Cookies

Cookie Policy - Salzburg Sightseeing Tours
Version: June 2026

1. Introduction

This Cookie Policy informs you about how we use cookies, local storage, web beacons and similar technologies to provide you with optimal use of our website. All technologies mentioned are managed and categorised via our Usercentrics cookie banner. We distinguish between technically necessary cookies and cookies based on your consent, such as analytics, marketing or social media cookies.

2. Website operator and controller

SALZBURG SIGHTSEEING TOURS - Salzburg Sightseeing Tours Salzkraft GmbH
Mirabellplatz 2, 5020 Salzburg, Austria
Phone: +43 662 88 16 16
Website: www.salzburgsightseeing.at
Email: info@salzburgsightseeing.at
Further information about our company can be found in the legal notice on our website. No data protection officer has been appointed, as this is not required by law.

3. Purposes of processing operations

We use the consent management service Usercentrics. In the Usercentrics banner, we distinguish the following categories, which you may activate or deactivate individually:
- Technically necessary functions: enabling use of our website, such as session cookies for shopping cart functions and language settings; identification of the user in our system; provision of security notifications and protection against fraud, misuse and harmful activities. Technically necessary storage takes place without your express consent pursuant to § 165(3) TKG 2021 and on the basis of our legitimate interest in a functional website pursuant to Article 6(1)(f) GDPR.
- Analytics & personalisation: individualisation of your user experience and analysis of usage behaviour; provision of customer-specific service. These cookies are processed exclusively with your consent (Article 6(1)(a) GDPR).
- Social media: interactions with social media plugins are processed exclusively with your consent (Article 6(1)(a) GDPR).

4. Data collection and processing on our website

4.1 Legal bases

The use of cookies, local storage, web beacons and similar technologies is generally based on § 165(3) TKG 2021. For technically necessary cookies, storage and processing are carried out to provide our services without errors and do not require your consent. For all other purposes, processing is based on your consent (Article 6(1)(a) GDPR). You may withdraw this consent at any time with effect for the future.
When using our website, information may be accessed, such as the IP address, or information may be stored on your device, such as cookies. Where these data are strictly necessary for the operation of the website, processing takes place without consent; otherwise, processing takes place only with consent.
The provisions of the GDPR and the Austrian Data Protection Act (DSG) apply to the processing of your personal data.

4.2 Server log files

When you access our website, your browser automatically transmits technical data to our web server. The following data are recorded in our server log files: date and time of the request; name and URL of the requested file; page from which the file was requested; access status; web browser and operating system used; full IP address of the requesting computer; and data volume transferred. These data are processed to ensure a smooth connection setup and system security, for technical administration of the website and for optimisation of the offer. The legal basis is our legitimate interest (Article 6(1)(f) GDPR). The log file data are stored for a maximum of 3 months.

4.3 Cookies

Our website uses cookies, which are small files placed on your device. An up-to-date overview of all cookies, local storage entries and pixels by category, name, provider, purpose and storage duration can be found directly in the Usercentrics banner on our website.
Session cookies are temporary and are deleted automatically at the end of your visit. Persistent cookies remain until they are deleted by you or by your browser.
Technically necessary cookies enable essential functions such as shopping cart functionality and language settings. Analytics and marketing cookies record user behaviour, help optimise our website and enable personalised advertising; they are processed only with your consent.
Technically necessary cookies are processed on the basis of our legitimate interest (Article 6(1)(f) GDPR). Other cookies are processed exclusively with your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.
For a detailed overview of the cookies used on our website, including name, purpose and storage duration, we refer to our cookie overview in the Usercentrics banner on our website. To control, update or restrict the use of cookies, please follow your browser's instructions, for example Google Chrome, Microsoft Edge, Safari, Firefox or Opera.

5. Consent management via Usercentrics

We use the consent management service Usercentrics of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. Usercentrics enables us to obtain, manage and document your consents to data processing and your opt-in/opt-out decisions.
Data processed by Usercentrics include opt-in and opt-out data, referrer URL, user agent, user settings, consent ID, time and type of consent, template version, banner language, IP address and geographical location. The website cannot function properly without this processing. Usercentrics acts as our processor. Further information can be found in the privacy policies of Usercentrics. Processing takes place within the European Union and the data are deleted after 3 years. You may change your consent preferences at any time via the Usercentrics interface.

6. Integration of further tools and services

We assign all third-party tools to the banner categories:
- Analytics: Google Analytics, Google Tag Manager;
- Marketing & advertising: Google Ads, Meta Pixel;
- Social media: Facebook Like Button, Instagram Embed;
- Technically necessary: TourCMS, Palisis, Cloudflare.

6.1 TourCMS & Palisis

Salzburg Sightseeing works with Palisis AG (Switzerland), which licenses the TourCMS software for reservation services. Further information can be found in the privacy policies of Palisis (Link).

6.2 PayPal & Adyen

For payment processing, we use PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.) and Adyen (Adyen N.V., NL). Depending on the payment method, you are either redirected to the website of the payment service provider, such as PayPal, or a hosted payment form provided by the payment service provider is opened, such as Adyen. In both cases, the respective payment service provider may set cookies or similar technologies on your device. These cookies are set by the respective third party and are subject to its privacy and cookie notices.
If payment provider scripts are integrated directly into our site, such as embedded payment widgets or iframes, corresponding cookies may already be set on our website during the payment process; such cookies are listed in our cookie overview and are controlled via our cookie banner (Usercentrics). Further information can be found in the cookie and privacy information of the respective payment service providers PayPal and Adyen.

6.3 Cloudflare

Cloudflare is used to protect our website against DDoS attacks and to improve security. Further information can be found in Cloudflare's privacy policy (Link). Cloudflare is certified under the EU-U.S. Data Privacy Framework.

6.4 Google tools

Google Tag Manager: The purpose is central management of tags, i.e. small code snippets, to control further tools on our website. The legal basis is your consent (Article 6(1)(a) GDPR) or our legitimate interest (Article 6(1)(f) GDPR). Data are transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Transfers of data to the USA take place on the basis of the adequacy decision C(2023) 4745 of the European Commission.
Google Gtag / Analytics / Ads / Remarketing: Google Analytics records data such as pages accessed, clicks, location and technical information. IP anonymisation is activated; the full IP address is transmitted only in exceptional cases. Data are automatically deleted after 14 months; aggregated data remain for longer. Processing takes place on the basis of your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.
Google Ads and Remarketing collect data such as cookie ID, device information and interaction data to enable personalised advertising. Further details and the legal basis (consent) can be found in the respective sections. For all Google tools, data transfers to third countries are carried out in accordance with applicable data protection requirements and the EU adequacy decision.

6.5 Social media functions and widgets

Our website contains social media features, such as the Meta Pixel (formerly Facebook Pixel). The purpose is to track interactions in order to optimise advertisements on Facebook and Instagram. The data processed include device information, IP address, click behaviour and interaction data. The legal basis is your consent (Article 6(1)(a) GDPR). Data are transmitted to Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Alternatively, you may disable interest-based advertising via your Facebook settings.

7. Sharing of non-personal data

We aggregate and share non-personal data, such as visitor numbers and demographic statistics, exclusively for statistical purposes. No information is disclosed that could be used to identify individual persons.

8. Rights of users

As a data subject, you have the following rights: access, rectification, erasure, restriction of processing and data portability. If you have given us consent to process your data, you may withdraw it at any time with effect for the future without affecting the lawfulness of processing carried out before withdrawal. You also have a right to object, in particular to processing for direct marketing purposes.
To exercise your rights, please contact us by email at info@salzburgsightseeing.at, by phone at +43 662 88 16 16 or by post to the address stated above. If you believe that the processing of your data violates data protection law, you may contact the Austrian Data Protection Authority (www.dsb.gv.at).

9. Closing and currency

This policy is regularly reviewed in coordination with Usercentrics updates and adapted to legal and technical developments. Please note that all third-party links listed in this policy should be checked regularly for currency.