MURPARK Shopping Center GmbH
Europastraße 3
5015 Salzburg
Österreich
Tel.: +43/316/482710
Fax.: +43/316/482710 200
Mail: office@murpark.at
FN: 413350v
(hereinafter referred to as the “Operator”)
1. General provisions
1.1. In this Data Privacy Policy, we, as the Data Controller under Art. 4 (7) GDPR, describe which data we collect from Users when they visit our website and for what purpose we process that data.
1.2. This Data Privacy Policy informs the User regarding the type, scope and purpose of our processing of personal data in connection with our website and the web pages, functionalities and contents associated with it. This Data Privacy Policy applies regardless of the domains, systems, platforms and devices on which the website is offered. With respect to the terms used, such as ‘personal data’, we would refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
1.3. Please use the above-referenced contact details if you should have any concerns in connection with our processing of personal data regarding yourself or if you wish to assert your rights (see sec. 5.7.).
2. Data processing in connection with the provision of the website and the creation of log files
2.1. Description and scope of data processing
2.1.1. Whenever our website is accessed, our system will automatically collect data and information from the computer system of the computer accessing it.
2.1.2. The following data is collected:
2.1.3. The data is also stored in the log files of our system.
2.2. Purpose
2.2.1. These data are evaluated exclusively to ensure trouble-free operation of the website and to improve our website content. The temporary storage of your IP address by the system is necessary to enable our website to be delivered to the User’s computer. For this purpose, the User’s IP address must remain stored for the duration of the session. The storage in log files is done to ensure functionality of our website. In addition, the data enables us to optimise our website and to ensure the security of our IT systems. In pursuing these purposes, we also have a justified interest in data processing under Art. 6 (1) (f) GDPR.
2.3. Legal basis
2.3.1. The legal basis for our temporary storage of data and log files is Art. 6 (1) (f) GDPR.
2.4. Duration of storage
2.4.1. The data will be deleted or rendered anonymous at the end of the respective session
2.4.2. If the data is stored in log files, it will be deleted after 3 days. No storage of the data beyond that period in a form permitting identification of the Data Subject will be done.
2.5. In addition, we sometimes use service providers, so-called processors, for data processing. We use the following processors:
SPAR Business Services GmbH, Europastraße 3, 5015 Salzburg
3. Newsletter
3.1 Purpose
3.2 The e-mail address you provide will be processed by the operator for the purpose of sending the subscribed newsletter of the operator.
3.3 We process any information voluntarily provided by you in order to provide you with targeted information, for example
3.4 In addition, we determine the optimal time of sending and measure the performance of the newsletter by processing the opening of the newsletter (yes/no) (“opening rate”), information about which articles of the newsletter were clicked on (“click behavior”) as well as information about the technical deliverability of the newsletter (“bounces”, e.g. undeliverability due to incorrect e-mail address). This data is generated by the system.
3.5 Legal basis
3.6 The processing of your e-mail address is based on your consent pursuant to Section 107 of the Telecommunications Act.
3.7 You have the right to revoke your consent at any time free of charge. However, the lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by your revocation. To declare your revocation, please click on the unsubscribe link in the respective newsletter or contact the operator (contact details see below).
3.8 We base the processing of your voluntarily provided information as well as the collection of data for performance measurement and determination of the optimal sending time on the legitimate interests of the operator (marketing purposes).
3.9 After unsubscribing from the newsletter, your declaration of consent will continue to be stored by the operator (Art. 6 para. 1 lit f DSGVO). The legitimate interests of the operator consist in the necessary documentation of your given consent for evidence purposes.
3.10. You provide the operator with your data voluntarily, without any legal or contractual obligation. However, the processing of your e-mail address is necessary in order to be able to send the newsletter. Failure to provide the e-mail address means that the operator can not send you the newsletter. Failure to provide “voluntary information” means that we cannot provide you with targeted information; however, we will of course still send you the newsletter.
3.11. Storage / deletion
3.12. Your unsubscription from the newsletter will automatically be noted in the newsletter database. This note means that you will not receive any further newsletters from the time of your unsubscription. The final deletion of your data will take place within one month calculated from the day of your unsubscription, provided that legal retention obligations do not prevent deletion and we do not need the data in individual cases for the defense or enforcement of legal claims.
The consent given to receive the newsletter will be stored for a period of 12 months after unsubscribing from the newsletter.
4. Raffles
4.1 Purpose
4.1.1 The personal data provided by the participants to take part in the competitions carried out by the operator, such as title, name, e-mail address, address and the competition entry (e.g. selected answer option, uploaded photos, texts) are processed for the purpose of competition processing (drawing/selection and notification of winners).
4.1.2 The data provided by the winners, such as title, name, e-mail address, competition entry (e.g. selected answer option, uploaded photos, texts), address as well as prize, proof of delivery of the prize and correspondence will be processed by the operator for the purpose of competition processing (drawing/selection and notification of winners, dispatch of prizes) as well as for documentation and evidence purposes.
4.1.3 If you have given us your consent to publish your name and the prize in the event of winning, we will also process your name and the prize for the purpose of publishing the winners on our website (www.forum1.at.).
4.2 Legal basis
4.2.1 The processing of the data of the participants and winners is necessary for participation in the competition, notification of the winners and dispatch of the prizes (Art. 6 para. 1. lit b. DSGVO). Failure to provide the above data means that you will not be able to participate in the competition.
4.2.2 The publication of the winners is based on your consent, if any, pursuant to Art. 6 para. 1 lit. a DSGVO. You have the right to revoke your consent at any time free of charge (see below for legal remedy and contact details).
4.2.3 After the end of the competition, the winners’ data (including any consent to the publication of winners) will be stored by the operator on the basis of legitimate interests (Art. 6 para. 1 lit. f DSGVO). The legitimate interests consist of the necessary documentation for evidence purposes.
4.3 Storage / deletion
4.3.1 The deletion of the data of all participants takes place three months after the end of participation, insofar as legal storage obligations do not prevent deletion and we do not require the data in individual cases for the defense or enforcement of legal claims. The deletion of the winners’ data will take place three years after the delivery of the prize, provided that there are no legal obligations to retain data that prevent deletion and we do not need the data in individual cases to defend or enforce legal claims. Any data processed for the purpose of publishing the winners will be deleted from the website and from our systems three months after publication.
4.4 Processors
4.4.1 In the course of processing the sweepstakes, the operator may use cooperation partners of the sweepstakes (e.g. for the direct shipment of the prizes) as processors.
5. Cookies
Definition of cookies
Cookies are small text files that are downloaded by and stored on your browser the first time you visit the website. When you call up the website with the same device or browser again, the cookie and the information stored therein is either sent back to the respective website that created it (first party cookie) or to another website to which it belongs (third party cookie). This makes it possible to detect that the website was called up using the respective browser, using this status to change the display of the contents. By doing so, cookies remember your preferences, share how you use a web page and, in part, adapt the individual offers displayed to you.
Essential cookies
Absolutely necessary, so-called essential, cookies guarantee the functioning of the website, are used exclusively by the operator and are only stored on your computer during the current browser session. Examples of when essential cookies are used:
The data processing activities carried out as a result of the use of cookies are based on our legitimate interest in the provision of a fully functioning website and the services desired by you (Art. 6 Para. 1 Item f GDPR, § 96 Para. 3 Telecommunications Act).
Essential cookies may be deactivated via the browser settings (see below). However, the operator points out to users that in this case, they may not be able to use all the functions of these web pages to the full extent.
Non-essential cookies
In addition, we also use non-essential marketing and statistics cookies on the basis of the consent granted by you, if applicable (Art. 6 Para. 1 Item a GDPR, § 96 Para. 3 Telecommunications Act). These are not absolutely necessary in order to use the website, but still perform important tasks. Without these cookies, functions that enable the convenient use of the website are no longer available. Settings configured by you cannot be saved and must therefore be repeatedly entered on every new page. Furthermore, we no longer have the option of providing you with individually adapted offers.
You may revoke your consent at any time by using the slider (see above) or via the browser settings (see below).
Statistics cookies
Statistics cookies help us to understand how visitors interact with the website by collecting pseudonymised information on visitors’ use of the website.
Marketing cookies
Marketing cookies are used to display personalised contents on the website in accordance with your interests. The personalisation occurs since cookies (also across different websites) make it possible to understand user behaviour.
Your cookie settings on this website
You can (de)activate non-essential cookies at any time by using the slider.
If you wish to limit or block cookies altogether, you must carry out the corresponding changes in the settings of your internet browser. Cookies that have already been saved may be deleted at any time. If cookies are deactivated, it may no longer be possible to use all the functions of the website to the full extent.
The procedures for managing and deleting cookies in your browser can be found in the respective function integrated in the browser. More detailed information on this is available at the following links:
Internet Explorer:
http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox:
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome:
http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari:
https://support.apple.com/de-at/guide/safari/sfri11471/mac
Opera:
http://help.opera.com/Windows/10.20/de/cookies.html
6. Matomo
The website uses Matomo, a web analysis service provided by InnoCraft Limited (“Matomo”).
Matomo uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed (see the previous section).
The information generated by the cookie about the use of the website is transmitted to a server of SPAR Business Services GmbH. The settings ensure that the IP address is anonymized before geolocalization and replaced by a generic IP address before storage.
Matomo will use this information on behalf of the website operator to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Matomo is anonymized and not merged with other data of the website operator.
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of the website to their full extent.
You can also (de)activate Matomo by using the “Marketing cookies” or “Statistics cookies” sliders.
7. Video surveillance
7.1. Purpose
7.1.1 Our shopping center is under video surveillance. We process the video recordings (including recording location, date and time) exclusively for the purpose of preventive protection of persons (in particular employees and customers) and property against criminal offences. The video recordings are only evaluated in the event of an incident. In the event of an incident, we process – insofar as this is recognizable from the recordings – further personal data on the identity/role of the person concerned.
7.1.2 You enter our video-monitored shopping center voluntarily.
7.1.3 The video recordings are not used for automated decision-making (including profiling).
7.2 Legal basis
7.2.1 The video surveillance (= processing of your data) is carried out on the basis of our legitimate interests pursuant to Art. 6 para. 1. lit f of the EU General Data Protection Regulation – Regulation 2016/679 (“DSGVO”). Our legitimate interests are the protection of our property and the protection of employees and customers against criminal offences.
7.3 Recipients
7.3.1 From a technical point of view, we use SPAR Business Services GmbH and security companies (G4S Security Systems GmbH, Siemens AG Österreich, Tyco Integrated Fire & Security Austria Gmbh) as order processors.
7.3.2 In the event of an incident, we pass on the video recordings to authorities, courts or insurance companies.
7.3.3 The video recordings will not be transmitted to third countries.
7.4 Storage / Deletion
7.4.1 The video recordings will be stored for up to 72 hours, unless longer storage is necessary in individual cases for the defense or enforcement of legal claims.
8. Rights of users/data subjects
8.1. The GDPR grants certain rights to Users, as Data Subjects, to which we refer below. These rights are complementary, such that a User may, for example, only demand either correction/completion of his or her data or its erasure.
8.2 Withdrawal of consent
8.2.1 If the Operator saves and processes your personal data based on your consent, you are entitled to withdraw your consent at any time. However, this does not affect the legality of the processing carried out up to the time of your withdrawal of consent. Withdrawal of consent has the consequence that the Operator is no longer allowed to process the data in question for the purposes stated in the declaration of consent as of the date notice of withdrawal of consent is received.
8.3. Right of information, correction and erasure
8.3.1 Data Subjects have the right to (i) obtain confirmation from the Operator as to whether or not personal data concerning them are being processed and, if so, to be informed thereof, (ii) request that incorrect personal data concerning them be corrected, (iii) under certain circumstances, they may demand that personal data concerning them be erased.
8.4.Right to limit processing
8.4.1 Data Subjects are also entitled to ask the Operator to restrict processing if (i) they dispute the accuracy of the data concerning them, for a period of time sufficient to enable the Operator to verify its accuracy, (ii) the processing is unlawful and they decline to have it erased and request instead that it be restricted, (iii) the Operator no longer needs the personal data for purposes of data processing, but they do require the data for the assertion, exercise or defence of legal claims, or (iv) they have objected to the data processing and a decision is pending as to the underlying issues.
8.5. Right of objection
8.5.1 Furthermore, Data Subjects have the right to object to the processing of their personal data. In the event of such objection, the Operator will not carry out any further processing of the data unless (i) it is able to demonstrate compelling reasons for processing that merit protection and which outweigh the interests, rights and freedoms of the Data Subject or (ii) the processing serves to facilitate the assertion, exercise or defence of legal claims.
8.6. Right to data portability
8.6.1 Users may receive the personal data we process about them in a machine-readable format determined by us or may instruct us to transmit this data directly to a third party of their choice, provided that the recipient makes this technically possible for us and the data transmission is not hindered by unreasonable effort or by legal obligations or other duties of secrecy or confidentiality on our part or on the part of third parties.
8.7. Right of complaint
8.7.1 To exercise these rights, please contact the Operator in writing (by letter or e-mail). Of course, the Operator is also available at any time for other enquiries regarding the use and security of your data. If you are of the opinion that the Operator is using your data in an unauthorised manner, you may also lodge a complaint with the Austrian Data Protection Authority.
9. Technical security measures regarding data privacy
9.1. We undertake organisational, contractual and technical security measures in line with the state of the art to ensure that the regulations and rules of the data protection laws are complied with and thus to protect data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. For security reasons, and to protect the transmission, this website uses SSL encryption. Users can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://”. The personal data provided by the User will be processed by a server of SPAR Business Services GmbH, Europastrasse 3, 5015 Salzburg.
10.Contact
10.1 You can reach us at the following contact details:
MURPARK Shopping Center GmbH
Europastraße 3
5015 Salzburg
Österreich
Tel.: +43/316/482710
Fax.: +43/316/482710 200
Mail: office@murpark.at
FN: 413350v
Most recently updated in March 2021.
