Recipients. We may disclose your personal data to the following recipients for the above-mentioned purposes. • VAMED Vitality World resorts participating in the VAMED VitalityClub. A current list of participating VAMED Vitality World resorts ("VVW resorts") can be found at www.vitality- xxxxx.xxx. The processing and transfer of data to the other VAMED Vitality World resorts is necessary for the administration of participation in the VAMED VitalityClub and the customer's VitalityClub account (crediting of bonus points, redemption at another VAMED Vitality World resort, etc.). If the information is not provided, participation in the VAMED VitalityClub is not possible. • The data is processed for the purpose of providing the electronic system for the VAMED VitalityClub and for marketing purposes by hello again GmbH (Dr Xxxxxxx-Xxxxx-Xxxx 0/0, 0000 Xxxxxxxx), vendo Kommunikation + Druck GmbH (Johannes-Gutenberg-Strasse 2, 4840 Vöcklabruck), AUSTRIACARD AG (Lamezanstraße 4-8, 1230 Vienna), protel hotelsoftware GmbH (Europaplatz 8, 44269 Dortmund), xxxx.xxx Marketing OG (Xxxxxxxxx 00/Xxx 0, 0000 Xxxxxx) and Incert eTourismus GmbH & Co KG (Leonfeldner Str. 328, 4040 Linz). • In addition, data processing is carried out by reprographic companies (printing company) commissioned by VSG, software developers/IT service providers/software companies, entry system companies/entry systems, advertising agencies and voucher management systems. • If disclosure is required (i) by law or regulation or (ii) for the establishment, exercise or defence of legal claims, we may also disclose personal data to competent authorities or courts and other third parties who advise us in this context (e.g. higher-level affiliate companies, law firms). The data will not be passed on to other third parties. In general, we only store your personal data for as long as it is necessary to fulfil the purpose for which it was collected. In any case, we therefore store your data for the duration of your membership. Beyond this period, we store your personal data to fulfil statutory retention obligations (e.g. to fulfil the 7-year retention obligation under the applicable tax and company law provisions) or as long as other legitimate interests in storage exist (e.g. as evidence for the assertion, exercise or defence of claims in pending or imminent legal disputes). As soon as there are no legitimate reasons for the continued storage of personal data, it is either deleted or anonymised. As a data subject, you have...
