Privacy Policy
Privacy Policy
We are pleased that you are visiting our website www.firstescape.at and thank you for your interest in our company.
Phobia GmbH places great importance on the protection of your personal data. We treat the data entrusted to us with strict confidentiality and handle it responsibly. In this privacy policy, you will find information about the scope and purpose of data processing, in accordance with the relevant data protection provisions of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
1 Controller
The controller responsible for the processing of your data is
Phobia GmbH
Himmelpfortgasse 17
1010 Vienna
office@firstescape.at
2 Use of our website
2.1 Log files
General: When you visit our website, your browser sends a request to establish a connection with our web server. This request is automatically stored by our servers in so-called 'log files.'
The following data is stored: your IP address, date and time of receipt of the request, content of the request, status of the request ('HTTP status code'), length of the response in bytes, last visited URL ('referer'), information about your browser and operating system.
Purpose: The storage in log files serves to ensure the security and functionality of our website.
Legal basis: Ensuring the security and functionality of our website is in our legitimate interest. The processing therefore takes place pursuant to Art 6(1)(f) GDPR.
Storage duration: The log files are automatically deleted after 90 days. Should we require the log files for longer (e.g., due to a specific security incident), this storage duration may be extended accordingly.
Recipients / categories of recipients: Processors (in particular hosting service provider HostProfis ISP Telekom GmbH (Tiroler Str. 17, A-9500 Villach)).
2.2 Online Shop
General: You can make bookings and purchase vouchers on our website (’Online Shop’).
Purpose: We process your data in order to carry out the bookings and voucher purchases you have made.
The following data is processed: first and last name, telephone number, email address, account/payment information (which we may receive from our payment service providers, in particular Stripe Payments Europe Limited, C/O A&L Goodbody, Ifsc, North Wall Quay, Dublin 1, Ireland).
Legal basis: The processing is necessary for the performance of your bookings and voucher purchases. The processing therefore takes place pursuant to Art 6 (1) (b) GDPR.
Storage duration: We store your data for as long as is necessary to carry out your bookings and voucher purchases or as long as we are legally obliged to retain this data. As a rule, this data is subject to a
Recipients / categories of recipients: STÖHR Wirtschaftsprüfungs- und Steuerberatungsges.m.b.H., Garnisongasse 7/21
1090 Vienna, Austria.
Information about our payment service providers: Payments are processed via one of our payment service providers (Stripe, Klarna/Sofort, PayPal). Our payment service providers process your personal data as independent controllers. We may receive your account/payment information from our payment service providers. For more information on data protection, please refer to the privacy notices of the individual payment service providers.
2.3 Processing of your inquiries
General: For questions about our company and our offers, as well as for suggestions or complaints, you can contact us directly via our website (www.firstescape.at/de/kontakt) or using the contact details listed in point 1.
Purpose: We process your data in order to be able to process your inquiry.
The following data is processed: first and last name, telephone number, email address, date and time of your inquiry, content of your inquiry.
Legal basis: The processing of your inquiry is in our legitimate interest. The processing therefore takes place pursuant to Art 6 (1) (f) GDPR.
Storage duration: We store your data for as long as is necessary to process your inquiry or as long as we are legally obliged to retain this data. As a rule, this data is subject to a
Recipients / categories of recipients: STÖHR Wirtschaftsprüfungs- und Steuerberatungsges.m.b.H., Garnisongasse 7/21
1090 Vienna, Austria.
2.4 Newsletter
General: We regularly send interested customers information about promotions, surveys, and other products and services from First Escape via our newsletter.
Purpose: We process your data in order to send you our newsletter.
The following data is processed: first and last name, address, email address.
Legal basis: We process your data for the purpose of sending our newsletter only if you have consented to this (pursuant to Art 6 (1) (a) GDPR).
Storage duration: We store your data for the purpose of sending the newsletter until you withdraw your consent.
Recipients / categories of recipients: Mailchimp by The Rocket Science Group LLC. 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA and Mailgun, 112 E. Pecan Street — San Antonio, TX 78205, USA
3 Cookies & Web Beacons
We use cookies and web beacons on our website. This allows us to ensure the security and functionality of our website and to create analyses of the use of our website.
3.1 Security and functionality of our website
The following cookies are required to ensure the security and functionality of our website:
|
Name of the Cookie |
Purpose |
Storage Duration |
|
PHPSESSID |
This cookie stores your current session with reference to PHP applications. |
End of the browser session |
|
cookiebar |
This cookie stores your selected cookie settings. |
5 years |
3.2 Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). The provider of Google Analytics is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses cookies that enable an analysis of your use of the website. The information collected by cookies about your use of this website is generally transmitted to and stored on a Google server in the USA. However, your IP address is shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide further services connected with website usage and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
You can prevent the collection by Google Analytics by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
For more information on terms of use and data protection, please visit http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html.
We also use Google Analytics to evaluate data from AdWords for statistical purposes. If you do not wish this, you can deactivate it via the Ads Settings Manager (https://www.google.com/settings/ads).
Google Analytics uses the following cookies:
|
Name of the Cookie |
Purpose |
Purpose |
|
_ga |
Stores a unique user ID for Google Analytics in order to distinguish between users. |
2 years |
|
_gat_gtag_UA_106872260_1 |
Is used for Google Analytics to throttle the request rate. |
1 Minute |
|
_gid |
Stores a unique user ID for Google Analytics in order to distinguish between users. |
24 hours |
|
_gac_UA-106872260-1 |
Links information from Google AdWords campaigns with Google Analytics. |
90 days |
You can prevent the use of Google Analytics by clicking on the following link: Deactivate Google Analytics.
3.3 Facebook Pixel
This website uses the Facebook Pixel of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. This offers several functions:
We use the Conversion Tracking function. This means that — if you reached us via one of our ads on Facebook — we can recognize which ad this was and what behavior it triggered on our website. Cookies may also be set in this context. We thereby record the effectiveness of our ads for purposes of statistics and market research. For us, this data is anonymous, which means we cannot associate it with you personally. However, Facebook may potentially link this data with your Facebook account and use it in accordance with the Facebook Data Policy (available at: https://www.facebook.com/about/privacy/). Since the service and the data processing taking place via this service lie solely within Facebook’s area of responsibility, we have no influence whatsoever on any possible processing of personal data.
Furthermore, we use the Custom Audiences function. With this, if you have a user account on Facebook, our advertising can be displayed to you in a targeted manner there. For this purpose, the Facebook Pixel establishes a direct connection between your page and the Facebook servers, and your usage data from our website is transmitted to Facebook for analysis and marketing purposes. This data may — provided you are a Facebook user — be associated with your Facebook account. Through tracking, your activities may thus potentially be traced by Facebook across multiple pages. Since the service and the data processing taking place via this service lie solely within Facebook’s area of responsibility, we have no influence whatsoever on any possible processing of personal data. For more information on the collection and use of data by Facebook, please refer to Facebook’s privacy notices at https://www.facebook.com/about/privacy/.
Facebook Pixel uses the following cookies:
|
Name of the Cookie |
Purpose |
Storage Duration |
|
_fbp |
Stores a unique user ID for the Facebook Pixel in order to distinguish between users. |
3 month |
|
_fbc |
Stores a unique user ID when you reach our website via a Facebook ad. |
3 month |
You can prevent the use of the Facebook Pixel by clicking on the following link: Deactivate Facebook Pixel.
4 International Data Transfer
Due to the complexity of today’s data processing operations, we sometimes use service providers and commission them with the processing of your data. Some of these service providers are located outside the territory of the European Union or the European Economic Area. In all cases where we use service providers, however, we always ensure that the European data protection level and the European data security standards are maintained. It may also be necessary, in the context of processing our business cases, for us to transfer or jointly process your data within our company or within our corporate group. In these cases too, the European data security standards are always maintained. If you would like to learn more about how and to what extent we process your data in your specific business case or pass it on to service providers and what protective guarantees we have taken in this regard, please contact the contact details provided above.
Data Disclosure to Supervisory Authorities and Courts as well as to Other Third Parties
Our company is subject to a large number of legal regulations. It may happen that we must disclose personal data of our customers to authorities or courts upon their requests. We comply with such requests only when we are legally obliged to do so. In all these cases, we always ensure that the legal bases are complied with and that the protection of your data is thereby maintained.
6 Data Subject Rights, Contact and Complaint Options
6.1 Data Subject Rights
6.1.1 Right to Information
You may request information, e.g., about the origin, the categories, the storage duration, the recipients, the purpose of the data processed by us concerning you, and the nature of this processing. Please direct any request for information to the contact details listed in point 1.
6.1.2 Right to Rectification
If we process data concerning you that is incorrect or incomplete, you may request its rectification or completion. You may also request the deletion of unlawfully processed data. Please note, however, that this applies only to incorrect, incomplete, or unlawfully processed data.
6.1.3 Right to Restriction
If it is unclear whether the data processed concerning you is incorrect or incomplete or is being processed unlawfully, you may request the restriction of the processing of your data until this question is finally clarified. We ask you to note that these rights complement each other, so that you can only request either the rectification or completion of your data or its deletion.
6.1.4 Right to Object
Even if the data concerning you is correct and complete and is lawfully processed by us, you may object to the processing of this data in special, justified individual cases: If the processing of your personal data is based on a balancing of interests (Art 6 (1) (f) GDPR: legitimate interests), you have the right to object to the processing at any time on grounds arising from your particular situation. When exercising your right to object, we ask you to explain to us your reasons why we should not process your personal data as we have done. We will examine the situation and either cease the data processing or adjust it, or demonstrate to you our compelling legitimate grounds and continue the data processing. We will also continue the data processing if it serves the assertion, exercise, or defense of legal claims.
You may object to data processing for the purposes of direct advertising and data analysis at any time. In this case, we will cease the data processing.
6.1.5 Right to Withdrawal
If you have given us your consent for the processing of your personal data, you may also withdraw your consent at any time. Your withdrawal does not affect the lawfulness of the data processing carried out up until the withdrawal. Please direct the withdrawal of your consent to the contact point named in point 2.
6.1.6 Right to Data Portability
You may receive the data processed by us concerning you, insofar as we have received it from you yourself, in a machine-readable format determined by us, or commission us with the direct transmission of this data to a third party chosen by you, provided that this recipient enables us to do so from a technical perspective and that the data transmission is opposed neither by unreasonable effort nor by legal or other confidentiality obligations or confidentiality considerations on our part or on the part of third parties.
6.2 Complaint Options
Even though we endeavor to the best of our ability to protect and ensure the integrity of your data, disagreements about the manner in which we use your data cannot be ruled out. If you believe that the data processing violates applicable data protection law or that we are infringing your data protection rights, you also have the right to lodge a complaint with the supervisory authority. Please direct your complaint to: Austrian Data Protection Authority, Barichgasse
