Therme Laa

Data protection

Privacy statement & data protection officer

We appreciate your interest in our website.

This privacy statement informs you about the processing activities of your personal data in the context of our website.

The protection of your personal data and of your privacy is very important to us. Therefore, we process your data exclusively on the basis of the existing legal provisions [Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of data, and repealing Directive 95/46/EC (GDPR), Data Protection Act 2018 (DSG 2018), ePrivacy Directive, Telecommunications Act 2003 (TKG 2003)].

1. Controller and data protection officer:

Pursuant to Article 4 (7) of the GDPR, the controller for this website is TBL Therme Laa a. d. Thaya – Betriebsgesellschaft m.b.H. (in the following abbreviated as TBL).

If you have any questions about the processing of your data by TBL, you can contact us as indicated below:

The contact details of the TBL Data Protection Officer are:

Mag. Per-Oliver Gustavson

Sterngasse 5, 1230 Vienna, Austria

Tel: +43 1 60127 0

datenschutz@therme-laa.at

1. Processing of personal data when visiting the website

1.1. Processing of access data

When you visit our website, we store the access data in so-called web server log files. We collect the following data from you:

Purpose of data processing

These data are statistically evaluated to further improve our online offer and make it more user-friendly, to find and fix bugs faster, and to control server capacity. Only in case of a concrete indication of illegal use of our website, we will use this data in a personal form for the purpose of prosecution.

Duration of storage

Your data will only be stored for a period of 2 weeks.

Legal basis

The legal basis for the processing of access data is the legitimate interest of TBL (online service offer & data security) pursuant to Article 6 (1) (f) of the GDPR.

1.2. Cookies

1.2.1. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics also uses cookies that allow the analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage to the website operator. The IP address provided by Google Analytics will not be merged with other Google data. You can prevent the collection by Google of the data (including your IP address) generated by the cookie and related to your use of the website by downloading and installing the browser plug-in available at the following link: (http://tools.google.com/dlpage/gaoptout?hl=de).

Legal basis

The legal basis for the use of Google Analytics is the legitimate interest of TBL (Art. 6 (1) (f) GDPR), which involves the evaluation of the website and analysis of website activities.

Recipients of the data

These data are forwarded to Google for the stated purposes.

Duration of storage

The personal data is stored for a period of 26 months and then deleted.

2. Linking

The website includes links to other websites. These references to websites of other Internet users are provided as a service to cover wider information needs of the accessing party. TBL has no influence on their content. TBL assumes no liability for this content. The provider of the linked website is exclusively responsible for the content and correctness of the information provided there.

3. Contact form

We look forward to hearing from you.

Data processing: 

When you contact us using one of our  contact forms, TBL processes your personal information indicated below:

Purpose of data processing

The personal data that you provide when you contact us processed for the purposes of

Legal basis

The processing of your personal data for the purpose of contacting you is based on taking the necessary steps prior to entering into a contract pursuant to Article 6 (1) (b) of the GDPR.

Duration of storage

The data processed for the above-mentioned purposes will be processed for the duration of at least 6 months.  

4. Data security

The security of your personal data is very important to us.

Taking into account the state of the art in terms of technology, the implementation costs and the nature, scope, circumstances and purposes of the data processing, as well as the likelihood and severity of the risk to the rights and freedoms of natural persons, TBL implements appropriate technical and organizational measures within the meaning of Article 32 of the GDPR.

In this sense, the following measures, inter alia, are taken to protect your data and to protect against loss, destruction, access, modification and distribution by unauthorized persons:

Please note that we do not accept any liability for the disclosure of information due to errors that are not attributable or attributable to us in data transmission and/or unauthorized access by third parties.

5. Your rights

You have the following rights as a user of our website:

Austrian Data Protection Authority at:

Österreichische Datenschutzbehörde [Austrian Data Protection Authority]
Wickenburggasse 8
1080 Vienna, Austria

Telephone: +43 1 521 52-25 69
E‑mail: dsb@dsb.gv.at

With the exception of the right to lodge a complaint with the Austrian Data Protection Authority, you can assert your rights with TBL at the following address: