Information on cookies and data protection

Privacy Notice
The protection of your personal data is important to us. In this privacy policy, we inform you about what data we process when you use our website, for what purposes this is done, on what legal basis we do so, and what rights you have.

Contacting us
If you contact us via a contact form on this website, by email or by telephone, we will process the personal data that you voluntarily provide to us when making contact. This may include, in particular, your name, email address, telephone number and the content of your enquiry.
This data is processed solely for the purpose of dealing with your enquiry, responding to any queries, carrying out pre-contractual measures or fulfilling an existing contractual relationship.

Purpose of processing:
Processing and responding to enquiries, communicating with prospective and existing customers, carrying out pre-contractual measures, and maintaining business correspondence.
Legal basis:
Article 6(1)(b) of the GDPR (contract or pre-contractual measures) and – where no contractual relationship exists – Article 6(1)(f) of the GDPR (legitimate interest in efficient and transparent communication).
Retention period:
The data provided when making contact will only be stored for as long as is necessary to process the enquiry. Data will only be stored for any longer if there are statutory retention obligations or if the data is required to assert, exercise or defend legal claims.
Recipients:
Your data will be passed on exclusively to those internal departments entrusted with processing your enquiry. Where external service providers (e.g. hosting or IT service providers) are involved, this takes place exclusively within the framework of data processing on behalf of the controller in accordance with Article 28 of the GDPR.

Cookies & similar technologies
Our website uses cookies and similar technologies (e.g. local storage). These are small files or pieces of information that can be stored on or read from your device to provide basic functions, save settings or enable audience measurement and marketing.

  • Technically necessary cookies: required for the website to function technically (e.g. page navigation, security, storing consent).
  • Optional cookies: statistics, marketing and convenience features (e.g. web analytics, embedded content).

Cookie consent:
Where cookies are not strictly necessary, we only set them after you have given your consent via our consent banner. You may change or withdraw your consent at any time with future effect.
Storage period: depends on the specific cookie (session cookies until the browser is closed; persistent cookies until they expire or are manually deleted).
You can also delete or block cookies via your browser settings. If you disable cookies, the functionality of the website may be restricted.

Web analytics with Google Analytics 4 (GA4)
Provided you have given your express consent, we use the web analytics service Google Analytics 4 (GA4) on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics 4 uses cookies and similar technologies to collect and analyse information about website usage. In Google Analytics 4, these reports are also provided exclusively in aggregated form. In particular, the following data may be processed:

  • pages visited and interactions
  • technical information about the device (e.g. browser type, operating system)
  • approximate location information
  • truncated IP address

The information collected is used to analyse usage behaviour on the website, to compile reports on website activity and to continuously improve our online offering.

Purpose of processing:
Audience measurement, analysis of user behaviour, and optimisation of the website’s content, structure and performance.
Legal basis:
Article 6(1)(a) of the GDPR (consent). Processing takes place exclusively following your active consent via the consent management tool used.
Recipients / Data processing:
Google processes the data on our behalf. When using Google Analytics 4, data may be transferred to third countries (in particular to the USA). Further information on this can be found in the section ‘Data transfer to third countries’.
Retention period:
The retention period for the data collected depends on the settings configured in Google Analytics 4 and does not exceed the periods specified by Google. Event data is automatically deleted as soon as the specified retention period has elapsed.
Withdrawal of consent:
You may withdraw your consent at any time with future effect via the cookie settings on this website.
Further information:
Details regarding data processing by Google can be found in Google’s privacy policy.
Note: Details regarding data processing by Google can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de

IP anonymisation
We use Google Analytics with IP anonymisation enabled. This means that your IP address is truncated before further processing, so that it cannot be readily linked to you personally.
In exceptional cases, a full IP address may be transmitted to a Google server and truncated there. Google uses the processed information to analyse website usage, compile reports on website activity and provide other services relating to website usage.

Browser plug-in
Regardless of whether you have given your consent via the consent banner, you can also prevent Google Analytics from collecting and processing your usage data by installing the browser add-on provided by Google:
https://tools.google.com/dlpage/gaoptout?hl=de
Please note: If you have blockers or restrictions enabled, certain website functions may be limited.

Demographic characteristics
If this feature is enabled and you have given your consent, Google Analytics may provide reports on demographic characteristics (e.g. age ranges, gender, interests). According to Google, this information is derived, amongst other sources, from interest-based advertising and third-party data, and is generally presented in aggregated form.

  • Purpose: to gain a better understanding of target audience interests and to optimise content.
  • Legal basis: Article 6(1)(a) of the GDPR (consent).
  • Opting out: You can reduce or opt out of personalised advertising in your Google Account or via Google’s advertising settings. Click here to visit the Google Safety Centre: https://safety.google/intl/de_ALL/settings/privacy-settings/

Newsletter
If you subscribe to our newsletter, we will process the data you provide (typically your email address and, in most cases, your first name and surname). We will only process optional information (e.g. interests, contact and address details, etc.) if you provide it voluntarily.

Double opt-in:
We use a confirmation procedure to ensure secure registration. After registering, you will receive an email containing a confirmation link. The newsletter will only be activated once you have confirmed your subscription.

Tracking/performance measurement (where used):
Where technically enabled within the newsletter, opens and clicks may be statistically recorded using tracking pixels or tracking links in order to optimise content and distribution.

  • Purpose: Sending information, offers and company news; statistical optimisation where applicable.
  • Legal basis: Article 6(1)(a) of the GDPR (consent).
  • Unsubscribing/Withdrawal: You may unsubscribe from the newsletter at any time, e.g. via the unsubscribe link in the newsletter.
  • Retention period: until withdrawal; thereafter deletion or blocking, provided there are no conflicting retention obligations or requirements to provide evidence (e.g. proof of consent).

Google Maps
Maps from the Google Maps service may be embedded on our website. The provider is usually Google Ireland Limited (see above). OpenCorpData
When you access pages containing embedded maps, data (in particular your IP address and technical information; possibly location data, subject to the relevant device authorisation) may be transmitted to Google and processed there. Processing in third countries is possible.

  • Purpose: convenient display of maps and locations, route planning.
  • Legal basis: Article 6(1)(a) of the GDPR (consent) – provided that the integration only takes place after consent has been given; otherwise Article 6(1)(f) of the GDPR only where integration is technically essential (in practice, this is not usually required).
  • Further information: Google Privacy Policy: https://policies.google.com/privacy?hl=de

YouTube
We can embed videos from the YouTube platform. YouTube is a Google service. Google Privacy Policy & Terms of Service
When you visit a page with embedded YouTube content, a connection is established with YouTube/Google servers. In the process, personal data (e.g. IP address, device information, page visited) may be processed. If you are logged into your YouTube/Google account, YouTube may associate your use of the service with your profile; you can prevent this by logging out.

  • Purpose: Display of video content.
  • Legal basis: Article 6(1)(a) of the GDPR (consent) – recommended in particular for active embeds/tracking.
  • Further information: Google/YouTube privacy policy: https://www.google.de/intl/de/policies/privacy

Meta plugins (Facebook, Instagram, WhatsApp)
Our website may incorporate features or plugins from Meta’s social networks. The data controller in the EU is generally Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. https://opencorporates.com/companies/ie/462932
When you visit a page containing a Meta plugin, a direct connection may be established between your browser and Meta’s servers. In the process, data (e.g. IP address, device/browser information, page visited) may be transmitted to Meta. If you are logged into Facebook, Meta may associate your visit with your user account. If you do not wish this to happen, please log out before visiting our website.

  • Purpose: Interaction and reach via social media functions.
  • Legal basis: Article 6(1)(a) of the GDPR (consent), provided that the plugin is only loaded after consent has been given (recommended, e.g. 2-click solution/consent-controlled loading).
  • Further information: Meta (Facebook) privacy policy: https://de-de.facebook.com/policy.php

Adform
The josalzburg.com website incorporates tracking points from Adform, Wildersgade 10B, 1408 Copenhagen, Denmark. This enables TVB St. Johann and its partners to track users’ activities after they have visited and navigated the websites. The data collected remains anonymous. This means that individual users’ data cannot be identified. However, the data collected is stored and processed by Adform in encrypted form. We are unable to link this data to individual visitors to our website. We are informing you of this matter in accordance with our current information. These tracking points allow the TVB and its partners to display targeted advertising to users.

The website josalzburg.com also uses cookies and products from Adform A/S (ad server, DSP and DMP) for targeted advertising as part of joint processing in accordance with Article 26 of the GDPR. For this purpose, various parameters (pages viewed, device type, geographical origin, most recently visited websites) are collected and visitors are grouped into different segments. Statistical analyses are then used to identify similar users within Adform’s global cookie pool, in order to target them with advertising for TVB or partner offers. Further information on Adform can be found at the following address: https://site.adform.com/privacy-center/platform-privacy/product-and-services-privacy-policy/

Google retargeting/marketing services
On the basis of our legitimate interests (i.e. our interest in the analysis, optimisation and commercial operation of our online offering), we use the marketing and remarketing services (‘Google Marketing Services’) provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; or, if you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) – specifically Google AdWords and Google Tag Manager.

If you wish to opt out of interest-based advertising via Google Marketing Services, you can use the settings and opt-out options provided by Google: https://adssettings.google.com/authenticated?hl=de

Google Ads / Google Programmatic Ads (Google360/GoogleDV360)
With Google Ads (formerly AdWords), Google Ads places a cookie on your computer (‘conversion cookie’) if you have accessed our website via a Google advert. However, we do not receive any information that can be used to identify you personally. These cookies have a limited validity period, do not contain any personal data and are not used for personal identification. If you visit certain pages on our site whilst the cookie is still valid, we and Google can recognise that someone has clicked on the advert and been redirected to our site. Each Ads customer is assigned a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers. The information collected via the conversion cookie is used to compile conversion statistics for Ads customers who have opted for conversion tracking.

The information collected by the cookie regarding your use of the website is usually transmitted to a Google server in the USA and stored there. Based on the information collected, your browser is assigned categories relevant to your interests. To ensure an adequate level of data protection when transferring data to the USA, we have entered into the so-called EU Standard Contractual Clauses with Google as appropriate safeguards. Furthermore, Google is certified under the Privacy Shield Agreement (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

We use the data collected about you via the above-mentioned cookie (known as conversion tracking) for the following purposes:

  • Remarketing
  • Audiences with shared interests
  • Custom audiences with shared interests
  • Audiences likely to make a purchase
  • Similar audiences
  • Demographic and geographical targeting

You have the option to opt out of interest-based advertising by Google. To do so, you must visit the link www.google.de/settings/ad and configure the settings as required.

Further information on the terms of use and data protection in connection with Google AdWords can be found via this link http://www.google.de/policies/technologies/ads/.

Google Tag Manager
We also use Google Tag Manager, a service provided by Google Inc., to integrate and manage Google’s analytics and marketing services on our website.

The Tag Manager tool itself, which implements the tags, is a cookie-free domain and does not collect any personal data. However, the tool triggers other tags, which may in turn collect personal data. Google Tag Manager itself, however, does not access this data. If deactivation has been carried out at domain or cookie level, this remains in effect for all tracking tags implemented using Google Tag Manager. For further information on Google’s use of data for marketing purposes, please visit the overview page: https://policies.google.com/technologies/ads. Google’s privacy policy is available at https://policies.google.com/privacy.

Your rights
In accordance with the GDPR, you have the following rights in particular:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on legitimate interests (Art. 21 GDPR)
  • Withdrawal of consent with future effect (Art. 7(3) GDPR)

If you believe that the processing of your personal data infringes data protection law, you may lodge a complaint with a supervisory authority. In Austria, this is the Data Protection Authority.

St. Johann in Salzburg Tourist Board
Ing.-Ludwig-Pech-Straße 1
5600 St. Johann im Pongau
AUSTRIA

Managing Directors: Stefanie Jastrinsky, BA and Hannes Rieser
Chairman: Robert Rettenwender, BA
Tel.: +43 6412 6036

VAT No. ATU 47647603
D-U-N-S No. 301277575

Competent authority under the ECG: Salzburg Provincial Government