Data Protection

Who is responsible for data processing?
Who can you contact if you have any questions about data processing or exercising your rights as a data subject?

Responsible for data processing:

Naturpark NÖ Eisenwurzen
Chairwoman Christina Forsthuber

Walcherbauer 2
3343 Hollenstein an der Ybbs
Telephone: +43 (0) 664/543 68 08
Email: naturpark-eisenwurzen@gmail.com

We process the personal data that we receive from you in the course of a business relationship or that you provide to us with your consent. This includes, amongst other things, newsletter subscriptions, requests for brochures, orders for vouchers/cellar houses, booking enquiries, competitions, registration for the events database or POI database (users), and contact enquiries.

Personal data includes:

• Private individuals: name, address, contact details (email, telephone), country
• Employees of organisations and partner companies: In the context of business-to-business relationships, in addition to the data mentioned above, the company or organisation is also collected and stored.

Furthermore, in individual cases, the following data may also be included in the personal data:

• Image data in connection with competitions
• Data arising from the fulfilment of our contractual obligations
• Data for the fulfilment of pre-contractual measures

For what purposes is the data processed? What is the legal basis for this processing?

Your personal data is processed exclusively in accordance with data protection regulations:

To fulfil contractual obligations and, where applicable, to carry out pre-contractual measures (Art. 6(1)(b) GDPR)
The processing of your personal data is necessary in order to fulfil the enquiries and orders you have submitted in specific cases.

The purposes of data processing depend primarily on the specific enquiry or order and include, amongst other things:

• Sending information materials (brochures, road maps, etc.)
• Sending of ordered vouchers by post or electronically via email
• Delivery of other orders
• Notifying winners and sending prizes in connection with competitions
• Transmission of data to hosts/providers and excursion destinations for the processing of non-binding enquiries

Within the scope of your consent (Art. 6(1)(a) GDPR)
If you have given us your consent to process your personal data, this data will only be processed in accordance with the purposes set out in this declaration of consent and to the extent agreed.

Any consent you have given may be withdrawn at any time with immediate effect. The lawfulness of the processing carried out on the basis of your consent up to the time of your withdrawal remains unaffected. Either directly in the newsletter or by email to naturpark@hollenstein.at

• To safeguard our legitimate interests (Art. 6(1)(f) GDPR)

In selected individual cases, in connection with the protection of the legitimate interests of Naturpark NÖ Eisenwurzen, your data may be stored and processed beyond the fulfilment of the business relationship. In this regard, however, you will always be informed of your opt-out option.

This specific case is:

• Following an electronic or telephone request for an information brochure, we reserve the right to send you (provided you do not already have an active subscription) important information from the Naturpark NÖ Eisenwurzen by email or post, free of charge and without obligation.

How long will your data be stored and processed?

We store and process your personal data for the duration of the ongoing customer relationship (including for direct marketing purposes) or until the relevant consent is withdrawn. Furthermore, the storage period must comply with the statutory accounting retention periods, e.g. the seven-year retention obligation for accounting documents and records.

Who receives your data? To whom is your data transferred outside the Lower Austria Eisenwurzen Nature Park?

Within the Lower Austria Eisenwurzen Nature Park, access to your personal data is granted to those departments or employees who

What data protection rights do you have as a data subject?

As a data subject, you have the following rights at any time:

• Access, rectification, erasure or restriction of the processing of your stored data (following clear identification via a valid identity document).
• Objection to processing and use for direct marketing purposes.
• Data portability in accordance with the requirements of data protection law.

Right to confirmation

As a data subject, you have the right to request confirmation from us (following clear identification via a valid ID document) as to whether we are processing personal data relating to you. You may contact us at any time at naturpark@hollenstein.at.

Right of access

As a data subject, you have the right to receive from us (following clear identification via a valid ID document) free of charge at any time information regarding the personal data stored about you and a copy of this information. You can contact us at any time at naturpark@hollenstein.at.

Your right to access information includes the following details:

• the purposes of processing,
• the categories of personal data processed by us,
• the recipients or categories of recipients to whom the personal data has been or will be disclosed,
• where possible, the envisaged period for which your personal data will be stored, or, if this is not possible, the criteria used to determine that period,
• the existence of your right to rectification or erasure of the personal data concerning you, or to restriction of processing by us as the controller, or your right to object to such processing
• the existence of a right to lodge a complaint with the Austrian Data Protection Authority as the supervisory authority
• where your personal data has not been collected from you as the data subject: all available information regarding the origin of such data

In the course of operating our websites, we engage software service providers and agencies which may gain access to your personal data in the course of their activities. These parties have undertaken to comply with the applicable data protection regulations. You may request further information regarding the service providers we engage at naturpark@hollenstein.at.

Furthermore, as a data subject, you have the right to be informed whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you, as a data subject, have the right to be informed of the appropriate safeguards relating to the transfer.

Right to rectification

As a data subject, you have the right to request that we (following clear identification via a valid identity document) rectify any inaccurate personal data concerning you without delay. You may contact us at any time at naturpark@hollenstein.at for this purpose.

Right to erasure (right to be forgotten)

As a data subject, you have the right to request from us (following clear identification via a valid identity document) that personal data concerning you be erased without undue delay, provided that one of the following grounds applies and insofar as processing is not necessary:

• Your personal data has been collected for purposes for which it is no longer necessary.
• As a data subject, you withdraw your consent on which the processing was based pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
• As a data subject, you object to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or as a data subject, you object to the processing pursuant to Article 21(2) of the GDPR.
• Your personal data has been processed unlawfully.
• The erasure of your personal data is necessary for compliance with a legal obligation under Union law or the law of the Republic of Austria to which we, as the controller, are subject.

If any of the above reasons apply and you, as a data subject whose personal data is stored by the Naturpark NÖ Eisenwurzen, wish to request the erasure of this data, you may contact us at any time at naturpark@hollesntein.at.

Right to restriction of processing

As a data subject affected by the processing of personal data, you have the right to request that we, as the data controller (following clear identification via a valid identity document), restrict the processing if one of the following conditions applies:

• You, as the data subject, contest the accuracy of the personal data, for a period enabling us, as the data controller, to verify the accuracy of your personal data.
• The processing is unlawful, and you, as the data subject, object to the erasure of your personal data and instead request the restriction of the use of your personal data.
• We, as the controller, no longer require your personal data for the purposes of processing, but you, as the data subject, require it for the establishment, exercise or defence of legal claims.
• You, as the data subject, have objected to the processing pursuant to Article 21(1) of the GDPR, and it has not yet been determined whether the legitimate grounds of the controller override those of the data subject.

If any of the above reasons apply and you, as a data subject whose personal data is stored by the Naturpark NÖ Eisenwurzen, wish to request the restriction of the processing of this data, you may contact us at any time at naturpark@hollesntein.at.

Your right to data portability

As a data subject, you have the right to receive the personal data concerning you, which you as the data subject have provided to us as the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, as a data subject, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to have your personal data transmitted directly by us, as the controller, to another controller, provided this is technically feasible and provided that this does not adversely affect the rights and freedoms of others.

To exercise your right to data portability, you may contact us at any time at naturpark@hollesntein.at.

Right to object

As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Article 6(1)(e) or (f) of the GDPR. You may contact us at any time at naturpark@hollesntein.at.

Where we process your personal data for the purposes of direct marketing, you, as the data subject, have the right to object at any time to the processing of your personal data for the purposes of such marketing.

Right to lodge a complaint

If you believe that the data processing is not lawful, we would first appreciate it if you could contact us directly. Irrespective of this, as a data subject, you have the right to lodge a complaint with the Austrian Data Protection Authority as the supervisory authority. You can contact the Data Protection Authority at https://www.dsb.gv.at.

Are you obliged to provide data?

Your personal data is required in order to carry out the request you have made (e.g. ordering vouchers, ordering information material, processing a booking) and to fulfil the resulting contract or pre-contractual measures. If you do not wish to provide us with this data, we will unfortunately be unable to carry out your request.

In any case, you are not obliged to give consent to the processing of data that is not relevant to the fulfilment of the contract (e.g. when taking part in a competition, you do not have to give consent to receive the newsletter (your consent is optional)).

Cookies, Google Analytics, Google reCAPTCHA and Google Fonts

General:
When you access this website, Niederösterreich-Werbung GmbH stores information about your visit (date, time, page viewed). This data is used exclusively for statistical purposes and is only analysed in anonymised form.

In detail:

Cookies

This website uses cookies. We use cookies to enable the website’s functionality, statistics and content tailored to your interests. This data is only shared in pseudonymised form. By clicking on ‘Accept cookies’, you can continue to use our website to its full extent. With your consent, these cookies are also processed and used by third-party providers in the USA. There is currently no adequate level of data protection in the USA, and it cannot be ruled out that government security authorities may issue orders to third-party providers (Google and Meta Platforms, Inc.) to gain access to data for control and surveillance purposes. There are no effective legal remedies or means of legal protection against this. Furthermore, the US does not provide adequate safeguards for the protection of personal data. We only pass on your IP address (in truncated form, so that no unique identification is possible) and technical information such as browser, internet service provider, device and screen resolution to Google or Meta. Further details regarding cookies and how to disable them at a later date can be found under Website Use – Cookies.

Google Analytics

Provided you have given your consent, Google Analytics is used on this website. Niederösterreich-Werbung GmbH uses Google Analytics to analyse website usage. The data obtained from this is used to optimise the website and advertising measures, and to compile reports on website activity. The reports provided by Google Analytics serve to analyse the performance of our website and the success of our marketing campaigns. Further information on Google Analytics can be found online or at www.google.com/analytics. Further information on terms of use and data protection can be found at https://policies.google.com/?hl=de.

Google Analytics is a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). Google processes website usage data on our behalf and is contractually obliged to take measures to ensure the confidentiality of the processed data.

During your visit to the website, the following data, amongst other things, is recorded:

• The pages you visit, your “click path”
• Your behaviour on the pages (e.g. clicks, scrolling behaviour and time spent on the site)
• Your approximate location (country and city)
• Your IP address (in truncated form, so that no unique identification is possible)
• Technical information such as browser, internet service provider, device and screen resolution
• The source of your visit (i.e. via which website or advertising medium you arrived at our site)
• The referrer URL (via which website or advertising material you arrived at this website)

This data is transferred to a Google server in Europe and stored there.

Recipients
The recipient of the data is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) acting as a data processor. To this end, Niederösterreich-Werbung GmbH has concluded a data processing agreement with Google. Google LLC, based in California, USA, and, where applicable, US authorities may access the data stored by Google.

Transfer to third countries
A transfer of data to the USA cannot be ruled out.

Retention period
Google Analytics stores cookies in your web browser for a period of 14 months from your last visit. These cookies contain a randomly generated user ID, which allows you to be recognised during future visits to the website.

The recorded data is stored together with the randomly generated user ID, which enables the analysis of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form indefinitely.

The legal basis and option to withdraw consent
for this data processing is your consent, Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings mentioned above and changing your selection there.

You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Google Analytics (with anonymisation function)
We have implemented IP address anonymisation for Google Analytics on this website. This function was developed by Google to enable this website to comply with applicable data protection regulations and the recommendations of local data protection authorities where these prohibit the storage of the full IP address. The anonymisation or masking of the IP address takes place as soon as the IP addresses enter the Google Analytics data collection network and before the data is stored or processed. You can find more information on IP anonymisation at https://support.google.com/analytics/answer/2763052?hl=de.

Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags via a single interface. The tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in effect for all tracking tags implemented using Google Tag Manager.

Google Ads Remarketing
We use the remarketing feature within the Google Ads service. The remarketing feature allows us to present users of our website with advertisements based on their interests on other websites within the Google advertising network (in Google Search or on YouTube, so-called ‘Google Ads’, or on other websites). To do this, user interaction on our website is analysed – for example, which offers the user has shown an interest in – so that we can display targeted advertising to users on other sites even after they have visited our website. To this end, Google stores a number in the browsers of users who visit certain Google services or websites within the Google Display Network. This number, known as a “cookie”, is used to record these users’ visits. This number serves to uniquely identify a web browser on a specific device and not to identify a person; personal data is not stored.

You can prevent participation in this tracking process in various ways:

a) by adjusting the settings of your browser software; in particular, blocking third-party cookies means you will not receive adverts from third-party providers;

b) by installing the plug-in provided by Google via the following link: https://www.google.com/settings/ads/plugin

c) by disabling interest-based ads from providers participating in the ‘About Ads’ self-regulatory campaign via the link http://www.aboutads.info/choices; please note that this setting will be reset if you clear your cookies

d) By adjusting your cookie settings accordingly (see the section on cookies above). Please note that in this case, you may not be able to make full use of all the features of this website.

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

Google Ads Conversion
We use Google Ads Conversion to draw attention to our attractive offers on external websites using advertising materials (so-called Google Ads). We can determine how successful individual advertising measures are based on the data from the advertising campaigns. We use this to show you adverts that are of interest to you, to make our website more appealing to you, and to ensure a fair calculation of advertising costs.

If you arrive at our website via a Google advert, Google Ads will store a cookie on your device. These cookies generally expire after 30 days and are not intended to identify you personally. The following data is generally stored in this cookie as analytical metrics: the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions), and opt-out information (indicating that the user no longer wishes to be targeted).

These cookies enable Google to recognise your web browser. If a user visits specific pages on an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user clicked on the advert and was redirected to that page. Each Ads customer is assigned a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers. We ourselves do not collect or process any personal data in the advertising measures mentioned. We are merely provided with statistical analyses by Google. Based on these analyses, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising materials; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence over the scope and further use of the data collected by Google through the use of this tool and therefore inform you in accordance with our current knowledge: Through the integration of Ads Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on one of our adverts. If you are registered with a Google service, Google may associate the visit with your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider may obtain and store your IP address.

Google Analytics advertising features In addition to the
standard features, we also use the advanced features of Google Analytics on this website. The Google Analytics advertising features implemented on this website include:

• Reports on impressions on the Google Display Network
• Google Analytics reports on performance by demographic characteristics and interests
• Integrated services for which data is collected in Google Analytics for advertising purposes, including the collection of data via ad preferences cookies and anonymous identifiers

For this purpose, in addition to the data collected by the Google Analytics analysis tool, further data regarding visits is collected via Google advertising cookies and anonymous identifiers. We use this information to improve our website.

You can prevent the use of Google Analytics advertising features in various ways:

a) by adjusting the settings in your browser software

b) via the Google Ads settings at https://www.google.com/ads/preferences/?hl=de

c) by adjusting your cookie settings (see above)

d) by opting out on the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

Please note that in this case, you may not be able to make full use of all the features of this website.

Captcha.eu
To protect the information transmitted via our web forms, this website uses the “Captcha.eu” service provided by Captcha GmbH, Muthgasse 2, 1190 Vienna. The query serves to distinguish whether the input is made by a human or, abusively, through automated, machine-based processing. The processing is carried out in our legitimate interest to prevent automated entries by bots (Art. 6(1)(f) GDPR). To this end, the IP address of your internet gateway, the type and model of your device, and the type and model of your browser are transmitted to Captcha GmbH, and the time between keyboard and mouse movements is measured. A data processing agreement has been concluded with Captcha GmbH. Captcha GmbH is therefore not permitted to use the transmitted data for its own purposes. The processing of the data takes place exclusively within the European Union.

Google Fonts External fonts, Google
Fonts, are used on this website. Google Fonts is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). However, we have integrated the external fonts locally, i.e. on our web server. As a result, there is no connection to Google’s servers and therefore no data transfer to the USA.

YouTube Components from YouTube
are integrated into this website. YouTube is an internet video portal that allows video publishers to upload video clips free of charge and enables other users to view, rate and comment on them, also free of charge. YouTube permits the publication of all types of videos, which is why complete films and television programmes, as well as music videos, trailers or user-generated videos, are available via the internet portal.

The operator of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time a user accesses one of the individual pages of this website, which is operated by the data controller and on which a YouTube component (YouTube video) has been integrated, the web browser on the data subject’s IT system is automatically prompted by the respective YouTube component to download a display of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/abgerufen. As part of this technical process, YouTube and Google become aware of which specific subpage of our website is being visited by the data subject.

If the data subject is logged into YouTube at the same time, YouTube recognises which specific subpage of our website the data subject is visiting when a subpage containing a YouTube video is accessed. This information is collected by YouTube and Google and associated with the data subject’s respective YouTube account.

YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged into YouTube at the same time as accessing our website; this occurs regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not wish for this information to be transmitted to YouTube and Google, they can prevent such transmission by logging out of their YouTube account before visiting our website.

The privacy policy published by YouTube, which is available at https://www.google.de/intl/de/policies/privacy/, provides information on the collection, processing and use of personal data by YouTube and Google.

Adform
This website uses the online marketing tool Adform from Adform A/S, Denmark. Adform uses cookies to display ads relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Using a cookie ID, Adform records which ads are displayed in which browser and can thus prevent them from being shown multiple times. Furthermore, Adform can use cookie IDs to track so-called conversions related to ad requests. This is the case, for example, when a user sees an Adform advert and later visits the advertiser’s website using the same browser and performs an action there. The information obtained in this way may be used by Niederösterreich-Werbung and its tourism industry partners for Adform adverts. According to Adform, Adform cookies do not contain any personal information such as email addresses, names or addresses.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Adform server. Through the integration of the Adform cookie, Adform receives the information that you have visited the relevant part of our website or clicked on one of our adverts.

Furthermore, the Adform cookies used enable us to understand whether you perform certain actions on our website after viewing or clicking on one of our display/video adverts on another platform via Adform (conversion tracking). Adform uses this cookie to understand the content with which you have interacted on our websites, so that it can later send you targeted advertising.

Our website also uses cookies and products from Adform A/S (ad server, DSP and DMP) for targeted advertising in joint processing within the meaning of Article 26 of the GDPR with Österreich Werbung (www.austria.info). For this purpose, various parameters (pages viewed, device type, geographical origin, most recently visited websites) are recorded and visitors are grouped into different segments. Using statistical analyses, similar individuals are then identified within the global Adform cookie pool in order to target them with tailored advertising for Austrian tourism offers. These “lookalikes” may be made available to our cooperation partner Österreich Werbung for the purposes of Austrian tourism. Further information on Adform is available at the following address: site.adform.com/privacy-center/platform-privacy/product-and-services-privacy-policy/

To exercise your data subject rights under Articles 15–21 of the GDPR, you can contact us at datenschutz@noe.co.at. You may also assert your rights against Österreich Werbung.

Austrian National Tourist Office
Vordere Zollamtsstraße 13, 1030 Vienna, Austria
Tel.: +43 1 588 66-0
Fax: +43 1 588 66-40
Email: datenschutz@austria.info

On this page, you will also find an option to opt out. Data stored by Adform relating to you can be deleted at https://site.adform.com/privacy-center/platform-privacy/right-to-be-forgotten/.

DV360/CM360
This website uses the Floodlight tag from DV360 to measure the effectiveness of our advertising campaigns, limit the frequency with which you are shown a particular advert, and to display only adverts that are relevant to you and your interests. In particular, information regarding the advertisements you have clicked on, as well as your previous usage behaviour on third-party websites, is collected and stored. Using the cookie ID, Google records which advertisements are displayed in which browser and can thus prevent them from being shown multiple times. Furthermore, Google can use cookie IDs to track so-called conversions related to ad requests. This is the case, for example, when a user sees a Google advert and later visits our website using the same browser and makes a purchase there. The cookies do not contain any personal information such as email addresses, names or addresses.
You can manage and revoke the storage of cookies at any time by adjusting the relevant settings in the Consent Management solution.  
Further information on Display & Video 360 by Google is available at marketingplatform.google.com/about/display-video-360/ and support.google.com/displayvideo/answer/9059464, as well as on Google’s general data protection policies: policies.google.com/privacy;

Facebook Pixel and Remarketing/Retargeting
Based on your consent, our website uses the Facebook Pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). This allows us to track users’ actions after they have been redirected to a provider’s website by clicking on a Facebook advertisement. This enables us to record the effectiveness of Facebook advertisements for statistical and market research purposes. We cannot view the personal data of individual users. However, the data collected is stored and processed by Facebook. Information controlled by Meta Platforms Ireland Limited is transferred or transmitted to the USA or other third countries, or stored and processed there, for the purposes described in the policy.

Facebook may link the data to the data in your Facebook account and use it for its own advertising purposes in accordance with the Facebook Data Policy. Facebook Conversion Tracking also allows Facebook and its partners to show you adverts both on and off Facebook. A cookie is stored on your computer for these purposes. Only users aged 13 and over may give their consent.

Remarketing tags from Facebook are also integrated into our pages, which establish a direct connection between your browser and the Facebook server. This enables Facebook to associate your visit to our pages with your user account. We and our tourism industry partners may use the information obtained in this way to display Facebook ads. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it is used by Facebook. Further information on this can be found in Facebook’s privacy policy at www.facebook.com/about/privacy/.

Please click here to withdraw your consent: https://www.facebook.com/ads/website_custom_audiences/ 

Thinglink We use Thinglink
plugins on our websites for the interactive display of photos. This is a service provided by ThingLink Oy, Business ID 2329185-9, Salomonkatu 17 A, 00100 Helsinki. We have no control over what data such a plugin collects. Nor do we have any influence over how the data is used by Thinglink. It can be assumed that at least the IP address and information about the devices used are collected and utilised; furthermore, it cannot be ruled out that Thinglink may attempt to store cookies on the devices used. This enables Thinglink to be informed about visits to specific websites. Users who are logged into Thinglink at the same time can be identified by Thinglink. For information on the data collected in this process and its use, please refer to Thinglink’s privacy policy, which can be viewed at https://www.thinglink.com/terms.

GetSiteControl
We use the services of the provider GetSiteControl (GetWebCraft Limited, Klimentos 41-42, Klimentos Tower, Flat/Office 25, 1061, Nicosia, Cyprus). GetSiteControl is a programme that displays pop-ups and overlay windows on the website for informational purposes and to improve user guidance. The windows can be triggered according to specific rules (e.g. number of page visits). For this purpose, GetSiteControl sets cookies. You can find all information regarding data processing by GetWebCraft Limited in the current privacy policy: https://getsitecontrol.com/privacy

Use of social media networks

On our website, you will find links to social media networks such as Facebook and Twitter. These are not plugins provided by Facebook or Twitter which, without the user’s control, transmit data to the provider as soon as the page is loaded.

The buttons for the social media networks simply contain a link to the social media network, including the URL of the webpage to be shared. No user data is transmitted from the website to the social media network.

If you are already logged in to the relevant social media service when you click the button, this will be recognised in the dialogue box for sharing the webpage, allowing you to share the content directly. If this is not the case, you will be asked to log in to the social media network. From this point onwards, you will be on the website of the respective social media network.

Clicking the Facebook button takes you to a website operated by Facebook Inc., 1601 S. California Ave, Palo Ave, CA 04304, USA. Information on the collection, storage and use of your data by Facebook Inc. can be found in the provider’s privacy policy: http://www.facebook.com/policy.php

Clicking on the Twitter button will take you to a website operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. Information regarding the collection, storage and use of your data by Twitter Inc. can be found in the provider’s privacy policy: https://twitter.com/privacy?lang=de

Niederösterreich-Werbung GmbH cooperates with a wide variety of social network providers. As part of this cooperation, when you use the respective service (this involves the ‘embedding’ of content such as videos from Vimeo or YouTube, or Instagram posts), your browser is automatically connected to the selected service provider. In doing so, your IP address, cookies and other information are transmitted to the respective service provider if you have previously visited their website. This data transfer only takes place when you interact with these social networks.

We would like to point out here that, as the provider of this website, we have no knowledge of the content of the data transmitted or its use by the social networks. Further information on the use of data by the social networks can be found in the privacy policies of the social networks mentioned.

The other social media channels in detail:

Instagram
We use features of the social media network Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA, on our website. The functions for embedding Instagram content (embed function) allow us to display images and videos. When you visit pages that use such functions, data (IP address, browser data, date and time, cookies) is transmitted to Instagram, stored and analysed. If you have an Instagram account and are logged in, this data will be associated with your personal account and the data stored therein. You can find the privacy policy, which details what information Instagram collects and how it uses it, at https://help.instagram.com/155833707900388.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving the quality of our website and in Instagram’s legitimate interest in analysing user behaviour statistically for optimisation and marketing purposes.

YouTube
Our website uses the YouTube button from the social network YouTube, which is operated by YouTube LLC, with its principal place of business at 901 Cherry Avenue, San Bruno, CA 94066, USA (“YouTube”). When you visit a page on our website that contains such a button, your browser establishes a direct connection to YouTube’s servers. The content of the YouTube button is transmitted directly from YouTube to your browser and integrated into the webpage. We therefore have no influence over the scope of the data that YouTube collects via the button, but assume that your IP address is also recorded. For information on the purpose and scope of data collection, as well as the further processing and use of the data by YouTube, and your rights in this regard and settings options for protecting your privacy, please refer to YouTube’s privacy policy regarding the YouTube button: https://www.google.de/intl/de/policies/privacy/

If you are a YouTube member and do not wish YouTube to collect data about you via our website and link it to your member data stored on YouTube, you must log out of YouTube before visiting our website.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving the quality of our website and in YouTube’s legitimate interest in analysing user behaviour statistically for optimisation and marketing purposes.

Use of Google Maps

Niederösterreich Werbung GmbH uses Google Maps on its website (and on the websites listed above), in particular to display POIs (Points of Interest) on an interactive map. Google Maps is operated by Google Inc. By using these websites, you consent to the collection, processing and use of data collected automatically and data entered by you by Google, its representatives or third-party providers.

You can find information on the data transmitted when using Google Maps via the following link: https://policies.google.com/privacy?hl=de. In addition to the IP address, this includes data such as the GPS data from a smartphone being used or search behaviour.

(Events, functions, etc.)

Images (photos/videos) are taken at various events, in particular at any press conferences and other events organised by Niederösterreich Werbung, or at which people who work on our premises, for us or with our support give presentations or perform.

Invitations and event notices will state in advance that photographs will be taken. Unless the media privilege (§ 9 DSG) applies, the photographer will be instructed to obtain consent from small groups being photographed. Where larger groups are photographed at events, the images serve to raise awareness of our organisation and promote its image, and we publish these images online and, where applicable, in printed materials about our organisation (legitimate interest).

If you are photographed as part of a small group or as an individual, the photographer will ask you before taking the photograph whether you consent to the processing and will ask you to sign a declaration of consent as proof of your agreement. If you do not agree to this, you will have the option of stepping aside so as not to be included in the photograph. Unless the media privilege (Section 9 DSG) applies, you have the right to withdraw your consent at any time with effect for the future.

In the event of withdrawal, the photographs will be removed where technically possible, and efforts will be made to arrange for their removal from any other media. Printed brochures will not be destroyed following a withdrawal of consent. Upon receipt of the withdrawal, the data will no longer be processed for that purpose. If costs arise from the withdrawal and any prohibition on further use (modification of the website, destruction of printed information), and there is no legitimate interest in the withdrawal, the costs of the changes shall be borne by the data subject.

There is a right to object within the framework of the statutory provisions, provided that the processing is based on a legitimate interest. As you have entered a public space at these events for an event in the marketing of which our organisation has an interest, this expectation must also be taken into account when considering an objection.

Where data is published on our own website, it will be deleted upon expiry of the copyright protection period or upon withdrawal of consent. If this data is published on social media, it will only be deleted upon withdrawal of consent.

For participation in audio/image/video recordings and advertising campaigns by Niederösterreich Werbung GmbH, the following personal data of performers is processed: photo/video, first name, surname, address. We store the personal data for as long as is necessary for the use of the audio/image/video recordings and advertising campaigns, or for as long as is necessary to pursue or defend against legal claims.

Data security measures to protect your data

The security of your data is of the utmost importance to us. We have therefore taken all necessary technical and organisational measures to ensure the security of data processing and to protect your personal data as effectively as possible against access by unauthorised third parties.

We achieve this, on the one hand, by using state-of-the-art security software, coding and encryption methods within our IT infrastructure, and, on the other hand, by promoting the security of your data through the use of risk-minimising measures (data minimisation in all areas) and preventive safeguards.