I. Name and address of the responsible party (data controller)
The data controller for data processing is:
Schloßwirtschaft Schattenburg
Familie Gmeiner
Burggasse 1
6800 Feldkirch
0043/5522 72444
Fax 0043/5522 7244418
restaurant@schattenburg.cc
II. Provision of the website and creation of log files
1. Description and scope of data processing
Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer.
The following data are collected:
- Information regarding the used browser type and version
- The user’s operating system
- The user’s Internet service provider
- The user’s IP address
- Date and time of access
- Websites from which the user’s system accesses our website
- The websites accessed by the user’s system via our website
2. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. lit. f.
3. Purpose of data processing
Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. To this end, the user’s IP address must remain stored for the duration of the session.
Our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f also lies in these purposes.
4. Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of data collection for provision of the website, this will be undertaken once the respective session has ended.
5. Options for objection and removal
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for operation of the website.
III. Use of cookies
1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a distinctive character string that enables unique identification of the browser when the website is accessed again.
Technically necessary cookies:
We use cookies to design our website in a more user-friendly manner. Some elements of our website require the requesting browser to be identifiable even after changing pages.
The following data are stored in and transmitted by cookies:
- Hiding the information on cookies
- Accessibility settings
- Language settings
Cookies which are not technically necessary:
We also use cookies on our website to analyse user behaviour. The following data can be transmitted:
- Search terms entered
- Frequency of page views
- Use of website functions
- Bookatable (AID, ASP.NET_SesseionId, __utma, _ga, IbdataQuery)
Technical measures are taken to pseudonymise the user data collected in this way. It is therefore no longer possible to assign the data to the accessing user. The data are not stored together with users’ other personal data. When accessing our website, an information banner informs users of the use of cookies for analytical purposes and refers them to this data protection declaration. In this context, a notice is also included as to how users can disable the storage of cookies through the browser settings.
2. Legal basis for data processing
The legal basis for the processing of your data using technically necessary cookies is Art. 6 para 1 lit. f. For cookies which are used for analysis purposes, the legal basis is, given that you have provided relevant consent, Art. 6 para 1 lit. a.
3. Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Our legitimate interest in the processing of your data in accordance with Art. 6 para 1 f. also lies in these purposes. Some features of our website cannot be offered without the use of cookies. For these functions, it is necessary that the browser is recognised even after changing the page.
The user data collected by technically necessary cookies are not used to create user profiles. The analysis cookies (which are not technically necessary) have the purpose of improving the quality of our website and its content. With the analysis cookies, we learn how the website is used and can constantly optimise our service.
4. Duration of storage and options for objection and removal
Cookies are stored on the user’s computer and transmitted to our site. Therefore, you as a user have full control of the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. There are a number of ways to manage cookies. The help button in the toolbar of most browsers shows you how to stop accepting cookies, how to receive a notification when a new cookie is set, and how to block cookies. If you block cookies, you may not be able to register, log in, or use the services to the full extent.
More information on disabling cookies
IV. Newsletter
1. Description and scope of data processing
You can subscribe to a free newsletter on our website. The data from the entry fields are transmitted to us when you subscribe to the newsletter. Specifically, we need your email address and optionally your first and last name including your salutation (gender) and company name
The following data will also be collected upon subscription:
- Date and time of registration
Your consent will be obtained for the processing of the data as part of the subscription process.
Furthermore, your data will in principle not be passed on to third parties (see below for the exception to data processing). Under no circumstances will your contact information be sold or lent out. The data will be used exclusively for sending the newsletter.
Within the context of this data processing, we transfer the collected personal data to the following third parties (data processors): popup communications GmbH, Werdenbergerstraße 39a, 6700 Bludenz, datenschutz@popup.at
2. Legal basis for data processing
The legal basis for processing data after the user has subscribed to the newsletter, given that the user has provided their consent, is Art. 6 para. 1 lit. a.
3. Purpose of data processing
Your email address is collected in order to deliver the newsletter.
4. Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user’s email address will therefore be stored for as long as the subscription to the newsletter is active.
5. Options for objection and removal
The subscription to the newsletter can be cancelled by the user at any time. A relevant link can be found in every newsletter for this purpose.
V. Web analytics services
1. Data protection provisions on the use and application of WEBALIZER
When visiting our website, data on the access are collected and stored without personal reference; these data include the browser type, date, the website from which you visited us (referrer), and time of access. We use the Webalizer software for the analyses.
On our web server, the web analytics tool Webalizer uses IP address anonymisation. The IP addresses are not displayed within the analysis tool; a personal reference can no longer be made and you as a user remain anonymous to us. The anonymised data sets are stored on our web server and solely evaluated in-house for statistical purposes.
2. Data protection provisions on the use and application of Google Analytics (with anonymisation function)
The controller has integrated the Google Analytics component (with anonymisation function) on this website. Google Analytics is a web analytics service. Web analysis is the surveying, collecting, and analysing of data on the behaviour of visitors to websites. A web analysis service collects, among other things, data on the website from which a data subject has accessed a website (“referrer”), which sub-pages of the website have been accessed, or how often and for how long a sub-page has been viewed. A web analysis tool is mainly used to optimise a website and for cost-benefit analysis of Internet advertising.
The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The data controller uses the suffix “_gat._anonymizeIp” for the web analysis via Google Analytics. Using this addition, Google shortens and anonymises the IP address of the data subject when accessing our Internet pages from a Member State of the European Union or from another signatory state to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile online reports showing us the activities on our websites, and to provide other services related to the use of our website.
Google Analytics places a cookie on the information technology system of the data subject. Cookies have already been explained above. The placement of this cookie enables Google to analyse the use of our website. Each time one of the individual pages of this website is accessed which is operated by the data controller and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the data subject, which allows Google, among other things, to trace the origin of visitors and clicks and subsequently enable commission settlements.
Cookies are used to store personal information, such as the time of access, the location from which the website was accessed, and the frequency of visits to our website by the data subject. Whenever you visit our website, these personal data, including the IP address of the Internet connection used by the data subject, are transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may disclose personal data collected through the technical process to third parties.
The data subject can prevent cookies being set by our website at any time, as already described above, by using an appropriate setting of the Internet browser used and therefore permanently objecting to cookies being set. Setting the Internet browser used in this way would also prevent Google from placing a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programmes.
Furthermore, it is possible for the data subject to object to and prevent the collection of data generated by Google Analytics relating to the use of this website and the processing of these data by Google. To do so, the data subject must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information on visits to websites may be transmitted to Google Analytics. Google views the installation of the browser add-on as an objection. If the data subject’s information technology system is deleted, formatted, or reinstalled at a later time, the data subject must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person within his/her control, it is possible to reinstall or reactivate the browser add-on.
Additional information and Google’s privacy policy can be retrieved at https://www.google.com/policies/privacy/ and at http://www.google.com/analytics/terms.html. Google Analytics is explained in more detail at https://www.google.com/analytics/.
The data will be deleted as soon as they are no longer needed for our recording purposes. In our case, this takes place after 26 months.
3. Data protection provisions on the use and application of GOOGLE REMARKETING
The controller has integrated Google Remarketing services on this website. Google Remarketing is a feature of Google AdWords which enables a business to display advertisements to Internet users who have previously visited the company’s website. The integration of Google Remarketing thus allows a company to create advertisements tailored to users and show them advertisements relevant to their interests.
The services of Google Remarketing are operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google Remarketing is to show interest-relevant advertising. Google Remarketing allows us to display advertisements which are tailored to the individual needs and interests of Internet users through the Google advertising network or to have them displayed on other websites.
Google Remarketing places a cookie on the information technology system of the data subject. Cookies have already been explained above. By setting the cookie, Google will be able to recognise visitors of our website if they subsequently access websites which are also members of the Google advertising network. Each time a website is accessed on which the Google Remarketing service has been integrated, the Internet browser of the data subject automatically identifies itself to Google. As part of this technical process, Google obtains knowledge of the user’s personal data such as the IP address or browsing behaviour of the user. This allows Google to, among other things, display advertisements tailored to their interests.
The cookie stores personally identifiable information, such as the web pages visited by the data subject. Whenever you visit our website, these personal data, including the IP address of the Internet connection used by the data subject, are transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may disclose personal data collected through the technical process to third parties.
The data subject can prevent cookies being set by our website at any time, as already described above, by using an appropriate setting of the Internet browser used and therefore permanently objecting to the setting of cookies. Setting the Internet browser used in this way would also prevent Google from placing a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programmes.
Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do so, the data subject must access www.google.com/settings/ads from every single internet browser currently in use and configure the desired settings there.
Further information and Google’s privacy policy can be found at https://www.google.com/policies/privacy/.
4. Data protection provisions on the use and application of GOOGLE DOUBLE-CLICK
We use DoubleClick components on our website, a product of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. This is a special online marketing solution for advertising agencies and publishers.
DoubleClick by Google transmits data to the DoubleClick server with every impression as well as click or other activity. Each instance of data transmission triggers a cookie request to the data subject’s browser. If the browser accepts this request, DoubleClick sets a cookie on the information technology system of the data subject. Cookies have already been explained above. The purpose of the cookie lies in the optimisation and display of advertisements. The cookie is used, among other things, to activate and display advertisements which are relevant to the user, as well as to generate reports on advertising campaigns or to improve them. Furthermore, the cookie is used to avoid multiple displays of the same advertisement.
DoubleClick uses a cookie ID; this is required to perform the technical process. For example, the cookie ID is necessary to display an advertisement in a browser. DoubleClick can also use the cookie ID to register which advertisements have already been displayed within a browser to avoid duplicate advertisement activations. DoubleClick can also track conversions with the cookie ID. Conversions are logged, for example, if users were previously shown a DoubleClick advertisement and then make a purchase on the advertiser’s website using the same Internet browser.
A DoubleClick cookie does not contain any personal data; however, a DoubleClick cookie may contain additional campaign identifiers. A campaign identifier serves the purpose of identifying campaigns with which users have already come into contact.
Each time one of the individual pages of this website is accessed on which a DoubleClick component has been integrated, the Internet browser on your computer is automatically prompted by the respective DoubleClick component to transmit data to Google for the purposes of online advertisement and commission settlement. As part of this technical process, Google obtains knowledge of data to subsequently enable commission settlement. Google can, among other things, trace that you have clicked certain links on our website.
You can prevent cookies being set by our website at any time, as already described above, by using an appropriate setting of the Internet browser used and therefore permanently object to the setting of cookies. Such a browser setting would also prevent Google from setting a cookie on the information technology system of the data subject; furthermore, cookies that have already been set by Google can be deleted at any time through the settings of an Internet browser or other software programmes.
Further information and the currently applicable privacy policy of DoubleClick by Google can be found at https://www.google.com/policies/privacy/.
5. Data protection provisions on the use and application of INSTAGRAM
The controller has integrated components from the Instagram service on this website. Instagram, which can be characterised as an audio-visual platform, is a service that allows users to share photos and videos, as well as further transmit such data to other social networks.
Instagram’s operating company is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
Each time one of the individual pages of this website, which is operated by the data controller and on which an Instagram component (Insta button) has been integrated, is accessed, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Instagram component to download a display element of the corresponding component from Instagram. As part of this technical process, Instagram receives information about the specific sub-page of our website visited by the data subject.
If the data subject is logged in to Instagram at the same time, Instagram recognises with each access to our website by the data subject and during the entire duration of the respective stay on our website, which specific sub-page the data subject visited. This information is collected by the Instagram component and assigned to the respective Instagram account of the data subject by Instagram. If the data subject clicks on one of the Instagram buttons integrated on our website, the data and information thereby transmitted are assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.
Instagram receives information via the Instagram component that the data subject has visited our website whenever the data subject is logged in to Instagram at the same time as accessing our website; this happens regardless of whether the data subject clicks on the Instagram component or not. If such a transfer of this information to Instagram is not desired by the data subject, he/she can prevent the transfer by logging out of his/her Instagram account before accessing our website.
Additional information and Instagram’s privacy policy can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.
6. Data protection provisions on the use and application of FACEBOOK
The controller has integrated components from the Facebook company on this website. Facebook is a social network.
A social network is an Internet-based social meeting place, an online community that usually enables users to communicate with one other and interact in a virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enable the Internet community to provide personal or company-related information. Facebook allows users of the social network to create private profiles, upload photos, and network via friendship requests, among other things.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The entity responsible for the processing of personal data, if the entity in question resides outside the US or Canada, is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
On each visit to one of the individual pages of this website, which is operated by the data controller and which has integrated a Facebook component (Facebook plug-in), the relevant Facebook component causes the Internet browser on the information technology system of the data subject to automatically download from Facebook a representation of the corresponding Facebook component. An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/. As part of this technical process, Facebook receives information about the specific sub-page of our website visited by the data subject.
If the data subject is simultaneously logged in to Facebook, Facebook recognises which specific sub-page of our website they have visited for each access of to our website and for the entire duration of the respective visit to our website. This information is collected through the Facebook component and assigned by Facebook to the appropriate Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated on our website, for example the “Like” button, or they leave a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores these personal data.
Facebook receives information via the Facebook component that the data subject has visited our website whenever they are logged in to Facebook at the same time as accessing our website; this happens regardless of whether the data subject clicks on the Facebook component or not. If data subjects do not want this information to be transmitted to Facebook, they can prevent it from being transmitted by logging out of their Facebook account before accessing our website.
The data policy published by Facebook available at https://de-de.facebook.com/about/privacy/ provides information on the collection, processing, and use of personal data by Facebook. It also explains what setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress the transfer of data to Facebook.
7. Data protection provisions on the use and application of FACEBOOK CUSTOM AUDIENCE
We use the Facebook “Custom Audience” technology, a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. The data collected through the integration of cookies, web beacons, or similar third-party technologies allow us to more effectively measure and design our advertisement activities on Facebook and, for example, to only display posts or advertisements to visitors to our website. We solely use cookies, web beacons, and similar proven and widely used third-party technologies to collect these data. We do not transfer lists with personal data to Facebook nor do we upload these to Facebook. The collected data will only be sent to Facebook in an encrypted form. Any personal data of individual users are not visible to us.
For more information, please visit Facebook’s data protection statement at https://www.facebook.com/about/privacy/. If you wish to object to data collection via Custom Audience, you can deactivate “Custom Audience” here.
The data will be deleted as soon as they are no longer needed for our recording purposes. In our case, this will be after 180 days.
8. Data protection provisions on the use and application of TWITTER
The controller has integrated Twitter components on this website. Twitter is a multilingual public microblogging service on which users can publish and distribute so-called tweets, i.e. short messages limited to 140 characters. These short messages are available to everyone, including people who are not registered with Twitter. The tweets are also displayed to the so-called followers of the respective user. Followers are other Twitter users who follow a user’s tweets. Furthermore, Twitter makes it possible to address a broad audience via hashtags, links, or retweets.
Twitter is operated by Twitter, Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
Each time one of the individual pages of this website, which is operated by the data controller and on which a Twitter component (Twitter button) has been integrated, is accessed, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Twitter component to download a display element of the corresponding component from Twitter. For more information on the Twitter buttons, visit https://about.twitter.com/resources/buttons. As part of this technical process, Twitter receives information about the specific sub-page of our website visited by the data subject. The purpose of integrating the Twitter component is to enable our users to disseminate the content of this website, to make this website known in the digital world, and to increase our visitor numbers.
If the data subject is simultaneously logged in to Twitter, Twitter recognises, with each visit to our website by the data subject and during the entire duration of the respective stay on our website, which specific sub-page of our website the data subject visits. This information is collected by the Twitter component and assigned to the respective Twitter account of the data subject by Twitter. If the data subject clicks on one of the Twitter buttons integrated on our website, the data and information thus transmitted will be assigned to the personal Twitter user account of the data subject and stored and processed by Twitter.
Twitter receives information via the Twitter component that the data subject has visited our website whenever the data subject is logged in to Twitter at the same time as accessing our website; this happens regardless of whether the data subject clicks on the Twitter component or not. If such a transfer of this information to Twitter is not wanted by the data subject, he/she can prevent the transfer by logging out of his/her Twitter account before accessing our website.
Twitter’s privacy policy can be found at https://twitter.com/privacy?lang=en.
9. Data protection provisions on the use and application of GOOGLE RECAPTCHA
On our website, we use “Google reCAPTCHA” (in the following “reCAPTCHA”). The tool is offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
reCAPTCHA is used to check whether the data entered on a contact form have been entered by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics; the analysis automatically starts as soon as the website visitor accesses the website. reCAPTCHA analyses and evaluates various information such as the IP address, how long the visitor remains on the website, and mouse movements made by the user. These data are transmitted to Google and processed on their servers. The analysis runs in the background, whereby visitors do not receive an indication of the processing. Occasionally, visitors are asked to solve small tasks to make sure that they are indeed human visitors.
The data processing is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offers, particularly against spam.
Privacy policies: https://www.google.com/policies/privacy/ and https://www.google.com/recaptcha/intro/v3beta.html
Opt-out: https://adssettings.google.com/authenticated.
