Privacy Policy

1. Introduction

VignettaSFN-Travel ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at vignettasfn-travel.eu. Please read this policy carefully. If you disagree with its terms, please discontinue use of the site.

This policy complies with the General Data Protection Regulation (GDPR) and applicable Austrian data protection law (Datenschutzgesetz, DSG).

2. Data Controller

The data controller for this website is:
VignettaSFN-Travel
Hauptplatz 22, 8010 Graz, Austria
Email: [email protected]
Phone: +43 316 456 789

3. Data We Collect

We collect the following categories of personal data:

We do not collect sensitive personal data (e.g., health data, financial data) and do not use tracking pixels, third-party analytics, or advertising networks.

4. Cookies and Local Storage

This website uses a minimal cookie consent mechanism stored in your browser's localStorage under the key cookieConsent_vignettasfn-travel.eu. This stores only your consent preference (yes/no) and does not contain any personal information.

We do not use third-party cookies, advertising cookies, or tracking cookies. The only data stored locally is your cookie consent preference.

You can clear your localStorage data at any time through your browser settings. This will reset your cookie consent preference.

5. Contact Form

When you submit our contact form, the data you provide (name, email address, and message) is sent directly to our email address via your email client. We do not store form submissions on our servers. The data is used only to respond to your enquiry and is retained for as long as necessary to resolve your request, typically no longer than 12 months.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with:

• Our hosting provider, for the purpose of operating the website (data processing agreement in place).
• Law enforcement or regulatory authorities, if required by law.

We do not transfer personal data outside the European Economic Area (EEA).

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy. Contact form data is retained for up to 12 months. Technical log data is retained for up to 30 days. Cookie consent preferences are stored locally in your browser until you clear them.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request correction of inaccurate data.
• Right to erasure: You can request deletion of your personal data in certain circumstances.
• Right to restriction: You can request that we restrict processing of your data.
• Right to object: You can object to processing based on legitimate interest.
• Right to data portability: You can request your data in a machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Complaints

If you believe we have not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, DSB) at dsb.gv.at.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "last updated" date. We encourage you to review this policy periodically. Continued use of the website after changes constitutes acceptance of the updated policy.

For questions about this policy, contact us at [email protected].