Data Privacy Policy

Information

This page explains how we process your personal data. If you want to change your privacy settings (grant consent or revoke your previously granted consent), you can change your settings.

Controller

The controller of your personal data on our website is:

Das Himberg Hotel-Betriebs GmbH & Co KG
Gutenhoferstraße 8
2325 Himberg
Austria
Tel.: +43 2235 86203
E-Mail: office@gesagt-getan.at

Contact for data protection matters

You can reach our contact for data protection matters at:

Christina Zednicek-Gutscher
Austria
Tel.: +43 2235 86203
E-Mail: office@das-himberg.at

Consent Management Tool

LEGALWEB.IO

This website uses the Consent Management Tool of LEGALWEB.IO, legalweb GmbH, Bayerhamerstraße 14, 5020 Salzburg, Austria, a tool which sets a cookie on your device in order to save the services you have selected or not selected. That cookie does not involve a user-specific ID and does not save any other personal data. It is saved for a maximum of 1095 days and is then deleted automatically. The legal basis of processing is your consent according to § 165 Abs. 3 TKG 2021.

Data processing on your end device

The processing operations described in the following text use technologies such as scripts, cookies, WebSQL, LocalStorage, session storage. These technologies store or read data on your end device these out.

Webhost

punkt.de GmbH

Personal data is processed when you visit this website. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information). Purpose of processing: Monitoring of the technical function and to increase the operational security of our web server, Delivery and provision of the website and Anonymization and creation of statistics. The legal basis for processing: a legitimate interest that overrides the rights and freedoms of the data subject (Art. 6 (1) f GDPR). Legitimate interests: strong economic interest in safe and functioning operation of the technical systems. Data is transmitted: to the data processor punkt.de GmbH, Kaiserallee 13a, 76133 Karlsruhe, Germany.

Webfonts

Adobe Fonts

Personal data is processed when you visit this website. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information). Purpose of processing: Providing the fonts required by the web browser to display the website. The legal basis for processing: The legal basis of processing is the absolute technical necessity to provide and deliver the "website" service which you have explicitly requested according to § 165 Abs. 3 TKG 2021 by visiting the website.. Data is transmitted: to the data controller Adobe Systems Software Ireland Limited, Citywest Business Campus, Dublin 24, Ireland. The legal basis for the data transfer to Adobe Systems Software Ireland Limited is a legitimate interest that overrides the rights and freedoms of the data subject (Art. 6 (1) f GDPR). This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF). The privacy policy of Adobe Systems Software Ireland Limited: https://www.adobe.com/de/privacy.html.

Tag Manager

Google Tag Manager

Personal data is processed when you visit this website. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information). Purpose of processing: Triggering, controlling and managing other services on our website. The legal basis for processing: a legitimate interest that overrides the rights and freedoms of the data subject (Art. 6 (1) f GDPR). Legitimate interests: strong economic interest in safe and functioning operation of the technical systems, Compliance with legal and contractual obligations. Data is transmitted: to the data processor Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).

Web analysis

Google Analytics

Personal data is processed when you visit this website. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data about the use of the website and the logging of clicks on individual elements. Purpose of processing: Anonymization and creation of statistics, analysis of user behavior and content optimization. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA. The legal basis for the data transfer to Google LLC is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).

Remarketing

Google AdSense

Personal data is processed when you visit this website. Processed data categories: data about the use of the website and the logging of clicks on individual elements. Purpose of processing: analysis of user behavior, Analysis of the effect of online marketing measures and Selection of online advertising on other platforms, which are automatically selected using real-time bidding based on user behavior. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller Google Ireland Limited, Google Building Gordon House Barrow St, Dublin, Dublin 4, Ireland. The legal basis for the data transfer to Google Ireland Limited is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).

Contact Form

You can contact us by using a contact form provided on our website. After submission of the contact form, the controller will process the personal data you have provided for the purpose of handling your request on the basis of your consent which you have given by submitting the form according to Art. 6 (1) (a) GDPR, until revocation.You have no legal or contractual obligation to provide personal data. If you do not provide such data, you are simply not able to submit and we are not able to process your request.

Newsletter

Cleverreach

When you register for our newsletter, we process personal data. Processed data categories: data for creating usage statisticsdata about the use of the website and the logging of clicks on individual elementscontact information like Name and e-mail address. Purpose of processing: analysis of user behavior, Sending information and content optimization. The legal basis for processing: The legal basis of processing is your consent according to § 174 TKG 2021 combined with Art. 6 Abs. 1 lit. a GDPR.. Data is transmitted: to the data processor CleverReach GmbH & Co. KG,, Schafjückenweg 2, 26180 Rastede, Germany.

Right to object

You have the right to object to processing if your personal data are processed based on legitimate interests. We will then cease the processing carried out on this basis, unless there are compelling and legitimate reasons for us to do so. You have the right to object to the processing of your personal data for the purpose of direct marketing. In this case, we will cease the processing of your personal data for the purpose of direct mail. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to withdraw

You have the right to withdraw your consent at any time by changing the settings at Privacy settings. If you have given your consent to receipt of advertising by email, you may withdraw your consent by clicking the unsubscribe link. In this case, we will cease the processing operations, unless there is any other legal basis. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Other rights

You have the right to access to, rectification, erasure and restriction of processing of personal data. You have also the right to data portability if the processing of your personal data is based on your consent or on a contract concluded with you. You have also the right to lodge a complaint with the supervisory authority. If you need more information on the supervisory authorities in the European Union, click here.