Privacy statement &

 

 

1. Controller and data protection officer:

Pursuant to Article 4 (7) of the GDPR, the controller for this website Therme Seewinkel Betriebsgesellschaft m.b.H, Im Seewinkel 1, 7132 Frauenkirchen.

If you have any questions about the processing of your data by Therme Seewinkel Betriebsgesellschaft m.b.H, you can contact us as indicated below:

by email to: datenschutz@stmartins.at

The contact details of the VAMED Data Protection Officer are:

Mag. Per-Oliver Gustavson
Sterngasse 5, 1231 Wien
datenschutz@stmartins.at

2. Processing of personal data when visiting the website

2.1 Processing of access data

When you visit our website, we store the access data in so-called web server log files. We collect the following data from you:

• IP address
• der Browser bzw. die Browserversion
• Date and time of access
• Browser
• Operating system
• Your Internet service provider

Purpose of data processing

These data are statistically evaluated to further improve our online offer and make it more user-friendly, to find and fix bugs faster, and to control server capacity. Only in case of a concrete indication of illegal use of our website, we will use this data in a personal form for the purpose of prosecution.

Duration of storage

Your data will only be stored for a period of 5 years.

Legal basis

The legal basis for the processing of access data is the legitimate interest of THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H  (online service offer & data security) pursuant to Article 6 (1) (f) of the GDPR.

2.2. Cookies

2.2.1 Use of cookies

In order to make the visit to our website as attractive as possible and to enable the use of certain functions, we use so-called cookies on various pages. These are small files that are stored on your device. They allow us to recognize your browser on your next visit. The cookies are set in accordance with EU and Austrian law (Art. 5 (3) E-Privacy Directive and Art. 165 (3) TKG 2021). You can set your browser in the way that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. However, disabling cookies may limit the functionality of our site.

Legal basis
The legal basis for setting cookies is for cookies that are required to display the website or to offer a service you have requested, pursuant to Article 6 (1) f GDPR, VAMED's legitimate interest in providing this website to you and the corresponding offers (Section 165 (3) 3rd sentence of the Telecommunications Act). For all other cookies, the data processing is based on your express consent in the cookie banner (Article 6 (1) lit a GDPR; Section 165 (3) 2nd sentence TKG), which you can change or revoke at any time using the link below entitled "My data protection settings". You can find more information about the cookies on our website here:

More information on cookies

 

3. Linking

The website includes links to other websites. These references to websites of other Internet users are provided as a service to cover wider information needs of the accessing party. THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H  has no influence on their content. THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H  assumes no liability for this content. The provider of the linked website is exclusively responsible for the content and correctness of the information provided there.

4. Contact form

We look forward to hearing from you.

Data processing

When you contact us using the contact form, THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H  processes your personal information indicated below:

Contact form

• E-Mail address
• Salutation
• First name
• Last name
• District
• Country (optional)

Purpose of data processing

The personal data that you provide when you contact us processed for the purposes of

• contacting you and,
• if applicable, establishing a business relationship with you.

Legal basis

The processing of your personal data for the purpose of contacting you is based on taking the necessary steps prior to entering into a contract pursuant to Article 6 (1) (b) of the GDPR.

Invisible-Recaptcha

Forms are protected from form spam by Google Invisible Recaptcha: Recaptcha - Privacy Policy, Recaptcha - Terms of service

Duration of storage

The data processed for the above-mentioned purposes will be processed for the duration of the business relationship and/or beyond that, up to the expiration of all legal storage periods.

Data security

The security of your personal data is very important to us.

Taking into account the state of the art in terms of technology, the implementation costs and the nature, scope, circumstances and purposes of the data processing, as well as the likelihood and severity of the risk to the rights and freedoms of natural persons, THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H  implements appropriate technical and organizational measures within the meaning of Article 32 of the GDPR.

In this sense, the following measures, inter alia, are taken to protect your data and to protect against loss, destruction, access, modification and distribution by unauthorized persons:

• Ensuring the confidentiality, integrity, availability and resilience of systems and services related to data processing;
• Ensuring rapid restoration of the availability of personal data in the event of a physical or technical incident;
• Implementation of procedures for the periodic review, assessment and evaluation of the effectiveness of the technical and organizational measures to ensure the safety of the data processing.

Please note that we do not accept any liability for the disclosure of information due to errors that are not attributable or attributable to us in data transmission and/or unauthorized access by third parties.

5. Your rights

You have the following rights as a user of our website:

• Right of access to information (Article 15 of the GDPR): You have the right to obtain confirmation from THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H as to whether your personal data are being processed. In addition, you have the right to further information about the specific purposes of the processing, the categories of the personal data concerned, the recipients or categories of recipients of the personal data concerned, the storage period, the right to erasure or rectification of your personal data or restriction of processing and the right to object to such processing, the right to lodge a complaint and the right to any available information as to their source.

• Right to rectification (Article 16 of the GDPR): You have the right to obtain from THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H the immediate rectification of your personal data. This right includes the rectification of inaccurate data and the completion of incomplete personal data.

• Right to erasure (Article 17 of the GDPR): You have the right to obtain from THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H  the immediate erasure of your personal data, provided that the reasons stated in Article 17 (1) (a) to (f) of the GDPR (e.g. the purpose for processing no longer applies) and the processing of your personal data is no longer required.

• Right to restriction of processing (Article 18 of the GDPR): In the cases mentioned in Article 18 of the GDPR (e.g. inaccuracy of the processed personal data, unlawfulness of the processing, etc.), you also have the right to obtain from THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H  the restriction of processing.

• Right to data portability (Article 20 of the GDPR): You have the right to receive your personal data that you have provided to THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H  in a structured and commonly used format and to have THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H  transmit this data to another controller (e.g. to another law firm).

• Right to object (Article 21 of the GDPR): You have the right to object at any time to the processing of your personal data on this website.

• Withdrawal of consent (Article 7 of the GDPR): You have the option of withdrawing any consent given to THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H  at any time.

• Right to lodge a complaint: In addition, you can lodge a complaint at any time with the

6. Online Shop – Prepaid Card

Data processing

As part of the business relationship when purchasing a VAMED Vitality World gift card/voucher, THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H processes the following personal data (in short: “the data”):

• First name
• Last name
• Address
• E-Mail address
• Telephone number
• Company, if applicable
• Payment data (encrypted)
• Customer account data (orders placed (articles, prices, IP addresses)
• Any text or images or photos entered for print@home vouchers
• Prepaid card queries (voucher number, date, IP address)

Purpose of data processing

The purpose of processing data are

• the processing of the respective business case
• and – provided the CUSTOMER has agreed to it – the marketing of VVW Resorts’ products and services, special offers and events, including the VVW Resorts’ news (by means of marketing material sent by regular mail, e-mail, text message, and telephone calls).

Legal basis

Processing for the purpose of managing the business transaction is based on Art 6 (1) b) of the EU General Data Protection Regulation (“GDPR”) (performance of the contract). Data processing for the purpose of marketing is based on Art 6 (1) a) GDPR (consent).

Data transmission

On behalf of THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H, the data is forwarded to VAMED Standortentwicklung und Engineering GmbH (Sterngasse 5, A-1230 Wien), INCERT eTourismus GmbH & Co KG (Leonfeldnerstraße 328, 4040 Linz), mediasupport GmbH (Lerchenfelder Straße 124/Top 6, 1080 Vienna), Usercentrics GmbH (Sendlinger Str. 7, 80331 Munich) and Datatrans AG (Kreuzbühlstrasse 26, CH-8008 Zurich) for the purpose of managing the business transaction, as well as to hi.one digital marketing OG (Gurkgasse 43/ Top 2, 1140 Vienna) for marketing purposes. The data is not passed on to other third parties.

Duration of storage

The data is only stored as long as there are statutory retention periods, legal claims from the contractual relationship can be asserted, or other legitimate reasons justify further storage.

7. Online Shop - Voucher

Data processing

The Customer agrees that all data generated on account of his / her business relationship, which are

• salutation
• title
• first name
• last name
• address
• e-mail address
• telephone number
• fax number
• password
• customer account data (orders placed, articles, prices, IP address)
• any texts entered in Print-at-Home vouchers

Purpose of data processing

The purpose of processing data are

• the handling of the respective business transactions
• and - if the Customer has agreed - the marketing of products, services and services of the THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H special offers and events, as well as the distribution of THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H news (including the dispatch of appropriate marketing materials by post, e-mails, text message, and contact by phone).

Legal basis

DThe processing of data for the handling of the respective business transaction is based on Art. 6 (1) (b) of the EU General Data Protection Regulation (performance of a contract). The processing of data for marketing purposes is based on Art. 6 (1) (a) of the Regulation (consent by data subject).

Data transmission

Upon instructions by the Seller, the data are processed and transferred to styleflasher GmbH (KR Martin Pichler-Str. 1, A-6300 Wörgl), Cards & Systems EDV-Dienstleistungs GmbH (Landstraßer Hauptstraße 5, 1030 Vienna) and mediasupport GmbH (Lerchenfelder Straße 124/Top 6, 1080 Vienna), and mPAY24 GmbH (Grüngasse 16, 1050 Vienna) for the purpose of handling the respective business case, as well as for marketing purposes to EMARSYS eMarketing SystemsAG (Märzstraße 1, 1150 Vienna), EVALANCHE SC-NETWORKS GMBH (Enzianstr. 2, 82319 Starnberg, Germany) and travelClick (Via Augusta, 117, Barcelona 08006). The data are not transferred to third parties other than the ones above. 

Duration of storage

The data are saved for the processing of the respective business case, for marketing purposes, and exceeding this period, if there are legally required storage periods, or for the period during which any legal claims can be lodged in connection with the subject contractual relationship, or in the event of other reasonable circumstances justifying further storage of these data.

 

Austrian Data Protection Authority at
Wickenburggasse 8
1080 Wien
Telefon: +43 1 521 52-25 69
EMail: dsb@dsb.gv.at

With the exception of the right to lodge a complaint with the Austrian Data Protection Authority, you can assert your rights with THERME SEEWINKEL BETRIEBSGESELLSCHAFT M.B.H  at the following address:

• e-mail to: datenschutz@stmartins.at

Therme Seewinkel Betriebsgesellschaft m.b.H, Im Seewinkel 1, 7132 Frauenkirchen