tax retention period. The data processing is carried out on the basis of the legal provisions of Section 96 Paragraph 3 TKG and Art. 6 Paragraph 1 Letter a (consent) and/or Letter b (necessary for contract fulfillment) of the GDPR.For the purpose of debiting the purchase price, the credit card data is transmitted to third parties, in this case to the banks/payment service providers designated for this purpose.
   –
4. Web analysis and cookies
   Our website uses functions of the web analysis service Google Analytics, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. In addition, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link (tools.google.com/dlpage/gaoptout).As an alternative to the browser add-on, or within browsers on mobile devices, please click this link to prevent Google Analytics from collecting data on this website in the future: Analytics Opt-Out. An opt-out cookie will be stored on your device. If you delete your cookies, you must click this link again. Further information on terms of use and data protection can be found at www.google.com/analytics/terms/de.html. We would like to point out that on this website Google Analytics has been extended by the code “anonymizeIp” to ensure anonymous recording of IP addresses (so-called IP masking). On this website we sometimes use cookies, which are small text files that are stored on the user’s computer. Most of the cookies used by this website are so-called “session cookies”. They are automatically deleted after the end of the visit to this website. Of course, the website can also be viewed without cookies. To prevent cookies from being saved, “do not accept cookies” must be selected in the browser settings. If the browser does not accept cookies, the range of functions of this website may be restricted.
   –
5. Facebook
   Our website uses social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins can be recognized by one of the Facebook logos (white “f” on a blue tile or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.When you visit a website on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser, which integrates it into the website. We therefore have no influence on the extent of the data that Facebook collects using this plugin and therefore inform you according to our current state of knowledge: By integrating the plugin, Facebook receives the information that you have accessed the corresponding page of our website. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plugin, for example by pressing the Like button or leaving a comment, the corresponding information is transmitted from your browser directly to Facebook and stored there. If you are not a member of Facebook, there is still the possibility that Facebook will find out and save your IP address. For the purpose and scope of data collection and the further processing and use of the data by Facebook as well as your rights and setting options to protect your privacy, please refer to Facebook’s privacy policy: www.facebook.com/policy.php. If you are a Facebook member and do not want Facebook to collect data about you via our website and link it to your member data stored on Facebook, you must log out of Facebook before visiting our website. It is also possible to block Facebook social plugins with add-ons for your browser.
   –
6. Newsletter
   You have the option of subscribing to our newsletter via our website. For this we need your email address and your declaration that you agree to receive the newsletter. In order to provide you with targeted information, we also collect and process information you provide voluntarily about your areas of interest, birthday and postcode. As soon as you have registered for the newsletter, we will send you a confirmation email with a link to confirm your registration. We have concluded a corresponding contract for order data processing with Smart Host, Am Kupfergraben 6 A, 10117 Berlin, Germany. You can cancel your subscription to the newsletter at any time by clicking on the unsubscribe button directly in the newsletter. Your data will be stored until revoked.
   –
7. Hotel reservation – Hotel des Heilthermen Resorts Bad Waltersdorf
   a) Online
   From our website you can access the secure booking form “cbooking.de” for the hotel via the “Book” button. This website is operated by Hotelnetsolutions GmbH, 10785 Berlin, Genthiner Str. 8, with whom we have concluded a contract for order processing.
   The entries you make are transferred directly to our hotel reservation program “GMS Hotel Felix” (partner company: GMS Hotelsoftware Division GmbH & Co OG, 5020 Salzburg, Schillerstr. 25) and saved on our internal server.
   b) By phone / in writing
   If you make a reservation by phone or in writing, your data will be processed by our reception staff in the hotel reservation program mentioned. The legal basis for data collection is the accommodation contract.
   The following data will be processed:
   Contact details, booking details, documents related to the stay, additional information and requests according to your information or according to the declaration of consent.The data you provide is required to fulfill the contract or to carry out pre-contractual measures.Your data will be saved for the duration of the statutory retention period and secured in internal IT systems that correspond to the current state of technology and IT security. After the end of the statutory retention period, your data will be deleted.
   –
8. Smart Host
   Smart Host (Smart Host GmbH, Am Kupfergraben 6A, 10117 Berlin, DE) enables the execution of the guest’s booking; the implementation of the guest’s stay; the coordination of the stay with the guest’s wishes and interests; the possibility of offering services in line with the guest’s interests in the future and marketing measures related to the hotel’s services and improving these services. The guest’s data can be evaluated and processed by service providers and their assistants who offer cloud-based software and data processing solutions for the hotel and on behalf of the hotel (for the above purposes).
   –
9. Spa
   If you reserve treatments in the spa by telephone or in writing, your data will be recorded by our reception staff in the TAC reservation program and processed for the purpose of booking and billing appointments. We have concluded a data processing agreement with TAC. The following data is processed:
   Contact details, booking details, documents related to the treatment(s), additional information and requests according to your declaration of consent.The data you provide is required to fulfill the contract or to carry out pre-contractual measures.Your data is stored for the duration of the statutory retention period and secured in internal IT systems that correspond to the current state of technology and IT security. After the end of the statutory retention period, your data is deleted.
   –
10. VIP chip for thermal spa
    When you purchase a VIP chip for thermal spa entry, treatments and consumption, your data is recorded for the purpose of billing services, information about account balance and consumption. This takes place in the POS system of the company TAC, with whom we have concluded a data processing contract.The following data is processed:
    Contact details, date of birth, log of usage and consumption, additional information and requests according to your declaration of consent.The data you provide is required to fulfill the contract or to carry out contractual measures.Your data will be stored for the duration of the statutory retention period and secured in internal IT systems that correspond to the current state of technology and IT security. After the end of the statutory retention period, your data will be deleted.
    –
11. Application process
    The protection of personal data is important to us. Your personal data is processed in accordance with the applicable data protection regulations. Personal data is collected during the application process. The legal basis is the contract (employment relationship) and the legal basis. We only process personal data that is voluntarily disclosed to us, such as contact details (name, address, telephone number, email, etc.) and all data that is required for identification and processing the application process (date of birth, correspondence, etc.). Possible recipients of your data may be departments of the Heilthermen Resort Bad Waltersdorf as part of the application process. Under no circumstances will data be passed on to third parties. The data is stored throughout the entire application process for a maximum of 1 year after the application. We are happy to keep your documents on file if we receive your permission to do so. Please let us know if you object to this retention period or if we may keep your data on file for a longer period.
    –
12. Your rights
    You generally have the right to information, correction, deletion, restriction, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated in any way, you can complain to the supervisory authority. In Austria, this is the Data Protection Authority.

Heiltherme Bad Waltersdorf GmbH & Co KG
Thermenstr. 111, A-8271 Bad Waltersdorf
Tel. +43 3333 500-0, E-Mail: office@heiltherme.at

You can reach our data protection coordinator at datenschutz@heiltherme.at

Status: September 16, 2024