Privacy policy

1. Controller

The controllers responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) are:

PerLei GesbR
Partners: Simone Leitner and Julia Perner
Arsenalstraße 12/1202
1100 Vienna
Austria
Email: office@reiselieblinge.de

The controller determines, alone or jointly with others, the purposes and means of the processing of personal data.

2. Collection and Storage of Personal Data When Visiting the Website

a) Server Log Files

When you visit our website for informational purposes only (i.e. if you do not register or otherwise provide us with information), certain data transmitted by your browser to our server is automatically collected. These so-called server log files include in particular:

  • the page visited or the name of the file accessed,
  • date and time of access,
  • amount of data transferred,
  • source/referrer from which you accessed the page,
  • browser used,
  • operating system used,
  • IP address.

The processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the technical stability, security and optimisation of our website. The data may be processed by Shopify and technical service providers used by Shopify in connection with the operation and provision of our website. Any further processing will only take place where an appropriate legal basis exists.

b) SSL/TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content.
You can recognise an encrypted connection by the character string “https://” and the padlock symbol in your browser's address bar.

3. Hosting and Shop System via Shopify

We use Shopify, a service provided by Shopify International Ltd., to operate our online store:

Shopify International Ltd.
Attn: Data Protection Officer
c/o Intertrust Ireland
2nd Floor, 1–2 Victoria Buildings
Haddington Road
Dublin 4, D04 XN32
Ireland

As part of the provision of its shop services, Shopify generally processes customers' personal data as a processor on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Depending on the Shopify functions we use, Shopify may also act as an independent controller for certain processing activities.

In connection with the use of Shopify, personal data may also be processed outside the European Economic Area. According to Shopify, appropriate safeguards pursuant to Art. 44 et seq. GDPR are used for such processing, in particular approved Binding Corporate Rules and, where applicable, Standard Contractual Clauses.

Further information about the processing of personal data by Shopify can be found in Shopify's Privacy Policy.

4. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Cookies are small pieces of information that are stored on your device or accessed from it.

Technically necessary cookies are used where they are strictly necessary to provide the functions of our website and online store expressly requested by you. Where personal data is processed in this context, the processing is carried out – depending on the respective purpose – in particular on the basis of Art. 6(1)(b) or Art. 6(1)(f) GDPR.

For the storage of or access to information on your device, Section 165(3) TKG 2021 additionally applies in Austria and Section 25 TDDDG applies to users in Germany.

Functional, analytics and marketing cookies as well as comparable technologies that are not technically necessary are only used with your prior consent. The legal basis for the associated processing of personal data is Art. 6(1)(a) GDPR.

You can withdraw or change your consent at any time with effect for the future via our cookie settings.

The lawfulness of processing carried out on the basis of your consent prior to its withdrawal remains unaffected.

5. Contacting Us

If you contact us via the contact form or by email, we process the personal data you provide in order to handle your enquiry.

If your enquiry relates to an existing contract or to pre-contractual measures, the processing is carried out on the basis of Art. 6(1)(b) GDPR. For other enquiries, processing is carried out on the basis of our legitimate interest in handling and responding to your enquiry pursuant to Art. 6(1)(f) GDPR.

Your data will be deleted once your enquiry has been fully processed and there are no statutory retention obligations or other legitimate reasons requiring further storage.

6. Customer Account

When a customer account is opened, personal data is collected pursuant to Art. 6(1)(b) GDPR insofar as this is necessary for the administration and processing of orders.

You may request the deletion of your customer account at any time. Statutory retention obligations relating to data from previously completed orders remain unaffected.

Once the contractual relationship has been fully processed, your data will be deleted unless statutory retention obligations apply.

7. Data Processing for Order and Payment Processing

When you place an order in our online store, we process the personal data required to perform and process the contract. This includes, in particular, your name, billing and delivery address, email address, telephone number where applicable, order data, and payment and transaction information.

The processing is carried out for the performance of the contract concluded with you or for the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR. Where we are required to retain data due to statutory obligations, in particular tax or commercial law obligations, the processing is carried out on the basis of Art. 6(1)(c) GDPR.

When ordering digital travel guides, we additionally process data required for the electronic provision and administration of the download. This may include, in particular, the order number, name, email address, download status, number and time of downloads, as well as technical information such as IP address, browser and operating system information. The processing is carried out for the purpose of providing the purchased digital content and therefore for the performance of the contract pursuant to Art. 6(1)(b) GDPR.

For the performance and processing of an order, personal data may in particular be transmitted to the following categories of recipients:

  • Shopify and technical service providers, including Shopify services used for the provision of digital content
  • shipping and fulfilment service providers
  • payment service providers and participating financial institutions
  • tax advisers and accounting service providers, where applicable

Depending on the payment method selected by you, data may in particular be processed by Shopify Payments and other payment services offered in the checkout. The privacy policies of the respective payment provider additionally apply to the processing carried out by that provider.

Shipping and Fulfilment

When ordering physical products, personal data, in particular your name, delivery address, contact details and order data, may be transmitted to shipping and fulfilment service providers used by us for the purpose of processing the contract. Depending on the service provider used, personal data may also be processed or transferred to a third country outside the European Economic Area, in particular to China.

There is currently no adequacy decision by the European Commission for China. Any transfer of personal data to a third country will only take place in accordance with the requirements of Art. 44 et seq. GDPR. Where appropriate safeguards are required, the specific legal basis for the transfer depends on the service provider used. Further information regarding such third-country transfers may be requested at office@reiselieblinge.de.

8. Newsletter

If you subscribe to our newsletter, we use your email address exclusively to send you information about our offers.
Registration takes place using the double opt-in procedure.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
You may unsubscribe at any time using the unsubscribe link contained in the email. The withdrawal of your consent applies with effect for the future and does not affect the lawfulness of processing carried out on the basis of your consent prior to its withdrawal.

9. Use of Analytics and Marketing Tools

a) Meta Pixel (Facebook Pixel)

This website uses the Meta Pixel provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, to analyse and improve our advertising campaigns.
Processing takes place only with your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future.

In this context, information about pages and products viewed, interactions with our website, purchases and other conversion events, as well as technical information such as IP address, browser and device information and online identifiers, may be processed.

In connection with the collection and transmission of certain event data to Meta, we and Meta Platforms Ireland Ltd. may act as joint controllers within the meaning of Art. 26 GDPR.

Where information is stored on or accessed from your device in connection with the Meta Pixel, this takes place only with your consent pursuant to Section 165(3) TKG 2021. For users in Germany, Section 25(1) TDDDG additionally applies.

In connection with the use of Meta services, personal data may also be processed outside the European Economic Area. The requirements of Art. 44 et seq. GDPR apply to such data transfers.

Further information can be found at:
https://www.facebook.com/about/privacy

b) TikTok Pixel

We use the TikTok Pixel provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, Ireland, to measure advertising performance.
Data processing takes place only with your consent pursuant to Art. 6(1)(a) GDPR.

Where information is stored on or accessed from your device in connection with the TikTok Pixel, this takes place only with your consent pursuant to Section 165(3) TKG 2021. For users in Germany, Section 25(1) TDDDG additionally applies.

In connection with the use of TikTok services, personal data may also be processed outside the European Economic Area. The requirements of Art. 44 et seq. GDPR apply to such data transfers.

Further details can be found at: https://www.tiktok.com/legal/privacy-policy-eea

c) Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to statistically analyse the use of our website. In this context, information relating to sessions and user interactions, approximate location information, browser and device information, as well as pseudonymous online identifiers, may be processed.

Google Analytics may use cookies or comparable technologies to distinguish between users and sessions. Processing takes place only with your prior consent pursuant to Art. 6(1)(a) GDPR.

In connection with the use of Google Analytics, data may also be processed outside the European Economic Area. The requirements of Art. 44 et seq. GDPR apply to such data transfers.

Further information can be found in Google's Privacy Policy and the privacy information relating to Google Analytics.

d) Google Ads Conversion Tracking

We use Google Ads and the associated conversion tracking provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Conversion tracking enables us to determine whether users perform certain actions on our website after clicking on an advertisement placed by us, for example completing a purchase.

In this context, online identifiers and cookie IDs, browser and device information, information about pages viewed, as well as information about interactions and conversion events, may be processed.

Google Ads Conversion Tracking is activated only with your prior consent. The legal basis is Art. 6(1)(a) GDPR.

In connection with the use of Google services, data may also be processed outside the European Economic Area. The requirements of Art. 44 et seq. GDPR apply to such data transfers.

e) Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used for the technical management and control of tags and services used on our website. In particular, analytics and marketing services can be integrated and managed via Google Tag Manager.

Google Tag Manager itself is not used to create its own user profiles. Analytics or marketing services requiring consent that are integrated via Google Tag Manager are only activated after you have provided the corresponding consent.

Further information can be found in Google's Privacy Policy.

10. Cookie Consent Management

We use a consent management system to manage your choices regarding cookies and similar technologies requiring consent and to document the consent you have granted or refused.

In this context, information about your consent decision, the time of the decision and technical information may in particular be processed.

The processing is carried out in order to comply with our statutory verification and documentation obligations pursuant to Art. 6(1)(c) GDPR.

11. Your Rights as a Data Subject

Under the GDPR, you have in particular the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)

Information on the Right to Object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right, pursuant to Art. 21 GDPR, to object at any time to such processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes.

You also have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR.

The supervisory authority responsible for us is in particular:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria

Without prejudice to any other administrative or judicial remedy, pursuant to Art. 77 GDPR you have in particular the right to lodge a complaint with a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

12. Storage Period

Personal data is generally stored only for as long as is necessary for the respective processing purpose.

Data relating to orders, invoices and business transactions is additionally stored in accordance with statutory tax and commercial law retention obligations. Under Austrian law, the retention period for corresponding books, records and documents is generally seven years; longer retention periods may apply, in particular where proceedings are pending.

Data processed exclusively on the basis of your consent is generally processed until you withdraw your consent or until the respective processing purpose ceases to apply, unless another legal basis permits or requires further storage.

13. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy in order to adapt it to changes in legal requirements or technical developments.
The current version published on this website applies.

Last updated: September 2026