data protection

General
The protection of your personal data is of particular concern to us. We process your data exclusively on the basis of the legal provisions (GDPR, DSG, TKG 2003). Below we will inform you about the processing of your personal data by us and the claims you are entitled to under data protection regulations
and rights.

Person responsible for data processing:
Dr. Martin Ortner, medizin@eschenhof.at, 43 664 188 004,

Wasserfallweg 12, 9546 Bad Kleinkirchheim

contact form

If you contact us using the form on the website or by email, the data you provide will be stored by us for six months in order to process your request and in case of follow-up questions.

Analysis purposes

In addition, data is collected and used for analysis purposes. This data processing is not personal (see information on cookies below).

Information about cookies

This website uses so-called cookies. These are small text files that are stored on your device using the browser. They do no harm.

So-called session cookies are used on this site. These are generated when you access the website and are automatically deleted again. They are used to recognize you when you visit the same website again within a short period of time in order to take account of the default settings you have already made. No personal data is stored or processed.

The purpose of cookies is to make the website offering user-friendly. Some cookies remain stored on your device until you delete them. They therefore enable the website operator to recognize your browser the next time you visit. If you do not wish this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. However, if cookies are deactivated, the functionality of the website may be restricted.

Web analysis service Google (Google Analytics)

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA. We use the “Activation of IP anonymization” function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before processing/storage. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, to measure the campaign performance of online advertising for analysis and optimization purposes.

The data processed includes, in particular, online identifiers (including cookie identifiers), Internet protocol addresses, device identifiers, location data, identifiers assigned by the customer and user data (in particular time and duration of access, selection of certain offers, etc.). You can find more information about how Google Analytics handles user data in Google's privacy policy, available at https://policies.google.com/privacy?hl=de .

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Instructions on how you can also prevent Google from storing data can be found at the following link: https://developers.google.com/analytics/devguides/...

When using Google Analytics, the relationship with the web analysis provider is based on order data processing. The transfer of data to the processor is based on an adequacy decision by the European Commission (Privacy Shield self-certification). The data is deleted regularly (currently every 26 months).

Use of Google Adwords conversion tracking

This website uses the online advertising program “Google AdWords” and conversion tracking as part of Google AdWords. Google Conversion Tracking is an analysis service provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”). If you click on an ad placed by Google, a cookie for conversion tracking will be stored on your computer. These cookies lose their validity after a maximum of 90 days. If you visit certain pages on our website and the cookie has not yet expired, Google and the website operator can recognize that you clicked on the ad and were redirected to this page. The information collected using the conversion cookie is used to create conversion statistics. Here, the website operator learns the total number of users who clicked on an ad and were redirected to a page with a conversion tracking tag and/or carried out various actions on the page. However, the website operator does not receive any information that can be used to personally identify users. If you do not want to take part in tracking, you can object to this use by preventing the installation of cookies by setting your browser software accordingly (deactivation option). You will then not be included in the conversion tracking statistics. Further information and Google's data protection declaration can be found at: http://www.google.com/policies/technologies/ads/ , http://www.google.de/policies/privacy/

When using Google Adwords conversion tracking, the relationship with the web analysis provider is based on order data processing. The transfer of data to the processor is based on an adequacy decision by the European Commission (Privacy Shield self-certification). Google is also obliged to delete the data regularly (currently every 39 months).

Registration

When registering, the user's email address and a password are saved. If a purchase is subsequently made, the email address will be linked to the data determined during the purchase process. The data you provide is required to set up the user account. Data processing takes place for the duration of the user account’s existence. If the user account is deleted, the email address and password as well as the link to the purchase process data will be deleted.

IT security

When you visit this website, log files are also stored which contain the IP address and other data for accessing the website (e.g. date, time, user agent, referrer). Data processing is carried out for a limited period of time (maximum 30 days) and only to protect against DDOS attacks or other interference with the functionality of the website and any underlying database systems.

Social media

If Facebook social plugins are used on this website, they are operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The integration can be recognized by the Facebook logo or the terms “Like”, “Like”, “Share” in the colors of Facebook (blue and white). Information about all Facebook plugins can be found in the following link: https://developers.facebook.com/docs/plugins/

The plugins are only activated when you click on the corresponding buttons. If these are displayed grayed out, the plugins are inactive. You have the option to activate the plugins with each visit.

The plugins establish a direct connection between your browser and the Facebook servers. This only happens after the plugin has been activated. The website operator has no influence whatsoever on the nature and extent of the data that the plugin transmits to the Facebook Inc. servers. Information can be found here: https://www.facebook.com/help/186325668085084

The plugin informs Facebook Inc. that you as a user have visited this website. There is a possibility that your IP address will be saved. If you are logged into your Facebook account while visiting this website, the information mentioned will be linked to it.

Legal basis for data processing:

Data on the website is processed exclusively on the basis of legal provisions (GDPR, TKG 2003).
Data processing (web shop, product reviews, booking tool and user account) is based on Art. 6 Para. 1 lit. b) (contract fulfillment purposes) GDPR.

If analysis tools are used, the data is used on the basis of Art. 6 Para. 1 lit f) (legitimate interest) GDPR. The legitimate interest in using data is to improve the website and measure the success of online advertising.

The use of IT data security measures is also based on Art. 6 Para. 1 lit f) (legitimate interest) GDPR. The legitimate interest in using data is to secure your own IT systems.

The use of social media plugins only takes place with your consent. The legal basis is therefore Article 6 Paragraph 1 Letter a) GDPR. Consent must be given again each time the website is accessed.

Your rights

You have the right to information about the stored data in accordance with Article 15 of the GDPR, to correct inaccurate data in accordance with Article 16 of the GDPR, to delete data in accordance with Article 17 of the GDPR, to restrict the processing of data in accordance with Article 18 of the GDPR, to data portability in accordance with Article 20 of the GDPR and to Objection to unreasonable data processing in accordance with Ari 21 GDPR. If the processing takes place on the basis of a declaration of consent, you have the option to revoke this at any time without affecting the lawfulness of the processing carried out based on the consent before its revocation.
You have the right to complain to the supervisory authority - in Austria the data protection authority is responsible. The address is: Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna, telephone: 43 1 52152-0, email: dsb@dsb.qv.at