It is particularly important to us to protect your data, which is why we comply with the applicable data protection regulations, in particular the GDPR and the DSG, when processing your personal data (e.g. master data).

Below you will find more detailed information about the data processing we carry out:

Controller

As we are not legally obliged to do so, we have not appointed a data protection officer/notified the data protection authority.

Rights of data subjects/right of objection and cancellation/right to lodge a complaint

You have the following rights with regard to the personal data concerning you

• Right of access (Art 15 GDPR),

• Right to rectification (Art 16 GDPR) or erasure (Art 17 GDPR),

• Restriction of processing (Art 18 GDPR),

• Right to data portability (Art 20 GDPR),

• Right to object to processing (Art 21 GDPR).

Right to object: If the processing of your personal data is based on a balancing of interests (Art 6 para 1 lit f GDPR: legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. When exercising your right to object, we ask you to explain to us your reasons why we should not process your personal data as we have done. We will examine the situation and either discontinue or adapt the data processing or show you our compelling reasons worthy of protection and continue the data processing. We will also continue the data processing if it serves the assertion, exercise or defence of legal claims.

You can object to data processing for the purposes of direct advertising and data analysis at any time. In this case, we will stop processing the data.

Right of revocation: If you have given us your consent to process your personal data, you can also revoke this consent at any time. Your revocation does not affect the legality of the data processing carried out until the revocation.

To exercise the above rights, you must inform us in person, by telephone or in writing:

Donau Touristik GmbH and the wholly owned subsidiary DSGL-Donau-Schifffahrts-Gesellschaft mbH,
Lederergasse 4-12, 4010 Linz

Please contact us by e-mail on the subject of data protection at

datenschutz(at)donautouristik.com

Please note that we can only provide you with information if you can identify yourself.

You have the right to lodge a complaint with the supervisory authority (Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, dsb(at)dsb.gv.at)

Information about the processing of your personal data

Website visit

Purpose: If our website is only used for information purposes (no registration and no transmission of other information), personal data is collected which is transmitted from your browser to our server. This is technically necessary in order to display our website to you and to ensure the stability and security of the website.

Legal basis: legitimate interest (Art 6 para 1 lit f GDPR), § 96 para 3 TKG 2003

The following data is processed: IP address, date and time of the request, time zone difference to GMT, content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, requesting website, browser, operating system and interface, language and version of the browser software.

Electronic contact requests via the website

Purpose: Processing contact enquiries via email or the website contact form.

Legal basis: Fulfilment of a contract, necessary for the implementation of pre-contractual measures (Art 6 para 1 lit b GDPR), legitimate interest (Art 6 para 1 lit f GDPR), § 96 para 3 TKG 2003

The following data is processed: Master data, content data of the enquiry

Storage period: Until the enquiry has been answered. If statutory retention obligations exist, processing will be restricted until then.

Recipients/recipient categories: Processor

Cookies/web analysis service

Purpose: Improvement of the range of services, website and direct advertising

Legal basis: Consent (Art. 6 para. 1 lit. a GDPR), fulfilment of a contract, necessary for the implementation of pre-contractual measures (Art. 6 para. 1 lit. b GDPR), legitimate interest, in particular to improve our own services for the benefit of users (Art. 6 para. 1 lit. f GDPR), § 96 para. 3 TKG 2003

The following data is processed: IP address

Recipient/recipient categories: Company of the analytics service/service provider

Customer management, accounting, logistics and bookkeeping

Purpose: Processing of personal data in the context of any business relationships with customers and suppliers in the context of the exercise of a trade, including systematic recording of all business transactions relating to income and expenditure.

Legal basis: Consent (Art 6 para 1 lit a GDPR), fulfilment of a contract, necessary for the implementation of pre-contractual measures (Art 6 para 1 lit b GDPR), fulfilment of a legal obligation (Art 6 para 1 lit c GDPR), legitimate interest, in particular defence, exercise and assertion of legal claims (Art 6 para 1 lit f GDPR), express consent (Art 9 para 2 lit a GDPR).

Storage period: Until the end of the business relationship or until the expiry of the guarantee, warranty, limitation and statutory retention periods applicable to the client (in particular BAO); in addition, until the end of any legal disputes in which the data is required as evidence.

Recipients/recipient categories: Tax office, courts and authorities, suppliers, debt collection agencies for debt recovery, banks involved in payment to the data subject or third parties, legal representatives, chartered accountants, payroll accountants.

The provision of your personal data is necessary for the fulfilment of the contract or the implementation of pre-contractual measures. We cannot conclude a contract with you without this data.

Customer service and marketing for own purposes

Purpose: Processing of own or purchased customer and prospective customer data for the initiation of business relating to our own range of products or services and for the implementation of advertising measures and newsletter dispatch; customer relationship management.

Legal basis: Consent (Art 6 para 1 lit a GDPR), fulfilment of a contract, necessary for the implementation of pre-contractual measures (Art 6 para 1 lit b GDPR), fulfilment of a legal obligation (Art 6 para 1 lit c GDPR), legitimate interest, in particular defence, exercise and assertion of legal claims (Art 6 para 1 lit f GDPR)

The following data is processed for the newsletter dispatch via our website

Master data

Recipients/recipient categories: Company of the analytics service/service provider

Processing of travel services

Purpose: Booking, processing and invoicing of travel services for private and business customers; processing of services for customers who resell the travel service

Legal basis: Consent (Art 6 para 1 lit a GDPR), fulfilment of a contract, necessary for the implementation of pre-contractual measures (Art 6 para 1 lit b GDPR), fulfilment of a legal obligation (Art 6 para 1 lit c GDPR), legitimate interest, in particular defence, exercise and assertion of legal claims (Art 6 para 1 lit f GDPR); special categories of personal data Art 9 and 10 GDPR with express consent if this is absolutely necessary for the fulfilment of the contract.

Storage period: The data will be stored confidentially and with integrity until the expiry of statutory warranty and compensation periods, unless longer contractual or statutory retention periods exist.

Recipients/recipient categories: Tax office, courts and authorities, legal representatives, chartered accountants and in particular foreign representations and/or consulates for the processing of (entry) travel formalities (e.g. visas) or local travel service providers (in particular hotels and transport companies) or transport companies.

Transfer to third countries: The transfer of personal data to a third country is also necessary for the fulfilment of the contract. The customers have been informed about any risks of the transfer and expressly consent in accordance with Art 49 para 1 lit a GDPR or the transfer is necessary for the fulfilment of the contract in accordance with Art 49 para 1 lit b GDPR.

The provision of your personal data is necessary for the fulfilment of the contract or the implementation of pre-contractual measures. Without this data, we cannot conclude a contract with you.

Information on data transfers to third countries or international organisations

The data processed by us will not be transferred to recipients in third countries or international organisations unless this is necessary for the specific fulfilment of the contract (travel to third countries); in this case, the customer will also be expressly and unequivocally informed of this fact.

Cookies on our websites and their management

We use cookies on our websites. However, you are entitled to withdraw your consent to the use of these cookies at any time. If you remove the cookies on our websites or reject their use, this should not significantly restrict their functionality. Please note, however, that deactivating a cookie or a cookie category does not result in an existing cookie being deleted from a browser. This must be done separately within your own browser. For more information on the management of certain cookie types, their control or how they are deleted, please visit https://www.aboutcookies.org/.

What is a cookie?
A "cookie" is a small file consisting of a text-only string of information that a website transfers to the web browser on your computer's hard drive and stores there temporarily for the duration of your visit to the website or sometimes for longer, depending on the type of cookie. Cookies perform different functions (e.g. to distinguish between you and other users of the same website) and are used by most websites to provide a better user experience.

Each cookie is unique to your web browser and contains anonymous information. Typically, a cookie contains the name of the domain from which it came, the "lifetime" of the cookie and a value (usually in the form of a randomly generated, unique number).

Econda Analytics

"The analysis of user behaviour is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the anonymised analysis of user behaviour in order to optimise both its website and its advertising."

"For the needs-based design and optimisation of this website, anonymised data is collected and stored by econda GmbH solutions and technologies and user profiles are created from this data using pseudonyms. For this purpose, cookies can be used to recognise an Internet browser. However, user profiles are not merged with data about the bearer of the pseudonym without the express consent of the visitor. In particular, IP addresses are made unrecognisable immediately after receipt, which means that it is not possible to assign user profiles to IP addresses. The analysis of user behaviour is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the anonymised analysis of user behaviour in order to optimise both its website and its advertising. Visitors to this website can object to this data collection and storage at any time for the future. The objection only applies to the device and the web browser on which it was set, please repeat the process on all devices if necessary. If you delete the opt-out cookie, requests will be sent to econda again."

Google Analytics

Our websites use Google Analytics, a web analytics service provided by Google Inc ("Google").

Google Analytics uses so-called "cookies", text files that are stored on your computer and enable us to analyse the use of our websites. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google uses this information to analyse your use of the website, to compile reports on website activity for the website operator and to provide other services related to website and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
However, Google will not associate your IP address with any other data held by Google.

You can prevent the installation of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

By using our websites, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
If you do not want your IP address, language setting, end device etc. to be analysed, we recommend using the Google Analytics browser add-on to deactivate Google Analytics. The browser add-on for deactivating Google Analytics gives you more control over which data on websites accessed by Google Analytics is collected. The add-on informs the JavaScript (ga.js) of Google Analytics that no information about the website visit should be transmitted to Google Analytics.
If you would like to use this function, download the add-on and install it for your current web browser. The browser add-on for deactivating Google Analytics is available for Internet Explorer, Google Chrome, Mozilla Firefox, Apple Safari and Opera.