Data protection
Data protection provisions
The protection of your personal data is of special importance to us. We exclusively process your data on the basis of the statutory provisions (GDPR, TKG 2003).
In this data protection information we inform you about the most important aspects of the data processing within the scope of our website.
1. Order of information material
The data entered by you within the scope of the order of information material relating to the Festival are exclusively used for the purpose of sending the requested information by post. The collected data can be seen in the input mask within the scope of the registration. Your name along with postal address and, if applicable, your corporate name or your title are required. The data provided by you is necessary in order to be able to send you the requested information. Sending of the information is not possible without this data. The collected data will not be sold or forwarded to uninvolved third parties without justification. The data processing is therefore carried out exclusively on the basis of the statutory provisions of Section 96 Para. 3 TKG or of Art 6 Para. 1 lit a GDPR (consent). The data will be processed and stored until revocation of the consent.
2. Order Festival pass
The data collected over the course of the order of the Festival pass are the first and last name, as well as your credit card or account information if you pay by credit card or Bancomat card. Upon request we will also send the Festival pass by post and/or we will issue an invoice. In this case we additionally require your postal address. The data provided by you is necessary for fulfilment of the contract respectively for the execution of pre-contractual measures. Without this data we cannot conclude the contract with you. Data will not be transmitted to third parties, with the exception of the transmission of the card information to our card system providers Wirecard (Wirecard Central Eastern Europe GmbH, Reininghausstraße 13a, 8020 Graz) respectively card complete (card complete Service Bank AG, Lassallestraße 3, 1020 Vienna) for the technical processing of electronic payment transactions. You can find information pertaining to the data protection of these partner companies under https://www.wirecard.at/datenschutz/ respectively https://www.cardcomplete.com/datenschutz/.
The data processing is carried out on the basis of the statutory provisions of Art 6 Para. 1 lit b GDPR (fulfilment of contract or pre-contractual measures).
The personal data shall be stored for the period of the business relationship and additionally in line with the statutory storage deadlines.
With the purchase of the Festival pass via our website, you will be forwarded to the webshop of oeticket (CTS Eventim Austria GmbH, Mariahilferstraße 41-43, 1060 Vienna). We do not receive any personal data from oeticket, unless you choose a deposit of the tickets at the evening box office or in the visitor* and press centre over the course of the order of tickets. You can find more detailed information in the data protection provisions of oeticket under https://www.oeticket.com/help/data-protection.
3. Newsletter
You have the possibility to subscribe to our newsletter via our website.
For this purpose, we will require your email address as well as your declaration that you agree with the subscription of the newsletter. As soon as you have registered for the newsletter, we will send you a confirmation by email. You can cancel the subscription of the newsletter at all times. This can be carried out via a link in the newsletters themselves or by notification to the contact possibilities stated below. If you cancel the newsletter we will erase your data immediately in connection with the newsletter despatch. We send our newsletter with the newsletter service MailChimp®, a trademark of the Rocket Science Group (The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA). We merely transfer the data collected in the form to MailChimp® for the purpose of the sending of the newsletter by us. Your data will be stored by MailChimp® so that other customers of MailChimp® or third parties do not have any access to this data. You can find further information in the privacy statement of MailChimp. The data processing is carried out on the basis of the statutory provisions of Section 96 Para. 3 TKG as well as of Art 6 Para. 1 lit a GDPR (consent).
4. Accreditation
For representatives *of the press and specialist visitors* there is the possibility to accredit themselves for the Festival. For this purpose we use the online portal Accredate, a software as a service solution of Systemantics GmbH (Hausbroicher Straße 218, 47877 Willich, Germany). You can register for this service via our homepage. For this purpose we require your email address. You will subsequently receive a confirmation mail with a link, which forwards you to the online portal of Accredate. You can find the data protection provisions of Accredate under https://www.accredate.com/de/5/. With your consent steirischer herbst festival gmbh will receive your entered data for the purpose of processing your accreditation request, in order to contact you, to issue the Festival pass as well as for sending further information pertaining to the Festival by email. You can revoke this consent at all times by email to info [at] steirischerherbst.at. The personal data will be stored for the period of the business relationship and beyond this in line with the statutory storage deadlines. The collected data will not be forwarded to uninvolved third parties without justification. The data processing shall be carried out on the basis of the statutory provisions of Art 6 Para. 1 lit a GDPR (consent) respectively Art 6 Para. 1 lit b GDPR (fulfilment of contract or pre-contractual measures).
5. Further contact
If you contact us by email, your stated data will be stored in our company for the purpose of processing the enquiry and for the event of follow-up questions. We will not forward this data to third parties without your consent.
6. Image and video recordings
Image and video recordings are created within the scope of our events. Steirischer herbst festival gmbh is the data controller responsible for the data processing within the meaning of GDPR.
We use and distribute the created image and video recordings owing to our primary legitimate interest according to Art 6 Para. 1 lit f GDPR for advertising and documentation purposes in all media of steirischer herbst festival gmbh, as well as for forwarding to reporting press and persons involved in the Festival.
You are entitled to a right to object to this processing according to Art 21 GDPR. Insofar as a reason exists for an objection that is worthy of consideration, we will not continue to use the recordings, on which you are depicted, from the time of the objection.
7. Visit to the website
We process the following personal data within the scope of your visit to our website: Date and time when the website was called, your IP address, name and version of your web browser, the website (URL), which you visited before calling our website, certain cookies (see the next point in this respect).
8. Cookies
Our website uses so-called “cookies” . These concern small text files, which are deposited on your terminal device with the help of the browser. They do not cause any damages. We use cookies in order to design our range of offers, and make it more user-friendly. Some cookies remain stored on your terminal device until you erase these. They enable us to recognise your browser again on the next visit. If you do not wish this to take place you can set your respective browser so that it informs you about the setting of cookies and you only permit this in an individual case. In case of the deactivation of cookies the functionality of our website may be limited.
9. Google Analytics
Our website uses Google Analytics, an advertising analysis service of Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA). Google Analytics uses so-called “cookies”, text files, which are stored on your computer and enable an analysis of the use of our website. The information generated by the “cookie” regarding your use of this website will, as a rule, be transferred to a server of Google in the USA and stored there. The data processing shall be carried out on the basis of the statutory provisions of Art 6 Para. 1 lit f of the GDPR. Our interest within the meaning of the GDPR is to improve our web presence. As the privacy of the users is important to us we have activated the IP anonymization function. This way your IP address is abridged by Google within member states of the European Union or in other contracting states, of the Treaty on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transferred to a server of Google in the USA and abridged there. By order of the operator of this website Google will use this information in order to evaluate your use of the website, in order to compile reports on the website activities and to provide further services associated with the website use and the internet use towards the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be aggregated with other data of Google.
You can prevent the storage of the “cookies” by a corresponding setting of your browser software. You can additionally prevent the entry of the data generated by the “cookie” and which refer to your use of the website (incl. your IP address) and transfer to Google as well as the processing of these data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=at.
10. Integration of third party service providers
We operate fan pages on Facebook, Twitter and Instagram in order to announce our range of offers to a broad public. The legal basis for the use of third party service providers is Art. 6 Para. 1 Sentence 1 lit f GDPR. If you visit our site and click on the field “Facebook”, “Twitter” or “Instagram” you will be forwarded by link to the respective website. We would like to point out that we as the provider of the site receive no knowledge of the content of the transmitted data as well as their use by Facebook, Twitter and Instagram. These third party service providers are responsible themselves for the handling of the data of their users conform to data protection. You can find information in this respect under the following links:
Facebook (Facebook Inc., 1601 South California Avenue, Palo Alto CA 94304, USA)
Privacy statement: https://de-de.facebook.com/policy.php
Information regarding the design of your personal data protection settings: https://www.facebook.com/help/568137493302217
Twitter (Twitter Inc. 1355 Market St, Suite 900, San Francisco CA 94103, USA)
Privacy statement: http://twitter.com/privacy.
Instagram (Instagram LLC, 1601 Willow Road, Menlo Park CA, 94025, USA).
Privacy statement: https://www.facebook.com/help/instagram/155833707900388
11. Facebook-Pixel
Our website uses the Facebook Pixel Service of Facebook (Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA). The legal basis for the use of Facebook Pixel is Art. 6 Para. 1 Sentence 1 lit. f) GDPR. This enables us to track the actions of users after they were forwarded by clicking a Facebook advertisement to a provider website. This way it is possible to read out the effectiveness of the Facebook advertisements for statistical purposes, and for the purpose of market research and can contribute to optimising future advertising measures. The collected data will remain anonymous for us. This means we cannot view the personal data of the individual users. However, the data will be stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for own advertising purposes, in line with the Facebook data use guidelines (https://www.facebook.com/about/privacy/). Facebook Pixel allows Facebook and partners of Facebook to also display advertising to you within and outside of Facebook. In addition a cookie will be stored on your computer for these purposes. Under https://www.facebook.com/ads/preferences/ you can revoke your consent to the use of this service.
12. Recipients
Depending on the purpose of the processing we shall forward data to contract data processors commissioned by us if this is necessary in order to fulfil the respective task. With the selection of our contract data processors we pay attention to the compliance with the provisions under data protection law and we have reached agreements with the contract data processors which ensure that the personal data are processed confidentially and carefully.
None of the collected data will be sold or forwarded to uninvolved third parties without justification.
13. Data security and confidentiality
Data security is of a major concern to us. Steirischer herbst festival gmbh has taken all necessary technical and organisational measures in order to guarantee the security of the data processing and to process the personal data to the extent that they are protected against accesses by unauthorised third parties. The IT infrastructure complies with the common security requirements and is checked regularly.
We only forward data to contract data processors commissioned by us, (among others IT service providers), we pay attention with the selection of our contract data processors to the compliance with the provisions under data protection law and have reached agreements, which ensure that the personal data are processed confidentially and carefully.
All employees of steirischer herbst festival gmbh were subjected to the confidentiality regarding the information entrusted in their case or announced to them within the scope of their activity.
14. Your rights
You are principally entitled to the rights to information, rectification, erasure, limitation, data portability, revocation and to object. If you believe that the processing of your data breaches the data protection law, or your claims under data protection law have otherwise been infringed in a manner you can lodge a complaint at the supervisory authority. This is the data protection authority in Austria.
You can contact us under the following contact data:
steirischer herbst festival gmbh
Sackstraße 17, 8010 Graz, Austria
t +43 316 823 007, f +43 316 823 007 77
info [at] steirischerherbst.at
www.steirischerherbst.at
By the continued further development of our internet offer and/or the legal development it may be necessary for us to occasionally make adjustments in our privacy statement. Therefore, please pay attention to the respective current version of our data protection provisions.
Status: September 2019