The protection of your personal data is of particular concern to us. Your data will be processed by us on the basis of the statutory provisions (General Data Protection Regulation No 2016/679 - hereinafter referred to as "DS-GVOand national data protection legislation, as amended from time to time, hereinafter referred to as "the Directive".DSG") processed.

Subject to change: We must reserve the right to adapt this data protection declaration if necessary, for example to reflect legal developments in the area of data protection. For the future use of the services offered and the data processing, the adapted/changed data protection provisions shall then apply.

1. Data protection: General information and rights

1. Responsible

The responsible person in the sense of Art 4 Z 7 DS-GVO is the

Falstaff Travel GmbH (FN 504899 z)
Führichgasse 8, 1010 Vienna
Phone: +43 (0)512 90 90 11
Email: office@falstaff-travel.com
Internet: www.falstaff-travel.com

(also referred to in this privacy statement as "We,Us").

2. Personal data

We only process the personal data that you provide to us as part of the "in-house voting" process, as set out below; not all of the specified types of data are involved or required in every case.

We do not process special categories of personal data within the meaning of Art 9 DS-GVO.

Depending on the type and scope, the following personal data may be affected:

Participation in the "Inhouse-Voting

(i) First name, (ii) Last name, (iii) Email address.

3. Processing of personal data

The processing of your personal data is based on your express consent (Art 6 para 1 lit a DS-GVO). Furthermore, the processing is carried out to protect our legitimate interests or the legitimate interests of third parties (Art 6 para 1 lit f DS-GVO), in particular also for the purposes of obtaining reviews / ratings, direct marketing in analogue and digital form, existing customer advertising, statistical evaluation and the improvement of the service offering and its quality (for the right of objection / revocation see point 6.).

We will only process your personal data to the extent covered by the DS-GVO. As a rule, your personal data will not be transferred to third parties. The result of the ratings and reviews for the hotel you visited that are submitted as part of the "in-house voting" will be transmitted to the operator, but no personal data will be transmitted for this purpose, only anonymised data that does not allow a natural person to be identified and cannot be assigned to a specific natural person.

4. Data security

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. Your personal data is protected by organizational and technical measures, such as protection against unauthorized access and technical data security precautions.

Please note, however, that despite these efforts, it cannot be completely ruled out that data disclosed by you via the Internet / via e-mail could nevertheless be viewed and potentially used by other persons. We can therefore accept no liability or responsibility for errors in data transmission or unauthorised access by third parties (e.g. hacker attacks, spyware, malware etc).

5. Retention of personal data

Your personal data will only be stored by us for as long as is necessary for the fulfilment of contractual or legal obligations (corresponding storage obligations can arise, for example, in particular from tax law regulations - a legal basis for the processing and storage of the data also arises in this context from Art 6 para 1 lit c DS-GVO ) or this is necessary for the verification of ratings / reviews. If this necessity is no longer given, the data will be deleted. Notwithstanding this, deletion also takes place on the basis of a request for deletion raised by you (see point 6.).

6. Information, deletion, right of appeal

• You have the right at any time to receive information free of charge about the origin, purpose of the data processing and, if applicable, the recipients of your stored personal data (Art. 15 DS-GVO).
• You have the right to request the correction, blocking or deletion of this data if it is incorrect or if the basis for the data processing no longer applies (Art 16, 17, 18, 20 DS-GVO).
• You have the right to revoke your consent to the processing of personal data on the basis of Art 6 (1) a DS-GVO at any time (Art 7 (3) DS-GVO). However, it should be noted that a possible revocation has no influence on the permissibility of processing personal data on the basis of other permissible circumstances according to Art 6 (1) DS-GVO.
• You have the right to object to the processing of personal data on the basis of Art 6 (1) (f) DS-GVO ("safeguarding legitimate interests") (Art 21 DS-GVO). However, it should be noted that any objection has no influence on the permissibility of the processing of personal data on the basis of other permissible grounds pursuant to Art 6 (1) DS-GVO.

Please direct all inquiries or claims to our e-mail address: office@falstaff-travel.com.

• Furthermore, you have the right to lodge a complaint with the competent supervisory authority (Art 77 DS-GVO) if you are of the opinion that the processing of personal data violates applicable data protection regulations or your claims have been violated in any other way.