1. Data Controller
The controller responsible for data processing on this website is:
Tourist Office Mattsee
Passauer Straße 30
5163 Mattsee
Austria
Tel. +43 6217 6080
E-Mail: mattsee@salzburger-seenland.at
Tourist Office Obertrum am See
Schulstr. 2
5162 Obertrum
Austria
Tel. +43 6219 6307
E-Mail: obertrum@salzburger-seenland.at
Tourist Office Seeham
Dorf 12
5164 Seeham
Austria
Tel. +43 6217 5493
E-Mail: seeham@salzburger-seenland.at
Schifffahrt STEINER NAUTIC
Seestraße 23
5163 Mattsee
Austria
Tel. +43 (0) 6217 / 5432
E-Mail: office@segelschule-mattsee.at
2. Collection and Storage of Personal Data
2.1 When Visiting the Website
When you access our website, information is automatically sent by the browser used on your device to our website server. This information is temporarily stored in a so-called log file. The following information is recorded without any action on your part and stored until automatic deletion:
- IP address of the requesting device
- Date and time of access
- Name and URL of the retrieved file
- Website from which access is made (referrer URL)
- Browser used and, where applicable, your operating system and the name of your access provider
The above data is processed for the following purposes:
- Ensuring a smooth connection setup of the website
- Ensuring comfortable use of our website
- Evaluation of system security and stability
- Other administrative purposes
The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes listed above.
2.2 When Using Our Contact Form
If you have questions of any kind, we offer you the opportunity to contact us via a form provided on the website. A valid email address and your name are required so that we know who sent the request and can respond.
Providing a phone number is optional and may help us process your request faster. Additional information may be provided voluntarily.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6(1)(a) GDPR based on your voluntary consent, or under Art. 6(1)(b) GDPR for pre-contractual measures.
2.3 Booking Requests
If you submit a booking request via our website, we collect the following personal data:
- First name
- Last name
- Organisation (optional)
- Email address
- Phone number (optional)
- Number of persons (adults, children)
- Preferred date and time
- Route or boarding point selection
- Other voluntary booking information
This data is used exclusively to process your booking request, to carry out pre-contractual measures, and, where applicable, for contract performance.
We use your email address in particular to send you a booking confirmation and, if required, to request email verification. Your phone number may be used to contact you directly in case of questions or short-notice changes.
Processing is based on Art. 6(1)(b) GDPR.
2.4 Booking Confirmation E-Mails
After submitting a booking request and (if enabled) verifying your email address, you will receive a booking confirmation email. This email is sent automatically and contains a summary of your reservation as well as a cancellation link.
The email address you provided is used exclusively for this transactional communication. There is no advertising or newsletter use of your email address without separate consent.
The legal basis is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures).
2.5 Storage Period
We store personal data only as long as necessary to achieve the respective purposes or as required by statutory retention obligations.
- Data from booking requests is stored for the duration of processing and, beyond that, in accordance with legal retention periods (in particular under Section 132 Austrian Federal Fiscal Code (BAO), up to 7 years).
- Data from contact requests is stored for up to 12 months after final processing of your request and then deleted, unless further communication or legal obligations require continued storage.
- Server log files are generally deleted automatically after no later than 14 days.
3. Cookies
We use cookies on our website. These are small files automatically created by your browser and stored on your device when you visit our website.
Some cookies we use are deleted at the end of the browser session (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser on your next visit (persistent cookies).
When visiting our website, you are informed about the use of cookies and can grant or refuse your consent to certain cookies via our cookie banner (Art. 6(1)(a) GDPR).
You can revoke your consent to the use of cookies at any time with effect for the future by adjusting the relevant settings in our cookie banner.
Further information on the cookies used can be found in our Cookie Policy.
4. Disclosure of Data
Your personal data will not be transferred to third parties for purposes other than those listed below. We only disclose your personal data to third parties if:
- You have given your explicit consent pursuant to Art. 6(1)(a) GDPR
- The disclosure is necessary pursuant to Art. 6(1)(f) GDPR for the establishment, exercise, or defence of legal claims
- There is a legal obligation for disclosure pursuant to Art. 6(1)(c) GDPR
- This is legally permissible and required pursuant to Art. 6(1)(b) GDPR for the performance of contractual relationships with you
5. Hosting
This website is hosted by an external service provider:
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany
Website: www.hetzner.com
The personal data collected on this website is stored on the hoster’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, and website accesses.
A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with the hosting provider.
The use of the hosting provider is based on our legitimate interest in the secure, fast, and efficient provision of our online offering (Art. 6(1)(f) GDPR).
6. Data Subject Rights
You have the right:
- Under Art. 15 GDPR, to request information about your personal data processed by us
- Under Art. 16 GDPR, to request immediate rectification of inaccurate or completion of your stored data
- Under Art. 17 GDPR, to request deletion of your data
- Under Art. 18 GDPR, to request restriction of processing
- Under Art. 20 GDPR, to receive your data in a structured, commonly used, and machine-readable format (data portability)
- Under Art. 7(3) GDPR, to withdraw your consent at any time with effect for the future
- Under Art. 21 GDPR, to object to data processing based on legitimate interests
- Under Art. 77 GDPR, to lodge a complaint with a supervisory authority
To exercise your rights, please contact us at: office@segelschule-mattsee.at
Competent supervisory authority in Austria:
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at
7. Right to Object
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data at any time, on grounds relating to your particular situation.
If you wish to exercise your right to object, simply send an email to: office@segelschule-mattsee.at
8. Data Security
This website uses SSL/TLS encryption for all data transmitted between your browser and our server. You can recognise an encrypted connection by the padlock icon in your browser’s address bar and by the “https://” prefix.
In addition, we use appropriate technical and organisational security measures (TOMs) to protect your data against unauthorised access, manipulation, loss, or destruction. Our security measures are continuously reviewed and updated in line with current standards.
9. No Use of Analytics or Tracking Tools
We do not use web analytics or tracking tools on our website (such as Google Analytics, Meta Pixel, or similar) that make individual user behaviour identifiable or traceable across sessions.
10. External Links
Our website may contain links to external third-party websites. We have no influence over the content or data protection practices of those sites. We therefore accept no responsibility for their content. Please refer to the respective provider’s privacy policy when visiting external links.
11. Currency and Changes to this Privacy Policy
This privacy policy is currently valid and was last updated in April 2026.
Due to the further development of our website or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. We therefore recommend that you review this page regularly.
