Privacy Policy

1. Fundamentals

With this data protection declaration we inform you about the type, scope and purpose of the collection and use of personal data by the website operator CIMA CARE GmbH, Hafferlstraße 7, 4020 Linz, Austria.

The website operator takes your data protection very seriously and treats your personal data confidentially and in accordance with the statutory provisions. As new technologies and the constant further development of this website may result in changes to this data protection declaration, we recommend that you read the data protection declaration again at regular intervals.

The term 'personal data' refers to all data that can be related to you personally. This includes, for example, your name, address, email addresses and user behavior. With regard to the other terms, in particular the terms 'processing' and 'consent', we refer you to the statutory definitions under data protection law. Further definitions of terms can be found in Art. 4 GDPR.

2. Name and address of the person responsible

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is the:

CIMA CARE GmbH

Hafferlstrasse 7

4020 Linz

3. Name and address of the data protection officer

The data protection officer of the controller is

CIMA CARE GmbH

Dr. Faramarz Ettehadieh-Rachti

Hafferlstrasse 7

4020 Linz

4. General information on data processing

Scope of the processing of personal data

We only process our users' personal data insofar as this is necessary to provide a functional website and our content and services. The processing of our users' personal data only takes place regularly with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

Data erasure and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

5. Access data

We, the website operator or page provider, collect data on access to the website on the basis of our legitimate interest (see Art. 6 para. 1 lit. f. GDPR) and store these as 'server log files' on the website server. The following data is logged in this way:

Visited website
Time at the time of access
Amount of data sent in bytes
Source/reference from which you reached the page
Browser used
Operating system used
IP address used

The server log files are stored for a maximum of 7 days and then deleted. The data is stored for security reasons, e.g. to be able to clarify cases of misuse. If data has to be cancelled for reasons of proof, it is excluded from deletion until the incident has been finally clarified.

6. Reach measurement & cookies

This website uses cookies for pseudonymized reach measurement, which are transferred to the user's browser either from our server or the server of a third party. Cookies are small files that are stored on your end device. Your browser accesses these files. The use of cookies increases the user-friendliness and security of this website.

Common browsers offer the setting option of not allowing cookies. Note: There is no guarantee that you will be able to access all functions of this website without restrictions if you make the corresponding settings.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link:

https://tools.google.com/dlpage/gaoptout?hl=d

Collection and processing of personal data

The website operator only collects, uses and passes on your personal data if this is permitted by law or if you consent to the collection of data. Personal data is all information that can be used to identify you personally and which can be traced back to you - for example, your name, e-mail address and telephone number.

You can also visit this website without providing any personal details. However, in order to improve our online services, we store your access data to this website (without personal reference). This access data includes, for example, the file you have requested or the name of your internet provider. By anonymizing the data, it is not possible to draw conclusions about your person.

7. Handling contact data

If you contact us as the website operator using the contact options provided (e.g. via the form on the website or by email), your details will be stored so that they can be used to process and respond to your enquiry. In order to process your reservation enquiry, we transmit your data to the partner hotel you have enquired about. Your data will be stored exclusively for the purpose of processing your booking and will not be passed on to unknown third parties.

8. Dealing with comments and contributions

If you leave a post or comment on this website, your IP address will be saved. This is done on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR. GDPR and serves the security of us as the website operator: Because if your comment violates applicable law, we can be prosecuted for it, which is why we have an interest in the identity of the comment or post author.

9. Google Analytics

Due to our legitimate interests in optimizing and analyzing our online offering within the meaning of Art. 6 para. 1 lit. f. GDPR, this website uses the 'Google Analytics' service offered by Google Inc. GDPR the service 'Google Analytics', which is offered by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The service (Google Analytics) uses 'cookies' - text files that are stored on your end device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.

Google LLC is certified under the Privacy Shield Agreement:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

IP anonymization is used on this website. The IP address of users is truncated within the member states of the EU and the European Economic Area and in other signatory states to the Agreement. Only in individual cases is the IP address initially transmitted in full to a Google server in the USA and truncated there. This truncation eliminates the personal reference of your IP address. The user's IP address transmitted by the browser is not combined with other data stored by Google.

As part of the contract data agreement that we as the website operator have concluded with Google Inc., Google Inc. uses the information collected to analyze website usage and website activity and provides services related to Internet usage.

The data collected by Google on our behalf is used to analyze the use of our online offering by individual users, e.g. to compile reports on website activity in order to improve our online offering.

You have the option of preventing the storage of cookies on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not allow cookies.

You can also use a browser plugin to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link will take you to the corresponding plugin:

https://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can prevent Google Analytics from collecting data about you within this website by clicking on this link (IMPORTANT: insert opt-out link). By clicking on the above link, you download an 'opt-out cookie'. Your browser must therefore allow the storage of cookies. If you delete your cookies regularly, you will need to click on the link again each time you visit this website.

Here you will find further information on the use of data by Google Inc:

https://policies.google.com/privacy/partners?hl=de (data collected by Google partners)
https://adssettings.google.de/authenticated (settings for the adverts that are displayed to you)
https://policies.google.com/technologies/ads?hl=de (use of cookies in adverts)

You give your consent to data processing by Google Analytics by confirming the consent tool on the website.

10. Google Maps

We integrate the maps of the 'Google Maps' service of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data may include, in particular, IP addresses and location data of users, which, however, are not collected without their consent (usually as part of the settings of their mobile devices). The data may be processed in the USA. When Google Maps is used, Google also processes and utilizes data about the use of the Maps functions by visitors to the websites. Further information about data processing by Google can be found in Google's privacy policy at https://www.google.at/intl/de/policies/privacy/. There you can also change your settings in the data protection center so that you can manage and protect your data.

11. Newsletter

Description and scope of data processing

You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input mask (including first name, surname, e-mail address) will be transmitted to us with your consent.

E-mail address
IP address of the calling computer
Date and time of registration

Legal basis for data processing

The legal basis for sending the newsletter is your consent.

Purpose of data processing

The purpose of collecting the user's e-mail address is to deliver the newsletter.

Duration of storage

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The user's e-mail address is therefore stored for as long as the subscription to the newsletter is active.

Possibility of objection and removal

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter.

12. Rights of the User

As a user, you have the right to receive free information upon request about which personal data has been stored about you. You also have the right to correct incorrect data and to the processing restriction or to delete your personal data. If applicable, you can also claim your right to data portability. If you believe that your data has been processed unlawfully, you can file a complaint with the competent supervisory authority.

Deletion of Data

If your wish does not conflict with a legal duty to store data (e.g., data retention), you have the right to have your data deleted. Data stored by us will be deleted if they are no longer necessary for their intended purpose and there are no legal retention periods. If deletion cannot be carried out because the data is required for permissible legal purposes, data processing is restricted. In this case, the data are locked and not processed for other purposes.

13. Rights of Object

Users of this website can exercise their right to object to the processing of their personal data at any time. If you wish to correct, block, delete, or obtain information about the personal data stored about you, or have questions regarding the collection, processing, or use of your personal data, or want to revoke consents granted, please contact the following email address: support@cima.care