Privacy policy and cookie information

It is important to the Wiener Symphoniker , Daffingerstr. 4/DG, 1030 Wien, ZVR-Zahl: 846159385, Spenden-Registrierungsnummer: KK-3320, E-Mail: office@wienersymphoniker.at, Telefon: +43 1 589 79-0, Telefax: +43 1 58979-54, ("Wiener Symphoniker", "wir", "uns") that your personal data is adequately protected. We therefore comply with the applicable legal provisions, in particular the Datenschutzgrundverordnung ("DSGVO") and the applicable Datenschutzgesetz idgF ("DSG") for the protection, lawful handling and confidentiality of personal data and for data security. The data protection and cookie provisions inform you about the collection, use, processing, scope and purposes of the use of your personal data by us in the context of our service provision and our offers - also when using the website www.wienersymphoniker.at ("website").

1. What is personal data?

Personal data is information about data subjects (in this specific case, customers, sponsoring members, interested parties, newsletter subscribers, cooperation partners) whose identity is determined or at least determinable (e.g. name, email address or IP address).

2. Which personal data do we collect from you?
•    Registration data: When you register via the website, we collect the personal information you provide (title, name, user name, e-mail address, password, address, date of birth and telephone numbers). 
•    Order and booking data: In addition to the registration data, we also collect bank and credit card details and, where applicable, club memberships with third-party providers and health data (necessary wheelchair space).
•    Data of supporting members: When you register with us as a sustaining member or book a sustaining membership online, we collect the personal information you provide (title, name, e-mail address, password, address and telephone numbers). 
•    Data of supporters, friends, partners, sponsors and subsidisers: When you register with us as a donor, we collect the personal information you provide (title, name, e-mail address, password, address and telephone numbers). If you make a financial contribution, we also record the intended purpose (e.g. date of birth, earmarking) and your bank and credit card details. 
•   User data when contacting us: When you actively contact us (e.g. by email), we process the data you voluntarily provide (usually name, email address, content of the enquiry and, if applicable, address and contact details). 
•    Master data of contractual and cooperation partners: We also process master data of our contractual and cooperation partners in the sense relevant under data protection law, insofar as this information can be traced back to a natural person (e.g. name, e-mail and telephone number of the managing director, sole trader, etc.). 
•    Technical data: We record the IP address of your device, the internet browser used, the browser language, your operating system, the files requested on our website, your settings for Java, screen resolution, colour depth, your click behaviour on the website (time of access, clicks) and the website from which you visit us (referrer URL).
•    Personal portraits and other photos: We also process photos with persons that were taken with the consent of the data subjects for the purposes described in point 4.

3. How do we collect your data?

We process the personal data listed under point 2 for the following purposes and on the basis of the stated legal bases:

4. What do we use your data for?

Contract fulfilment and implementation of pre-contractual measures in accordance with Art. 6 Abs 1 lit b DSGVO:

The registration data is processed for the provision of the online account. In addition, the registration data, the order and booking data, the data of supporters, friends, partners, sponsors and subsidisers, the user data in the context of establishing contact and the master data of the contractual and cooperation partners for contract fulfilment and processing, customer support, advice and information, maintenance of any supporting membership and administration of master and contract data and their changes are processed.
The establishment and fulfilment of the contract are only possible on the basis of this data processing. If the customer does not provide the necessary data, no contract can be established.

Fulfilment of legal obligations pursuant to Art 6 Abs 1lit c DSGVO: The personal data mentioned in point 2 is also processed to comply with association and tax law requirements. In addition, the health data disclosed in the context of the ticket order will be used to fulfil the equal treatment obligations under the Equal Treatment Act.

Legitimate interests of the Wiener Symphoniker or a third party pursuant to Art 6 Abs 1 lit f DSGVO:

The data of supporters, friends, partners, sponsors and subsidisers are contacted directly by us in order to fulfil the statutory purposes of donations, legacies, inheritances and sponsorship. In addition, all data listed under point 2 is used for the purposes of internal market research, statistical analyses and to obtain credit information that is absolutely necessary for the provision of services.

Consent to data processing in accordance with Art 6 Abs 1 lit a DSGVO:

We obtain the consent of newsletter subscribers, patrons, friends, partners, sponsors and subsidisers as well as cooperation partners, provided that none of the above-mentioned justifications apply. In particular, the Wiener Symphoniker require the voluntary consent of the aforementioned data subjects, which can be revoked at any time, for electronic and postal contact for marketing purposes. This can be given by users either during the registration and purchase process or via the homepage by entering the data and ticking the checkbox. When purchasing event tickets that we organise with cooperation partners, customers can also consent to receiving direct marketing information by email from these cooperation partners. We use personal portraits to document, announce and advertise Wiener Symphoniker events and activities in both digital and print media and archive them exclusively for these purposes. The exact purposes are listed conclusively in the respective declaration of consent. The prospective recipients are the general public via various print media and via the internet, YouTube etc.

Your consent also serves as the legal basis for the setting of cookies that are not technically necessary for the operation of the website (see "Cookies" below). We use these cookies for analyses and to increase user-friendliness, advertising and social media (marketing and tracking cookies).

Consent can be revoked at any time free of charge and with effect for the future for all or individual purposes (e.g. via an unsubscribe link in the e-mail newsletter, by contacting us by e-mail at office@wienersymphoniker.at, via the cookie settings)

5. Transmission to third parties 

For events that we organise in cooperation with the Wiener Konzerthausgesellschaft, personal registration, order and booking data will be transmitted to the cooperation partners in order to fulfil the contract. In the case of events organised in cooperation with the Gesellschaft der Musikfreunde (Musikverein), the data will be transmitted exclusively to the Gesellschaft der Musikfreunde, Musikvereinsplatz 1, 1010 Vienna.

In addition, the data voluntarily provided when purchasing tickets for a cooperation event (surname, first name, address, e-mail) will be transmitted to the Wiener Konzerthausgesellschaft (Lothringerstr. 20, 1030 Vienna, telephone number: +43 1 242002, e-mail: datenschutz@konzerthaus.at) for the following direct marketing purposes: To send marketing and product information, in particular on concert dates, background reports, radio/TV dates, competitions, discount campaigns, surveys and videos relating to the Wiener Symphoniker and/or the cooperation partner by our cooperation partner by contacting us by e-mail in accordance with the § 107 TKG.

We also transmit your personal data in connection with orders to the Ticket and Service Centre of the Wiener Konzerthausgesellschaft as a processor for the purpose of contract processing.

As stated in the following detailed information, when cookies are set on the basis of your voluntary consent, your personal data may be transferred to recipients in third countries outside the EU. If there is no adequacy decision by the EU Commission pursuant to Art 45 DSGVO for the third country concerned, the transfer will take place in individual cases subject to suitable guarantees pursuant to Art 46 DSGVO or, if necessary, by consent for specific purposes.

Cookies

Our website uses cookies. These are small text files that are temporarily stored on your computer and saved by your browser. With the help of cookies, the website can store important data. This makes your use of the website more convenient.

Like most websites, if you have given your consent, we use cookies for a variety of purposes to improve your use of our website. You can withdraw your consent at any time. If you do not give your consent, we only collect anonymous data, e.g. to determine the total number of visitors to our website, as well as cookies that are technically necessary for the operation of the website. We also use social plugins on our website.

Google Analytics

If you give your consent via the cookie banner or the cookie settings, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies to help the website analyse how users use the site. The information generated by the cookie about your use of this website is transmitted to a Google server and stored there. We only use Google Analytics with activated IP anonymisation by adding the code "anonymizeIP" to this website. This guarantees that your IP address is masked so that all data is collected anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there.

Google will use this information for the purpose of analysing your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.

You can prevent the installation of cookies by selecting the appropriate settings in the cookie settings or in your browser software; however, we would like to point out that in this case you will not be able to use all the functions of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link http://tools.google.com/dlpage/gaoptout?hl=de

The data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 50 months. Data that has reached the end of its retention period is automatically deleted once a month.

Further information on the use of data by Google, setting and objection options can be found in Google's privacy policy (https://policies.google.com/technologies/ads?hl=de) and in the settings for the display of adverts by Google (https://adssettings.google.com/authenticated).

a. Use of social plugins

This website uses social plugins (plugins) from various social networks such as Facebook, Twitter, Instagram and YouTube.

Use of Facebook

Plugins from the social network Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook") are integrated on our website. You can recognise the Facebook plugins by the Facebook logo (white "f" on a blue tile) or the terms "recommend on Facebook" sign on our website. You can find an overview of the Facebook plugins here:
https://developers.facebook.com/docs/plugins.

When you visit our website, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thereby receives the information that you have visited our websites with your IP address. If you click on the Facebook button while you are logged into your Facebook account, you can link the content of our websites to your Facebook profile. This allows Facebook to associate your visit to our websites with your user account. We would like to point out that we have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook's privacy policy at 
https://www.facebook.com/policy.php.

If you do not want Facebook to be able to associate your visit to our websites with your Facebook user account, please log out of your Facebook user account before accessing our website.

Use of Twitter

Our website uses plugins from the microblogging service Twitter, which is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). The plugins are labelled with a Twitter logo, for example in the form of a blue "Twitter bird". An overview of the Twitter plugins and their appearance can be found here: https://dev.twitter.com/web/tweet-button.

When you visit one of our websites that contains such a plugin, your browser establishes a direct connection to the Twitter servers. The content of the plugin is transmitted by Twitter directly to your browser and integrated into the page. Through the integration, Twitter receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Twitter profile or are not currently logged in to Twitter. This information (including your IP address) is transmitted directly from your browser to a Twitter server in the USA and stored there. If you are logged in to Twitter, Twitter can directly associate your visit to our website with your Twitter account. If you interact with the plugins, for example by clicking the "Tweet" button, the corresponding information is also transmitted directly to a Twitter server and stored there. The information is also published on your Twitter account and displayed to your contacts there.

The purpose and scope of the data collection and the further processing and use of the data by Twitter as well as your rights in this regard and setting options to protect your privacy can be found in Twitter's data protection information: https://twitter.com/de/privacy.

If you do not want Twitter to assign the data collected via our website directly to your Twitter account, you must log out of Twitter before visiting our website. You can also completely prevent the loading of Twitter plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).

Use of Instagram

On our websites, we use plugins from the social network Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA. The plugins are labelled with an Instagram logo, for example in the form of an "Instagram camera". An overview of the Instagram plugins and their appearance can be found here:
http://blog.instagram.com/post/36222022872/introducing-instagram-badges.

When you visit our website, your browser establishes a direct connection to Instagram's servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the website. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there.

If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugin, e.g. by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there.

The purpose and scope of the data collection and the further processing and use of the data by Instagram as well as your rights in this regard and setting options to protect your privacy can be found in Instagram's data protection information:
https://help.instagram.com/155833707900388.

Use of YouTube

We have also integrated YouTube plugins on our websites, which redirect you to the Wiener Symphoniker channel at www.youtube.com when you click on the plugin button.

When you click the YouTube button, YouTube cookies are stored on your computer and data is transmitted to Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, as the YouTube operator. The following personal data is transmitted to Google, Inc.: IP address and cookie ID, the specific address of the page accessed on our websites, browser language setting, system date and time of access and your browser ID. Data is transmitted regardless of whether you are registered with Google and logged in. If you are logged in, this data is assigned directly to your account.

If you do not wish to be associated with your profile, you must log out before activating the button. YouTube or Google, Inc. stores this data as user profiles and uses it for the purposes of advertising, market research and/or customised design of its websites. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google Inc. as the operator of YouTube to exercise this right. Further information on the purpose and scope of data collection and its processing by Google, Inc. can be found at http://www.google.at/intl/de/policies/privacy/. We do not process the personal data collected when the YouTube video is accessed.

b. Facebook Custom Audience

If you give us the appropriate consent, we also use Facebook "Custom Audience" technology, a service provided by Facebook Ireland Limited Hanover Reach, 5-7 Hanover Quay, Dublin 2 Ireland. The data collected through the integration of cookies, web beacons or similar third-party technologies allows us to measure and design our advertising activities on Facebook more effectively and, for example, to display posts or adverts only to visitors to our website. We only use cookies, web beacons and similar, proven and widely used third-party technologies to collect this data. The data collected in this way is only transmitted to Facebook in encrypted form. Any personal data of individual users is anonymised and cannot be viewed by us. Further information on this can be found in Facebook's privacy policy at https://www.facebook.com/about/privacy/. If you do not wish data to be collected via "Custom Audience", you can deactivate "Custom Audience" here:
https://www.facebook.com/ads/website_custom_audiences/.

c. Google Remarketing (Google Ads)

If you give us your consent, we use Google Remarketing technology, a service provided by Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States. This function allows us to analyse data from Google Ads and the double-click cookie for statistical purposes and to support the display and management of ads on the web. When you visit a website and view or click on an advert placed via websites in the Google advertising network, a double-click cookie may be stored in your browser. The DoubleClick cookie identifier assigned to your browser is the same as that used when you visit websites that use DoubleClick advertising programmes. If your browser already has a Double-Click cookie, no further Double-Click cookie should be stored. The information generated by the cookie is transferred to a Google server, stored there and can be analysed by us for statistical purposes and used to create interest-based advertisements. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

If you do not want this, you can deactivate it via the Ads Preferences Manager (https://support.google.com/ads/answer/2662922?hl=de).

Further information on the use of data by Google, setting and objection options, can be found in Google's privacy policy (https://policies.google.com/technologies/ads?hl=de) and in the settings for the display of adverts by Google (https://adssettings.google.com/authenticated).

​​​​​​​d. Shopping cart cookies

Technically necessary cookies are used to register the reservations in the shopping basket across all pages. This allows you to continue to move around the website with your browser without losing your data. The cookies set are not stored permanently on your computer, but are deleted when you close your browser. You cannot deactivate these cookies.

e. Hotjar

If you give us your consent, we use Hotjar (http://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe) to optimise and improve the usability of our website. Hotjar enables us to measure and evaluate user behaviour (mouse movements, clicks, scroll height, etc.) on our website. For this purpose, Hotjar places cookies on users' end devices and can store user data such as browser information, operating system, time spent on the page, etc. You can find more information about data processing by Hotjar at www.hotjar.com/privacy.

6. How long do we store your data?

Personal data is stored until the expiry of the statutory and contractual retention, guarantee, warranty and limitation periods. Beyond these periods, personal data is only stored for as long as it is required for the assertion, exercise or defence of legal claims. If you have registered as a user, we will store your order history for 10 years in the account provided. If you are not registered with us, we will only store your order history for a period of 10 years after you have given your consent. If you have only registered to receive newsletters and advertising information and are not a customer of ours, we will store your data until you withdraw your consent and for a maximum of three years after the last contact.

7. How do we protect your data?

We take appropriate technical and organisational security measures within the meaning of Article 5(1)(f) and Article 32 DSGVO to protect your personal data against accidental or unlawful destruction, alteration, damage or loss and against unauthorised disclosure or access. We also conclude confidentiality agreements with all our employees who have access to your personal data in accordance with Section 6 of the DSG to protect your data confidentiality. We also take numerous precautions on our website:

​​​​​​​a. Encryption on the website

Your data is secure on wienersymphoniker.at. The Vienna Symphony Orchestra uses the SSL (Secure Socket Layer) protocol on the entire website. This encrypts the data during transmission between the user and the Symphoniker server so that it cannot be read by third parties.

• Data is transmitted using an SSL connection (Secure Socket Layer, -256 bit) with at least 128-bit encryption.
• The secure protocols TLS 1.0, 1.1 and 1.2 are used. The SSL 2.0 and 3.0 protocols are deactivated.
• Encrypted transmission ensures the greatest possible security of your data against unauthorised access and/or manipulation. Furthermore, the SSL connection guarantees that you only establish and maintain a connection with the Symphoniker server.
• The Symphoniker server has been certified by GeoTrust Inc.
• How do you recognise that the website is secure? The address (URL) begins with https:// and a lock or key can be seen in the status bar.
• The security certificate belongs to the Wiener Symphoniker, was issued by GeoTrust Inc. and is valid. By clicking on the GeoTrust Inc. symbol in your browser (lock or key in the status bar), you can display detailed information on the security certificate.

8. Your rights as a data subject

You have the right to receive information in a clear, transparent and easily understandable way about how we process personal data and about your rights as a data subject (Art 13 ff DSGVO):

Right to information pursuant to Art 15 DSGVO

You have the right to ask the Wiener Symphoniker for a copy of the personal data we hold about you (subject to certain restrictions).

Right to rectification pursuant to Art 16 DSGVO

You have the right to ask the Wiener Symphoniker to correct your personal data if it is incorrect or no longer up to date and/or to have missing information completed.

Right to erasure/being forgotten pursuant to Art 17 DSGVO

You have the right to request that the Wiener Symphoniker erase your personal data without undue delay. Please note that this is not an absolute right, as there may be legal or legitimate reasons to retain your personal data.

Right to restriction of processing pursuant to Art18 DSGVO

You have the right to obtain from the Wiener Symphoniker restriction of processing where one of the conditions set out in Art. 18 DSGVO applies.

Notification obligation in connection with the rectification or erasure of personal data or the restriction of processing pursuant to Art 19 DSGVO

The Wiener Symphoniker will inform all data subjects of any rectification or erasure of personal data or restriction of processing in accordance with Article 16, Article 17(1) and Article 18, unless this proves impossible or involves disproportionate effort.

Right to data portability according to Art 20 DSGVO

You have the right to receive the personal data concerning you from the Wiener Symphoniker in a structured, commonly used and machine-readable format, and any person has the right to transmit those data to another controller without hindrance from us. This only applies to data that you have provided, where the processing is based on a contract or your consent or where the processing is carried out automatically.

Right to object to direct marketing including profiling and to any consent given to data processing in accordance with Art 21 ff DSGVO

If the processing serves to safeguard the legitimate interests of the Wiener Symphoniker, you have the right to object to this at any time for reasons arising from your particular situation. However, compelling legitimate grounds of the Wiener Symphoniker may prevail. In this case, the Vienna Symphony Orchestra may continue to process the data.

In addition, you have the right to object to the processing of your data at any time if the processing is for the purpose of direct marketing.

Right to lodge a complaint with a supervisory authority pursuant to Art 77 DSGVO

You also have the right to lodge a complaint with the data protection authority if you believe that the processing of your personal data violates the DSGVO or the DSG. The competent data protection supervisory authority is the Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna.

9. Final Provisions

The further development of the internet, our internet offering, and our range of services may also affect the handling of personal data. We therefore reserve the right to change this data protection declaration in the future within the framework of data protection regulations. Therefore, you should regularly access these data protection provisions to stay informed about the current status.