Privacy Policy

The Wiener Konzerthausgesellschaft, Lothringerstraße 20, 1030 Vienna, ZVR number: 748441625, donation registration number: KK-3282, email: datenschutz@konzerthaus.at, telephone: +43 1 242002, fax: +43 1 24200-110, ("Wiener Konzerthaus," "we," "us") considers it important to adequately protect your personal data. We therefore comply with the applicable legal provisions, in particular the General Data Protection Regulation (GDPR) and the applicable Data Protection Act in its current version (DSG) on the protection, lawful handling, and confidentiality of personal data, as well as on data security. The privacy policy explains the collection, use, processing, scope, duration, and purposes of the use of your personal data by us in the context of our service provision and our offers—including when using the website www.konzerthaus.at ("website").

1. What is personal data?

Personal data is information about data subjects (in this specific case, customers, members, donors, interested parties, newsletter subscribers, cooperation partners) whose identity is determined or at least determinable (e.g., name, email address, or IP address).

2. What personal data do we collect from you?

Master data: We process the personal information that you voluntarily provide when you actively contact us or that is necessary for registration on our website (academic degree, name, address, date of birth, preferred language, user name, password, email address, and telephone numbers). In the case of legal entities, master data is processed in accordance with data protection law if it can be traced back to a natural person (e.g., name, telephone number, email address of a contact person). In addition to master data, the content of correspondence is also processed.

Order and booking data:  In addition to master data, we collect data relating to the subject matter of the contract (e.g., event, seat information), bank and credit card details, club memberships with third-party providers where applicable, data for the use of special offers (e.g., offers for students, senior citizens), and health data (e.g., wheelchair space, discounts for people with disabilities). .

Member and donor data: In addition to master data, we record the type and duration of your membership and, if applicable, the stated purpose of your donation (e.g., earmarked donation) and your bank and credit card details. 

Technical data:  We collect your device's IP address, the Internet browser you are using, your browser language, your operating system, the files requested on our website, your Java settings, screen resolution, color depth, your clicking behavior on the website (time of access, clicks), and the website from which you are visiting us (referrer URL). Cookies that are not technically necessary for the operation of our website are, of course, only set if you have accepted them via our cookie banner.

Portraits and other photos: We also process photos of individuals that were taken with the consent of the persons concerned for the purposes described in section 4.

Applicant data: When you send us your application, the information you provide on the form and in your application documents will be stored for the purpose of processing your application. If the application process is successful, your data will be stored for as long as there are legal retention obligations (up to a maximum of 7 months in accordance with Art. 6 (1) (f) GDPR in conjunction with the Equal Treatment Act). If the application was not successful, your data will be deleted immediately, unless you have expressly consented to the data being retained. This consent can be revoked at any time with effect for the future.

3. How do we collect your data?

We collect data automatically when you visit our website. Otherwise, we only collect data based on your entries on our website (this applies in particular to the aforementioned master data, order data, and booking data) or other disclosures on your part (e.g., in the context of correspondence, a telephone call, or a visit to our Ticket & service center, or when filling out forms). For individual tickets, subscriptions, memberships, items, and vouchers ordered as gifts for a third party, we collect the recipient's data based on the information provided by the gift giver. To send information material to a third party, we collect their data based on the information provided by the person initiating the mailing.

4. What do we use your data for?

We process the personal data listed under point 2 for the following purposes and on the basis of the legal grounds listed:

Contract fulfillment and implementation of pre-contractual measures in accordance with Art. 6 (1) (b) GDPR: The master data is processed for the purpose of providing an online account. Master data, order and booking data, and data from members and donors are processed for the purposes of contract fulfillment and processing, customer service, advice and information, maintenance of any membership, and administration of master and contract data and any changes thereto. In addition, member data is included in a membership directory in accordance with the statutes of the Wiener Konzerthausgesellschaft, patron and donor data is published in all evening programs and on the website upon request, and donor data is also entered on a roll of honor in the Wiener Konzerthaus in accordance with the statutes. nbsp;
The establishment and fulfillment of the contract are only possible on the basis of this data processing. If the customer does not provide the necessary data, no contract can be established.

Compliance with legal obligations pursuant to Art. 6 (1) (c) GDPR: The personal data referred to in point 2 is also processed for the purpose of complying with association, foundation, and tax law requirements. In addition, the health data provided when ordering tickets is used to fulfill the equal treatment obligations under the Equal Treatment Act.

Legitimate interests of the Wiener Konzerthaus or a third party pursuant to Art. 6 (1) (f) GDPR: The data of members and donors is used for direct contact in the context of raising funds (e.g., through donations, bequests, inheritances, and sponsorship) necessary for the fulfillment of the statutory purposes. In addition, all data listed under point 2 is used for the purposes of internal market research, statistical analysis, direct mail advertising, and obtaining credit information that is essential for the provision of services.

Consent to data processing in accordance with Art. 6 (1) (a) GDPR: If none of the above legal grounds apply, such as in the case of electronic marketing pursuant to § 174 TKG (Telecommunications Act), we will obtain separate consent for data processing. The Wiener Konzerthaus requires, in particular, voluntary consent that can be revoked at any time for electronic and telephone contact for marketing purposes. Consent can be revoked at any time free of charge and with effect for the future (e.g., via the unsubscribe link in the email newsletter or by contacting us by email at ticket@konzerthaus.at). When purchasing tickets for events organized by the Wiener Konzerthausgesellschaft in cooperation with partners, customers can also consent to receiving direct marketing information by email from these partners. nbsp;
We use images of individuals for the documentation, announcement, and promotion of Konzerthaus events and activities in both digital and print media and archive them exclusively for these purposes. The exact purposes are listed in the respective declaration of consent. The prospective recipients are the general public via various print media and via the Internet, YouTube, etc.

5. Data processing at cooperative events

For events organized by the Wiener Konzerthausgesellschaft in cooperation with the Vienna Symphony Orchestra, Klangforum Wien, Musikverein Wien Modern, or the European Forum Alpbach, personal master data, order data, and booking data will be transmitted to the cooperation partners for the purpose of fulfilling the contract. In addition, data voluntarily provided when purchasing tickets for a cooperative event (name, email address) 

• the Vienna Symphony Orchestra (Daffingerstraße 4, 1030 Vienna, telephone number: 01 589790, email: office@wienersymphoniker.at); 
• Klangforum Wien (Diehlgasse 51, 1050 Vienna, telephone number: 01 521 67, email: info@klangforum.at); 
• Musikverein Wien Modern (Lothringerstraße 20, 1030 Vienna, telephone number: 01 24200, email: office@wienmodern.at); and
• the European Forum Alpbach (Franz-Josefs-Kai 13, 1010 Vienna, telephone number: 01 7181711, email: forum@alpbach.org)

(collectively referred to as "cooperation partners") for the following direct marketing purposes: To send satisfaction surveys on service and advice, event invitations, vouchers, competitions, discount campaigns, and contact requests by post, as well as to send marketing and product information from the Wiener Konzerthaus and our cooperation partners by post, both by us and by our cooperation partners. Electronic contact for advertising purposes by our cooperation partners will only take place if you have given your separate consent in accordance with § 174 TKG (Telecommunications Act).

6. How long do we store your data?

Personal data is stored for a period of seven years after your last purchase or the end of a subscription. Beyond this period, personal data will only be stored for as long as it is necessary to assert, exercise, or defend legal claims. If you have only registered for newsletters and to receive advertising information and are not a customer of ours, we will store your data until you revoke your consent and for a maximum of three seasons after the last contact. Membership directories, portraits, and other photos relevant to association law will be stored until revoked.

7. Your rights as a data subject

You have the right to receive clear, transparent, and easily understandable information about how we process your personal data and about your rights as a data subject (Art. 13 et seq. GDPR):

Right of access pursuant to Art. 15 GDPR
You have the right to request a copy of the personal data we hold about you from the Wiener Konzerthaus (subject to certain restrictions).

Right to rectification pursuant to Art. 16 GDPR
You have the right to request that the Wiener Konzerthaus rectify your personal data if it is incorrect or no longer up to date, and/or you have the right to request that missing information be added.

Right to erasure/to be forgotten pursuant to Art. 17 GDPR
You have the right to request that the Wiener Konzerthaus delete your personal data without delay. Please note that this is not an absolute right, as there may be legal or legitimate reasons for retaining your personal data.

Right to restriction of processing pursuant to Art. 18 GDPR
You have the right to request that the Wiener Konzerthaus restrict processing if one of the conditions listed in Art. 18 GDPR applies.

Notification obligation in connection with the rectification or erasure of personal data or the restriction of processing pursuant to Art. 19 GDPR
The Wiener Konzerthaus shall communicate any rectification or erasure of personal data or restriction of processing pursuant to Art. 16, Art. 17 (1) and Art. 18, unless this proves impossible or involves disproportionate effort.

Right to data portability pursuant to Art. 20 GDPR
You have the right to receive the personal data concerning you from the Wiener Konzerthaus in a structured, commonly used, and machine-readable format, and every person has the right to transmit those data to another controller without hindrance from us. This applies exclusively to data that you have provided, where processing is based on a contract or your consent, or where processing is carried out automatically.

Right to object to direct marketing, including profiling, and to any consent given to data processing in accordance with Art. 21 et seq. GDPR
If the processing serves to protect the legitimate interests of the Wiener Konzerthaus, you have the right to object to this at any time for reasons arising from your particular situation. However, compelling legitimate grounds on the part of the Wiener Konzerthaus may prevail. In this case, the Wiener Konzerthaus may continue to process your data. 
In addition, you have the right to object to the processing of your data at any time if the processing is for the purpose of direct marketing.

Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR
You also have the right to lodge a complaint with the data protection authority if you believe that the processing of your personal data violates the GDPR or the DSG. The competent data protection supervisory authority is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.

9. Cookies, Social Media und Google 

Our website uses cookies. These are small text files that are temporarily stored on your computer and saved by your browser. Cookies enable the website to store important data. This makes your use of the website more convenient. Like most websites, we use cookies for a variety of purposes to improve the use of our website, provided you have given your consent. If you do not give your consent, we only collect anonymous data, e.g. to determine the total number of visitors to our website. We also use social plugins on our website.

a. Shopping cart cookies

Cookies are used to register the items you have reserved in your shopping cart across pages. This allows you to continue browsing the website freely without losing any data. The cookies set are not stored permanently on your computer, but are deleted when you close your browser.

b. Use of social plugins

Our website uses social plugins (plugins) from various social networks such as Facebook, Twitter, Instagram, and YouTube.

Use of Facebook 
Plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA, are integrated into our website. You can recognize the Facebook plugins by the Facebook logo (white "f" on a blue tile) or the terms "recommend on Facebook" on our website. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins. 
When you visit our websites, the plugin establishes a direct connection between your browser and the Facebook server. This tells Facebook that you have visited our website with your IP address. If you click on the Facebook button while you are logged into your Facebook account, you can link the content of our websites to your Facebook profile. This allows Facebook to associate your visit to our website with your user account. Please note that we have no knowledge of the content of the data transmitted or how it is used by Facebook. For more information, please see Facebook's privacy policy at https://www.facebook.com/policy.php. 
If you do not want Facebook to associate your visit to our website with your Facebook user account, please log out of your Facebook user account before visiting our website.

Use of Instagram
On our website, we use plugins from the social network Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA. The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera." An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges.
When you visit our website, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted directly from Instagram to your browser and integrated into the website. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. 
If you are logged into Instagram, Instagram can immediately associate your visit to our website with your Instagram account. If you interact with the plugin, e.g. by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there. nbsp;
For the purpose and scope of data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and setting options for protecting your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388. 

Use of YouTube
We have also integrated YouTube plugins into our website, which redirect you to the Vienna Concert Hall channel at www.youtube.com when you click on the plugin button.& nbsp;
When you click on the YouTube button, YouTube cookies are stored on your computer and data is transferred to Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, as the operator of YouTube. The following personal data is transferred to Google, Inc.: IP address and cookie ID, the specific address of the page accessed on our website, browser language settings, system date and time of access, and your browser ID. The data is transferred regardless of whether you are registered with Google and logged in. If you are logged in, this data is directly associated with your account. If you do not want this data to be associated with your profile, you must log out before activating the button. YouTube or Google, Inc. stores this data as usage profiles and uses it for advertising, market research, and/or the needs-based design of its websites. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google, Inc. as the operator of YouTube to exercise this right. Further information on the purpose and scope of data collection and its processing by Google, Inc. can be found at http://www.google.at/intl/de/policies/privacy/. We do not process the personal data collected when you access the YouTube video.

c. Facebook Custom Audience 

As joint controllers, we also use Facebook's "Custom Audience" technology, a service provided by Facebook Ireland Limited Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland. The data collected through the integration of cookies, web beacons, or similar third-party technologies allows us to measure and design our advertising activities on Facebook more effectively and, for example, to display posts or advertisements only to visitors to our website. We only use cookies, web beacons, and similar, proven, and widely used third-party technologies to collect this data. The data collected in this way is only transmitted to Facebook in encrypted form. Any personal data of individual users is anonymized and cannot be viewed by us. Further information on this can be found in Facebook's privacy policy at https://www.facebook.com/about/privacy/. If you do not want data to be collected via "Custom Audience," you can deactivate "Custom Audience" here: https://www.facebook.com/ads/website_custom_audiences/.