Your privacy and the protection of your personal data is important to us, which is why we process your data only on the basis of laws and legal regulations, namely the GDPR and the Austrian Telecommunications Law 2003. In our data privacy policy, we inform you about data processing connected with our website.
Getting in contact with us
When contacting us via email or via one of the forms on our website, we store your data for 6 months in order to be able to process your inquiry as well as to able to handle possible follow-up questions. We do not pass on your data to third parties without your consent.
Cookies
Our website uses so-called cookies. A cookie is a small text file that is saved to, and, during subsequent visits, retrieved from your browser on your computer or mobile device. They do not cause any damage.
We use cookies to provide you with the best usability. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser during subsequent visits.
If you do not agree with this practice, you can set your browser in a way that it will inform you about setting cookies. Additionally, this enables you to permit a particular cookie.
If you do not agree with this practice, you can set your browser in a way that it will inform you about setting cookies. Additionally, this enables you to permit a particular cookie.
Google Maps
We use maps provided by “Google Maps” by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Data privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Google Fonts
We use fonts („Google Fonts“) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Data privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Google ReCaptcha
We use the function “ReCaptcha” in order to prevent bots for example from filling in online-forms provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Data privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Web-Analysis
Our website uses functions provided by the web analysis service Google Analytics, which is provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. This implies our use of cookies which enables us to analyse the visitors’ use of our website. The information created in this process is processed to and stored on Google’s server in the USA. You can prevent this by setting your browser so that it will not store any cookies.
We have made a compliant data processing contract with the provider.
In accordance with the GDPR, we have a legitimate interest in improving our offers and our website. In order to protect our users’ data properly, we use data pseudonymization.
We record your IP-address; as soon as it is recorded, we use pseudonymization such as deleting the last 8 bit. Thus, the IP-address can be localized only roughly.
Data processing is based on legal regulations of § 96 Par 3 TKG (Telecommunications Law 2003) as well as Art 6 Par 1 lit a (agreement) and/or f (legitimate interest) of the GDPR.
Additionally, Google is certified according to the Privacy Shield-agreement and therefore guarantees to adhere to European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
User data is stored for 14 months.
Detailed information regarding Google’s use of data as well as your options concerning settings and dissent are provided on the following Google-websites: https://www.google.com/intl/de/policies/privacy/partners („How Google uses information from sites or apps that use our services“), http://www.google.com/policies/technologies/ads (Advertising“), http://www.google.de/settings/ads (Control the information Google uses to show you ads“).
Mouse-Tracking
In accordance with the GDPR, we have a legitimate interest in improving our offer and our website. Therefore, we use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users' experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular device's IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy: https://www.hotjar.com/legal/policies/privacy.
You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this Opt-Out Link.
Storing Data in our Webshop
In order to process your order, we store the following data: title, first name, surname, address, email address, optional data you have entered (company, address details, telephone number). We require the data you have provided to fulfil the contract or take measures that are necessary during the pre-contract phase. Without this data, we cannot enter the contract with you. We do not share data with third parties; exceptions are credit card data, which we transmit to the bank(s)/the payment provider involved in order to enable them to debit your purchase, delivery service companies who we assign with the delivery of your purchase as well as our tax adviser enabling him to fulfil his legal obligations.
If you cancel your order before sending it, all the data stored will be deleted. After a contract has been made, all data connected with it are stored for a period of 7 years according to tax laws.
Data connected with name, address, purchased products/services and the date of purchase are stored for a period of 10 years, after which product liability has expired. Data processing is based on legal regulations of § 96 Par 3 TKG (Telecommunications Law 2003) as well as Art 6 Par 1 lit a (agreement) and/or lit b (necessary to fulfil a contract) of the GDPR.
Registration and user account
Registration for a user account is optional when using our webshop. By registering, we inform users about necessary information (obligatory and optional fields). We use data shared with us in the registration to enable users to use our website. We may provide users with information relevant with regard to offers and registration, such as changes of our product/service range, technical updates etc., via email.
In case a user quits the user account, data related to this account are deleted, apart from data which have to be stored for legal reasons set up by tax and/or trade laws according to GDPR Art. 6 Par. 1 lit. c. If a user quits before a contract has been fulfilled, any backup of the data rests with the user. We are permitted to delete all data stored during the contract period irretrievably.
When users use our functions to register and log in in connection with their user accounts, we store the IP-address as well as the time of the user’s particular action. This action is based on both our legitimate interest as well as the users’ interest regarding the protection against misuse and other unauthorized usage. After a maximum of 7 days, the IP-addresses are anonymized or deleted.
In general, we do not share data with third parties; however, situations in which we have to make claims or in which we have to meet a legal obligation according to GDPR Art. 6 Par. 1 lit. c have to be considered exceptions.
Newsletter
You can subscribe to our newsletter on our website. Furthermore, in order to provide you with specific information, we may collect and process additional information our users provide optionally.
For our newsletter service, we need our email address and your confirmation that you accept receiving the newsletter. Therefore, as soon as you have subscribed to our newsletter service, we send you an email comprising a link to confirm your registration.
Users can unsubscribe from the newsletter service whenever they want by sending an email to the following email address: info@nagalu.at
After that, we will immediately delete your data connected with our newsletter service.
Google-Re/Marketing-Services
In accordance with the GDPR, we have a legitimate interest in improving our offers and our website. Therefore, we use marketing and remarketing services (in short, „Google-Marketing-Services”) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, („Google“).
Google is certified according to the Privacy Shield-agreement and therefore guarantees to adhere to European data protection laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Thanks to Google marketing services we can display selected adverts for and on our website so that users are displayed only those adverts which reflect their potential interests. Google runs a code and uses so-called (re-)marketing tags; thus, an individual cookie is stored in the user’s browser. Our use of cookies is explained above.
Google can connect the information collected also with data collected from other sources. When users visit other websites afterwards, they can be provided with adverts reflecting their particular interests.
Additionally, the user’s IP address is recorded through Google Analytics; in connection with Google Analytics, we use data pseudonymization: We record your IP-address; as soon as it is recorded, we use pseudonymization such as deleting the last 8 bit. Thus, the IP-address can be localized only roughly, adverts only administered and displayed for a particular cookie-owner, not for a specific person. This is of course not the case if users have permitted Google explicitly to use their data without any pseudonymization. The information collected by Google Marketing Sevices is transmitted to Google and stored on their servers in the USA. The user’s IP address is not connected with other data of this user collected in other Google services.
Among others, we use cookies provided by the Google marketing service “Google AdWords”; we may display adverts by third parties by using the Google marketing service “AdSense” and its cookies. For further details regarding Google’s use of data for marketing please see https://policies.google.com/technologies/ads, for Google’s privacy policy please see https://www.google.com/policies/privacy.
Furthermore, we use “Google Tag Manager“ to implement analysis and marketing services provide by Google in our website and administer them.
Our sites in social media
We offer sites in social media and networks in order to be able to communicate with users, clients and customers who are active there. These media and networks are offered on the basis of their particular terms and conditions as well as their particular data privacy policies.
If not mentioned otherwise in our data privacy policy, we process user data when users communicate with us in social media and networks.
Our use of Facebook social media plugins
In accordance with the GDPR, we have a legitimate interest in improving our offer as well as in analysing and optimizing our website. Therefore, we use social plugins (“plugins”) provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook“). On the website, the plugins may be graphic content, text or video content or elements which enable interaction. They can be identified by the use of Facebook logos (“f” on a respective background, the “thumbs-up”-sign or the term “Like”) or the label “Facebook social plugin”. For details regarding the appearance of Facebook social plugins please see: https://developers.facebook.com/docs/plugins/.
Facebook is certified according to the Privacy Shield-agreement and therefore guarantees to adhere to European data protection laws (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
For further information regarding data collection by Facebook, further data processing and data usage as well as user rights and your personal settings to protect your privacy, please see Facebook’s data policy https://www.facebook.com/about/privacy/.
Our website might use content and functions connected with the services provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. This includes content such as images, videos and texts or buttons which allow users to react to content. If users are registered users of Twitter, too, Twitter can assign the view of content and use functions to the particular user profile. Twitter’s privacy policy: https://twitter.com/de/privacy.
Twitter is certified according to the Privacy Shield-agreement and therefore guarantees to adhere to European data protection laws (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active).
Our website might use content and functions connected with the services provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. This includes content such as images, videos and texts or buttons which allow users to react to content. If users are registered users of Instagram, too, Instagram can assign the view of content and use functions to the particular user profile. Instagram’s privacy policy: http://instagram.com/about/legal/privacy/.
Our website might use content and functions connected with the services provided by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA. This includes content such as images, videos and texts or buttons which allow users to react to content. If users are registered users of Pinterest, too, Pinterest can assign the view of the content and use of functions to the particular user profile. Pinterest’s privacy policy: https://about.pinterest.com/de/privacy-policy.
Our website might use content and functions connected with the services provided by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. This includes content such as images, videos and texts or buttons which allow users to react to content. If users are registered users of Xing, too, Xing can assign the view of content and use functions to the particular user profile. Xing’s privacy policy: https://www.xing.com/app/share?op=data_protection.
Our website might use content and functions connected with the services provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. This includes content such as images, videos and texts or buttons which allow users to react to content. If users are registered users of Twitter, too, Twitter can assign the view of content and use functions to the particular user profile. LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.
LinkedIn is certified according to the Privacy Shield-agreement and therefore guarantees to adhere to European data protection laws (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active).
Vimeo
Our website might use video content provided by Vimeo Inc., 555 West 18th Street New York, New York 10011, USA. Vimeo’s privacy policy: https://vimeo.com/privacy.
Youtube
Our website might use video content provided by YouTube LLC, which is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. YouTube’s information on policies and safety: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Your rights
You have the right to request information about the personal data we hold on you, rectification, deletion, restriction, and portability of your personal data as well as to disclaim and object. In case you consider our processing of your data not according to data privacy laws or you feel your data privacy claims have not been met in any other way, you have the right to raise a complaint to a supervisory authority. In Austria, you can raise your complaint to the Data Protection Authority (“Datenschutzbehörde”).
You can contact us easily:
Pale Hotel Lasinga GmbH
Laurschweg 2, 6533 Fiss
Telefon: +43 5476 60669
E-Mail: info@nagalu.at
Quelle: The WKO's model data protection declaration was used as the basis for this data protection declaration
Date: 28.10.2019