This Privacy Policy explains how we process personal data on roamaustria.com, in line with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
1. Controller (Verantwortlicher)
Free Walking Tour Salzburg e.U.
Gerhard Reus
Ignaz-Härtl-Straße 8, 5020 Salzburg
Phone: +43 699 17799991
Email: [email protected]
2. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection, and the right to withdraw consent at any time. You may also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, www.dsb.gv.at). To exercise your rights, contact us at the address above.
3. Hosting and server log files
Our website is hosted by xCloud (managed hosting). On each visit the host automatically stores server log files transmitted by your browser: IP address, browser type and version, operating system, referrer URL, and date and time of access. This is based on our legitimate interest in the secure, stable operation of the site (Art 6(1)(f) GDPR). A data processing agreement is in place with our host. Server log files are kept only as long as necessary for security and stability monitoring and are then deleted automatically. All web fonts are hosted locally on our own server; no external font provider (such as Google Fonts) receives any data about you.
4. Content delivery and security (Cloudflare)
We use Cloudflare, Inc. to deliver the site securely and protect it against misuse. In particular, our contact form is protected by Cloudflare Turnstile, a privacy-friendly bot protection that uses no tracking cookies. Cloudflare processes your IP address for this purpose on the basis of our legitimate interest in security (Art 6(1)(f) GDPR). Cloudflare also serves as the content delivery network and reverse proxy for the entire website, processing your IP address to deliver and secure the site. Data may be transferred to the USA under the EU standard contractual clauses. See https://www.cloudflare.com/privacypolicy/
5. Cookies and consent
We use cookies and comparable technologies. Strictly necessary cookies are required for the site to work. Non-essential cookies and third-party embeds (such as maps and videos) are loaded only after you consent through our cookie consent banner. You can review and withdraw consent at any time via the cookie settings. The legal basis for non-essential cookies is your consent (Art 6(1)(a) GDPR).
6. Contact form
When you use our contact form we process the data you enter (such as name, email address, and message) to answer your enquiry. The legal basis is Art 6(1)(b) GDPR (pre-contractual steps) or our legitimate interest in responding (Art 6(1)(f) GDPR). The form is provided by the SureForms plugin and protected against spam by Cloudflare Turnstile. We keep enquiries only as long as needed to handle them and to meet legal retention duties.
7. Maps (Google Maps)
On some pages we show interactive maps via Google Maps, a service of Google Ireland Ltd. Maps load only after you consent through our cookie banner. When loaded, Google receives your IP address and may set cookies; data may be transferred to the USA under the EU standard contractual clauses. Legal basis: your consent (Art 6(1)(a) GDPR). See https://policies.google.com/privacy
8. Embedded videos (YouTube)
We embed videos from YouTube, a service of Google Ireland Ltd. Videos load only after you consent through our cookie banner. When a video loads, YouTube receives your IP address and may set cookies; data may be transferred to the USA under the EU standard contractual clauses. Legal basis: your consent (Art 6(1)(a) GDPR). See https://policies.google.com/privacy
9. Social media
Our site links to our profiles on Instagram and Facebook (Meta Platforms Ireland Ltd.). These are plain links; Meta processes your data only once you visit those profiles, under Meta responsibility. See https://www.facebook.com/privacy/policy
10. Booking and affiliate links
We link to third-party booking and experience partners (such as GetYourGuide, Tiqets, Stay22, and Viator). When you click such a link and book, the partner may set cookies and we may earn a commission at no extra cost to you. We do not receive personal data about your bookings. Please see each partner privacy policy for details.
11. Web analytics
We do not use web analytics or tracking technologies beyond the consented third-party embeds described above.
12. Transfers outside the EU
Some services above (Google, Meta, Cloudflare) may transfer data to the USA. Such transfers are safeguarded by the EU standard contractual clauses and, where applicable, the EU-US Data Privacy Framework.
13. Changes to this policy
We may update this Privacy Policy to reflect changes to our services or the law. The current version always applies.