Privacy policy

Translation Notice:
This Privacy Policy is a translation of the original German version. In case of any discrepancies or inconsistencies, the German version shall prevail.

The controller responsible for the processing of your personal data on this website is:

Hohe Tauern National Park holiday region GmbH
Gerlosstraße 18
5730 Mittersill
Austria
Email: ferienregion@nationalpark.at
Phone: +43 6562 40 939

If you have any questions regarding data protection, you may contact us at the above contact details at any time.

We process your personal data exclusively on the basis of the applicable legal provisions (GDPR, Austrian Data Protection Act (DSG), Austrian Telecommunications Act (TKG 2021)).

Use of our website is generally possible without providing personal data. Where personal data is collected, this is done only to the extent necessary.

For the purpose of ensuring system security and maintaining the technical stability of the website, the following data is processed:

• IP address (shortened/anonymized)

• Date and time of access

• Accessed pages

• Referrer URL

• User agent

• Hostname

• Status code

• Amount of data transferred

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in system security)

Storage period: 7 days

If you contact us via a form, we process your data:

• for the performance of pre-contractual measures

• for the performance of a contract

• or for handling your inquiry

Legal basis:

• Art. 6(1)(b) GDPR (contract / pre-contractual measures)

• where applicable, Art. 6(1)(a) GDPR (consent)

Storage period:
Unless otherwise specified, personal data is stored:

• only as long as necessary for the respective purpose

• in compliance with statutory retention obligations

• until withdrawal of consent (where applicable)

If you subscribe to our newsletter, we process:

• Email address

• Name (if provided)

• Usage data (open and click rates, if tracking is enabled)

Legal basis:
Art. 6(1)(a) GDPR (consent)

Storage period:
Until withdrawal of your consent.

You may withdraw your consent at any time by clicking the unsubscribe link. The lawfulness of processing carried out prior to withdrawal remains unaffected.

For the administration of prize draws, we process your data on the basis of Art. 6(1)(b) GDPR (contract).

Storage period:
Until completion of the prize draw and thereafter in accordance with statutory retention obligations.

Provision of personal data is not legally or contractually required; however, it is necessary for participation in the prize draw. Failure to provide the data means participation is not possible.

Our website uses cookies and similar technologies. Technically necessary cookies are required for the proper and secure operation of the website. Legal basis: Art. 6(1)(f) GDPR. Analytics and marketing cookies are only set on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 165(3) TKG 2021.

You may withdraw or adjust your consent at any time via the consent tool implemented on this website. Detailed information about the cookies used (purpose, provider, storage period) can be found in the consent tool.

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics uses cookies and similar technologies to analyse the use of the website. The following personal data may be processed:

• Shortened IP address

• Device and browser information

• Usage behaviour (e.g., page views, duration of visit, interactions)

• Approximate location data (region)

• Technical device information

The IP address is processed in shortened form in order to reduce direct personal identification.

Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 165(3) TKG 2021. Without your consent, no processing via Google Analytics takes place.

The storage period for personal event data is 14 months. After this period, the data is automatically deleted or anonymized in accordance with Google Analytics settings.

A transfer of data to the United States cannot be excluded. Where such transfer occurs, it is based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework. Google is certified under this framework. In addition, Standard Contractual Clauses pursuant to Art. 46 GDPR are used.

You may withdraw your consent at any time via the consent tool. Further information: https://policies.google.com/privacy

With your explicit consent, data may be transferred to:

Salzburgerland Tourismus GmbH
Wiener Bundesstraße 23
5300 Hallwang
Austria

Purpose:

• Analysis of website usage

• Online marketing

• Display of personalised advertising on other websites

Legal basis:
Art. 6(1)(a) GDPR (consent)

Processing continues until withdrawal of your consent or expiry of the respective cookie storage period.

You may withdraw your consent at any time with effect for the future. The lawfulness of processing carried out prior to withdrawal remains unaffected.

Further information: https://www.salzburgerland.com/en/imprint-data-privacy-disclaimer/

We use the web analytics tool Matomo for statistical analysis of website usage. If Matomo sets cookies or enables user recognition, processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 165(3) TKG 2021. If Matomo is operated without cookies and exclusively with anonymised data, processing is based on Art. 6(1)(f) GDPR (legitimate interest in website optimisation). You may withdraw your consent at any time via the consent tool or object to processing where applicable. You may also opt out of tracking at any time via the corresponding option provided on the website.

We use the following processors pursuant to Art. 28 GDPR:

• CONECTO Business Communication GmbH

• feratel media technologies AG

Further independent recipients:

• Raiffeisenlandesbank Oberösterreich AG

• Winner Steuerberatung KG

• Österreichische Post AG

• Stripe Payments Europe Ltd., Ireland

When payments are processed via Stripe, a transfer of data to the United States cannot be excluded. Such transfers are based on the EU-US Data Privacy Framework and, where applicable, on Standard Contractual Clauses pursuant to Art. 46 GDPR.

You have the right of access, rectification, erasure and restriction of the processing of your personal data.

Where the legal basis for the processing of your personal data is your consent or a contract concluded with you, you also have the right to data portability.

You have the right to withdraw any consent given for the processing of your personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

You have the right to object to the processing of your personal data for the purposes of direct marketing. In the event of an objection, your personal data will no longer be processed for the purposes of direct marketing.

Furthermore, you have the right to lodge a complaint with the supervisory authority:

Austrian Data Protection Authority
Wickenburggasse 8
1080 Vienna
Austria

Email: dsb@dsb.gv.at