Personal information
Introduction
With this Privacy Policy we inform you about the processing of your personal data and the data protection claims and rights you are entitled to pursuant to Article 13 of the Regulation (EU) 2016 / 679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95 / 46 / EC (GDPR) :
To start with an important fact : We shall never sell your email address to 3rd parties - period. We will only share your details with 3rd parties that you expressly consent to being shared with. We take your right to privacy seriously and want you to feel comfortable using our platform (website, apps and other digital services). This Privacy Policy deals with personally identifiable information (referred to as "Data" below) that may be collected by us on our site. This Policy does not apply to other entities that we do not own or control or persons that are not our employees, agents or within our control. Please take time to read our Terms and Conditions.
1. Processing of Data
Your data is processed by TourRadar GmbH, Kärntner Ring 5-7 Top 201-203, Vienna 1010, Austria.
The data protection officer at TourRadar GmbH is Mr Alberto Azambuja and you can contact him via email using [email protected]
TourRadar GmbH processes your personal data that we receive from you as part of our business relationship. The information and data concerning you are necessary for the management of your order / your booking and additional services.
Personal data includes your personal details (e.g. name, address, contact details, nationality). In addition, this may include order / booking data (e.g. payment orders), data from the fulfilment of our contractual obligation (e.g. insurance details), advertising and documentation data (e.g. browser records), register data, image and sound data (e.g. telephone recordings), information from your electronic communication with us (e.g. cookies) as well as data for compliance with legal requirements.
Please take note that your user name, e-mail address, or other submissions that you make on this site may contain your real name or other personally identifiable information and, as a result, may appear on this site. Like many platforms, we may also automatically receive general information that is contained in our server log files such as your IP address and cookie information. Information about how advertising may be served on this site (if at all) is set forth below. TourRadar uses a 3rd party payment gateway called Braintree to ensure your personal and sensitive credit card information is securely stored. Your credit card details are NOT stored on TourRadar, instead your information is securely stored and encrypted with Braintree. Braintree are fully PCI-DSS compliant and to transfer information between TourRadar and Braintree we use a 256bit SSL certificate from Amazon. In layman terms this means when you save or update your credit card details on TourRadar, these details are being securely stored within Braintree's fully secure vaults to ensure your information cannot be used by malicious 3rd parties.
TourRadar and its employees are unable to view your cardholder information as Braintree truncate your credit card details. You may add, update or delete your credit card information whenever you like; Traveller should visit your Settings page and Operators should visit your Billing page.
2. Use of Data, Purposes and Legal Basis of the Data Processing
We process your personal data in accordance with the GDPR and the Austrian Data Protection Act (Datenschutzgesetz) for the purposes and on the legal basis as outlined below :
Given consent pursuant to Article 6 item 1 a) GDPR, if you have granted us consent to process your personal data. Any consent given may be revoked at any time with future effect. Fulfilment of contractual obligations pursuant to Article 6 item 1 b) GDRP, as the processing of
your personal data is carried out for the order management / your booking and the execution of your orders and all activities required for the operation and management of a tour broker.
Fulfilment of legal obligations pursuant to Article 6 item 1 c) GDPR, as the processing of personal data may be necessary for the purpose of fulfilling legal obligations according to the Austrian Federal Fiscal Act (BAO) and the Austrian Commercial Code (UGB).
For the protection of legitimate interests pursuant to Article 6 item 1 f) GDPR, as if necessary, within the framework of balancing interests of us or a third party, data may be processed, by us or by a third party, beyond the actual fulfilment of the contract, in order to safeguard legitimate
interests (provided that you have not objected to the use of your data pursuant to Article 21 GDPR) e.g.
measures for prosecution.
We may use Data to customize and improve your user experience on this site and to contact you. We will make efforts so that your Data will not be provided to third parties unless :
vi) or (vi) this site is purchased by a third party whereby that third party will be able to use the Data in the same manner as we can as set forth in this Policy. In the event you choose to use links that appear on our site to visit other platforms, you are advised to read the privacy policies that appear on those sites.
3. Recipients of Data
We will transfer your data to the tour operator who will carry out the tour you booked.
Your data may therefore be transferred to a party located outside of the EU (a “third country”
Backend Engineer • Vienna, Austria (Hybrid)