Polityka prywatności

1. Responsible party

The controller responsible for data processing is: Reisebüro TakePlace Corporate Travel & Events. Head of the controller: Anna Perlowska-Fröhlich, office@takeplace.at

2. Purposes of data processing

This data protection information relates to all processing operations that are relevant to you as an interested party, customer, website visitor or newsletter subscriber.

The purposes for which we process your personal data can be summarized as follows

our business activities (operation of a travel agency, event agency)
Marketing (as well as information by electronic mail including SMS)
newsletters
Contact form on the website and other inquiries (e.g. by email)

3. Business activity (operation of a travel agency)

We process your personal data in connection with your interest in or use of our services, namely

Your master data (e.g. surname, first name, home address, e-mail address, telephone number, date of birth, gender, country of origin.
Data from travel documents presented, e.g. passport, identity card or driving license (e.g. type of document, document number, date of issue, issuing authority, duration, nationality, other passport data),
Data on the payment method and other data associated with the payment (e.g. payment method, payment amount, card number, cardholder),
data relating to your booking or requested service (e.g. destination, date of booked or requested arrival and departure, booked hotel including booked or requested rooms, your language, if applicable your vehicle registration number (to determine parking authorization), number of persons),
other data provided or requested by you in connection with your booking or requested service (e.g. data of fellow travelers (if you provide us with such data), contact persons, conditions, special services, frequent flyer number, personal preferences, tourist guides, gastronomy, rental vehicles, transfers, registration processing, insurance, events, tours, accreditations, vouchers, billing and its verification (B2B, B2C, FIT), ticket booking.

We do not engage in profiling or automated decision-making that produces legal effects concerning you or significantly affects you in any other way.

We may also receive personal data from sources other than directly from the data subject. This is the case, for example, if a person making a booking or a booking platform provides us with this data. In this case, we assume that the person for whom the booking was made already has the information about the data processing in our company (due to the forwarding of the information by the person making the booking) or that the effort involved in providing the information separately is disproportionately high.

We base the processing of the above-mentioned data on the following legal bases:

the necessity of the respective processing for the fulfillment of the contract or for the implementation of pre-contractual measures (Art 6 para 1 lit b GDPR),
your consent, if you have given us such consent (Art. 6 para. 1 lit. a GDPR)
the fulfillment of legal obligations (e.g. according to accounting, tax and customs law, contracts, reporting, etc.) to which we are subject (Art 6 para 1 lit c GDPR)
the pursuit of our overriding legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR (e.g. improving our customer service or pursuing our own legal interests, etc.).

The following applies to the storage period of your data:

If there are statutory retention obligations or other legal obligations to retain data, we will store your data in accordance with these obligations. We store accounting data ("books and records" and associated documents as defined in Section 132 of the Federal Fiscal Code) for a period of approximately 7 years.

If processing is based on your consent, we store the data in accordance with the consent given, but for no longer than 3 years after the last contact with you.

We store data from interested parties or inquiring persons (e.g. by email or via our contact form) that do not lead to any bookings for a maximum period of 3 years after the last contact.

All other data will be deleted by us after 3 years at the latest.

If further storage is necessary after the expiry of these periods for the assertion, exercise or defense of legal claims (e.g. in the context of legal proceedings), we will continue to store the data until the legally binding conclusion.

4. Marketing (as well as information by electronic mail including SMS)

We use marketing to inform you and the public about our services.

Your personal data may be processed in the course of our marketing activities (e.g. name, residential or e-mail address, date of birth, details of your last booking/enquiry).

We base the processing of this data on the following legal bases:

the pursuit of our overriding legitimate interests within the meaning of Art. 6 (1) (f) GDPR (e.g. for postal mailings or electronic marketing to existing customers)
Your separate consent within the meaning of Art. 6 para. 1 lit. a GDPR, if you have given us such consent (e.g. for other direct advertising, e.g. by email, messenger, etc.)

If the processing is carried out on the basis of our overriding legitimate interests, these interests consist of presenting our services or our offer to you and thus increasing our sales (marketing). This relates to postal marketing and our marketing to existing customers.

In the case of electronic marketing, we distinguish between electronic marketing to existing customers and other direct advertising.

In the case of electronic marketing to existing customers, we process your data exclusively in accordance with the relevant statutory provisions. Your data is processed for this purpose on the basis of our overriding, legitimate interests ("marketing"), but only if you have given us your contact information in the course of a purchase or when using a service and we advertise our own, similar products or services with this electronic mailing. When collecting the contact data, we point out this type of data processing and the sending and give you the opportunity to refuse this type of marketing when collecting the data and sending it.

In the case of other electronic direct advertising, you give us your consent in advance, which you can revoke at any time.

You have the right to object to processing based on legitimate interest at any time or to withdraw your consent (see section "Rights of data subjects"). In this case, we will no longer contact you for marketing purposes. Revocation (consent) or objection (legitimate interests) does not affect the lawfulness of the processing carried out up to that point. The processing (further storage) of customer data, e.g. to fulfill the obligations of accounting regulations, remains in place.

We store marketing data that is processed on the basis of your consent until you withdraw your consent or all marketing data is deleted no later than 3 years after the last contact.

5. Newsletter

You have the option of subscribing to our newsletter. To subscribe to the newsletter, you must provide us with your e-mail address.

We generally store data in connection with our newsletter until consent is withdrawn or, if applicable, this data is deleted no later than 3 years after the last contact.

6. Contact form on the website and other inquiries (e.g. by e-mail)

You can use the contact form on our website or send us an e-mail with questions about our services or general inquiries.

We will process the contact details and other data provided by you in order to process your request. The legal basis for this processing is either Article 6(1)(b) GDPR (contract initiation, contract fulfillment) or Article 6(1)(f) GDPR (our overriding, legitimate interests in smooth communication and documentation for general inquiries).

We store this data for a maximum period of 3 years after the last contact, although the storage period may be longer if the question leads to the conclusion of a contract (see section: "Business activities (operation of a travel agency)").

7. Rights of data subjects / objection / contact

As a data subject within the meaning of the GDPR, you have the right to information, rectification, erasure, restriction and data portability, in each case within the framework of the statutory provisions.

If you have given us your consent to process your data, you have the right to withdraw this consent at any time. This does not affect the lawfulness of the processing of the data up to the point of withdrawal. If you withdraw your consent, we will no longer process your data for the purposes stated above or for the purposes stated in the consent.

If the processing of your data is based on our legitimate interests, you have the right to object to the processing. If you have reasons arising from your particular situation that speak against this processing, we will no longer process your data unless we have compelling legitimate grounds for processing that outweigh your interests, rights and freedom, or the processing serves to assert, exercise or defend legal claims. If your data is processed for direct marketing purposes, this data will no longer be processed for these purposes once you have objected.

To exercise your rights, please contact: Reisebüro TakePlace Corporate Travel & Events, Zenogasse 3, 1120 Vienna, Austria.

office@takeplace.at

With regard to the processing of your data by us, you can also lodge a complaint with a supervisory authority at any time. In Austria, this is the Austrian Data Protection Authority (dsb.gv.at).