Privacy Policy

a. Information

If you contact us solely to obtain information from us, we will process the data provided by you.

You provide information on a purely voluntary basis. However, we expressly ask that you not disclose any information that is likely to be of little or no relevance to your intended purpose. This applies in particular to specific categories of personal (“sensitive”) data.

b. Order, contract

Depending on the information you voluntarily provide us with, your data processed by us may include:

• your contact details (name, address, telephone number, email address, etc.)
• the content of the order
• unsolicited and voluntarily provided special categories of personal data which you provide us with

c. Newsletter

Which personal data is transmitted to us when ordering the newsletter depends on the input screen that is used for this purpose.

The only information that must be entered in order for the newsletter to be sent is your email address.

Entering additional, separately provided data is voluntary and will be used to let us address you personally.

When registering for the newsletter, we also store the IP address assigned by the Internet Service Provider (ISP), the computer system you used at the time of registration, and the date and time of registration.

The collection of this data is necessary in order to be able to track the (possible) misuse of your email address at a later date, and therefore serves as legal protection for us.

Your data can be passed on in whole or in part, but only to the extent necessary and, if necessary, to the following controllers:

• Banks (payment transactions – Austria)
• Tax consultants (accounting – Austria)
• Collection agencies (debt collection – Austria)
• Law enforcement representatives (law enforcement – Austria)
• Courts (law enforcement – Austria)
• Administrative authorities (Austria)

In addition, your data can be transferred to the following recipients acting as processors. We have concluded a data processing agreement with all of them and have verified the appropriate technical and organizational measures (TOMs):

Hetzner Online GmbH (Germany)
Hosting Website and Service

Google Ireland Ltd (Irland)
G-Mail, Logging and Error Monitoring

Amazon Web Services EMEA SARL (Luxemburg)
Email Delivery

Zendesk Ink. (USA – EU SCC)
Support – Email, Chat

AIRCALL SAS (France)
Phone support

mPay24 GmbH  (Austria)
Payment processing

Your data will be stored in a form that will permit your identification only for as long as necessary for the purpose for which it is processed.

a. Information

By providing us with your data via this website or via email, you expressly agree that your data will be processed by us and the aforementioned recipients for the duration of the processing of this information, including the personal data provided by you and any unsolicited and voluntarily provided special categories of personal data.

Consequently, in the event that you contact us solely to obtain information from us, your information will either be deleted immediately or deleted after the appropriate period which corresponds to the content of the communication has elapsed.

Upon revocation of your consent, we will erase (or instruct the erasure of) all your data from all databases, including accumulated data.

b. Order, Contract

Due to commercial and tax regulations, we are obliged to save your address, payment and order data for a period of 7 years. In the event that you contact us to conclude a contract, your data will be deleted at the end of the 7th year after the last document (Section 132 Austria Fiscal Code – BAO) has been recorded. Therefore, in the event that you enter into a contract, all data from the contractual relationship is stored until the expiration of this period.

However, we limit such processing after 2 years, i.e. your data will only be used to comply with statutory obligations.

Your data may continue to be stored due to statutory/legal retention obligations or contractual obligations, e.g. vis-a-vis customers in relation to warranty or compensation or vis-a-vis contractual partners (Art. 6 (1) c GDPR, Art. 17 (3) e GDPR).

The data categories name, address, purchased goods and date of purchase are also stored until the end of product liability (10 years).

c. Newsletter

The consent to process your personal data which you have given us in connection with the newsletter can be revoked at any time. Consequently, you can unsubscribe from the newsletter at any time.

You can notify us of your revocation by clicking on the link provided in each newsletter email or by sending a message to the contact point provided in the site legal notice.

Our emails may contain so-called counting pixels.

A counting pixel is a miniature graphic that is embedded in such emails that are sent in HTML format to enable log file recording and log file analysis.

This allows a statistical evaluation of the success or failure of online marketing campaigns.

The embedded pixel lets us know if and when an e-mail has been opened by you and which links in the e-mail you have accessed.

Such personal data collected via the counting pixels contained in the emails are stored and evaluated by us in order to optimize the e-mail dispatch and to adapt the content of future emails even better for you.

You can post public comments on our blog, where we post various contributions to topics related to our service.

Your comment to a post will be posted with your given username. You can also use a pseudonym instead of your real name.

Providing a username and e-mail address is required, all other information is optional.

We need your e-mail address to contact you if a third party objected to your comment as unlawful.

Legal bases are Art. 6 (1) 1 b and f GDPR.

The comments will be reviewed before publication. We reserve the right to delete comments.

If you want to order in our webshop (shop.tourapp.io), it is necessary for the conclusion of the contract that you provide your personal information that we need for the processing of your order.

Mandatory information required for processing the order is marked separately, other details are optional.

We process the data provided by you only to process your order.

These data are required to fulfill the contract or to carry out pre-contractual measures. Without this data we can not conclude the contract with you.

Legal basis is Art. 6 (1) 1 b GDPR.

A transfer of data to third parties does not take place, with the exception of the transfer of the credit card data to the processing bank / payment service provider for the purpose of debiting the purchase price, to the transport company / shipping company commissioned by us to deliver the goods and to our tax advisor to fulfill our tax obligations.

Due to commercial and tax regulations, we are obliged to store your address, payment and order data for a period of 7 years. In the case of a contract, therefore, all data from the contractual relationship are stored until the expiration of this period.

Beyond that the data categories name, address, purchased goods and date of purchase are stored until the end of product liability (10 years).

To prevent unauthorized access by third parties to your personal data, in particular financial data, the order process is encrypted using TLS technology.

Our websites and services use Google Analytics, a web analytics service provided by Google LLC (“Google”).

This website uses Google Analytics with the extension “_anonymizeIp ()”. As a result, IP addresses are processed shortened, a person-relatedness can be excluded. Insofar as the data collected about you is assigned a personal reference, it will be immediately excluded and the personal data will be deleted immediately.

We use Google Analytics to analyze and regularly improve the use of our website. With the statistics we can improve our offer and make it more interesting for you as a user.

For the exceptional cases in which Personal Information is transferred to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

The legal basis for the use of Google Analytics is Art. 6 (1) 1 f GDPR.

Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Use: http://www.google.com/analytics/terms/gb.html, Privacy Policy: http://www.google.com/intl/de/analytics/learn/privacy.html, and the Privacy Policy: http://www.google.com/intl/en/policies/privacy.

We have included YouTube videos in our online offering, which are stored on http://www.YouTube.com and are directly playable from our website.

By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website.

This happens regardless of whether YouTube provides a user account that you are logged in to, or if there is no user account.

When you’re logged in to Google, your data will be assigned directly to your account.

If you do not wish to be associated with your profile on YouTube, you must log out before activating the button.

YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and / or custom design of its website.

Such an evaluation is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about your activities on our website.

You have a right to object to the creation of these User Profiles. You have to address your objection directly to YouTube.

For more information on the purpose and scope of your data collection and processing through YouTube, please read the privacy policy. You’ll also get more information about your rights and privacy settings here: https://www.google.com/intl/en/policies/privacy. Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

This site uses so-called web fonts, provided by Google, for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. If your browser does not support web fonts, a default font will be used by your computer. For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq and Google’s Privacy Policy: https://www.google.com/policies/privacy/

We use the offerings of Google Adwords to draw attention to our attractive offers with the help of advertising materials (so-called Google Adwords) on external websites.

In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are.

We are interested in showing you advertisements that are of interest to you, to make our website more interesting to you and to achieve a fair calculation of advertising costs.

These advertising materials are supplied by Google via so-called “ad servers”.

To do this, we use ad server cookies, which measure certain performance metrics such as ads or user clicks.

If you access our website through a Google ad, Google Adwords will store a cookie on your PC.

These cookies usually lose their validity after 30 days and are not intended to identify you personally. With this cookie the unique cookie ID, number of ad impressions per placement (Frequency), last impression (relevant to post-view conversions), and opt-out information (mark that the user would not like to be addressed any more) will be typically saved as analysis values.

These cookies allow Google to recognize your Internet browser.

If a user visits certain pages of an Adwords customer’s website and the cookie stored on their computer has not expired, Google and the customer will be able to detect that the user clicked on the ad and was redirected to that page. Each Adwords customer is assigned a different cookie.

Cookies cannot be tracked via the websites of Adwords customers.

We ourselves do not collect and process any personal data in the aforementioned advertising measures.

We receive only statistical evaluations provided by Google.

On the basis of these evaluations, we can identify which of the advertising measures used are particularly effective.

We do not receive any further data from the use of the advertising material, in particular we cannot identify the users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server.

We have no control over the extent and the further use of the data, which are raised by the employment of this tool by Google and inform you therefore according to our knowledge level: By the incorporation of AdWords conversion Google receives the information that you accessed the appropriate part of our Internet appearance or clicked on an ad from us.

If you are registered with a service provided by Google, Google may associate the visit with your account.

Even if you are not registered with Google or have not logged in, there is a chance that the provider will find and store your IP address.

You can prevent participation in this tracking process in several ways:

a) By setting your browser software accordingly, in particular, the suppression of third party cookies will prevent you from receiving any third party advertisements;

b) by disabling the cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”, https://www.google.com/settings/ads, however, this setting will be deleted when you delete your cookies;

c) by deactivating the interest-based advertisements of the providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies;

d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. We point out that in this case you may not be able to use all the features of this offer in full.

The legal basis for the processing of your data is Art. 6 (1) 1 f GDPR.

You will find more information about privacy at Google here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/en.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

In addition to Adwords Conversion, we use the Google Remarketing application.

This is a process by which we would like to address you again.

This application allows you to see our ads after visiting our website as you continue to use the Internet.

This is done by means of cookies stored in your browser, through which your usage behavior when visiting various websites is recorded and evaluated by Google.

This is how Google determines your previous visit to our website.

A combination of the data collected during the remarketing with your personal data, which may be stored by Google, does not occur according to Google.

In particular, according to Google, pseudonymization is used in remarketing.

Purpose of Data Processing: The objective of using Google Signals is for remarketing and behavioral targeting purposes. This allows us to understand our users' activities across various devices and to enhance the relevance of advertisements you may see.

Personal Data Collected: Through Google Signals, we collect data that includes trackers and usage data. This may encompass your location, search history, YouTube history, and information from websites that collaborate with Google.

How Data is Used: Google Signals integrates the visit information collected from our website with the data from Google account users who have consented to this combination for personalized advertising. This helps in generating aggregated and anonymized insights into user behavior across multiple devices.

Your Control Over Data: Users who have a Google account and are subject to this data processing have the right to access and manage their data. You can view, control, or delete your data through the "My Activity" feature offered by Google.

By using our website, you consent to the use of Google Signals in accordance with this privacy policy. If you have any questions or concerns about our data practices, please contact us.

This website conducts analyses of user behavior through so-called A/B testing. For the implementation of the A/B tests, we use VWO, a tool from the company "Wingify Software Pvt. Ltd.

In doing so, we can show you our websites with slightly varied contents, depending on a profile assignment.

This allows us to analyze our offer, improve it regularly and make it more interesting for you as a user.

The legal basis for A/B Testing is Art. 6 (1) 1 f GDPR.

For this evaluation, cookies are stored on your computer. Personal data collected in this process include trackers, usage data, device information, and Universally Unique Identifiers (uuid).

You can prevent the evaluation by deleting existing cookies and preventing the storage of cookies.

If you prevent the storage of cookies, we point out that you may not be able to use our website to the full extent.

The prevention of the storage of cookies is possible through the setting in your browser.

Before the analyzes are carried out, the IP addresses are processed in shortened form, so that direct personal reference can be excluded.

The IP address provided by your browser will not be merged with other data collected by us.

We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular device’s IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy by clicking on this link.

You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out link.