Data privacy statement

We care deeply about protecting your personal data. Hence, we process your data solely in accordance with legal provisions (GDPR, TKG 2003 (The Telecommunications Act)). In this data privacy statement, we would like to inform you about the most important aspects of how your data is processed on our website. 

 1 Contact Us

Nationalpark Thayatal GmbH
2082 Hardegg, Merkersdorf 90
Tel. +43(0)2949 7005

Protecting and safely storing all personal data that you entrust to us is very important to us. This document tells you more about how we use and process your personal data.

2 Purpose, legal basis, storage period and data recipient

We require the personal data collected for:

  • the support of customers and for general business processing,
  • for the fulfilment of the contract or for the implementation of pre-contractual measures,
  • the provision, execution, maintenance, optimisation and safeguarding of our services and user services, as well as
  • for notifications and own advertising purposes, for example for the conveying product recalls of manufacturers, offers, advertising brochures and newsletters (in paper and electronic form), as well as for the purpose of reference to the existing or former business relationship with the customer (reference).

The data is collected, stored, processed and used for this purpose.

The legal basis for the processing of your personal data is, on the one hand, the fulfilment of a contract (e.g. online purchase), legitimate interests, the fulfilment of our legal or contractual obligations and, on the other hand, your consent (e.g. contact form, newsletter, cookies). Failure to provide the data may have various consequences.

We process your personal data

  • Name/company/association/authority, department, legal form
  • Profession/job title, title
  • Address and additional addresses of the customer
  • Contact persons, responsible official
  • Contact details (telephone number, fax number, e-mail address, etc.)
  • Customer, supplier or employee identifier (no.)
  • Bank details, VAT number

as far as necessary, for the duration of the entire business relationship (from the initiation, processing to the termination of a contract) and beyond that in accordance with the statutory storage and documentation obligations, which arise, among other things, from the Company Code (UGB), the Federal Tax Code (BAO) as well as until the end of any legal dispute, ongoing warranty and guarantee periods, etc.

In the course of operating our websites, we commission software service providers and agencies who may gain access to your personal data in the course of their activities, insofar as they require the data to provide their respective services. They have undertaken to comply with the applicable data protection regulations. Commissioned data processing agreements have been concluded in accordance with Art 28 of the GDPR. You can request more information about the processors we use by writing to us at our email address.

3 Data security

We use technical and organizational security measures to protect the stored personal data against accidental or intentional manipulation, loss or destruction and against access by unauthorized persons. Our security measures are continuously improved in accordance with technical progress.

4 Data storage

For technical reasons, the following usage data, among others, which is transmitted by a user's Internet browser to the web server, is recorded:

  • Browser type and version
  • Operating system used
  • Website from which the user visits our website ("referrer URL")
  • Website that the user is visiting
  • Date and time of access
  • Internet protocol (IP address of the user's computer)
  • data volume transferred
  • Message about successful visit

This data is stored separately from any user data disclosed, in particular name, address, user name, password, email address, telephone number, fax number) and evaluated for statistical purposes in order to be able to optimise our website and our offers.

We point out that for the purpose of the simpler purchase procedure and for the later contract processing in the context of Cookies the IP data of the owner of the connection are stored, just like name, address, contact contacts and messages of the user.

The data provided by you is necessary for the fulfilment of the contract or for the implementation of pre-contractual measures. Without this data we cannot conclude the contract with you. No data is transferred to third parties, with the exception of the transfer of payment data to the processing bank / payment service provider for the purpose of debiting the purchase price, to the transport or shipping company commissioned by us for delivery of the goods, to our tax advisor to meet our tax obligations, and to suppliers or manufacturers in the event of warranty claims or insurance in the event of complaints.

If you cancel the purchase process, the data stored by us will be deleted. If a contract is concluded, all data from the contractual relationship shall be stored until the expiry of the retention period under tax law (7 years).  

The data name, address, purchased goods and date of purchase are stored beyond that until the expiration of the product liability. The data processing is based on the legal provisions of § 96 para 3 TKG (Telecommunications Act)and Art 6 para 1 lit a (consent) and / or lit b (necessary for the performance of the contract) of the GDPR.  

5 Cookies & Google Analytics

We use functions of the web analysis service Google Analytics to improve and optimise our website. Provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Cookies are used for this purpose, which enable an analysis of the use of the website by your users. The information thus generated is transferred to the provider's server and stored there.

Cookies are text files that are stored on the user's computer and enable an analysis of the use of the website by the user. The information generated by the cookie about your use of the website will be sent to and stored by Google on servers in the United States.

We use cookies to make our offer user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognise your browser on your next visit.

We have activated "_anonymizeIp()" for the website; with this extension, IP addresses are processed in abbreviated form in order to exclude direct personal reference and only allow rough localisation: Through the IP anonymization on this website, the IP address of a user is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use the information collected in the course of the use of Google Analytics as a service provider for us in order to evaluate the use of the website, to compile reports on website activities and to provide us with further services related to the use of the website and the Internet. The IP address transmitted by a user's browser as part of Google Analytics is not merged with other Google data. By using our website, the user agrees to the use of the data collected about him in the manner and for the purposes described above.

If you do not want this to happen, you can configure your browser in such a way that the browser notifies you about installation of Cookies and allows the installation only in individual cases.

Deactivating Cookies can limit the functionality of our website.

Users can also prevent the collection of data generated by the cookie and related to their use of the website (including their IP address), its transfer to Google as a service provider and the processing of this data by Google by downloading and installing the browser plugin available at the following link:

The data is processed on the basis of the legal provisions in § 96 para 3 TKG (Telecommunications Act), and Art 6 para 1 lit a (consent), and/or f (legitimate interest) of GDPR (General Data Protection Regulation).

User data is stored for a period of 26 months.

6 Social Plugins

It is possible that social plugins (e.g. share, like buttons) of the following social networks are used on pages of our website:

These plugins are each marked with the logo of the corresponding social network.

7 Data transfer through social plugins

If a user who is registered on a social network and is also currently logged in visits our website that contains such a plugin, the user's browser establishes a direct connection with the servers of the social network via cookies that the social network has set and the plugin on our website. It is also possible that social networks can recognise via the plugin that a logged-in user is on our website without the plugin being clicked.

By integrating the plugins, the operator of the social network receives the information that the user has accessed the corresponding site. When the user interacts with social plugins, the corresponding information is transmitted from his browser directly to the operator of the social network and stored there.

8 Integration of third-party services and content

It may happen that within our website or services of third-party providers, city maps or fonts from other websites are integrated. The integration of content from third-party providers always requires that the third-party providers are aware of the IP address of the users, as without the IP address they would not be able to send the content to the users' browser. The IP address is therefore required to display this content. Furthermore, the providers of the third-party content may set their own cookies and process the users' data for their own purposes. In doing so, usage profiles of the users can be created from the processed data. We will use this content in a data-saving and data-avoiding manner as far as possible and select reliable third-party providers with regard to data security.

The following presentation provides an overview of third-party providers and their content, together with links to their privacy statements, which contain further information on the processing of data and options to raise objections:

External fonts from Google, Inc, ("Google Fonts"). The integration of Google Fonts is done by a server call up at Google (usually in the USA).

Privacy policy:

Maps of the service "Google Maps" of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. 
Privacy policy:

Videos of the platform "YouTube" of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Privacy policy:

Videos of the platform "Vimeo" of the third-party provider Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA.
Privacy policy:

9 Contact form, online calculation and quotation or product request

Your details, including personal data from our contact form, will be transmitted to us via our own mail server, processed and stored by us in order to process your enquiry. This data will not be collected without your consent. Without this data we cannot process your requests.

If you contact us by form on the website or by email, the data you provide will be stored by us for one year for the purpose of processing your enquiry and in case of follow-up questions. We do not share this information without your consent.

The data processing is carried out on the basis of the legal provisions of § 96 para 3 of TKG as well as Art 6 para 1 lit a (consent) of GDPR.

10 Newsletter

You can register for our newsletter on the website, this is done using the Double Opt-In procedure. After registration you will receive an e-mail asking you to confirm your registration. Without the disclosure of this data, sending our newsletter is not possible. You can unsubscribe from the newsletter by clicking the unsubscribe link at the bottom of each newsletter.

For sending our newsletter, we commission processors. They have undertaken to comply with the applicable data protection regulations. Commissioned data processing agreement has been concluded in accordance with Art 28 of GDPR. You can request more information about the processors we use by writing to us at our email address.

The data processing is carried out on the basis of the legal provisions of § 96 para 3 of TKG as well as Art 6 para 1 lit a (consent) of GDPR.

You can cancel your subscription to the newsletter at any time. Please send your cancellation to our email address. We will then immediately delete your data in connection with the newsletter dispatch.

11 Photos and visuals

 Images taken at events are used to showcase our activities online and also in social media channels as well as online, television and print media to increase awareness.

The data will not be passed on to recipients who pursue their own purposes with these data. In the case of social media channels, however, the respective social media service may obtain usage rights to the published data.

The photographic material is digitally processed and can be used for documentation and advertising purposes for a period of five years.

If the rights and freedoms of a person depicted are violated for reasons that are particularly worthy of consideration, we will take appropriate measures to refrain from further processing. A redaction in print media, of material that has already been published, cannot be done. A deletion on the website or in social media channels is carried out within the scope of technical possibilities.

12 Your rights

You have the right at any time to get information about the relevant stored personal data for free. Insofar as there is no legal obligation to retain data, you have the right to have this data deleted and to object to its processing. Furthermore, you have the right to correct the data as well as to restrict processing, to data portability and to lodge a complaint with the Austrian Data Protection Authority (Wickenburggasse 8-10, 1080 Vienna, email:

Please contact us for more information. You will find the contact details under "1 Contact us".