Privacy policy

1. Controller

The controller responsible for processing your data is Reiseck (Post Now e.U., owner Ali Aktas), Strubergasse 49, 5020 Salzburg, Austria, phone +43 670 3084907, e-mail info@discover-salzburg.at. This notice applies to all our brands (Discover Salzburg and Hallstatt.Tours). Referred to below as “we”.

2. Website

The website is hosted by Google (Google Ireland Limited). When you visit it, technically necessary data such as IP address, time and page are processed to deliver the page and protect it from abuse, and deleted after a short time (legitimate interest, Art. 6(1)(f) GDPR).

To protect the inquiry form from spam, Google reCAPTCHA checks technical characteristics of your device as soon as you use the form (legitimate interest, Art. 6(1)(f) GDPR).

3. Inquiries and communication

When you contact us via the form, e-mail, phone or WhatsApp, we process your details (such as name, contact details, travel details, messages) to answer your inquiry, prepare an offer and carry out the ride (contract or pre-contractual measures, Art. 6(1)(b) GDPR).

We store inquiries, customer data and message history in our management system on Google Cloud in the EU. After an inquiry you receive an automatic confirmation. We send and receive e-mails via easyname GmbH (Vienna). WhatsApp messages are handled by WhatsApp Ireland Limited and our service provider Twilio Ireland Limited.

We also carry out rides on behalf of brokers. In that case we receive passenger data from the broker rather than from the passengers themselves: name, phone number, flight number, pick-up and drop-off, date and time, and number of persons, as far as the broker passes them on. We process them only to carry out the arranged ride (contract, Art. 6(1)(b) GDPR, and our legitimate interest in proper handling, Art. 6(1)(f) GDPR). To handle the ride we open the page that a link in the broker’s message points to and store its content; we delete these pages after 30 days.

4. AI-assisted handling

To answer quickly and accurately we use an AI language model from Google Cloud in a data centre in the EU: it extracts travel details from messages, drafts and corrects replies and translates them. A person reviews and sends every reply; there is no automated decision-making (Art. 22 GDPR). Google does not use the data for training. Legal basis: Art. 6(1)(b) and (f) GDPR.

5. Analysis of earlier inquiries

To improve prices and replies, we analyse earlier inquiries internally (such as route, price, response time, outcome) and use similar cases for comparison. Contact details of other customers are not included. Legal basis: our legitimate interest in good and fair offers (Art. 6(1)(f) GDPR).

Right to object: you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR) — an e-mail to info@discover-salzburg.at is enough.

6. Booking and payment

On our booking page you confirm the booking, enter a billing address if needed and choose how to pay. We store when you accepted our terms. For online payments, Stripe Payments Europe Limited processes the payment data; we never receive card details. We issue invoices with our invoicing software (Art. 6(1)(b) and (c) GDPR).

7. Disclosure

We only pass on data where necessary for the ride (for example to the driver or a partner company), to our tax advisers and to authorities where we are legally obliged to. The service providers named here process data on our behalf. We do not sell data.

8. Services with your consent

We only use the following services if you agree in the cookie window (Art. 6(1)(a) GDPR, § 165(3) Austrian Telecommunications Act 2021):

Statistics: Google Analytics (Google Ireland Limited) and Microsoft Clarity (Microsoft Ireland Operations Limited) show us how the website is used.

Marketing: Google Ads measures whether an ad led to an inquiry. If you have agreed, we send Google the ad click ID and your e-mail address and phone number in hashed (pseudonymised) form.

You can change or withdraw your consent at any time via “Cookie settings” at the bottom of every page. Details are in the cookie policy.

9. Transfers outside the EU

Some of the providers named (Google, Microsoft, Meta, Twilio, Stripe) may also process data in the USA. This is based on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

10. Retention

We keep inquiries without a booking for as long as they are needed for handling them and possible follow-up inquiries. Booking and invoice records are kept for seven years (§ 132 Austrian Federal Fiscal Code).

11. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and to withdraw consent with effect for the future. Write to us at info@discover-salzburg.at. You can also lodge a complaint with the Austrian Data Protection Authority.