Privacy Policy

Albert Moser GmbH (Wellnesshotel Eggerwirt; hereinafter referred to as “Eggerwirt” or “we”; further information about Eggerwirt can be found here) is delighted that you are visiting our website. Data protection and data security when using our website are of the utmost importance to us. We would therefore like to take this opportunity to inform you about which of your personal data we collect when you visit our website and for what purposes this data is used.

As changes in the law or changes to our internal company processes may require this privacy policy to be amended, we ask you to read through this privacy policy regularly. The privacy policy can be accessed, saved and printed at any time under Privacy Policy.

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States, as well as other data protection regulations, is:

Albert Moser GmbH (Wellnesshotel Eggerwirt)
FN 184904v, LG Salzburg
Kaltbachstraße 5
5582 St. Michael im Lungau
Österreich
Telephone number: +43 6477/8224-0
Email address: office@eggerwirt.at
Website: https://www.eggerwirt.at/en

This privacy policy applies to the website of Albert Moser GmbH, which is accessible via the domain www.eggerwirt.at and its various subdomains (hereinafter referred to as ‘our website’ or ‘websites’).

Personal data is any information relating to an identified or identifiable natural person (‘data subject’). This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behaviour. Information for which we cannot establish a link to your person (or can only do so with disproportionate effort), e.g. through anonymisation of the information, does not constitute personal data.

a) Scope

We generally collect and use your personal data only if and to the extent that this is necessary to provide a fully functional website and our content and services. Specifically, we use your personal data to provide information on and contact options via our website, furthermore to enable you to purchase our vouchers (gift vouchers as well as DaySpa & Culinary vouchers) and our services (in particular stays/holidays with us) via our website, for the processing and answering of your booking enquiries and other questions as well as your other requests (including [unsolicited] applications), as well as to send you our newsletter and to operate and continuously improve our websites and applications.


The processing of personal data (e.g. collection, retrieval, use, storage or transmission) is always carried out on a legal basis, namely

• on the basis of your consent (Art. 6(1)(a) GDPR), which may be withdrawn at any time (please also refer to Section 14 of this privacy policy), or
• on another legal basis: Where the processing of personal data is necessary for the performance of a contract to which you, as the data subject, are a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures. Where the processing of personal data is necessary to comply with legal obligations to which we are subject, Article 6(1)(c) of the GDPR serves as the legal basis. In the event that, exceptionally, vital interests necessitate the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis. If the processing is necessary to safeguard our legitimate interests (or those of a third party) and your interests, fundamental rights and freedoms do not override the former interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

c) Data erasure and retention period

We process and store your personal data for as long as is necessary to fulfil the respective purpose for which it was collected. As soon as the data is no longer required to fulfil that purpose, it will be deleted, unless its – temporary – (further) processing is required by law or to preserve evidence within the statutory limitation periods.

a) Provision of the website and creation of log files

When you access and use our website, we collect the following personal data, which is technically necessary for us to display our website to you and to ensure the stability and security of our server:

• the website from which you, as a user, visit our website (referrer URL)
• Date and time of your visit
• Name of your internet service provider
• Name and URL of the file accessed
• Your IP address
• Identification data of the browser and operating system you are using
• Websites accessed by your system via our website

Your browser automatically transmits this data to our server. It is temporarily stored in a so-called log file. This data is not stored together with your other personal data. The data is stored in log files to ensure the website functions properly. Furthermore, the data enables us to optimise the website and ensure the security of our IT systems. The data is not analysed for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR. The collection of data for the provision of the website and the storage of data in log files is strictly necessary for the operation of the website. Consequently, the user has no right to object.

As soon as the aforementioned data is no longer required for the provision of the website, it is generally deleted. Log files are deleted after seven days. Further storage may take place in individual cases where this is required by law (Article 6(1)(c) of the GDPR).

For information on the use of cookies, please also refer to Section 8 of this privacy policy.


On our website, we offer you the option of contacting us via the email address provided or via our contact forms. If you make use of this option, the data you enter or otherwise provide will be transmitted to us and subsequently processed by us in order to respond to your booking enquiries and other questions addressed to us in this way, as well as to your other requests.

If you write to our email address, we will process the personal data you provide to us in this context. This includes your email address (and, where applicable, your first name and surname) as well as any personal data provided or contained in your individual message (including any attachments).

If you use the contact form on our website under ‘Request’ (‘Inquire without obligation’), we will process the following personal data:

• Details of your (planned) stay ([optional: latest] arrival and departure dates, optional: length of stay),
• Details of your (desired) accommodation (number of adults/children, optional: room category [special room request], optional: special offer [special offer request], optional: type of catering),
• Personal details (title, first name, surname, email address, optional: mobile number),
• Optional: data provided by you in the free text field “Comments (requests/remarks)”, as well as
• Information on whether you wish to receive our newsletter,
• Your IP address, date and time at the time your message was sent.

If you use the ‘Initiativbewerbung’/’Stellenangebote’ web pages, we process the following personal data:

• Personal details (title, first name, surname, email address, telephone number),
• the data you provide in the free-text field “Comments (requests/remarks)” and in any files you upload,
• for applications for a specific job vacancy: the position you are applying for,
• your IP address, and the date and time when you sent your message.

In this context, the processing of your personal data serves to handle and respond to your booking enquiries and other questions sent to us by email or via our contact forms, as well as to address any other concerns you may have. This is carried out on the legal basis of Article 6(1)(b) of the GDPR, provided it serves the purpose of implementing pre-contractual measures; otherwise, on the legal basis of Article 6(1)(f) of the GDPR (for the purpose of maintaining relationships with prospective and existing customers). Data transmitted to us in connection with your contact (e.g. IP address, date and time when your message was sent) is also processed on the basis of Article 6(1)(f) of the GDPR (to prevent misuse, to ensure the security of our IT systems and to compile usage statistics).

Only the information marked as such (“mandatory fields”) and the selection of a title in the contact forms on the ‘Initiativbewerbung’/’Stellenangebote’ web pages are mandatory in order to contact us via our website. Naturally, there are no adverse consequences if you choose not to provide voluntary data.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data provided to us via email or a contact form, this is the case once the conversation initiated by your enquiry has been concluded. The conversation is deemed concluded when it is clear from the circumstances that the matter in question has been definitively clarified, answered or dealt with.

However, if a (potential) contractual relationship (e.g. a hotel booking, an employment contract with us) or another necessity arises from the conversation with you, we will continue to process the data for these purposes. In this case, the personal data will be deleted as soon as it is no longer required for the fulfilment of (pre-)contractual and legal obligations regarding its further retention (Art. 6(1)(c) GDPR). Applicant data is retained for seven months after the conclusion of the application process; any retention beyond this period will only take place with your consent.


On our websites, we offer you the option of ordering vouchers (gift vouchers and DaySpa & Culinary vouchers) as well as services (stays/holidays with us) by entering your personal data into the input fields provided for this purpose. If you make use of this option, the data you enter or otherwise provide will be transmitted to us and subsequently processed by us in order to complete the resulting order transactions.

If you use the ‘Voucher’ form (‘Eggerwirt-Gutscheine schenken’) on our website, we process the following personal data:

• for gift vouchers: amount of the gift voucher (in EUR), design (motif), greeting message, number of gift vouchers, if applicable: discount code,
• for DaySpa & Culinary vouchers: selected voucher and the services it covers (e.g.: “Frühstücksgutschein”, “Day Relax 1”), number of people, greeting message, if applicable: discount code,
• Personal details (title, optional: surname, first name, email address, optional: telephone number, optional: date of birth, address [street/no., postcode, town, country], optional: alternative billing address [title, surname, first name, street/no., postcode, town, country, company name]),
• payment details (credit card),
• your IP address, date and time at the time your order was submitted.

When you use the “Book” form on our website, we process the following personal data:

• selection made: “Online booking”, “LAST MINUTE Offers” or “Special offers”,
• for “Online booking”: occupancy, arrival and departure dates, if applicable: flexibility regarding travel dates (in days), room selection (category),
• for “LAST MINUTE Offers”: desired length of stay in nights or indication of being “flexible”, month, occupancy,
• for “Special offers”: selected offer and associated services (e.g. “Golf Short Stay”), occupancy, arrival and departure dates, if applicable: flexibility regarding travel dates (in days), room selection (category),
• personal details (title, first name, surname, email address, optional: mobile number, address [street, postcode, town, country], optional: company invoice [company name, street, postcode, town, country, VAT No./UID No.]),
• optional: data provided by you in the free text field “Comments (requests/remarks)”,
• information on whether you wish to receive our newsletter,
• your IP address, date and time at the moment your message was sent.

In this context, the processing of your personal data serves the purpose of carrying out pre-contractual measures and is therefore based on Article 6(1)(b) of the GDPR. Furthermore, in individual cases, it is based on the legal basis of Article 6(1)(f) of the GDPR (for the purpose of maintaining relationships with prospective and existing customers, as well as for processing data provided in the free-text field ‘Comments (requests/remarks)’, which is not directly related to the implementation of pre-contractual measures). Data transmitted to us in connection with your contact (e.g. IP address, date and time at the time your message was sent) is also processed on the basis of Article 6(1)(f) of the GDPR (to prevent misuse, to ensure the security of our IT systems and to compile usage statistics). Where the processing of personal data is necessary to fulfil legal obligations incumbent upon us, Article 6(1)(c) of the GDPR serves as the legal basis.

Only the information marked as such (“mandatory fields”) is required in order to purchase our vouchers and services via our website. Naturally, there are no adverse consequences associated with not providing voluntary data.

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. It will therefore generally be deleted as soon as it is no longer required to fulfil (pre-)contractual and legal obligations regarding its continued retention (Article 6(1)(c) of the GDPR). Personal data that is not directly related to the implementation of [pre]contractual measures will be deleted as soon as the relevant conversation initiated by the data subject has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified, answered or dealt with.


On our website, you have the option to subscribe to our free electronic newsletter. You can subscribe to our newsletter by ticking the relevant checkbox in the ‘Request’ contact form or the ‘Book’ form; or by signing up for our newsletter on our website’s homepage. You also have the option to subscribe to our electronic newsletter when you check in with us.

When you register for the newsletter via the aforementioned contact or input form, the data provided there is transmitted to us (please refer to sections 5 b) and c) of this privacy policy above).

If you sign up for our newsletter on our website’s homepage, we process the following personal data:

• preferred topics (e.g. ‘all’, ‘wellness’, ‘families’, ‘active’),
• first name,
• surname,
• email address,
• your IP address, date and time at the time your message was sent.

If you subscribe to our newsletter when you check in with us, we process the following personal data:

• first name,
• surname,
• email address,
• language.

To prevent unauthorised third-party subscriptions, we use the so-called double opt-in procedure for newsletter sign-ups. This means that, once you have signed up, we will first send you an email asking you to confirm your subscription. If you do not confirm your registration within 24 hours of receiving this email, the data provided for newsletter registration will be blocked by us and automatically deleted after one week.

The legal basis for processing your personal data for the purpose of sending you our newsletter is, in these cases, your consent (Art. 6(1)(a) GDPR). You may withdraw your consent(s) at any time with future effect in any form, e.g. by email to office@eggerwirt.at or by any other means of communication (our contact details can be found above under Section 2 of this privacy policy). You may also withdraw your newsletter subscription at any time by clicking on the unsubscribe link at the end of each of our newsletters. The lawfulness of the processing carried out on the basis of consent until the withdrawal remains unaffected by the withdrawal.

We also send our electronic newsletter to our existing and former customers to enable them to stay up to date with the best offers and news from the Eggerwirt, as well as sporting and cultural highlights in the region. To this end, we process the following data:

• Date and time of registration
• Email address
• First name
• Surname

The legal basis for processing your personal data to send you our newsletter is, in this case, our legitimate interest (Art. 6(1)(f) GDPR, for the purposes of maintaining our customer relationships and promoting our services) in conjunction with Section 174(4) of the Telecommunications Act 2021.

We ensure that we have obtained your email address in connection with the sale of goods or services to you, that the email is sent for the purpose of direct marketing of our own similar products or services, and that you are given the opportunity to object to this use of your email address free of charge and without difficulty at the time of collection and on each occasion it is transmitted.

You have the right to object at any time to the processing of your personal data carried out on the legal basis set out in Article 6(1)(f) of the GDPR. The objection may be made in any form, e.g. by email to office@eggerwirt.at or by any other means of communication to us or our Data Protection Officer (our contact details can be found above in Section 2 of this Privacy Policy). You may also object at any time by clicking on the unsubscribe link at the end of each of our newsletters.

Following a successful revocation or objection, your personal data, which we have collected for the purpose of sending you our newsletter, will be deleted within ten days at the latest. The data collected during the sending process of your message (IP address, date and time) will be deleted within seven days at the latest.


In order to optimise our online offering and to promote our vouchers and services on the basis of your interests, we invite you – when you purchase our vouchers or services, or when you make a booking enquiry – to help us measure the effectiveness of our marketing activities. Your participation is voluntary and takes place only with your prior consent.

If you give us your consent to do so, we will process the following personal data in this context:

• First name
• Surname
• Email address
• Telephone number
• IP address
• User-Agent (this is information about your device, operating system and the browser used, so that the website can be displayed correctly.)
• Timestamp
• Page URL (currently viewed webpage) and referrer (previously visited webpage)
• Consent status (details of which consents [e.g. regarding cookies or tracking] you have granted or declined)
• Pageviews (counts how often individual pages of our website are viewed)
• Purchases and leads (purchases and enquiries from prospective customers)
• Browser or click ID from Meta

This personal data is collected on our behalf by our service provider Stape Europe OÜ (Sepapaja tn 6, Tallinn 15551, Estonia, https://stape.io – privacy policy at https://stape.io/eu-gdpr) on our behalf and subsequently pseudonymised in a non-reversible (one-way) manner before being forwarded in this form to Meta Platforms, Inc. (1 Meta Way, Menlo Park, CA 94025, USA, https://www.meta.com/de-de/about/ – Privacy Policy at https://www.meta.com/de-de/actions/protecting-privacy-and-security/) and to Google LLC (1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA, https://about.google/ – privacy policy at https://policies.google.com/). The legal basis for these transfers is the EU-US Data Privacy Framework in each case. These two companies analyse the pseudonymised data and provide us with information derived from it, which helps us to better understand and improve the effectiveness of our marketing campaigns.

 The legal basis for the processing of your personal data for the purpose of carrying out our performance campaigns is your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time with future effect. To do so, you can adjust the relevant settings in the cookie banner by clicking on the following link: Privacy Settings


Access to your personal data is restricted to those members of staff who require it to perform their duties at Eggerwirt, to safeguard our legitimate interests, or to fulfil the contractual or legal obligations incumbent upon us.

In addition, we transfer your personal data to the following bodies or persons for the following purposes:

• External service providers:
  We work with the following external service providers in order to utilise their specialist expertise and services to provide the best possible service: (i) IT & software service providers and (ii) marketing agencies.
  
  Insofar as the aforementioned external service providers are not themselves controllers within the meaning of Article 4(7) of the GDPR, they process your personal data as so-called processors on our behalf in accordance with Article 28 of the GDPR. These processors act exclusively in accordance with our instructions and are obliged to comply with all data protection regulations.'
  
  
• Public authorities:
  In exceptional cases, we may transfer personal data to courts, supervisory and financial authorities and other public bodies in accordance with relevant legal provisions (e.g. upon the order of a law enforcement authority).

§ 6 Data transfers to a third country or an international organisation

Any transfer of your personal data to countries outside the European Union or the European Economic Area (so-called third countries) or to international organisations shall take place exclusively where this is necessary to fulfil contractual or pre-contractual obligations, where there is a legal obligation to do so (e.g. in the context of tax reporting obligations) or where you have given us your express consent (e.g. in connection with the use of cookies, comparable technologies or tracking tools).


We use so-called cookies. Cookies are small text files that store and/or read a wide variety of information on the user’s computer when our website is accessed. Cookies cannot execute programs or transmit viruses to your computer. Cookies help to make the content on our website more user-friendly and efficient overall.

The cookies used on our website are divided into the following categories: Essential, Functional, Marketing, Statistics and Other. An overview of these categories, along with a detailed description of the respective cookies or similar data processing activities, was displayed when you visited our website. You can view the cookie banner again at any time by clicking on the following link: Privacy Settings

Cookies in the Essential category are indispensable for the operation of the website. They ensure that our website is displayed correctly and that user-friendly, efficient and secure access is guaranteed. The legal basis for the processing of these cookies is derived from the exemption provision set out in the Telecommunications Act (Section 174 TKG 2021) and our legitimate interest pursuant to Article 6(1)(f) of the GDPR.

All other cookies in the Functional, Marketing, Statistics and Other categories are used to personalise content and advertisements, recognise website visitors, provide social media features, carry out statistical analyses, support marketing activities via web tracking tools, and tailor offers more effectively. If, when accessing the website, you have consented to the use of cookies of this type on our website by selecting the relevant categories and confirming your choice (Accept All), these cookies will be stored on your device. The legal basis for the processing of these cookies is therefore Article 6(1)(a) of the GDPR. If you have not given your consent, such cookies will not be used. You may withdraw your consent at any time. To do so, you can adjust the relevant settings in the cookie banner by clicking on the following link: Privacy Settings

The storage period for cookie data is specified in detail in the description of the individual cookies in the cookie banner. You can access the cookie banner again at any time by clicking on the following link: Privacy Settings

Most browsers are set by default to accept cookies automatically. However, you can configure your browser to accept only certain cookies or none at all. Please note that, in this case, you may not be able to use all the features of our website.

You can also use your browser settings to delete cookies that have already been stored or to set your browser to notify you before cookies are stored. As the functions vary depending on the browser, we recommend using your browser’s help menu to find out the exact configuration options.

If you would like a comprehensive overview of all third-party access to your browser, you can install specially designed plug-ins for this purpose.


Our websites contain social plugins from the social networks Facebook, Instagram (both Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), YouTube and Google (both Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). It is possible that these plugins may also collect personal data about visitors to the websites, transmit this data to the respective service and link it to the visitor’s respective account.

The respective service provider receives the information that you have visited the relevant page of our website. Please note that you do not need to have a user account with the service in question for this to happen, nor do you need to be logged in there. However, if you already have a user account with the relevant service provider and are logged into that account whilst visiting our website, the data collected by the social plugin will be directly linked to your account. If you do not wish for this data to be linked to your profile with the service provider, you must log out of your user account before clicking on any of the social plugins.

Please note that we have no influence over whether, or to what extent, the respective service providers collect personal data. We are not aware of the scope, purpose or retention periods of the respective data collection. However, we would like to point out that it must be assumed that social plugins use and collect at least your IP address and device-related information. It is also possible that the respective service providers use cookies.

For details of the scope and purpose of data collection by the respective service, as well as the further processing and use of your data there, please refer to the privacy policy directly on the website of the respective service. There you will also find further information about your relevant data protection rights and settings options for protecting your privacy.

a) Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

• https://facebook.com/policy.php
• https://facebook.com/help/186325668085084

b) Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

• https://google.com/policies/privacy/partners/

You can also access the individual services referred to in Section 9, along with any further explanations, at any time via the cookie banner by clicking on the following link: Privacy Settings

Note on joint controllership (Art. 26 GDPR): According to European case law, there is joint controllership with the respective EEA service providers (in particular Meta Platforms Ireland Limited) for the phase of data collection and transmission via social plugins. We have concluded corresponding contractual agreements on joint controllership for this purpose and agree to the standard terms of service for the providers’ business tools.

a) Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). Google Analytics uses ‘cookies’, which are text files placed on your computer, to help the website analyse how users use the site.

The information generated by these cookies, such as the time, location and frequency of your use of this website, is usually transmitted to a Google server in the USA and stored there. When using Google Analytics, it cannot be ruled out that the cookies set by Google Analytics may collect further personal data in addition to the IP address. Please note that Google may transfer this information to third parties where required to do so by law, or where such third parties process the data on Google’s behalf.

Google will use the information generated by cookies on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services relating to website and internet usage. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

You can generally prevent the storage of cookies by adjusting your browser settings accordingly. However, we would like to point out that, in this case, you may not be able to make full use of all the functions of this website.

It cannot be ruled out that the cookies set by Google Analytics may collect further personal data in addition to the IP address. To prevent information about your use of the website from being collected by Google Analytics and transmitted to Google Analytics, you can download and install a plugin for your browser via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

This plugin prevents information about your visit to the website from being transmitted to Google Analytics. This plugin does not prevent any other form of analysis.

Please note that you cannot use the browser plug-in described above when visiting our website via a mobile device (smartphone or tablet). When using a mobile device, you can prevent Google Analytics from collecting your usage data by clicking on the following link: Privacy Settings


By clicking on this link, you can install an extension for your browser. This prevents information about your visit to the website from being sent to Google Analytics.

You can also access the individual services referred to in Section 10, along with any further explanations, at any time via the cookie banner by clicking on the following link: Privacy Settings

a) Nature and scope of data processing

We use Meta’s Visitor Action Pixel on our website. This allows the behaviour of users to be tracked after they have been redirected to the provider’s website by clicking on a Meta advertisement. This process serves to evaluate the effectiveness of Meta advertisements for statistical and market research purposes and may help to optimise future advertising measures.

The data collected is anonymous to us, meaning it does not allow us to identify individual users. However, the data is stored and processed by Meta, enabling a link to be established with the relevant user profile, and Facebook may use the data for its own advertising purposes in accordance with Meta’s Data Use Policy (www.meta.com/about/privacy). You can allow Meta and its partners to display advertisements on and outside of Meta. A cookie may also be stored on your computer for these purposes.

Consent to the use of the visitor action pixel may only be given by users who are over 14 years of age.


The data processing described for the purposes of the visitor action pixel is carried out in accordance with a declaration of consent provided voluntarily pursuant to Article 6(1)(a) of the GDPR.

Note on joint controllership (Article 26 GDPR): There is joint controllership with Meta Platforms Ireland Limited regarding the collection and transmission of data in connection with the visitor action pixel. The key terms and obligations are set out in the Page Controller Addendum and the Terms of Service for Meta Business Tools.


We are committed to protecting your privacy and treating your personal data as confidential. To prevent the loss or misuse of the data stored by us, we implement comprehensive technical and organisational security measures, which are regularly reviewed and adapted to technological advancements. However, we would like to point out that, due to the structure of the internet, it is possible that data protection rules and the aforementioned security measures may not be observed by other persons or institutions outside our sphere of responsibility. In particular, data disclosed in unencrypted form – e.g. via email – may be read by third parties. We have no technical influence over this. It is the user’s responsibility to protect the data they provide against misuse, whether through encryption or by other means.


Our website contains hyperlinks to websites operated by other providers. When you click on these hyperlinks, you will be redirected directly from our website to the website of the other provider. You can recognise this, amongst other things, by the change in the URL. We cannot accept any responsibility for the confidential handling of your data on these third-party websites, as we have no influence over whether these companies comply with data protection regulations. Please refer directly to these websites for information on how these companies handle your personal data.


In accordance with Article 15 of the GDPR, you may request information about the personal data we process about you. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the intended storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data where it was not collected by us, any transfer to third countries or to international organisations, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details.

You may, in accordance with Article 16 of the GDPR, request the immediate rectification of inaccurate personal data or the completion of your personal data stored by us.

You may, in accordance with Article 17 of the GDPR, request the erasure of your personal data stored by us, provided that the processing is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

Under Article 18 of the GDPR, you may request the restriction of the processing of your personal data where you contest the accuracy of the data, the processing is unlawful, we no longer require the data, and you object to its erasure because you need it to establish, exercise or defend legal claims. You are also entitled to the right under Article 18 of the GDPR if you have objected to the processing in accordance with Article 21 of the GDPR.

In accordance with Article 20 of the GDPR, you may request to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or you may request that it be transferred to another controller.

Pursuant to Article 7(3) of the GDPR, you may withdraw your consent at any time. This means that we may no longer continue the data processing based on this consent in the future. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent prior to its withdrawal.

Under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a general rule, you may contact the supervisory authority for your usual place of residence, your place of work or our registered office. In Austria, the supervisory authority is the Data Protection Authority, Barichgasse 40-42, 1030 Vienna, telephone number: +43 1 52 152-0, email address: dsb@dsb.gv.at, website: www.dsb.gv.at.


If you do not provide us with the aforementioned personal data, we will be unable to process it. In this case, certain purposes for which the respective data is required may not be fulfilled.


We do not use automated decision-making within the meaning of Article 22 of the GDPR.