We are pleased that you are using our app.
As part of our digital products and services, we provide you with this mobile app, which you can download to your mobile device. Below we provide information about the collection of personal data when using the mobile app.
We take data protection very seriously. This statement explains how your data is processed and what data protection rights you have when you use the “All in ONE Klagenfurt” app. By using the app, you agree to these data protection provisions.
The app is operated by Tourismus Region Klagenfurt am Wörthersee GmbH (TRK), based in 9020 Klagenfurt, Austria. This privacy policy applies regardless of the device from which the app is accessed.
The use of the app by the user is only permitted if the user agrees to the terms of use.
Further legal information about the operator can be found here: www.visitklagenfurt.at/en/privacy-policy/
a. Section Legal basis(s), controller, collection and processing
1. Legal basis
(EU General Data Protection Regulation and Data Protection Act 2018)
The EU General Data Protection Regulation (2016/679) protects the fundamental rights and freedoms of natural persons and, in particular, their right to the protection of personal data. Personal data is any information relating to an identified or identifiable natural person.
2. Processing activity
We process your personal data exclusively in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Data Protection Act. Below we inform you about who we are and about the type, scope and purpose of the processing of your personal data.
All data processed when operating the All in One app is stored exclusively on the device itself. No personal data is collected and transmitted to external parties. The app also does not contain any analysis trackers, advertising scripts or similar from social networks or advertising partners, nor does it display any advertising messages.
The purpose of processing the data is to provide the services of the “All in ONE Klagenfurt” app.
The app offers extensive recommendations on activities and sights and other services that can be used with the guest card. It is also possible to purchase free and paid tickets for events and cultural facilities.
3. Collection of personal data when using our mobile app
- When the mobile app is downloaded, the required information is transferred to the store used (App Store or Google Play Store), in particular the user name, time of download, payment information and the individual device identification number. You also have the option of rating the app on the store page. We have no influence on this data collection and processing and are not responsible for it. You can find information on this in the store’s privacy policy.
- If you wish to use our app, we collect the following data, which is technically necessary for us to offer you the functions of our mobile app and to ensure stability and security:
- -IP addresses (log files)
- Information about the devices used:
- iOS or Android – Delivery of push messages/Preferred language
- Information on account usage (e.g. creation date, number of logins, date of last request)
- Information on the tickets purchased, invoices
- We only process personal data if provided by the customer:
- E-mail address – to create an account and to be able to purchase products
- Credit card details – to be able to purchase products
- Content of messages or reviews from the customer
- Consent to receive push messages
- POI’s marked as favorites
b. App section
In the “All in ONE-Klagenfurt” app, digital authorizations/e-tickets from various service providers can be purchased.
The transaction is concluded between the end customer and the service provider – i.e. we as Tourismus Region Klagenfurt am Wörthersee GmbH (TRK) provide the platform on the one hand.
We also use the platform ourselves as a service provider and use it to sell our own services (tickets) and third-party services (sales processing).
There is a corresponding cooperation agreement between us (operator) and the service providers for the use of the platform by the service providers.
When making a purchase in the app, the GTC of Tourismus Region Klagenfurt am Wörthersee GmbH apply and the respective GTC of the service provider apply to the services of the service providers.
The purpose of processing the data is to process the services of the “All in ONE Klagenfurt” app, i.e. Provision of free and purchased tickets, information about the participating companies and service providers, information about the offers and special features of the city of Klagenfurt, information and offers for marketing purposes.
Customer data and the duration of storage are handled as specified in the GTC.
Privacy is important to us. Only those personal data that are absolutely necessary for the purchase transaction are stored and passed on. This is the email address and the service purchased.
The customer account can be voluntarily supplemented with further data. The customer has the right to have their data deleted at any time by notifying the app or the data will be deactivated by actively deleting the app.
You will be asked by the app whether you wish to grant certain authorizations (location, notifications, Bluetooth, etc.). If you refuse this authorization, you will only be able to use some of the app’s functions to a limited extent.
The customer pays for the tickets directly to the payment service provider “Stripe”. The payment data provided by you during registration or ordering (e.g. credit card numbers etc.) are processed exclusively by the payment service provider and cannot be viewed by us – see section d.
The “All in ONE Klagenfurt” app offers the possibility to use the Wörthersee-Klagenfurt Plus Card (guest card) directly in the app. The accommodation provider will send you an activation email with your personal card number and the download link. Immediately after downloading and registering, you can find your Wörthersee-Klagenfurt Plus Card in the virtual wallet in the app. Further information on the Wörthersee Plus Card and the associated data processing can be found in section c.
The legal basis for data processing is/are:
- Consent pursuant to Art. 6 para. 1 lit. a GDPR in the context of registration,
- Contract acceptance and fulfillment in accordance with Art 6 para 1 lit b GDPR, so that we can process your request or order, we need your data.
- Marketing and advertising or other legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
- Fulfillment of a legal obligation pursuant to Art 6 para 1 lit c. As a tourism association, we are obliged to promote tourism and tourism in accordance with the Provincial Tourism Law.
- Performance of a task carried out in the public interest pursuant to Art. 6 para. 1 lit. e GDPR.
- According to the State Tourism Law, it is our task to support tourism in the state. By using the app or registering, you consent to us processing certain data.
c. Guest Card section (Wörthersee-Klagenfurt Plus Card)
For the use of the Wörthersee Plus Card, we process your personal data (first name, last name, date of birth, period of stay and country of origin/postcode) with the help of our service provider feratel Media Technologies AG (Maria-Theresien-Straße 8, A-6020 Innsbruck) for the purpose of providing you with the benefits of the free Card. Furthermore, it is necessary to store your usage data for the purpose of billing and also to make this data available to our service providers for the purpose of controlling internal billing. The legal basis of the processing is your consent pursuant to Art. 6 (1) lit a DSGVO, which you give us in the context of your guest registration in your accommodation business. You can revoke this consent at any time free of charge. There is no legal or contractual obligation to provide the personal data. The only consequence of not providing it is that we cannot provide you with the guest card. You can find further information on data protection from feratel at: https://www.feratel.com/datenschutz.html
The conditions stated in the Wörthersee Plus Card brochure apply: https://www.visitklagenfurt.at/en/services/lake-woerthersee-pluscard/
d. Section Payment Service Provider
For the payment of order transactions / bookings, an external payment service provider (Stripe) is used on the legal basis of Art. 6 (1) lit. b DSGVO (contract performance), through whose platform you can make your payments. The payment data you enter as part of the order (e.g. account numbers, credit card numbers, passwords / TANs, etc.) are processed exclusively by the payment service provider and are not visible to us.
We only receive a confirmation of the payment made or information that the payment could not be made via our payment service provider.
For more information on data protection and GTC’s of the payment service provider, please visit: https://stripe.com/at/privacy
Payment Service – Stripe: 510 Townsend Street, San Francisco, CA 94103, USA. Payment gateway for processing credit card payments. Stripe processes personal data in accordance with the EU standard contractual clauses. The payment by the customer is made directly to the payment provider, this triggers a bank transfer from the end customer to the participating service providers of the “All in ONE Klagenfurt” – App (full integration Stripe payment window).
e. Section Storage period and deletion
The deletion of the stored personal data takes place if you as a user of the app and/or customer or guest revoke the consent to storage, if your data is no longer required to fulfill the purpose pursued with the storage, or if their storage is or becomes inadmissible for other legal reasons. Data for billing or accounting purposes are not included in the deletion request.
In the event of the conclusion of a contract, all data from the contractual relationship will be stored until the expiry of the retention period under tax law (7 years).
f. Section Data subject rights
Your rights as a data subject:
Right to information: As a person concerned, you have the right to receive information from us about the personal data stored about you at any time.
Right to correction: As a data subject, you have the right to demand that we correct any incorrect personal data concerning you without delay.
Right to deletion (right to be forgotten): As a data subject, you have the right to demand that we delete your personal data immediately, unless there is a reason to prevent deletion.
Right to limitation of processing: As the data subject, you have the right to demand that we, as the data controller, limit processing unless there is a compelling reason not to do so.
Your right to data transfer (data portability): As a data subject, you have the right to receive the personal data concerning you, which you as the data subject have provided to us as the responsible person, in a structured, common and machine-readable format. You also have the right to transfer this data to another data controller without any hindrance on our part, provided that the processing is based on the consent pursuant to Art. 6 para. 1 letter a) DSGVO or Art. 9 para. 2 letter a) DSGVO or on a contract pursuant to Art. 6 para. 1 letter b) DSGVO and the processing is carried out by means of automated procedures, provided that the processing is not necessary for the performance of a task in the public interest or in the exercise of official authority assigned to the data controller. Furthermore, when exercising your right to data transfer pursuant to Art. 20 para. 1 DSGVO, you as the data subject have the right to have your personal data transferred directly by us as the person responsible to another person responsible, insofar as this is technically feasible and insofar as this does not impair the rights and freedoms of other persons.
Right to object: As a data subject, you have the right to object at any time to the processing of personal data concerning you on the basis of Art. 6 para. 1 letters e) or f) DSGVO for reasons arising from your particular situation. If we process your personal data for the purpose of direct advertising, you as the data subject have the right to object to the processing of personal data for the purpose of such advertising at any time; in this case, no balancing of interests takes place.
Assertion of data subject rights and right of appeal: To assert data subject rights or for questions regarding data processing relating to you, please contact us either by e-mail at info@visitklagenfurt.at
Or by post:
Tourismus Region Klagenfurt am Wörthersee GmbH
Neuer Platz 5
A-9020 Klagenfurt am Wörthersee
Please state “Data protection” in the subject line so that we can make an appropriate allocation. During business hours you can also reach us by phone at +43 463 287 463. If you are of the opinion that the data processing does not take place lawfully, we would be pleased first if you look for the direct contact with us. Irrespective of this, you as the data subject have the right to complain to the Austrian data protection authority as the supervisory authority. You can reach the data protection authority at https://www.dsb.gv.at/ (Barichgasse