We provide this privacy statement to inform you on how we may collect, use, share, and otherwise process your personal information. As a private customer, an employee of one of our corporate clients or other individual to whom we offer or provide our services – travel, (overnight) stays, meetings and events, and related products and services — via our websites, mobile applications, email communications or other online and offline means. We have a strong commitment to respecting our users’ concerns about privacy and process all personal information in compliance with the European and the Austrian data protection law. Personal information provided by you when making a request regarding data protection is used exclusively for the purpose of processing your request.

Who is responsible for the processing of your data and where can you turn to?

The following entities are in control of your data with regard to the applicable data protection laws:

Eurotours Gesellschaft m.b.H. (Kirchberger Straße 8, A-6370 Kitzbühel, Austria)
and, as affiliates:

Eurotours Deutschland GmbH (Parkring 2, 85748 Garching bei München, Germany)

Eurotours Cesko sro (Křižíkova 2110/2b, 186 00 Prague, 8-Karlín-Praha 6-Nové Město, Czech Republic)

Eurotours Polska spolká z o.o. (Rynek Główny 7/5, 31-042 Krakow, Poland)

Eurotours Italia S.r.l. (Via Chiesolina, 16, 37066 Sommacampagna VR, Italy)

Verkehrsbüro Touristik GmbH (Lassallestraße 3, 1020 Vienna, Austria)

with the legal data protection representation for the English-speaking area in 

Kirchberger Straße 8, A-6370 Kitzbühel, Austria (Tel.: +43/1/58800-752; E-Mail: datenschutz@eurotours.at).

Which categories of data do we process?

Due to our contractual obligations, we process:

Account information – If you contact us, register with us or receive services from us, we collect general information about you in order to contact you regarding booking and additional travel information or service information in connection with your booking requests. This may include your name, email address, phone numbers, employer, and physical addresses, in some cases your gender and date of birth.

Guest and travel information – If you book a trip, stay or any other service, we collect directly or – if you do not book the stay or travel yourself – indirectly (via third parties, e.g. via your employer, other intermediary travel agents, friends and family members or other organisers) the details of your trip or stay or other service (such as arrival and departure time and location, airline, hotel, car rental data) and other information required to complete your travel bookings. We may also collect special categories of information to provide accessibility, food preferences or other desired services. If necessary, we also require the passport data from travellers. If we book trips for your escorts, we may collect the same data categories from them. Please forward this information to all those affected whose data you provide in a travel booking. Your customer data is stored in your travel or guest profile, where we collect the information required for your travel booking and the provision of our services. You can provide additional information in your travel or guest profile, including frequent flyer programme credentials, regulatory identification numbers and emergency contact information.

Based on our legitimate interest to provide you with personalised information and to create statistics on user behaviour during the usage of our websites and mobile applications, we also process:

Device Data – We collect information about how you use our services, including your computer’s IP address and information that can be derived from it (such as internet provider and general geographic location), your device’s unique identifier and other technical information. We also collect information about how you use our websites and mobile applications. We collect some of this information using cookies and similar technologies, as described here.

How long do we process your data?

Your data will be stored at least as long and to the extent as it is required by our contractual basis. After termination of he contract, your data will be kept in accordance with our retention obligations. These retention requirements are usually 7 years (in Austria) or 10 years (in Germany). In addition, your information will be stored on the basis of our legitimate interest until we get a substantiated objection from you, or kept otherwise based on your explicit consent until you withdraw it.

For what purposes do we process your data?

To provide you with travel products and services – We use your information to book your travel and overnight stays, organize meetings and events, prepare itineraries and invoices, communicate with you about your travel or our products and services, provide customer service, and manage your account.

To provide our products and services to corporate clients – We use your information to comply with our agreements with your employer or travel sponsor, communicate about our products and services, and help them ensure compliance with their policies.

To process payments – We use your information to process transactions and provide you with related customer service.

To operate websites and mobile applications – We use device data to monitor and improve the performance and content of our services, provide updates, analyse trends and use in connection with our services, and measure whether our ads and offers are effective.

To operate and improve our business – We use your information for compliance with our company policies and procedures, for accounting and financial purposes, to detect or prevent fraud or criminal activity, to perform, analyse and improve our business and services, and otherwise as required by law.

Optimisation of services and marketing

We use your data in your and our legitimate interest to optimise our services and future benefits, including:

• the usage of frequent flyer information and travel preferences
• the pre-filling of forms and payment data
• the usage of contact information
  • for the transmission of performance and service changes
  • to contact you and related parties in emergencies
  • to obtain feedback on our services provided
  • to send you information to our products and services electronically as well as by mail

If we falsely presume these interests, you can report to us by means of a contrary declaration.

During a congress, participant lists with your personal contact details may be – in your and our mutual interest – forwarded to other congress participants for the purpose of informing all participants about present contact persons. Furthermore, your data will be processed – by companies commissioned for this processing – for documentation purposes, in particular video recordings, and your data may be processed for the purpose of sending electronic advertising to, based on our legitimate interest and in the legitimate interest of the organiser to inform you respectively. You have a right of objection to these processing operations – based on reasons that are in your personal situation – which you may address to the organiser.

With whom and how do we share your information?

Generally we do not transmit your data to third parties without your consent, neither free of charge nor against payment. Exceptions to this are transfers that we make on the basis of a legal or contractual obligation or on the basis of our mutual and legitimate interests as mentioned above:

Your employer or travel sponsor – Our services to you may be provided under the terms of service agreements with your employer or travel sponsor. We share your information with them to allow them to manage their business travel needs and assure compliance with their company travel policies. At the request of your employer or travel sponsor, we may also share information with their vendors.

Travel suppliers and other travel service providers – We share information with travel suppliers (for example, airlines and hotels) and travel service providers (for example, ticket distribution systems and travel application providers) and the vendors for both, as necessary to book your travel and provide travel-related services to you and your related (third) parties.

Vendors, suppliers, processors – We share information with vendors that perform functions on our behalf, such as other travel agencies, meeting and event planners (other congress organisers and housing offices or Professional Congress Organizers commissioned during the event and, if applicable, future organizers of similar congresses to those you have booked), visa and passport service providers, mobile application and software developers, and vendors who provide IT support, data hosting, marketing and communications services, and collections.

Affiliates – We may share information within our corporate family to the extent permitted by law to allow them to provide, analyse and improve their and our products and services.

Authorities, government agencies, banks, courts – We may disclose information to regulatory authorities, courts, and government agencies where we believe doing so would be permitted or required by law, regulation or legal process, or to defend our or third party interests, rights or property.

Business transfers – If we negotiate or complete a transaction involving all or part of the business (for example, a reorganisation, merger, sale or acquisition), we may disclose information to third parties involved in the transaction to the extent permitted by law.

We may also share personal information with other parties as directed by you or subject to your consent.

Google Analytics

We have integrated the component Google Analytics (with anonymisation function) on our website. Google Analytics is a web analytics service. The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of the Google Analytics component is to analyse visitor flows on our website. Google uses the data and information obtained to evaluate the use of our website, to compile online reports showing the activities on our websites and to provide other services related to the use of our website.

Google Analytics sets a cookie on your IT-system. By using this cookie, Google becomes able to analyse the usage of our website. Each time you visit one of the individual pages of websites operated by us and on which a Google Analytics component has been integrated, the Internet browser on your IT-system is automatically triggered by the respective Google Analytics component to send data to Google for the purposes of the online analysis. As part of this technical process, Google will receive personally identifiable information, such as your IP address, which is used to track the origin of visitors and clicks and facilitate commission settlement.

By using this cookie, personally identifiable information, such as access time, the location from which access was made and the frequency of visits to our website, is being stored. Each time you visit our website, your personal information, including the IP address of the Internet connection you use, is transferred to Google. Google may transfer such personal data collected through the technical process to third parties.

You can prevent the storing of cookies through our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the activation of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on your IT- system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programmes.

In addition, you have the option of objecting to and preventing the collection of data generated by Google Analytics for the use of this website and the processing of this data by Google. To do this, you can download and install a browser add-on at https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as a contradiction. If your information technology system is later deleted, formatted, or reinstalled, you must reinstall the browser add-on to disable Google Analytics.

Additional information and Google’s privacy policy can be found at https://www.google.com/intl/en/policies/privacy/  and http://www.google.com/analytics/terms/en.html. Google Analytics is explained in more detail at https://www.google.com/intl/de_de/analytics/.

Ve Interactive DACH GmbH

We use the services of Ve Interactive DACH GmbH (Französische Straße 47, 10117 Berlin; hereinafter referred to as “Ve”). In providing their services, Ve collects personal data from end users who visit our websites. Ve uses cookies and other similar technologies. More information about the technologies used by Ve is available in Ve’s Cookie Policy. A list of the purposes for which Ve collects personally identifiable information is provided in Ve’s Privacy Policy. In general, Ve collects personal information from end users about the use of cookies, including contact information and behavioral information. Ve uses this personally identifiable information to understand the end user’s personal preferences and to personalize the end user’s web experience, for example by displaying personalised offers when visiting customer websites or similar personalisation of the customer website to the end user and displaying personalised advertisements when visiting customer websites or third party websites.

End users may opt out of having their personal information processed by Ve in a number of ways. The available ways to prevent data processing are set out in Ve’s Privacy Policy, including using the opt-out button at https://www.ve.com/de/datenschutzerklaerung#opting-out or using the IAB Europe opt-out mechanism at http://www.youronlinechoices.com/opt-out-interface.

International data transmission

We may transfer your information to jurisdictions outside of your home country for the purposes described here, including to countries that may not provide the same level of data protection as your home country. To protect the information, transfers will be made in accordance with appropriate data transfer agreements and other protections. Regardless of where we process your information, we protect it in the manner described in this Privacy Statement and in accordance with applicable law.

What are your privacy rights?

You have the right(s)

• to obtain a confirmation as to whether or not personal data relating to you are being processed, and, where that is the case, to receive free information on the personal data stored about you and a copy of this information;
• to withdraw your consent to the processing of personal data without affecting the lawfulness of the processing already carried out;
• to obtain the rectification of any (wrong) personal data relating to you or, at most,
• to obtain the erasure of your data if there is no legal reason to store them any further;
• to obtain restriction of processing;
• to receive your personal data processed on the basis of your given consent and which you have provided to us, in a structured, commonly used and machine-readable format and
• to transmit those data to another controller without out hindrance;
• to have the personal data transmitted directly from one controller to another, where technically feasible and this not does not adversely affect the rights and freedoms of others;
• to lodge a complaint with the Austrian Data Protection Authority in the case we do not answer properly within the given time frames.

How do we protect your data?

We maintain reasonable administrative, technical, and physical security measures to protect your information from unauthorised access and use. We retain your information only as long as needed to provide our services and for legitimate business purposes, unless we are required by law or regulation or for litigation and regulatory investigations to keep it for longer periods of time.

General data security measures

At any time we implement appropriate technical and organisational measures, such as pseudonymisation, which are designed to implement data-protection principles, in order to meet the requirements of the data protection provisions.

We implement appropriate technical and organisational measures for ensuring that, by default, only personal data which are necessary for each specific purpose of the processing are processed. That obligation applies to the amount of personal data collected, the extent of their processing, the period of their storage and their accessibility. In particular, such measures shall ensure that by default personal data are not made accessible without the individual’s intervention to an indefinite number of natural persons. These measures include

• the pseudonymisation and encryption of your personal data
• the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services
• the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident
• a process for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing

Special data security measures

Secure Socket Layer (SSL)

Whenever it is necessary for you to enter personal information online, we use an encrypted transmission method (SSL) to protect your confidential information. “SSL” stands for “Secure Socket Layer”. When accessing a secure server, the first characters of the site address will change from “http://” to “https://”. This indicates that you are in a secure mode. In addition, you may also see one of the following icons in the lower right-hand or left-hand corner of the computer screen:

Internet Explorer

 Firefox

 Chrome

 Safari

SSL creates a secure connection between a client and a server (your computer), over which any amount of data can be sent in secure mode. For using SSL, the browser and the server need what is called an SSL certificate to be able to establish a secure connection and to indicate where the server is located and who it is operated by. In order to receive such a certificate, you need a certificate issuer, who guarantees that the information given is accurate. Our secure server has been certified by the Comodo Group.

Changes

We may change this Privacy Statement from time to time as our business changes or legal requirements change. If we make material changes to this Privacy Statement, we will post a notice on our website before the changes go into effect, and notify you as otherwise required by applicable law.

Questions

If you have created an online account with us and would like to update the information you have provided to us, you can access your account to view and make changes or corrections to your information. You may also have the right to be informed of whether we are processing your information and to access, correct, delete or object, upon request and free of charge, to our use of your information. We will try to comply with your request as soon as reasonably practicable. Please note that we may need to retain certain information for recordkeeping, to complete any transactions you began before your request, or for other purposes as permitted by law. If you have questions or complaints regarding the processing of your data, please contact our service staff or contact us in writing:

Eurotours Gesellschaft m.b.H. 

Kirchberger Straße 8, A-6370 Kitzbühel, Austria

datenschutz@eurotours.at

We will review your request and reply in writing within 30 days after receipt.