Voucher shop

Data privacy note

Last updated: February 12, 2026

The protection of your personal data is very important to us, which is why we would like to provide you with all the information about the processing and storage of your data when you visit this site.

In order to use all the functions and services of our website, it is necessary to collect your personal data. However, processing and storage is carried out solely in accordance with the legal guidelines and requirements of the General Data Protection Regulation (GDPR), the Data Protection Act (DSG), and the Telecommunications Act (TKG 2021).

General information
Zeitgeist Hotelbetriebs GmbH is responsible for the following data protection information:

Zeitgeist Hotelbetriebs GmbH
Sonnwendgasse 15
1100 Vienna
Email datenschutz@zeitgeist-vienna.com

All employees of Zeitgeist Vienna are obliged to maintain confidentiality and to handle your data properly and enter it correctly into our data processing systems.

Encryption
In order to protect your data as comprehensively as possible from unwanted access, we take technical and organizational measures and use an encryption method on our website. Your data is therefore transmitted via the Internet from your device to ours and vice versa using TLS encryption. TLS stands for "Transport Layer Security" and is an encryption protocol for data transmission on the Internet. You can usually recognize "TLS" by the closed padlock symbol in your browser's status bar and the address beginning with https:// .

COLLECTION AND PROCESSING OF PERSONAL DATA ON THIS WEBSITE AND IN THE CONTEXT OF VOUCHER BOOKINGS
1. Collection of access and log data

You have the option of purchasing vouchers via this website. As part of this ordering process, we process your personal data on the basis of Art. 6 (1) lit. b) GDPR, as the processing is necessary for the implementation of pre-contractual measures and for the fulfillment of the purchase contract for the vouchers. This includes, in particular, the processing of your order, payment, and the electronic dispatch of the voucher. The provision of your data is necessary for the purchase of vouchers. Failure to provide this data will result in you being unable to purchase vouchers via our shop.

Your data will be stored for a period of seven years in order to comply with statutory retention obligations, in particular under tax law. Storage beyond this period will only take place if this is required by law or necessary for the assertion, exercise, or defense of legal claims.

For the technical processing of voucher orders, we use the external service provider INCERT eTourismus GmbH & Co KG, Leonfeldner Straße 328, 4040 Linz, Austria, as a processor in accordance with Art. 28 GDPR. This processor processes personal data exclusively on our documented instructions and in compliance with appropriate technical and organizational measures to protect your data. The provider of this website, dogado GmbH, based in Dortmund, Germany, is used as a subcontractor via INCERT eTourismus GmbH & Co KG. The data collected is transmitted and stored for seven days in server log files, which your browser automatically encrypts and sends to us. We only store the server log files for longer than seven days in the event of attacks on our server infrastructure or other legal violations. This longer storage period is based on our legitimate interest pursuant to Art. 6 (1) lit. f) GDPR and serves solely to preserve evidence. The legal basis for data processing is the legitimate interest pursuant to Art. 6 (1) lit. f) GDPR, which is based on identifying indications of illegal use of our website and ensuring smooth connection establishment.

2. Use of cookies
We use cookies to facilitate and improve the use of our website. Cookies are small pieces of text information that can be stored on your computer or smartphone via your browser when you visit a website. This serves to recognize the website visitor. Cookies can also provide us with information about how you use our website so that we can continuously improve its design.

Cookies themselves do not contain any personal data about users. They are only used to clearly identify what our customers find interesting and useful on our website. We also use so-called "web beacons" (small graphic images, also known as "pixel tags" or "clear GIFs") on our website. They are used in conjunction with cookies to track general user behavior on the website.

The data processed by necessary cookies is required for the purposes listed below to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) (f) GDPR. Any use of cookies that is not strictly necessary for technical reasons constitutes data processing that is only permitted with your express and active consent. Using our "Cookie Consent Tool," you can define which cookie categories you want to consent to when visiting our website. You also have the option of rejecting cookies retrospectively in the overview below. However, rejecting some of these cookies may affect your browsing experience.

CONSENT MANAGEMENT VIA KLARO!
To obtain consent in accordance with data protection laws, we use the cookie consent technology from "KLARO!" provided by KIProtect GmbH, based in Germany. This technology is used to obtain the legally required consent for the use of cookies and other data processing that requires consent.  The legal basis for this is our legitimate interest pursuant to Art. 6 (1) lit. f) GDPR and the fulfillment of legal obligations pursuant to Art. 6 (1) lit. c) GDPR. The legitimate interest is based on the legally compliant documentation and verifiability of consent in order to fulfill our accountability obligations. No personal data is stored. You can change your settings at any time using the widget (see the "fingerprint" at the bottom right).

Technically necessary cookies

Cookie Type Duration Description
SRVID Required
 
Session
 
Session ID. Required to manage the shopping cart and process orders.
 
XTCsid Required
 
Session
 
Server ID. Required for order processing in order to route to the correct server node within the server cluster via the load balancer.
klaro Required 120 days Stores the corresponding consent values that are collected during user interaction to indicate consent or rejection of additional non-essential services.


Statistics
The provider of this website uses services from etracker GmbH in Hamburg, Germany (www.etracker.com) to analyze usage data. We do not use cookies for web analysis by default. If we use analysis and optimization cookies, we will obtain your explicit consent separately in advance. If this is the case and you agree, cookies will be used to enable statistical reach analysis of this website, measurement of the success of our online marketing measures, and testing procedures, e.g., to test and optimize different versions of our online offering or its components. Cookies are small text files that are stored by the Internet browser on the user's device. etracker cookies do not contain any information that enables a user to be identified.

The data generated with etracker is processed and stored exclusively in Germany on behalf of the provider of this website by etracker and is therefore subject to strict German and European data protection laws and standards. etracker has been independently tested, certified, and awarded the ePrivacyseal data protection seal of approval in this regard. Data processing is carried out on the basis of the legal provisions of Art. 6 (1) lit. f (legitimate interest) of the General Data Protection Regulation (GDPR). Our concern in terms of the GDPR (legitimate interest) is the optimization of our online offering and our website. Since the privacy of our visitors is important to us, data that may allow a connection to an individual person, such as IP addresses, login or device IDs, is anonymized or pseudonymized as early as possible. No other use, combination with other data or transfer to third parties takes place. You can object to the data processing described above at any time. Objecting will not have any negative consequences.

YOUR RIGHTS AS A DATA SUBJECT
YOU HAVE THE RIGHT, PURSUANT TO ART. 15 (1) GDPR, TO REQUEST INFORMATION ABOUT THE PERSONAL DATA STORED ABOUT YOU FREE OF CHARGE. FURTHERMORE, IF THE LEGAL REQUIREMENTS ARE MET, YOU HAVE THE RIGHT TO CORRECT (ART. 16 GDPR), DELETE (ART. 17 GDPR), AND RESTRICT THE PROCESSING (ART. 18 GDPR) OF YOUR PERSONAL DATA. IF YOU HAVE PROVIDED THE PROCESSED DATA YOURSELF, YOU HAVE THE RIGHT TO DATA TRANSFER IN ACCORDANCE WITH ART. 20 GDPR.
IF THE DATA PROCESSING IS BASED ON ART. 6 (1) E) OR F) GDPR, YOU HAVE THE RIGHT TO OBJECT IN ACCORDANCE WITH ART. 21 GDPR. IF YOU OBJECT TO DATA PROCESSING, IT WILL NOT TAKE PLACE IN THE FUTURE, UNLESS THE CONTROLLER CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE FURTHER PROCESSING WHICH OVERRIDE THE INTERESTS OF THE DATA SUBJECT IN OBJECTING.

In the aforementioned cases, if you have any questions or complaints, please contact us by email at datenschutz@zeitgeist-vienna.com .

You also have the right to lodge a complaint with a data protection supervisory authority. In particular, the complaint can be lodged with a supervisory authority in the EU member state of your place of residence, your place of work, or the place of the alleged infringement. If you have concerns that your data protection rights have been violated or that the processing of your data violates the GDPR, you can submit your complaint directly to the competent data protection authority at Barichgasse 40-42, 1030 Vienna, Austria, via dsb@dsb.gv.at .

Unless otherwise stated in the previous chapters, the provision of personal data is neither required by law nor contractually required, nor is it necessary for the conclusion of a contract. No profiling or automated decision-making takes place.


etracker
The provider of this website uses the services of etracker GmbH, Hamburg, Germany (www.etracker.com) to analyse usage data. We do not use cookies for web analysis by default. If we use analysis and optimisation cookies, we will obtain your explicit consent separately in advance. If this is the case and you agree, cookies are used to enable a statistical range analysis of this website, a measurement of the success of our online marketing measures and test procedures, e.g. to test and optimise different versions of our online offer or its components. Cookies are small text files that are stored by the Internet browser on the user's device. etracker cookies do not contain any information that could identify a user.

The data generated by etracker on behalf of the provider of this website is processed and stored by etracker solely in Germany by commission of the provider of this website and is thus subject tothe strict German and European data protection laws and standards. In this regard, etracker was independently checked, certified and awarded with theePrivacyseal data protection seal of approval.

The data processing is based on Art. 6 Section 1 lit f (legitimate interest) of the General Data Protection Regulation (GDPR). Our legitimate interest is the optimisation of our online offer and our website. As the privacy of our visitors is very important to us, the data that may possibly allow a reference to an individual person, such as IP address, registration or device IDs, will be anonymised or pseudonymised as soon as possible. etracker does not use the data for any other purpose, combine it with other data or pass it on to third parties.

You can object to the outlined data processing at any time. Your objection has no disadvantageous consequences.


Further information on data protection with etracker can be found here.