Legal
Privacy
No cookies, no advertising, no tracking profile. What follows is the complete list of what happens when you load a page, and what happens if you write to us.
Who is responsible
Free Walking Tour Salzburg e.U., Ignaz-Härtl-Straße 8, 5020 Salzburg, Austria. Contact: [email protected]. Full details on the imprint page.
No cookies, and no consent banner
This site sets no cookies and stores nothing in your browser. There is no advertising, no remarketing, no social plugin, no comment system and no embedded video. There is therefore nothing to consent to, which is why you were not asked. The one form on the site is described below, and it only processes what you type into it.
The contact form
If you send the form on the contact page, what you typed is stored: your name, your email address, the page you named and your message. This is processing for the purpose of answering you, on the basis of legitimate interest under Article 6(1)(f) GDPR, or of taking steps at your request under Article 6(1)(b) where your message concerns a service.
Two technical details, because they are personal data even though they do not look like it. A one-way salted hash of your IP address is stored instead of the address itself, to make abuse of the form detectable without keeping a record of who you are. The page you arrived from is stored in truncated form. Neither is used to profile you.
Submissions are handled by our own operations system on servers in the European Union; they are not sent to a third-party form service. They are kept only as long as the exchange and any correction arising from it need, and you can ask for a submission to be deleted at any time.
The form has a hidden decoy field. Filling it in is something only automated submitters do, and those submissions are discarded without being stored at all. Nothing about you is recorded in that case.
Server logs
The web server records each request in a standard access log: IP address, time, requested page, referrer and browser identification. This is technically necessary to deliver the page and to defend the server against attack, on the basis of legitimate interest under Article 6(1)(f) GDPR. Logs are rotated by the hosting provider and are not used to build a profile or joined to anything else. Hosting is provided by xCloud on servers located in the European Union.
Fonts
The typeface is served from this site's own server. No font CDN is used, so loading a page sends nothing to Google Fonts or any other font host.
Maps
Pages carrying a map request map tiles from OpenFreeMap (openfreemap.org), which is the only third party this site talks to. That request necessarily reveals your IP address and the area you are looking at to that provider. OpenFreeMap states that it sets no cookies, requires no API key and does not track users. Map data is OpenStreetMap under ODbL. If you do not load a page with a map, no request leaves this site at all.
Traffic measurement
Visitor numbers are measured with Cloudflare Web Analytics, which is cookieless, stores no identifier in your browser and builds no cross-site profile. It records page views, referrers and rough performance timings in aggregate. It is injected at the network edge rather than embedded in the page.
Your rights
You have the right to information, correction, deletion, restriction of processing, data portability and objection regarding any personal data processed here, and the right to complain to the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb.gv.at). In practice the only personal data this site holds about you is whatever sits in a server log, and an email if you choose to write one.
If you write to the address above instead of using the form, the message and your address are stored in the mailbox so the exchange can be handled and, where a correction was made, traced. Nothing is added to a mailing list, and there is no newsletter, whichever route you use.