Privacy Policy

At Glocal Austria, we are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal data. This Privacy Policy explains our practices in accordance with the EU General Data Protection Regulation (GDPR) and Austrian data protection laws.

Last Updated: January 2026

1. Who We Are

Glocal Austria operates as an intermediary travel platform connecting international travelers with verified local service providers across Austria. We facilitate bookings for car rentals, eSIM cards, travel insurance, flights, and hotel accommodations.

Data Controller:
Glocal Austria Travel Services
Mariahilfer Strasse 45/3
1060 Wien, Austria
Email: [email protected]

2. Information We Collect

2.1 Information You Provide

When you use our platform to request quotes, make bookings, or contact us, we may collect:

• Personal identifiers: Name, email address, phone number, billing address
• Travel details: Destination preferences, travel dates, pickup and drop-off locations for car rentals
• Payment information: Credit card details (processed securely by our payment partners), billing address
• Communication data: Messages you send through our contact forms, chat systems, or email
• Account information: Username, password (encrypted), booking history if you create an account

2.2 Information Collected Automatically

When you visit glocalaustria.com, we automatically collect certain technical information:

• Device and browser data: IP address, browser type, operating system, device identifiers
• Usage data: Pages viewed, time spent on pages, click patterns, referring URLs
• Location data: Approximate geographic location based on IP address
• Cookies and tracking technologies: See our Cookie Policy for details

2.3 Information from Third Parties

We may receive information from our partner service providers, including:

• Booking confirmation details from car rental companies, hotels, and airlines
• Customer service interaction records from our partners
• Fraud prevention data from payment processors

3. How We Use Your Information

3.1 Service Provision

We use your personal data to:

• Process and facilitate your bookings with local service providers
• Send booking confirmations, receipts, and vouchers
• Communicate important updates about your reservations
• Provide customer support and respond to your inquiries
• Display personalized search results and recommendations

3.2 Legal Basis for Processing

We process your personal data based on:

• Contract performance: To fulfill our obligations when you book through our platform
• Legitimate interests: To improve our services, prevent fraud, and maintain platform security
• Legal compliance: To meet tax, accounting, and regulatory requirements
• Consent: For marketing communications and non-essential cookies (you can withdraw consent anytime)

3.3 Marketing and Communications

With your explicit consent, we may:

• Send promotional emails about special offers, new services, and travel tips
• Display personalized advertisements on third-party platforms
• Contact you with surveys or feedback requests

You can opt out of marketing communications at any time using the unsubscribe link in emails or by contacting us directly.

4. How We Share Your Information

4.1 Service Providers

When you make a booking through Glocal Austria, we share necessary information with:

• Car rental companies: Name, contact details, driver's license information, pickup preferences
• Hotels and accommodations: Guest names, arrival/departure dates, special requests
• Airlines: Passenger names, passport details (if required), travel dates
• eSIM providers: Email address, phone compatibility information
• Insurance providers: Personal details required for policy issuance

Important: All service contracts are concluded directly between you and the provider. Each provider operates under their own privacy policy.

4.2 Technical Service Partners

We work with trusted third-party partners who help us operate our platform:

• Payment processors: To securely handle credit card transactions
• Hosting providers: To maintain our website infrastructure
• Analytics services: To understand user behavior and improve our platform
• Email service providers: To send booking confirmations and communications
• Customer support tools: To provide efficient assistance

These partners process data only according to our instructions and under strict confidentiality agreements.

4.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms and Conditions
• Protect against fraud, security threats, or illegal activity
• Safeguard the rights and safety of Glocal Austria, our users, or the public

4.4 Business Transfers

If Glocal Austria is involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will notify you before your information becomes subject to a different privacy policy.

5. International Data Transfers

As an Austria-based platform operating internationally, your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions recognizing equivalent data protection in the destination country
• Binding Corporate Rules for transfers within multinational companies

Our primary data centers are located within the EU, and we work exclusively with partners who comply with GDPR requirements.

6. Data Security

We implement robust technical and organizational measures to protect your personal data:

• Encryption: All data transmitted between your browser and our servers uses SSL/TLS encryption
• Access controls: Strict authentication and authorization protocols limit data access to authorized personnel only
• Regular security audits: We conduct penetration testing and vulnerability assessments
• Secure payment processing: Credit card data is processed by PCI DSS compliant payment partners
• Data minimization: We collect only the information necessary for service provision
• Employee training: Our team receives regular data protection and security awareness training

While we strive to protect your data, no internet transmission is completely secure. We encourage you to use strong passwords and keep your login credentials confidential.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Active bookings: Retained until service completion plus any applicable warranty or complaint period
• Booking history: Kept for 7 years to comply with Austrian tax and accounting regulations
• Marketing data: Retained until you withdraw consent or unsubscribe
• Technical logs: Typically deleted after 12 months unless required for security investigations
• Inactive accounts: Deleted after 3 years of inactivity (with prior notice)

When data is no longer needed, we securely delete or anonymize it according to industry best practices.

8. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

8.1 Right to Access

You can request a copy of the personal data we hold about you, including information about how we process it.

8.2 Right to Rectification

If your personal data is inaccurate or incomplete, you can request corrections or updates.

8.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there's no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Note: We may retain certain data to comply with legal obligations or establish legal claims.

8.4 Right to Restriction of Processing

You can request that we limit how we use your data in certain circumstances, such as while we verify data accuracy or assess your objection to processing.

8.5 Right to Data Portability

You can receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

8.6 Right to Object

You can object to:

• Processing based on legitimate interests
• Direct marketing (including profiling)
• Processing for scientific, historical, or statistical purposes

8.7 Right to Withdraw Consent

Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

8.8 Right to Lodge a Complaint

If you believe we've violated data protection laws, you can file a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):

Barichgasse 40-42
1030 Wien, Austria
Phone: +43 1 52 152-0
Email: [email protected]
Website: www.dsb.gv.at

8.9 Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with "Data Subject Rights Request" in the subject line. We will respond within 30 days. For security purposes, we may need to verify your identity before processing your request.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyze site traffic, and personalize content. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Third-Party Links and Services

Our website contains links to third-party websites and integrates services from external partners (e.g., booking widgets, payment processors, social media plugins). These third parties operate under their own privacy policies, which we do not control.

When you click through to a service provider's website or interact with a third-party widget, you are subject to that provider's privacy practices. We encourage you to review their privacy policies before sharing personal information.

11. Children's Privacy

Glocal Austria's services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we've inadvertently collected information from a child under 16, we will take steps to delete it promptly.

Parents or guardians who believe their child has provided us with personal information should contact us immediately.

12. Automated Decision-Making and Profiling

We may use automated systems to:

• Personalize search results and display relevant offers based on your browsing behavior
• Detect and prevent fraudulent transactions
• Improve platform performance and user experience

These automated processes do not result in legal or similarly significant effects. You have the right to request human review of any automated decision that affects you.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email if you have an account with us
• Display a prominent notice on our website

We encourage you to review this Privacy Policy regularly. Continued use of our services after changes indicates your acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Glocal Austria Travel Services
Mariahilfer Strasse 45/3
1060 Wien, Austria
Email: [email protected]

For data protection inquiries specifically, please use the subject line "Privacy Inquiry" to ensure prompt routing to our data protection team.