Privacy Policy

As at: 21 May 2024

1. General Information

The protection of your personal data is a particular concern of ours. Your personal data are processed on the basis of statutory provisions (General Data Protection Regulation, Data Protection Act/DSG, Telecommunications Act/TKG 2021) exclusively.

To operate our website, provide our services and manage the sale of our merchandise, we process information about you, so-called personal data – also referred to as "data" below. The term "processing" refers to any handling of data, such as the collection, storage, use and erasure of personal data.

We are happy to inform you about the processing of your personal data and the claims and rights to which you are entitled under the data protection provisions in the context of this privacy policy.

This is the data controller responsible for the processing of your personal data:

Wiener Festwochen GesmbH
Lehárgasse 11/1/6
1060 Vienna
festwochen@festwochen.at
+43 1 589 22 455

If you have any complaints, questions or suggestions on the subject of data protection, please do not hesitate to contact us at any time using the contact details provided.

2. Website

2.1. Server Logs

When you visit our website, the web server collects usage data (so-called server logs). The collection of such data is necessary to technically enable the connection to our server and the use of the website. These data are also used to ward off and analyse attacks.

The following data are collected in the server logs:

• IP address of the end device from which our website is accessed;

• Recognition data of the browser and operating system used;

• Date, time and duration of access;

• Name of the files or information retrieved;

• Amount of data transferred;

• A message whether the query was successful;

• The Internet addresses of the websites via which our website is accessed;

• The Internet addresses of the websites accessed via our website.

Legal basis: The processing of your data is based on our legitimate interest in ensuring the operation of the service and system security.

Recipients of the data: The data collected will not be passed on to third parties. Data may be transmitted to the law enforcement authorities in the unlikely event of a hacker attack only.

Storage period: We store your server logs for a maximum of three months.

2.2. Cookies

Cookies are small text files stored on your end device when you visit a website. When you visit our website, we set cookies which may contain various pieces of information, for example for the purpose of helping you use the website without technical issues or of recognising you again as a visitor when you return to the website.

Technically necessary cookies

The following technically necessary cookies will be stored on your device:

Legal basis: The processing of your data is based on our legitimate interest in offering a technically flawless website.

Recipient of the data: The data will not be transferred to third parties.

Further information: You may opt to generally deactivate the use of cookies in your browser settings. You may also delete cookies which have already been set and specify that the future use of cookies requires your consent.

To prevent third-party cookies from being set, you can block third-party cookies in your browser. Instructions for the most common browsers are found below:

Firefox: Click here

Chrome: Click here

Internet Explorer: Click here

Safari: Third-party cookies are blocked by default in Apple's Safari.

Statistics cookies

Statistics cookies collect information about the use of our website in order to improve its attractiveness, content and functionality. You will find the specific cookies used in the tools which make it possible for your data to be analysed.

The following statistics cookie is stored on your device:

Preference cookies

Preference cookies allow our website to remember information which affects the way our website behaves or looks.

The following preference cookie is stored on your device:

Marketing cookies

Marketing cookies are used by external advertising companies to collect information about the websites visited by users. You will find the specific cookies used in the tools which make it possible for your data to be analysed.

2.3. Web analysis using Matomo

We use the Matomo web analysis service to analyse user behaviour and to optimise our website. When you visit our website, the web server will collect usage data, so-called server logs. These data are analysed so that the number of visitors to the website and their user behaviour can be evaluated. This allows user statistics to be compiled which enable the website to be optimally customised to the interests of visitors.

Matomo collects the following server logs for web analysis:

• IP address of the end device from which our website is accessed;

• Recognition data of the browser and operating system used;

• Date, time and duration of access;

• Name of the files or information retrieved;

• Amount of data transferred;

• A message whether the query was successful;

• The Internet address of the websites via which our website is accessed;

• The Internet address of the websites accessed via our website.

Matomo also uses so-called tracking pixels. These are small image files that make it possible to analyse your user behaviour on our website.

Legal basis: Your data are processed on the basis of your consent in the cookie banner on our website. You may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Recipient of the data: No data is transferred to third parties. We analyse the collected data ourselves exclusively.

Storage period: We store your data for a maximum of 6 months.

Further information: Further information can be found in Matomo's privacy policy.

2.4. Meta Pixel

We use the web analytics service Meta Pixel to analyse user behaviour on our website and in connection with our Facebook advertising campaigns. When you visit our website, use our services or respond to our adverts, cookies will be used to collect and store data.

This allows us to track user action on our website after seeing and responding to our Facebook ad. With the help of meta pixels, we can obtain a statistical analysis of the effectiveness of our Facebook ads and we can track whether users have visited our website after clicking on a Facebook ad. Moreover, we can show our advertising campaign to interested people only, i.e. we can better identify the target group for the adverts.

Meta acts as a contract processor for us; they may only use the data transmitted to process the specific orders and they are under a contractual obligation vis-à-vis us to comply with the statutory data protection provisions.

Legal basis: Your data are processed on the basis of your consent in the cookie banner on our website. You may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Recipient of the data: Due to the use of Meta Pixel from Meta Platforms Ireland Ltd ("Meta"), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, data are transferred to Meta. As Meta's headquarters are located in the USA, data may be transferred to the USA. The appropriate level of protection for the transfer of data to the USA results from Meta's certification in the EU-U.S. Data Privacy Framework.

Further information: For more information, please refer to Meta's Cookie Policy and Meta's Data Policy.

Meta stores the following cookies on your device:

2.5. Social media plugins

We use so-called "social media plugins" on our website. Such plugins may be used to display content or interaction elements from social media services. When you visit our website, which displays the related icons, your browser will connect to the server of the respective social media operator. Data may then be transmitted to the social media operators via the plugins and used by these operators.

The direct connection between your browser and the server of the social media provider always requires your consent to the transmission of the data.

2.5.1. Youtube

Our website contains plugins from the YouTube service, which can be recognised by the YouTube logo. This plugin enables you to use YouTube content or interaction elements, e.g. to play a video. Please note that, if you consent, your data will be transmitted before you use the interaction elements.

Legal basis: Your data are processed on the basis of your consent in the cookie banner on our website. You may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Recipient of the data: Due to the use of the plugin of the YouTube service of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland, data are transferred to Google. As Google is headquartered in the USA, data may be transferred to the USA. The appropriate level of protection for the transfer of data to the USA results from Google's certification in the EU-U.S. Data Privacy Framework.

Further information: Further information can be found in the YouTube privacy policy.

Google stores the following cookies on your device:

2.5.2. Spotify

Our website contains plugins from the Spotify service. This plugin enables you to use Spotify content or interaction elements, e.g. to play a song or a podcast. Please note that, if you consent, your data will be transmitted before you use the interaction elements.

Legal basis: Your data are processed on the basis of your consent in the cookie banner on our website. You may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Recipient of the data: Due to the use of the plugin of the Spotify service from Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden, data is transferred to Spotify AB.

Further information: Further information can be found in Spotify's privacy policy.

Spotify stores the following cookies on your device:

3. Marketing

3.1. Newsletter

If you have registered for our newsletter, we are allowed to send you regular information about us and our range of services by email. We use the provider CleverReach, which acts as a contract processor for us, to create and process the dispatch of newsletters.

If you no longer wish to be contacted, you can unsubscribe using the unsubscribe link in the newsletter or communicate your wish to unsubscribe at service@festwochen.at.

Legal basis: Your data are processed on the basis of your consent, which may be withdrawd at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Recipient of the data: Due to the use of the CleverReach newsletter service from Cleverreach GmbH & Co KG, Mühlenstraße 43, 26180 Rastede, Germany, data are transferred to Cleverreach GmbH & Co KG.

Storage period: We store your data until you withdraw your consent or unsubscribe from the newsletter.

3.2. Events

As part of our marketing activities, we process data you provide in order to organise events and guarantee that they run smoothly. An event is defined as any type of event, meeting, lecture, participatory event, get-together or workshop.

Legal basis: Your data are processed on the basis of our legitimate interest in marketing our business operations or in fulfilling a contractual obligation.

Recipients of the data: If the transfer of your data as are relevant in the respective individual case is necessary for the performance of a contract or on a legal basis, such transfer will be directed to the following categories of recipients:

• Landlords of event locations

• Banks

• Legal counsels

• Public accountants, auditors and tax consultants

• Courts

• Competent administrative authorities

• Contracting and business partners

• Insurers

Storage period: We will only process your data for as long as is necessary for the performance of a contract or based on legal obligations (such as retention obligations under tax and company law). Normally, we store data for 6 months.

Further information: Please note that we may take photographs and produce video recordings during events for documentation and media coverage purposes (e.g. in journals, magazines, publications or on websites and social media platforms).

The images are processed on the basis of our legitimate interest in documenting and presenting our activities. When images are published, we take care to ensure that no legitimate interests of the persons depicted are infringed.

3.3. Google Ads conversion tracker

We use the online advertising programme "Google Ads" from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, to place ads in the Google advertising network so that they are displayed to users who are presumed to be interested in the ads. As part of Google Ads, we use what is known as conversion tracking. When you click on an advert placed by Google, a cookie is set for conversion tracking. However, we will only receive the total number of users who have clicked on an advert and no information as could be used to identify users.

Legal basis: Your data are processed on the basis of your consent in the cookie banner on our website. You may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Recipient of the data: Due to the use of the Google Ads conversion tracking service of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland, data are transferred to Google. As Google is headquartered in the USA, data may be transferred to the USA. The appropriate level of protection for the transfer of data to the USA results from Google's certification in the EU-U.S. Data Privacy Framework.

Further information: You can find more information on this in Google's privacy policy.

Google stores the following cookies on your device:

4. Business operations

4.1. Contact

If you contact us, e.g. by e-mail or telephone, we will process your data to the extent necessary to manage the enquiry and any transaction resulting from it.

Legal basis: Your data are processed for the purpose of pre-contractual measures or the performance of a contract. If you are not in a (pre-contractual) contractual relationship with us or your request is not aimed at entering into a contract, processing is based on our legitimate interest in responding to the enquiry.

Recipients of the data: These data will only be transmitted to third parties if transmission is necessary for responding to the enquiry.

Storage period: We will process your data for as long as this is necessary to process the enquiry and will delete your enquiry after processing has been completed, provided that there are no statutory retention obligations for the performance of a contract.

4.2. Contact via the Contact Form

On our website, you have the option of entering your details and your specific enquiry so that you can be contacted by one of our employees. We will process your data to the extent necessary to manage the enquiry and any transaction resulting from it.

Legal basis: Your data are processed for the purpose of pre-contractual measures or the performance of a contract. If you are not in a (pre-contractual) contractual relationship with us or your request is not aimed at entering into a contract, processing is based on our legitimate interest in responding to the enquiry.

Recipients of the data: These data will only be transmitted to third parties if transmission is necessary for responding to the enquiry.

Storage period: We will process your data for as long as this is necessary to process the enquiry and will delete your enquiry after processing has been completed, provided that there are no statutory retention obligations for the performance of a contract.

4.3. Orders

When you place an order with us, we will process your data for the purpose of managing the order and any correspondence relating to the order.

Legal basis: The processing of your data is based on the performance of a contract.

Recipients of the data: If the transfer of your data as are relevant in the respective individual case is necessary for the performance of a contract or on a legal basis, such transfer will be directed to the following categories of recipients:

• Transport companies

• Suppliers

• Banks

• Legal counsels

• Public accountants, auditors and tax consultants

• Courts

• Competent administrative authorities

• Contracting and business partner
  
• Insurers

Storage period: We will only process your data for as long as is necessary for the performance of a contract or based on legal obligations (such as retention obligations under tax and company law). Normally, we store data for seven years.

4.4. Events

As part of our business operations, we will process your data when you participate in one of our events in order to organise the event and guarantee that it runs smoothly. Concerts, exhibitions, performances, seminars, lectures, courses, seminars, workshops or training courses, as well as events, keynotes, regulars' tables or business circles, among other things, are referred to as events.

Legal basis: Your data are processed for the purpose of pre-contractual measures or the performance of a contract. If you are not in a (pre-contractual) contractual relationship with us or your request is not aimed at entering into a contract, processing is based on our legitimate interest in responding to the enquiry.

Recipients of the data: If the transfer of your data as are relevant in the respective individual case is necessary for the performance of a contract or on a legal basis, such transfer will be directed to the following categories of recipients:

• Landlords of event locations

• Banks

• Legal counsels

• Public accountants, auditors and tax consultants

• Courts

• Competent administrative authorities

• Contracting and business partners

• Insurers

Storage period: We will only process your data for as long as is necessary for the performance of a contract or based on legal obligations (such as retention obligations under tax and company law). Normally, we store data for seven years.

Further information: Further information: Please note that we may take photographs and produce video recordings during events for documentation and media coverage purposes (e.g. in journals, magazines, publications or on websites and social media platforms).

The images are processed on the basis of our legitimate interest in documenting and presenting our activities. When images are published, we take care to ensure that no legitimate interests of the persons depicted are infringed.

4.5. Customer support

We will process your data for the purpose of support to you through the helpdesk, which includes responding to enquiries as part of the business relationship. Correspondence with you is stored and archived in order to constantly improve our quality.

Legal basis: The processing of your data is based on the performance of a contract.

Recipients of the data: These data are not transferred to third parties. In the event that such a transfer becomes necessary, your specific consent would be required.

Storage period: We only process your data for as long as is necessary for the fulfilment of the contract or due to legal obligations (such as retention obligations under tax and company law). As a rule, we store data for seven years.

4.6. Customer Management - Customer Relationship Management

We always endeavour to maintain an excellent business relationship with our customers. Therefore, we will process your data within our customer relationship management system to ensure quality and improve our customer relationships. To this end, we document customer and contract data, complaints and your correspondence with our employees. We use the programme #Diese from IT4Culture for our customer management.

Legal basis: The processing of your data is based on our legitimate interest in improving customer-specific communication with you.

Recipient of the data: By using #DIESE software from IT4Culture, 11 rue Duvergier, 75019 Pairs, data is transferred to IT4Culture.

Storage period: We will store your data until the end of the fifth year after the last contact with you.

4.7. Bookkeeping and Accounting

We process data relating to business relationships with customers or suppliers as part of our financial accounting and bookkeeping. This includes data for budgeting and cost accounting.

Legal basis: The processing of your data is based on the fulfilment of a statutory obligation.

Recipients of the data: If the transfer of your data as are relevant in the respective individual case is necessary for the performance of a contract or on a legal basis, such transfer will be directed to the following categories of recipients:

• Landlords of event locations

• Banks

• Legal counsels

• Public accountants, auditors and tax consultants

• Courts

• Competent administrative authorities

• Contracting and business partners

• Insurers

Storage period: We will only process your data for as long as is necessary for the performance of a contract or based on legal obligations (such as retention obligations under tax and company law). Normally, we store data for seven years.

4.8. Job Application Management

If you apply for a job with us, we will process the data you provide as part of the application management process. This includes, for example:

• Management of your application for a specific position or other positions vacant;

• Management of your applicant profile;

• Based on the information provided, additional research on your person, such as retrieving your LinkedIn profile;

• Contact with you using the contact details you have provided for the purpose of sending announcements, requests for additional information or appointments;

• Organisation and management of the job interview and the assessment centre, if any;

• Carrying out statistical analyses and preparing reports on our recruitment activities.

Legal basis: Your data are processed for the purpose of pre-contractual measures following your application. If you have consented to us using your data for positions other than the one specifically advertised and keeping your data on file, your data will be processed on the basis of your consent, which you may withdraw at any time.

Recipient of the data: These data will not be transferred to third parties.

Storage period: We will only process your data for as long as is necessary for the job application process or for the defence of legal entitlements. If you do not enter into an employment contract with us, your data will be erased seven months after your application has been rejected. If you are included in our applicant pool, we will store your data for up to three years or until you withdraw your consent, whichever comes first.

Further information: We do not require you to provide sensitive or special data such as gender, religion, sexual orientation or political views during the application process. However, the documents you upload may contain special categories of data. This is not within our control. If you thus provide special categories of data in your documents, you do so on your own initiative and you consent to our processing of these special categories of personal data within the scope of this privacy policy.

5. Your Rights as a Data Subject:

In respect of your personal data, your rights vis-à-vis us are stated below. To exercise these rights, please send a letter stating your specific request to festwochen@festwochen.at.

5.1. Right to information: You may request confirmation as to whether we are processing your personal data at any time. If this is the case, you also have the right to receive information about these data and related information.

5.2. Right to rectification: If we have stored your personal data incorrectly or incompletely, you may request the correction of these data at any time.

5.3. Right to erasure: You may request the erasure of your personal data if one of the reasons listed in Art. 17 GDPR applies.

5.4. Right to restriction of processing: You may request restriction of processing your personal data if one of the reasons listed in Art. 18 GDPR applies.

5.5. Right to data portability: You may request the transfer of your personal data in a structured, commonly used and machine-readable format and have the right to transfer these data to another controller without us impeding you if one of the reasons listed in Art. 20 GDPR applies.

5.6. Right to object: If our processing of your personal data is based on Article 6(1)(e) GDPR (public interest or exercise of official authority) or Article 6(1)(f) GDPR (legitimate interest), you may object to the processing.

5.7. Right to withdraw consent: You may withdraw your consent to the processing of your data at any time. However, this will not affect the lawfulness of the processing of your personal data until you withdraw your consent.

5.8. Right to lodge a complaint with the Data Protection Authority: If you believe that our processing of your personal data violates data protection law, you have the right to lodge a complaint with the Austrian Data Protection Authority at the following address:

Austrian Data Protection Authority
(Österreichische Datenschutzbehörde)
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at