Privacy Policy

The protection of your personal data is important to us. Below we inform you, in accordance with Art. 13 and 14 GDPR, about the processing of personal data when using this website.

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Die Schrothkur GmbH
Johann Schroth Weg 137
9821 Obervellach, Austria
Phone: +43 (0)4782 2043
E-mail: office@schrothkur.at

We process personal data of our users only to the extent necessary to provide a functioning website and our content and services. Processing regularly takes place only with the user's consent (Art. 6 (1)(a) GDPR), or insofar as the processing is necessary for the performance of a contract or pre-contractual measures (Art. 6 (1)(b) GDPR), for compliance with a legal obligation (Art. 6 (1)(c) GDPR), or on the basis of legitimate interests (Art. 6 (1)(f) GDPR).

Insofar as health data (Art. 9 GDPR – special categories of personal data) is transmitted or processed in connection with spa/cure inquiries or medical consultations, this is done on the basis of your explicit consent (Art. 9 (2)(a) GDPR) or, insofar as it is necessary for the purposes of preventive health care/medical diagnosis and treatment by professional staff (Art. 9 (2)(h) GDPR in conjunction with medical confidentiality obligations).

You have the right at any time to:

• request information about your personal data processed by us pursuant to Art. 15 GDPR,
• request the correction of inaccurate or the completion of your data stored with us pursuant to Art. 16 GDPR,
• request the deletion of your data stored with us pursuant to Art. 17 GDPR, unless statutory retention obligations preclude this,
• request the restriction of processing pursuant to Art. 18 GDPR,
• receive your data in a structured, commonly used, and machine-readable format pursuant to Art. 20 GDPR,
• revoke consent already given at any time with effect for the future pursuant to Art. 7 (3) GDPR,
• object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as this is based on legitimate interests, and
• lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. In Austria, this is the Austrian Data Protection Authority (dsb.gv.at).

This website is hosted by Shopify. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1 Victoria Street, Dublin 2, Ireland ("Shopify"). When you visit the website, Shopify automatically collects information in so-called server log files transmitted by your browser, in particular:

• IP address of the requesting device
• Date and time of access
• Name and URL of the file accessed
• Website from which access occurred (referrer URL)
• Browser used and, where applicable, operating system

Processing is based on Art. 6 (1)(f) GDPR, arising from our legitimate interest in ensuring smooth operation, system security and stability, and for administrative purposes. Shopify processes this data as our processor within the meaning of Art. 28 GDPR, based on a corresponding Data Processing Addendum. Data transfer to third countries (including Canada, USA) cannot be ruled out in connection with the use of Shopify; Shopify relies on the EU Standard Contractual Clauses for this purpose. For further information, please see Shopify's privacy policy: https://www.shopify.com/legal/privacy

Our Shopify-hosted website uses technically necessary cookies, without which the operation of the site or individual functions (e.g., fraud prevention, load balancing, system security) would not work – for example, cookies named _shopify_s, _shopify_y, or _shopify_essential. No online sale of products or services and no shopping cart/checkout process takes place on this website. These technically necessary cookies are set on the basis of Art. 6 (1)(f) GDPR and § 96 (3) of the Austrian Telecommunications Act (TKG) and do not require separate consent.

Insofar as additional cookies are set for statistical, marketing, or personalization purposes (e.g., via additionally installed Shopify apps), this only occurs after prior consent (Art. 6 (1)(a) GDPR) via a corresponding cookie consent banner.

If you send us inquiries via the contact form ("Non-Binding Inquiry") or by e-mail, your details from the inquiry form, including the contact information you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not disclose this data without your consent.

Processing of data entered into the contact form is based on your consent (Art. 6 (1)(a) GDPR). Insofar as health data is provided as part of the inquiry (e.g., pre-existing conditions relevant to eligibility for a cure), processing is additionally based on your explicit consent pursuant to Art. 9 (2)(a) GDPR. Deletion takes place once the inquiry has been fully processed and no statutory retention obligations preclude this.

If you apply to us via our job board or by e-mail, we process the data you submit (e.g., name, contact details, CV, certificates, cover letter) exclusively for the purpose of conducting the application process, based on Art. 6 (1)(b) GDPR (pre-contractual measures) and § 1 DSG in conjunction with § 96 of the Austrian Labour Constitution Act (ArbVG). After completion of the application process, your data will be deleted unless there is a statutory retention obligation or you have expressly consented to longer-term storage (e.g., for our applicant pool).

Our website includes a map from the Google Maps mapping service (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When the relevant page is accessed, a connection is established to Google's servers, whereby data (including your IP address) may also be transmitted to Google, potentially including to the USA. This use serves our interest in an appealing presentation of our offerings and easy findability, based on Art. 6 (1)(f) GDPR or, insofar as corresponding consent is requested, on Art. 6 (1)(a) GDPR. Further information on how user data is handled can be found in Google's privacy policy: https://policies.google.com/privacy

We are represented on the following social networks and link to our profiles there from our website:

• Facebook: facebook.com/schrothkur.obervellach – Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Privacy Policy: https://www.facebook.com/policy.php
• Instagram: instagram.com/schrothkur – Provider: Meta Platforms Ireland Ltd. Privacy Policy: https://privacycenter.instagram.com/policy

These are plain links to our profiles (no embedded social plugins with automatic data transfer merely by visiting the page). Only by clicking on the respective link do you leave our website, and the privacy provisions of the respective provider apply.

For security reasons, this site uses SSL or TLS encryption to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock symbol in your browser line.

Unless a more specific retention period is stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will take place once these grounds cease to apply.

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your renewed visit.

Note: This privacy policy was created based on the publicly visible content and functions of schrothkur.at (contact form, Google Maps integration, social media links, job board) and the fact that the website is hosted via Shopify but no online sales take place. This text does not replace a legal review.