Data privacy statement

We care deeply about protecting your personal data. Hence, we process your data solely in accordance with legal provisions (GDPR, TKG 2003 (The Telecommunications Act)). In this data privacy statement, we would like to inform you about the most important aspects of how your data is processed on our website.

1 Contact with us

Nationalpark Thayatal GmbH
2082 Hardegg, Merkersdorf 90
Tel. +43(0)2949 7005
office@np-thayatal.at

Protecting and safely storing all personal data that you entrust to us is very important to us. This document tells you more about how we use and process your personal data.

2 Purpose, legal basis, storage period and data recipient

We require the personal data collected for:
• the support of customers and for general business processing,
• for the fulfilment of the contract or for the implementation of pre-contractual measures,
• the provision, execution, maintenance, optimisation and safeguarding of our services and user services, as well as
• for notifications and own advertising purposes, for example for the conveying product recalls of manufacturers, offers, advertising brochures and newsletters (in paper and electronic form), as well as for the purpose of reference to the existing or former business relationship with the customer (reference).
The data is collected, stored, processed and used for this purpose.

The legal basis for the processing of your personal data is, on the one hand, the fulfilment of a contract (e.g. online purchase), legitimate interests, the fulfilment of our legal or contractual obligations and, on the other hand, your consent (e.g. contact form, newsletter, cookies). Failure to provide the data may have various consequences.
We process your personal data
• Name/company/association/authority, department, legal form
• Profession/job title, title
• Address and additional addresses of the customer
• Contact persons, responsible official
• Contact details (telephone number, fax number, e-mail address, etc.)
• Customer, supplier or employee identifier (no.)
• Bank details, VAT number
as far as necessary, for the duration of the entire business relationship (from the initiation, processing to the termination of a contract) and beyond that in accordance with the statutory storage and documentation obligations, which arise, among other things, from the Company Code (UGB), the Federal Tax Code (BAO) as well as until the end of any legal dispute, ongoing warranty and guarantee periods, etc.

In the course of operating our websites, we commission software service providers and agencies who may gain access to your personal data in the course of their activities, insofar as they require the data to provide their respective services. They have undertaken to comply with the applicable data protection regulations. Commissioned data processing agreements have been concluded in accordance with Art 28 of the GDPR. You can request more information about the processors we use by writing to us at our email address.

3 Data security

We use technical and organizational security measures to protect the stored personal data against accidental or intentional manipulation, loss or destruction and against access by unauthorized persons. Our security measures are continuously improved in accordance with technical progress.

4 Data storage

For technical reasons, the following usage data, among others, which is transmitted by a user's Internet browser to the web server, is recorded:
• Browser type and version
• Operating system used
• Website from which the user visits our website ("referrer URL")
• Website that the user is visiting
• Date and time of access
• Internet protocol (IP address of the user's computer)
• data volume transferred
• Message about successful visit

This data is stored separately from any user data disclosed, in particular name, address, user name, password, email address, telephone number, fax number) and evaluated for statistical purposes in order to be able to optimise our website and our offers.

We point out that for the purpose of the simpler purchase procedure and for the later contract processing in the context of Cookies the IP data of the owner of the connection are stored, just like name, address, contact contacts and messages of the user.

The data provided by you is necessary for the fulfilment of the contract or for the implementation of pre-contractual measures. Without this data we cannot conclude the contract with you. No data is transferred to third parties, with the exception of the transfer of payment data to the processing bank / payment service provider for the purpose of debiting the purchase price, to the transport or shipping company commissioned by us for delivery of the goods, to our tax advisor to meet our tax obligations, and to suppliers or manufacturers in the event of warranty claims or insurance in the event of complaints.

If you cancel the purchase process, the data stored by us will be deleted. If a contract is concluded, all data from the contractual relationship shall be stored until the expiry of the retention period under tax law (7 years).

The data name, address, purchased goods and date of purchase are stored beyond that until the expiration of the product liability. The data processing is based on the legal provisions of § 96 para 3 TKG (Telecommunications Act)and Art 6 para 1 lit a (consent) and / or lit b (necessary for the performance of the contract) of the GDPR.

5 Cookies

Cookies are small text files that are placed on a visitor's device by a website.
A use of our offers is also possible without cookies. You can deactivate the storage of cookies in your browser.

If you do not allow us to use cookies, certain features and pages will not work as expected.
You can delete cookies that are already on your computer at any time. How to do this varies by browser, please refer to your browser instructions (under "Help" in the browser menu).

6 Integration of third-party services and content

It may happen that within our website or services of third-party providers, city maps or fonts from other websites are integrated. The integration of content from third-party providers always requires that the third-party providers are aware of the IP address of the users, as without the IP address they would not be able to send the content to the users' browser. The IP address is therefore required to display this content. Furthermore, the providers of the third-party content may set their own cookies and process the users' data for their own purposes. In doing so, usage profiles of the users can be created from the processed data. We will use this content in a data-saving and data-avoiding manner as far as possible and select reliable third-party providers with regard to data security.
The following presentation provides an overview of third-party providers and their content, together with links to their privacy statements, which contain further information on the processing of data and options to raise objections:
Maps of the service "Google Maps" of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Privacy policy: https://www.google.com/policies/privacy/
Videos of the platform "YouTube" of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Privacy policy: https://www.google.com/policies/privacy/
Videos of the platform "Vimeo" of the third-party provider Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA.
Privacy policy: https://vimeo.com/privacy

7 Contact form, online calculation and quotation or product request

Your details, including personal data from our contact form, will be transmitted to us via our own mail server, processed and stored by us in order to process your enquiry. This data will not be collected without your consent. Without this data we cannot process your requests.
If you contact us by form on the website or by email, the data you provide will be stored by us for one year for the purpose of processing your enquiry and in case of follow-up questions. We do not share this information without your consent.
The data processing is carried out on the basis of the legal provisions of § 96 para 3 of TKG as well as Art 6 para 1 lit a (consent) of GDPR.

8 Newsletter

You can register for our newsletter on the website, this is done using the Double Opt-In procedure. After registration you will receive an e-mail asking you to confirm your registration. Without the disclosure of this data, sending our newsletter is not possible. You can unsubscribe from the newsletter by clicking the unsubscribe link at the bottom of each newsletter.

For sending our newsletter, we commission processors. They have undertaken to comply with the applicable data protection regulations. Commissioned data processing agreement has been concluded in accordance with Art 28 of GDPR. You can request more information about the processors we use by writing to us at our email address.
The data processing is carried out on the basis of the legal provisions of § 96 para 3 of TKG as well as Art 6 para 1 lit a (consent) of GDPR.

You can cancel your subscription to the newsletter at any time. Please send your cancellation to our email address. We will then immediately delete your data in connection with the newsletter dispatch.

9 Ihre Rechte

You have the right at any time to get information about the relevant stored personal data for free. Insofar as there is no legal obligation to retain data, you have the right to have this data deleted and to object to its processing. Furthermore, you have the right to correct the data as well as to restrict processing, to data portability and to lodge a complaint with the Austrian Data Protection Authority (Wickenburggasse 8-10, 1080 Vienna, email: dsb@dsb.gv.at).
Please contact us for more information. You will find the contact details under "1 Contact with us".