This data protection declaration applies to the Internet offer of the company Toursprung GmbH, which is accessible under the domain www.maptoolkit.com as well as the various subdomains ("our website").

Who is responsible and how can I get in touch?

Responsible for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR):

Toursprung GmbH
Mariahilfer Str. 93/20
1060 Vienna
Austria
Tel: +43 1 2676161
E-Mail: [email protected]

What is it about?

This privacy statement fulfills the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behavior when visiting a website. Information for which we cannot (or can only with a disproportionate effort) establish a reference to your person, e.g. by anonymization, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further storage of the data. We will inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal in individual cases for the assertion, exercise or defense of legal claims and if there are legal retention obligations.

Who receives my data?

We only share your personal data that we process on our website with third parties if this is necessary for the fulfillment of the purposes and is covered by the legal basis in the individual case (e.g. consent or safeguarding legitimate interests). In addition, we disclose personal data to third parties in individual cases if this serves the assertion, exercise or defense of legal claims. Possible recipients may then be, for example, law enforcement agencies, lawyers, auditors, courts, etc.

Insofar as we use service providers for the operation of our website who process personal data on our behalf within the scope of commissioned processing pursuant to Art. 28 GDPR, they may be recipients of your personal data. For more information on the use of processors as well as web services, please refer to the overview of the individual processing operations.

Do you use cookies?

The short answer: We refrain from using cookies as far as possible and only use them where it cannot be avoided. We do not use tracking cookies. Details on possible cookies in the paragraphs on the services used below.

The long answer: Cookies are small text files that are sent by us to the browser of your terminal device during your visit to our website and stored there. As an alternative to the use of cookies, information can also be stored in the local memory (local storage) of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses, so that we are able, for example, to recognize the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly from your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the paragraphs about the individual processing operations.

What rights do I have?

Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

• Information pursuant to Art. 15 GDPR about the data stored about you in the form of meaningful information about the details of the processing, as well as a copy of your data;
• Correction pursuant to Art. 16 GDPR of incorrect or incomplete data stored by us;
• Deletion pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
• Restriction of processing pursuant to Art. 18 DSGVO, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you object to their erasure because you need them for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR.
• Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 para. 1 lit. a GDPR or on the basis of a contract pursuant to Art. 6 para. 1 lit. b GDPR.
• Objection according to Art. 21 GDPR against the processing of your personal data, insofar as this is based on Art. 6 para. 1 lit. e, f GDPR and there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding compelling legitimate grounds for the processing are demonstrated or the processing is carried out for the assertion, exercise or defense of legal claims. Where the right to object does not exist for individual processing operations, this is indicated there.
• Revocation pursuant to Art. 7 (3) GDPR of your granted consent with effect for the future.
• Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

How is my data processed in detail?

In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling does not take place.

 

Provision of the website

Type and scope of processing

When calling up and using our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

• IP address of the requesting computer. However, we only store IP addresses anonymously: The last 3 digits are set to 000. An assignment of the access to an individual user is therefore not possible.
• Date and time of access
• Name and URL of the accessed file
• Website from which the access is made (referrer URL)
• Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by ourselves, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR for the purpose of.

Purpose and legal basis

The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6 para. lit. f GDPR. The collection of data and storage in log files is mandatory for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 (1) GDPR. Insofar as the further storage of log files is required by law, the processing is based on Art. 6 para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, however, calling up our website is not technically possible without providing the data.

Storage period

The aforementioned data is stored for the duration of the website display.

Maptoolkit

Type and scope of processing

We use our own map service Maptoolkit to create directions. Maptoolkit is a service provided by Toursprung GmbH, i.e. by ourselves, which displays a map on our website.

When you access this content on our website, you are connecting to servers of Toursprung GmbH, Mariahilfer Str. 93/20, 1060 Vienna, Austria, where your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Maptoolkit. The IP address is already technically anonymized before any further processing by setting the last three characters to "000". Tracing back to individual persons is not possible.

Purpose and legal basis

Maptoolkit is used on the basis of our legitimate interests pursuant to Art. 6 (1) lit. f GDPR, i.e. our interest in making it easier for you to find locations mentioned on the website.

Storage period

The aforementioned data is stored in anonymized form for up to 30 days in so-called "log files".

YouTube NoCookie

Type and scope of processing

We have integrated YouTube NoCookie on our website. YouTube NoCookie is a component of the video platform of YouTube, LLC, on which users can upload content, share it over the Internet and receive detailed statistics.

YouTube NoCookie allows us to integrate content from the platform into our website.

YouTube NoCookie may use browser technologies to evaluate user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to generate reports. If a user is registered with YouTube, LLC, YouTube NoCookie can associate the videos played with the profile.

When you access this content, you connect to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, where your IP address and possibly browser data such as your user agent are transmitted.

Purpose and legal basis

The service is used on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

Data transfer to the USA

Insofar as personal data is transmitted to servers in the USA when using YouTube, this is done on the basis of your consent pursuant to Art. 49 (1) lit. a GDPR. We would like to point out that data processing in the USA without the existence of an adequacy decision and without appropriate guarantees may be associated with special risks, in particular due to possible access rights by secret services and security authorities.

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube NoCookie: https://policies.google.com/privacy.

Presence on social media platforms

We maintain so-called fan pages or accounts or channels on the networks mentioned below in order to provide you with information and offers also within social networks and to offer you further ways to contact us and to inform yourself about our offers. In the following, we inform you about which data we or the respective social network process from you in connection with the call and use of our fan pages/accounts..

Data that we process from you

If you wish to contact us via Messenger or via Direct Message via the respective social network, we generally process your user name via which you contact us and, if applicable, store further data provided by you insofar as this is necessary to process/respond to your request.

The legal basis is Art. 6 para. 1 lit. f GDPR (processing is necessary to protect the legitimate interests of the controller).

(Static) Usage Data We Receive from Social Networks

We receive automatically provided statistics regarding our accounts via Insights functionalities. The statistics include, among other things, the total number of page views, likes, details on page activities and post interactions, reach, video views/views, and details on the proportion of men/women among our fans/followers.

The statistics only contain aggregated data that cannot be related to individual persons. You are not identifiable to us via this.

What data the social networks process from you

In order to view the content of our fan pages or accounts, you do not have to be a member of the respective social network and, to this extent, no user account is required for the respective social network.

Please note, however, that when you call up the respective social network, the social networks also collect and store data from website visitors without a user account (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies, over which we have no control. For details, please refer to the privacy policy of the respective social network (see the corresponding links above).

Insofar as you wish to interact with the content on our fan pages/accounts, e.g. comment on, share or like our postings/contributions and/or contact us via messenger functions, prior registration with the respective social network and the provision of personal data is required.

We have no influence on the data processing by the social networks within the scope of their use by you. To our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network, as well as for the analysis of user behavior (using cookies, pixels/web beacons and similar technologies), on the basis of which advertising based on your interests is played both within and outside the respective social network. It cannot be ruled out that your data will be stored by the social networks outside the EU/EEA and passed on to third parties.

Information on, among other things, the exact scope and purposes of the processing of your personal data, the storage period/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use of the social networks can be found in the privacy policy/cookie policy of the social networks. There you will also find information on your rights and objection options.

Facebook page

When you visit our Facebook page, Facebook (Meta) collects, among other things, your IP address and other information that is present in the form of cookies on your PC. This information is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more detailed information on this under the following link: https://facebook.com/help/pages/insights.

It is not possible for us to draw conclusions about individual users by means of the statistical information transmitted. We only use this information to respond to the interests of our users and to continuously improve our online presence and ensure its quality.

We collect your data via our fan page only to realize a possible provision for communication and interaction with us. This collection usually includes your name, message content, comment content, and the profile information you provide "publicly".

The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 (1) lit. f GDPR. Should you, as a user, have given your consent to the data processing vis-à-vis the respective provider of the social network, the legal basis of the processing extends to Art. 6 (1) lit. a, Art. 7 GDPR.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to fully access your data. Due to this, only the provider can directly take and implement appropriate measures to fulfill your user rights (information request, deletion request, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider.

We are jointly responsible with Facebook for the personal content of the fan page. Data subject rights can be asserted with Meta Platforms Ireland Ltd. as well as with us.

The primary responsibility for the processing of Insights data lies with Facebook under the GDPR and Facebook fulfills all obligations under the GDPR with regard to the processing of Insights data, Meta Platforms Ireland Ltd. provides the essence of the Page Insights supplement to the data subjects.

We do not make any decisions regarding the processing of Insights data and storage duration of cookies on user devices.

Further guidance can be found directly from Facebook (Supplemental Agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

For more information on, among other things, the exact scope and purposes of the processing of your personal data, the storage period/deletion, as well as guidelines on the use of cookies and similar technologies in the context of registration and use, please refer to Facebook's Privacy Policy/Cookie Policy: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0 https://www.facebook.com/policies/cookies

Twitter page

Twitter is a social network of Twitter Inc. based in San Francisco, California, USA, which enables the creation of private profiles of natural persons (Personal Account) as well as professional profiles (Professional Account) of natural persons and companies. Via Twitter, users can, among other things, compose short messages (so-called "tweets"), interact with the content of other users, e.g., compose so-called "retweets", submit likes to posts, share posts and reply when other users mention or tag you in content.

When using or visiting the network and thus also when visiting our Twitter account, Twitter automatically collects data from the users or visitors, for example user name and IP address, during the use or visit. This is done with the help of tracking technologies, in particular using cookies. Twitter provides users with information, offers and recommendations, among other things, based on the data collected in this way. This information is used to provide us, as the operator of our Twitter site, with statistical information about the use of the Twitter site. You can find more information on this in Twitter's privacy policy: https://twitter.com/privacy#twitter-privacy-1.

By means of the transmitted statistical information, it is not possible for us to draw conclusions about individual users. We only use this information to respond to the interests of our users and to continuously improve our online presence and ensure its quality.

We collect your data via our fan page only to realize a possible provision for communication and interaction with us. This collection usually includes your name, message content, comment content, and the profile information you provide "publicly".

The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 (1) lit. f GDPR. Should you, as a user, have given your consent to the data processing vis-à-vis the respective provider of the social network, the legal basis of the processing extends to Art. 6 (1) lit. a, Art. 7 GDPR.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to fully access your data. Due to this, only the provider can directly take and implement appropriate measures to fulfill your user rights (information request, deletion request, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider.

We are jointly responsible with Twitter for the personal content of the fan page. Data subject rights can be asserted with Twitter Inc. as well as with us.

The primary responsibility under the GDPR for the processing of insights data lies with Twitter and Twitter fulfills all obligations under the GDPR with regard to the processing of insights data. Twitter Inc. provides the substance of the Page Insights Supplement to data subjects.

We do not make any decisions regarding the processing of Insights data and storage duration of cookies on user devices.

For more information on, among other things, the exact scope and purposes of the processing of your personal data, storage duration/deletion, and guidelines on the use of cookies and similar technologies in the context of registration and use, please refer to Twitter's Privacy Policy/Cookie Policy: Privacy Policy: https://twitter.com/privacy#twitter-privacy-1 Cookie policy: https://help.twitter.com/rules-and-policies/twitter-cookies

LinkedIn page

LinkedIn is a social network of LinkedIn Inc. based in Sunnyvale, California, USA, which enables the creation of private as well as professional profiles of natural persons and company profiles. Users can maintain their existing contacts and make new ones within the social network. Businesses and other organizations can create profiles that upload photos and other company information to present themselves as employers and hire employees. Other LinkedIn users have access to this information and can write their own articles and share this content with others. The focus of the network is on professional exchanges on specialized topics with people who share the same professional interests.

When using or visiting the network, LinkedIn automatically collects data from users or visitors during the use or visit, such as username, job title and IP address. This is done with the help of various tracking technologies. LinkedIn provides benefits with information, offers and recommendations, among other things, based on the data collected in this way.

We collect your data via our company profile only to realize a possible provision for communication and interaction with us. This collection usually includes your name, message content, comment content as well as the profile information provided by you "publicly".

The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 (1) lit. f GDPR. Should you, as a user, have given your consent to the data processing vis-à-vis the respective provider of the social network, the legal basis of the processing extends to Art. 6 (1) lit. a, Art. 7 GDPR.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to fully access your data. Due to this, only the provider can directly take and implement appropriate measures to fulfill your user rights (information request, deletion request, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider.

We are jointly responsible with LinkedIn for the personal content of our company profile. Data subject rights can be asserted with LinkedIn Inc. as well as with us.

We do not make any decisions regarding the data collected on LinkedIn's site using tracking technologies.

For more information on LinkedIn, please visit: https://about.linkedin.com.

For more information about privacy at LinkedIn, please visit: https://www.linkedin.com/legal/privacy-policy.

Further information on storage duration/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use at LinkedIn can be found at: https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy.