Privacy Policy
1. Controller
ZAFE GmbH
Gaisbergstraße 61 5020 Salzburg Austria
Email: datenschutz@zafe.at
Phone: +43 17 34 23 97
2. Processing of Personal Data
We process personal data exclusively in accordance with the GDPR and the Austrian Data Protection Act (DSG).
a) Website Visit
When you access our website, the following data is automatically processed:
IP address Date and time of access Pages/files accessed Browser type and version Operating system
This data is used to ensure the operation of the website, for error analysis and to optimize our offering.
b) Contact Forms & Bookings
When you fill out a form or make a booking, we process the following data:
Name Email address Phone number Booking and payment information
Purpose: To process your inquiry or booking.
c) Newsletter via MailerLite
We use MailerLite for our newsletter: UAB “MailerLite”, Paupio g. 28, 11341 Vilnius, Lithuania.
Processed data: email address, name Legal basis: consent pursuant to Art. 6(1)(a) GDPR Purpose: sending news and offers
Registration takes place via double opt-in. You may withdraw your consent at any time, for example via the unsubscribe link in the newsletter.
We have concluded a data processing agreement with MailerLite. Data is stored on servers within the EU. More information: https://shorturl.at/w66Ro
d) Contentful Headless CMS
Our website content is provided via Contentful: Contentful GmbH, Max-Urich-Straße 3, 13355 Berlin, Germany.
Processed data: when accessing the website, IP address and browser information are transmitted to Contentful servers. Purpose: delivery and management of content on our website.
We have concluded a data processing agreement with Contentful. Data processing takes place on servers within the EU and is GDPR-compliant. More information: https://shorturl.at/p9NjM
3. Cookies & Tracking
Our website uses:
Necessary cookies: for basic website functions
Statistics cookies (Google Analytics) : only with your explicit consent
Marketing cookies (Google Ads) : only with your explicit consent
Google Ads Conversion Tracking
With your consent, we use conversion tracking by Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
Purpose: measuring whether visits via our ads lead to bookings (conversion measurement)
Processed data: cookie identifiers (e.g. _gcl_au), IP address, browser information, pages visited
Cookie storage period: up to 90 days
Legal basis: your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021)
Without your consent, the Google Ads tag is not loaded and no marketing cookies are set. You can grant or withdraw your consent at any time via the “Cookie Settings” link in the footer of our website. Data may be transferred to the USA; Google is certified under the EU-U.S. Data Privacy Framework. More information: policies.google.com/privacy
Google Analytics 4 (Statistics)
With your consent, we use Google Analytics 4 , a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
Purpose: statistical analysis of website usage (e.g. visitor numbers, pages viewed, time spent) to improve our offering
Processed data: cookie identifiers (e.g. _ga), truncated IP address, device and browser information, pages visited
Cookie storage period: up to 2 years
Legal basis: your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021)
IP addresses are automatically truncated by Google Analytics 4. Without your consent, Google Analytics is not loaded; you can grant or withdraw your consent at any time via “Cookie Settings” in the footer. Data may be transferred to the USA; Google is certified under the EU-U.S. Data Privacy Framework.
4. Disclosure of Data
Personal data is only disclosed if:
this is necessary for the performance of a contract, we are legally obliged to do so, or you have expressly given your consent.
Service providers, such as hosting providers, payment providers, MailerLite and Contentful, process data only on the basis of a data processing agreement pursuant to Art. 28 GDPR.
5. Storage Period
We store personal data only for as long as is necessary for the respective purposes or as long as statutory retention obligations apply.
6. Your Rights
You have the right to:
Access, Art. 15 GDPR Rectification, Art. 16 GDPR Erasure, Art. 17 GDPR Restriction of processing, Art. 18 GDPR Data portability, Art. 20 GDPR Objection to processing, Art. 21 GDPR
To exercise your rights, please contact us using the contact details provided above.
7. Security
We use technical and organizational measures to protect personal data against unauthorized access, loss or misuse.
8. Amendments
We reserve the right to amend this Privacy Policy in order to adapt it to legal changes or new functions of our website.