General information on the processing of your data
Responsible for data processing:
Passenger Hotel Betriebsgesellschaft mbH
Alpenstraße 55/5
5020 Salzburg
Austria
E-Mail: welcome@thepassenger.at

Thank you for visiting our website and your interest in our company. We take the protection of your personal data very seriously. We strictly adhere to the legal provisions of the EU Data Protection Basic Regulation as well as the Austrian Data Protection Act as amended. In the following we would like to inform you comprehensively and transparently about the processing of your personal data by us as the responsible company. These statements refer to the current legal situation. We expressly reserve the right to make future changes or adjustments. Therefore, we recommend that you read this data protection policy regularly in order to stay informed about the processing of your personal data. If you have any questions or suggestions, please contact us at the address given above.

Data Protection Officer
The external Data Protection Officer of the Controller is:
Mr. Attorney Dr. Karsten Kinast, LL.M.
KINAST Rechtsanwaltsgesellschaft mbH
Hohenzollernring 54
D-50672 Cologne, Germany
Phone: +49 (0)221 – 222 183 – 0
E-Mail: mail@kinast.eu
Website: kinast.eu

Processing and transfer of personal data
The term "processing" covers all handling of personal data, such as their collection, organization, storage, transmission, modification, deletion and final destruction. If you provide us with personal data outside of a contract, we will process these data for the purpose communicated to you when the data were collected. In this case, the data will only be forwarded to other companies to the extent covered by your consent. In certain cases, we may also be legally obliged or entitled to process your personal data because of our overriding interests. In this case we will make this transparent to you as far as possible. If you have concluded a contract with us, we will use the data you provide to the extent necessary for the performance of the contract. Your data will only be passed on to third parties if this is necessary for the fulfilment of the contract - in the case of fulfilment of the contract it may be necessary to pass on your data to a mail-order company if you wish to receive booking documents or if the booking is processed via a third party platform.

We process the sale and redemption of vouchers via INCERT, provider of the service is INCERT eTourismus GmbH & Co KG with its registered office in Wirtschaftspark Lederfabrik, Leonfeldnerstraße 328, A-4040 Linz, Austria. Details can be found in INCERT’s privacy policy.

Deletion of the personal data processed by us
Your personal data will be deleted by us as soon as there is no longer a reason for further processing or storage. Such a reason can result from a contract, from the law or from our legitimate interests. In order to ensure this, we regularly delete all old data and you can of course request the deletion of your data at any other time (see below under "Rights of Data Subjects"). If we are legally obliged to store your data (e.g. due to tax regulations), the deletion will take place after the expiry of this legal storage period.

Data security
We take all necessary and appropriate technical and organizational security measures to protect your personal data from loss and misuse. Your data is stored in a secure, state-of-the-art operating environment. Access to our website is also secured via HTTPS if your browser supports SSL. This means that communication between your terminal device and the servers is encrypted.

Rights concerned / Your rights to protect your personal data
You have a number of rights with regard to the personal data we process. You can exercise all these rights free of charge and informally (by e-mail, telephone or post), or after proof of your identity, at the address given above.

Your rights in detail

• Right to information: You can request information about the data we process at any time. In this case, we will inform you in writing about the data we have stored about you, the purposes for which we use it, the categories of recipients we pass it on to and how long we intend to keep it. We will comply with your request for information without delay, but within one month at the latest.
• Right to cancellation: You have the right to request at any time, informally and without obligation, the cancellation of your data processed by us. We will comply with this request if your data is no longer necessary for the purpose of collection, if you revoke any existing consent, in the event of unlawful data processing or if deletion is necessary to fulfil a legal obligation.
• Right to correction: If we process incorrect or incomplete data about you by mistake, we will of course correct it. An informal request sent to us is sufficient for this.
• Right to limit processing: If it is not possible to delete your data or if you do not wish your data to be deleted, but you do not agree to any use beyond the storage of the data, we have the obligation to limit further processing of your personal data at your request.
• Right to data transferability: Upon your informal request, we will make the data we have stored about you, which we have received on the basis of a contract or your consent, available to you free of charge in a common file format. You can use this data for your own purposes and pass it on to future contractual partners. If you wish and if it is technically feasible, we will also directly transfer your data to an addressee you have specified. In this case we will inform you after the transfer has been completed. We will comply with your request without delay, but within one month at the latest.
• Right of objection: If we process your data on the basis of our legitimate interest, you also have the right to object to further processing of your data in accordance with the basic data protection regulation.

Right of appeal
The EU General Data Protection Regulation and the Austrian Data Protection Act guarantee you the above-mentioned rights in the area of data protection. If you believe that any of these rights have been violated by our company, you have the right to complain to a data protection supervisory authority. In Austria, the Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna, is responsible for this. Claims against us to which you are entitled on the basis of other legal grounds shall remain unaffected by this.

Data processing on the website

Cookies
So-called cookies are used on this website. A cookie is a small file that can be stored on your computer when you visit a website. Basically, cookies are used to provide users with additional functionality on a website. For example, they may be used to help you navigate a website, to allow you to continue using a website where you left off and/or to remember your preferences and settings when you return to the website. Cookies cannot access, read or change any other data on your computer. Most of the cookies on this website are so-called session cookies. They are automatically deleted when you leave our website again. Persistent cookies, on the other hand, remain on your computer until you manually delete them in your browser. We use such persistent cookies to recognise you the next time you visit our website.

Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies," which are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a server in the USA and stored there. The transfer to the USA is based on the certification of Google LLC under the Data Privacy Framework in accordance with Art. 45 (1) GDPR. Google will use this information to evaluate your use of the website, compile reports on website activity for website operators, and provide other services related to website and internet usage. Google may also transfer this information to third parties if required by law or if third parties process the data on Google's behalf. Google will not associate your IP address with any other data held by Google. You can prevent the installation of cookies by adjusting the settings of your browser software; however, please note that in this case, you may not be able to fully use all features of this website. The processing of your data is based on your consent in accordance with Art. 6 (1) (a) GDPR, which you provide by ticking the corresponding box in the cookie banner. You can object to the collection of data by Google Analytics in the future by withdrawing your consent by unchecking the box.

Data Protection Notice in the Application Process
For more detailed information, please click here.

Data protection notice for events
For more detailed information, please click here.