This privacy policy explains how Wander Vienna handles personal data when you use the website, make an inquiry, or arrange a guided architecture or photo walk. It follows the data lifecycle from collection through use, disclosure, retention, and deletion.
This introduction outlines how information is handled, what rights may apply, and where to direct policy-related questions.
We may process name, email address, phone number if provided, inquiry message, tour date and group details, and any accessibility or dietary information you choose to share. We also process limited technical data such as server request metadata and browser or device information to operate and secure the website.
We receive data when you submit a contact form, send an email, call us, or provide details during the booking process. Some technical data is generated automatically when you visit the website or use its forms.
We use cookies for essential site operation and to remember privacy preferences. We do not confirm the use of analytics cookies or marketing and advertising cookies on this website.
You can manage cookies through your browser settings and, where available, through the site’s preference controls. Essential cookies are used for basic operation, and preference cookies help remember privacy choices. Disabling essential cookies may affect site functionality.
We use personal data to answer inquiries, manage booking requests, confirm dates and group details, communicate practical information, support website security, and deliver the requested guided tour or experience. Where relevant, we also use data to handle accessibility-related information you voluntarily provide and to maintain records needed for operational or legal purposes.
We may share personal data with service providers that support website operation, communication handling, technical delivery, or similar administrative functions. These recipients are used only to the extent needed to perform their role and are expected to handle data under appropriate confidentiality and security obligations.
We may disclose personal data when required to comply with law, a lawful request, or a binding order, and when necessary to establish, exercise, or defend legal claims. We may also share data to protect website security or prevent misuse where permitted by law.
Depending on the legal basis and the context of processing, you may ask for access, correction, deletion, restriction, objection, or portability of your personal data. Where a request cannot be fully granted, we will explain the reason and the available options.
To exercise a privacy right, send a request through one of the contact channels listed in this policy and describe the data or activity concerned. We will review the request, verify it where necessary, and respond within the period required by applicable law.
We retain personal data for the period needed to handle inquiries, confirm bookings, provide the service, maintain security, resolve disputes, and meet legal or accounting requirements. When the relevant purpose ends, data is deleted, anonymized, or otherwise removed from active use according to our lifecycle review.
If we make material changes, we will update the policy text on the website and, where appropriate, use a reasonable notice method for affected users. The version in force is the one published at the time of your visit or interaction.
Where the GDPR applies, we process personal data on a lawful basis and in a manner that is limited to the stated purposes of the website, booking, communication, security, and related operational needs.
If you are in the European Economic Area, your personal data is handled under the GDPR where that law applies to our processing.
Where the GDPR applies, you may have rights to access, rectify, erase, restrict, object to, and receive a copy of your personal data, and to withdraw consent where processing relies on consent. We assess each request against the legal basis and the nature of the data involved.
