Data Protection

You are important to us! We therefore consider it our duty to treat your personal data with the utmost care and to protect it from misuse.

The Association of Lower Austrian Nature Parks therefore strictly adheres to the data protection regulations (General Data Protection Regulation and Data Protection Act) when processing and collecting personal data.

Below you will find detailed information about which personal data are collected during your visit to our website and what they are used for, as well as which personal data are collected when you contact us and what they are used for.

This data protection declaration applies to the website operated by the responsible association, Association of Lower Austrian Nature Parks www.naturparke-noe.at

Individual pages may contain links to other partner websites and providers in the nature parks network, to which the data protection declaration of the Association of the Lower Austrian Nature Parks does not extend. This means that we cannot accept any responsibility or liability for this external content or for the personal data processed there.

Controller

Who is responsible for data processing? Who can you contact if you have questions about data processing and exercising your data subject rights?

Responsible for data processing:

Verein der Naturparke Niederösterreich
ZIP/Town: 3100 St. Pölten
Postal address: Grenzgasse 10/2
Tel: 0043 2742 21919 334
E-Mail: info@naturparke-noe.at
Web: www.naturparke-niederösterreich.at

Data types, data sources

What kind of data is processed? What are the sources of these data?

We process the personal data that we receive from you within the scope of our business relationship or that you make available to us by means of consent. This includes, among other things, registering for the newsletter, ordering brochures, ordering vouchers/booking a tour through the typical “Kellergassenhäuser”, other booking enquiries, competitions, registering for the events database or POI database (user) and contact enquiries.

Personal data includes:

  • Private individual: Name, address, contact details (e-mail, telephone), country
  • Employees of organisations and partner companies: As part of business-to-business relationships, the name of the company or organisation is also collected and stored in addition to the above-mentioned data.

Furthermore, personal data may in some cases also include the following data:

  • Image data within the framework of competitions
  • Data from the fulfilment of our contractual obligation
  • Data for the fulfilment of pre-contractual measures


Purposes and legal basis of data processing

For what purposes will the data be processed? What is the legal basis for this processing?

Your personal data will be processed exclusively in accordance with data protection regulations:

For the fulfilment of contractual obligations and, if applicable, for the fulfilment of pre-contractual measures (Art. 6 (1) lit. b GDPR)

The processing of your personal data is necessary in order to be able to fulfil the enquiries and orders you have placed.

The purposes of data processing are primarily based on the specific request or order and include, among others:

  • Transmission of information material (brochures, road maps, etc.)
  • Transmission of ordered vouchers (by post or electronically by e-mail)
  • Notification of winners and sending of prizes within the framework of competitions
  • Transmission of data to hosts/providers for the processing of non-binding enquiries

Within the scope of your consent (Art. 6 (1) lit. a GDPR)

If you have given us consent to process your personal data, they will only be processed in accordance with the purposes and to the extent agreed in this consent form.

Any consent you have given can be revoked at any time with immediate effect. The lawfulness of the processing carried out on the basis of your consent before your revocation remains unaffected by this.

Data Transfer

Who receives your data? To whom will your data be transferred outside the Association of Lower Austrian Nature Parks?

Within the Association of Lower Austrian Nature Parks, access to your personal data is granted to those offices or employees who need this data to fulfil pre-contractual measures or contractual obligations, as well as to protect the legitimate interests of the Association of Lower Austrian Nature Parks.

Non-binding requests for offers and accommodation can be made via the website of the Association of Lower Austrian Nature Parks. The contact details given to us (name, address, e-mail address and telephone number) as well as the travel-specific data (arrival
/departure date, number of persons, number of children and age of children) are passed on to the respective hosts/providers for the
 
purpose of processing the non-binding enquiry.

In addition, the processors we commission (in particular IT and back-office service providers and printing companies) receive your personal data if they need it to carry out their respective tasks. All order processors are contractually obliged to process your personal data only within the scope of the service provision and to treat it confidentially.

Except for these above-mentioned order processors, your data will not be passed on to third parties unless there is a legal obligation to do so.

Duration of Data Storage

For how long will your data be stored and processed?

We store and process your personal data for the duration of the current customer relationship (incl. the use for direct marketing purposes) or until the corresponding consent is revoked. In addition, the legally stipulated retention periods for accounting purposes, e.g. seven-year retention obligation to preserve documents and records, must be complied with.

Data Protection Law

Which data protection rights do you have as a data subject? As a data subject, you have the following rights at all times:

  • Right to access, right to correction, erasure or restriction of the processing of your stored data (after clear identification using a valid identification document).
  • Right to object to the processing and use for direct marketing purposes.
  • Right to data portability in accordance with the requirements of data protection law.

Right to confirmation

As a data subject, you have the right to request confirmation from us (after you have been clearly identified by means of a valid identification document) as to whether personal data relating to you is being processed by us. You can contact us at any time by writing to info@naturparke-noe.at .

Right of access

As a data subject, you have the right to receive from us at any time, free of charge, information about the personal data stored about you and a copy of this information (after clear identification via a valid identification document). You can contact us at any time by writing to info@naturparke-noe.at .

Your right of access covers the following elements:

  • Purposes of the processing
  • Categories of personal data that we process
  • The recipients or types of recipients to whom the personal data have been or will be disclosed
  • If possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining this duration
  • The existence of your right to have your personal data rectified or erased, or to have processing restricted by us as data controller, or your right to object to such processing
  • The existence of a right of appeal to the Austrian Data Protection Authority as supervisory authority,
  • insofar as your personal data are not collected from you as the data subject: All available information about the origin of this data.

Within the scope of operating our websites, we commission software service providers and agencies who may gain access to your personal data as part of their activities. They have undertaken to comply with the applicable data protection provisions. For more information on the service providers we use, please write to info@naturparke-noe.at

Furthermore, as a data subject, you have the right to be informed whether your personal data have been transferred to a third country or to an international organisation. If this is the case, you as the data subject have the right to obtain information on the appropriate safeguards in connection with the transfer.

Right to rectification

As a data subject, you have the right to request that we correct any inaccurate personal data relating to you without delay (after you have been clearly identified by means of a valid identification document). You can contact us at any time by writing to info@naturparke-noe.at .

Right to erasure (right to be forgotten)

As a data subject, you have the right to request from us (after being unambiguously identified by a valid identification document) that the personal data concerning you be deleted without delay, provided that one of the following reasons applies and insofar as the processing is not necessary:

  • Your personal data has been collected or otherwise processed for purposes for which it is no longer necessary
  • As a data subject, you withdraw your consent on which the processing was based in accordance with Art. 6 (1)(a) GDPR or Art. 9 (2)(a) GDPR and there is no other legal basis for the processing.
  • As a data subject, you object to the processing in accordance with Article 21 (1) of the GDPR and there are no overriding legitimate grounds for the processing, or as a data subject, you object to the processing in accordance with Article 21 (2) of the GDPR.
  • Your personal data have been processed unlawfully.
  • The erasure of your personal data is necessary for compliance with a legal obligation under European Union law or the law of the Republic of Austria to which we are subject as the controller.

If one of the aforementioned reasons applies, and you as the data subject whose personal data are stored by the Association of Lower Austrian Nature Parks want to arrange for the
 
erasure of this data, you can contact us at any time by writing to info@naturparke-noe.at .

Right to restrict processing

As a person affected by the processing of personal data, you have the right to demand that we, as the controller, restrict processing (after clear identification via a valid identification document) if one of the following conditions is met:

  • The accuracy of the personal data is disputed by you as the data subject for a period of time that enables us as the controller to verify the accuracy of your personal data.
  • The processing is unlawful and you, as the data subject, object to the erasure of your personal data and request the restriction of the use of your personal data instead.
  • We, as the controller, no longer need your personal data for the purposes of processing, but you as the data subject need it to assert, exercise or defend legal claims.
  • You, as the data subject, have objected to the processing in accordance with Article 21 (1) of the GDPR and it is not yet clear whether the legitimate grounds of the controller override those of the data subject.

If one of the aforementioned reasons applies, and you as the data subject whose personal data is stored by Association of Lower Austrian Nature Parks want to arrange the restriction of the processing of such data, you can contact us at any time by writing to info@naturparke-noe.at .

Right to data portability

As a data subject affected by the processing of personal data, you have the right to receive the personal data concerning you, which have been provided by you as the data subject to us as the controller, in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent in accordance with Art. 6 (1)(a) GDPR or Art. 9 (2)(a) GDPR or on a contract in accordance with Art. 6 (1)(b) GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, when exercising your right to data portability in accordance with Article 20 (1) of the GDPR, you as a data subject have the right to have your personal data transferred directly from us as controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

To assert the right to data portability, you can contact us at info@naturparke-noe.at at any time.
 
Right to object

As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (1)(e) or (f) GDPR. You can contact us at any time by writing to info@naturparke-noe.at .

Insofar as we process your personal data for the purpose of direct marketing, you as the data subject have the right to object at any time to the processing of personal data for the purpose of such marketing activities.

Right to lodge a complaint

You can address your complaints to the Austrian Data Protection Authority at any time: https://www.dsb.gv.at

Provision of data

Are you obliged to provide data?

In order to carry out the order you have requested (e.g.: ordering vouchers, ordering information material) and to be able to fulfil the resulting contract or the pre-contractual measures, your personal data is required. If you do not wish to provide us with the data, we will unfortunately not be able to carry out the order.

In any case, you are not obliged to give your consent to the processing of data that are not relevant for the performance of the contract (e.g. when participating in a competition, you do not have to give your consent to receive the newsletter (your consent is optional)).

Use of our website

Cookies, Google reCaptcha and Google Fonts

General:

When you access this website, the Association of Lower Austrian Nature Parks stores information about your access (date, time, page viewed). These data are used exclusively for statistical purposes and are only evaluated in anonymised form.

In detail:

  • Google Analytics

Google Analytics is used on this website, provided you have given your consent. UnterWasserReich Naturpark Hochmoor Betriebs GmbH uses Google Analytics to analyse the use of its website. The data obtained from this is used to optimise the website and advertising measures and to compile reports on website activities. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns. Further information about Google Analytics can be found online or at www.google.com/analytics. For more information about terms of use and privacy, please visit https://policies.google.com/?hl=en-GB.

Google Analytics is a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes the data on website use on our behalf and is contractually bound to take measures to ensure the confidentiality of the data processed.

During your visit to the website, the data recorded includes:

  • The pages you access, i.e. your “click path”
  • Your behaviour on the pages (for example clicks, scrolling behaviour and dwell time)
  • Your approximate location (country and city)
  • Your IP address (in abbreviated form, so that no clear assignment is possible)
  • Technical information such as browser, internet provider, end device and screen resolution
  • Source of your visit (i.e. the website or advertising medium via which you came to our website)
  • The referrer URL (the website/advertising medium via which you came to this website)

This data is transferred to a Google server in Europe and stored there.

Recipient
The recipient of the data is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as the processor. UnterWasserReich Naturpark Hochmoor Betriebs GmbH has concluded a contract with Google for this purpose. Google LLC, based in California, USA, and, where applicable, US authorities can access the data stored by Google.

Transfer to third countries
A transfer of data to the USA cannot be excluded.

Storage duration
Google Analytics stores cookies in your web browser for 14 months from your last visit. These cookies contain a randomly generated user ID that can be used to recognise you on future visits to the website.

The recorded data is stored together with the randomly generated User ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form for an unlimited period.

Legal basis and right of withdrawal
The legal basis for this data processing is your consent, Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by viewing the cookie settings and changing your selection there.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB.

Google Analytics (with anonymisation function)

We have implemented the IP address anonymisation of Google Analytics on this website. This feature has been developed by Google to enable this website to comply with applicable privacy provisions and recommendations of local data protection authorities when they prohibit storage of the full IP address. The anonymisation and/or masking of the IP takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before the data is stored or processed. Further information about IP anonymisation can be found at https://support.google.com/analytics/answer/2763052?hl=de.

  • Cookies

Cookies are very small files that are written by a website on the visitor's computer. They cannot be used to read other data on the computer. Websites use cookies to restore previous user settings and to track the history of visitor requests.

The Association of Kamptal Schönberg Nature Park uses cookies to better adapt the offer on
 
www.naturpark-kamptal.at to the needs of our customers and to structure the contents of our websites in the best possible way. The information is also used to improve the navigation structure of www.naturpark-kamptal.at further and to make it more user-friendly.

Additional cookies may be set by various other providers whose additional services are offered on our websites. We have no influence on these providers and do not use their cookies for our own purposes.

By default, all cookies are accepted by every internet browser. However, you can instruct your browser not to accept cookies or to delete them automatically after each internet session. Please refer to the support pages of your browser manufacturer for the relevant instructions.

  • Google reCaptcha

To protect your orders via Internet forms, this website uses the reCAPTCHA service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The query serves to distinguish whether the input is made by a human or abusively through automated machine processing. The query includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. For this purpose, your input will be transmitted to Google and undergo further processing there. By using reCaptcha, you agree that the recognition you provide will be used to digitise old works. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the U.S. and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other data from Google. The deviating data protection provisions of the Google company apply to this data. For more information on Google's privacy policy, please visit: http://www.google.com/policies/privacy/.

  • Google Fonts

External fonts, Google Fonts, are used on this website. Google Fonts is a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The integration of these web fonts takes place via a server call, usually a Google server in the U.S. This includes a transmission to the server of the respective websites you have visited. The IP address of the browser of the end device of the visitor to this website is also stored by Google. You can find more information in Google's privacy policy, which you can access here: https://policies.google.com/privacy?hl=en

  • YouTube

YouTube components are integrated on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other
 
users to view, rate and comment on them free of charge. YouTube allows the publication of all kinds of videos, which is why complete film and television programmes, but also music videos, trailers or videos produced by users themselves can be accessed via the internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time a data subject accesses one of the individual pages of this website operated by the data controller on which a YouTube component (YouTube video) has been integrated, the internet browser on the data subject's information technology system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/intl/en_us/about/. As part of this technical procedure, YouTube and Google receive information about which specific sub-page of our website is visited by the data subject.

If the data subject is logged into YouTube at the same time, YouTube recognises which specific sub-page of our website the data subject is visiting when a sub-page containing a YouTube video is called up. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned.

YouTube and Google receive information via the YouTube component that the data subject has visited our website whenever the data subject is logged into YouTube at the same time as calling up our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before accessing our website.

The privacy policy published by YouTube, which can be accessed at https://policies.google.com/privacy?hl=en, provides information on the collection, processing and use of personal data by YouTube and Google.

Social Media

Use of social media networks

On our website you will find links to social media networks such as Facebook and Twitter. These are not plugins provided by the provider Facebook or Twitter, which already transmit data to the provider when the page is loaded without the user having any influence.

The buttons to the social media networks only contain a link to the social media network redirecting to the website to be shared. No user data is transmitted from the website to the social media network.
 
If you are already logged in to the corresponding social media service at the time you click on the button, this will be recognised in the dialogue for sharing the website so that you can share the content directly. If this is not the case, you will be asked to log in to the social media network. From this point on, you will be on the website of the respective social media network.

Clicking on the button for Facebook will take you to a website of Facebook Inc, 1601 S. California Ave, Palo Ave, CA 04304, USA. Information on the collection, storage and use of your data by Facebook Inc. can be found in the provider's data protection guidelines: http://www.facebook.com/policy.php

Clicking on the button for Twitter will take you to a website of Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. Information on the collection, storage and use of your data by Twitter Inc. can be found in the provider's data protection guidelines: https://twitter.com/en/privacy

We would like to point out that, as the provider of the website, we have no knowledge of the content of the transmitted data or its use by the social networks.
For more information on the use of data by the social networks, please refer to the privacy statements of the social networks mentioned.

Google Maps

Use of Google Maps

The Association of Lower Austrian Nature Parks uses Google Maps on its website (and on the previously listed websites) in particular for the display of POI's (Point of Interests) on an interactive map. Google Maps is operated by Google Inc. By using this website, you consent to the collection, processing and use of automatically collected data and data provided by you by Google, its agents or third parties.

Under the following link, you will find information on the data that is transferred when using Google Maps: https://policies.google.com/privacy?hl=en. In addition to the IP address, this also includes data such as the GPS data of a smartphone used or the search behaviour.

Data security

Data security measures to protect your data

The security of your data is very important to us. Therefore, we have taken all necessary technical and organisational measures to ensure the security of data processing and to protect your personal data from access by unauthorised third parties in the best possible way.

On the one hand, we achieve this by using state-of-the-art security software, coding and encryption procedures within the framework of our IT infrastructure, and on the other hand, we promote the security of your data by using risk-minimising measures (data minimisation in all areas) as well as preventive protective measures.