The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the legal provisions (GDPR, DSG, TKG 2021).
In this privacy policy, we inform you about the most important aspects of data processing within the scope of our web app.
1. Controller
TOURISMUSVERBAND SPITTAL AN DER DRAU
Burgplatz 1
A – 9800 Spittal an der Drau, Austria
Tel.: +43 (0)4762 / 37200
E-Mail: welcome@spittal-millstaettersee.at
Web: www.spittal-millstattersee.at
VAT ID (UID): ATU 70 22 38 03
2. General Information on Data Processing
We process personal data only when necessary, e.g., to provide the web app, enable a login, respond to inquiries, or display embedded content.
3. Access Data / Server Log Files
When you visit our web app, information of a general nature (server log files) is automatically collected (e.g., IP address, date/time, browser type). This data is used for the secure operation of the app.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest)
Storage period: This data is stored for a maximum of 30 days.
4. Contacting Us
If you contact us via email, your details will be stored to process the inquiry.
Legal basis: Art. 6 (1) (b) GDPR (contractual/pre-contractual) or Art. 6 (1) (f) GDPR.
5. User Account / Login Area
For the login area, we process your email address and your password (encrypted) to provide access to personalized functions.
Legal basis: Art. 6 (1) (b) GDPR.
6. Embedded Services and Third-Party Providers
6.1 Feratel (Booking and Information Modules)
Functions from feratel Media Technologies AG (Innsbruck, Austria) are integrated into our web app. When using these modules (e.g., booking calendars), technically necessary data is transmitted to Feratel.
Legal basis: Art. 6 (1) (b) GDPR (performance of a contract).
6.2 YouTube (Videos)
We embed videos from the “YouTube” platform (Google Ireland Limited, Ireland). By default, these are deactivated so that no data is transmitted to Google. The video will only be loaded and data (including your IP address) transmitted to Google once you actively consent to the loading of the content (e.g., via cookie banner or by clicking on a placeholder).
Legal basis: Art. 6 (1) (a) GDPR (consent).
6.3 Google Maps / Google My Maps
We use interactive maps from Google Maps (via Google My Maps) provided by Google Ireland Limited. The content is only loaded after you have given your consent. Due to technical requirements, your IP address will be transmitted to Google servers during this process.
Legal basis: Art. 6 (1) (a) GDPR (consent).
7. Links to External Sites
Our web app contains links to external websites. We have no influence over their content or data protection standards. The respective provider is always responsible for the linked pages.
8. Cookies
We use technically necessary cookies for the operation of the app. Optional cookies (e.g., for YouTube or Google Maps) are only set after your consent.
Legal basis: Art. 6 (1) (f) GDPR (necessary) or Art. 6 (1) (a) GDPR (consent).
9. Data Security
We protect your data through modern technical measures, in particular through encrypted transmission (HTTPS).
10. Your Rights
You have the rights to access, rectification, erasure, restriction, data portability, withdrawal, and objection. Complaints can be directed to the data protection authority:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna, Austria
E-Mail: dsb@dsb.gv.at
11. Amendments
We reserve the right to adapt this policy as necessary to comply with current legal or technical standards.
Status: 02.03.2026
