Controller

The controller within the meaning of the GDPR is the operator named in the legal notice. For data protection questions, use the email address and phone number given there.

Hosting and server logs

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. A data processing agreement is in place with the provider.

When you open a page, the server automatically records access data in log files: IP address, date and time, the address requested, the volume of data transferred, browser type and operating system. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Log files are deleted after seven days at the latest and are not combined with other data.

Booking requests

When you book a journey we process what you enter in the form in order to offer and carry out that journey: name, email address, phone number, route, date and time, number of guests, choice of vehicle, flight or train number, destination address and accommodation, luggage and child seat details, and your notes.

The legal basis is the initiation and performance of the transport contract (Art. 6(1)(b) GDPR). The data is sent by email to our info address and stored in our booking administration. Without it we cannot carry out the journey.

Booking data that forms part of a business transaction is kept for seven years, as required by § 132 of the Austrian Federal Fiscal Code. Enquiries that do not lead to a journey are deleted after twelve months at the latest.

Contact form

From the contact form we process your name, email address, optionally your phone number, and your message, in order to answer you. The legal basis is our legitimate interest in replying (Art. 6(1)(f) GDPR), or Art. 6(1)(b) GDPR where the enquiry concerns a contract. We delete the message once it has been dealt with, at the latest after twelve months.

To keep automated submissions out, the form contains a field that is invisible to you and measures how long filling it in takes. No captcha service is used and no data is transmitted to third parties in the process.

Cookies and browser storage

We set no analytics or advertising cookies unless you have consented, and embed no social media plugins or external fonts. Manrope is served from our own server.

The booking form may keep your progress in your browser’s local storage so that nothing is lost if you break off. That data stays on your device, is never transmitted to us, and can be cleared through your browser settings.

Visitor statistics without cookies

To see which pages are read and where our guests come from, we count page views with our own statistics on our own server. They set no cookies, store nothing in your browser and pass nothing on to third parties.

We record the page you open, the page you came from (only domain and path; of the parameters only campaign tags such as utm_source), device type, browser and operating system as a category, screen width as a size class, the language and time zone of your device, how long the page was visible and how far you scrolled, and clicks on phone, email and WhatsApp links, downloads and external links. We do not store your IP address: together with your browser and a random value that changes every day it is turned into a checksum that recognises you on the same day only and cannot be reversed. The random value is overwritten at midnight.

The legal basis is our legitimate interest in improving our service and seeing which advertising works (Art. 6(1)(f) GDPR). We delete the individual page views after 90 days; after that only daily totals remain, with no personal reference at all.

Google Ads

We advertise on Google and for that embed Google Tag Manager and, through it, the Google tag (gtag.js) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland on every page. It measures whether a transfer request, a call, a WhatsApp message or an e-mail to us came from an ad; for calls, WhatsApp and e-mail only the tap on the number or link is counted, never the content. For technical reasons your IP address is transmitted to Google in the process.

The tag runs in Google Consent Mode: until you have consented, it sets no cookies and stores no identifier by which Google could recognise you; Google only learns that a page was opened or a request was sent. Only with your consent (Art. 6(1)(a) GDPR, § 165(3) of the Austrian Telecommunications Act 2021) may Google set cookies to attribute a request to an ad click. You give or refuse consent in the banner at the bottom of the page; we keep your answer in your browser’s local storage so we do not ask on every page. You can withdraw your consent at any time with effect for the future by clearing that entry through your browser settings and choosing “No thanks” in the banner.

Google may also process data on servers in the USA; Google LLC is certified under the EU-US Data Privacy Framework. More in Google’s privacy policy at policies.google.com/privacy.

Who receives your data

Your data is seen only by the driver carrying out your journey, by our hosting provider as a processor, and — where legally required — by our tax adviser and the tax authorities. Apart from the Google tag (see above), no transfer to countries outside the EU takes place.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. An informal email is enough.

If you believe we are not processing your data lawfully, you can complain to the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, dsb.gv.at.