Last updated on 21.10.2022 / Translated by deepl.com
The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the legal provisions (DSGVO, TKG 2003).
This data protection declaration only refers to this website. If you are forwarded to other websites via links on our website, please inform yourself directly on the forwarded website about the respective handling of your data. Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of Austrian data protection law. The following regulations inform you about the type, scope and purpose of the collection, processing and use of personal data.
As a rule, it is possible to use this website without providing personal data. Insofar as personal data (e.g. name, address or e-mail addresses) is collected on our pages, this is always done on a voluntary basis as far as possible. This data will not be passed on to third parties without your express consent.
1. contact with us
If you contact us using the form on the website or by e-mail, the data you provide will be stored by us for six months for the purpose of processing the enquiry and in case of follow-up questions. Application data is generally deleted three months after the end of the application process. Both periods do not apply if a legal provision prevents deletion, longer storage is necessary for the purpose of providing evidence or you have consented to longer storage.
We will not pass on your personal data to third parties without your consent.
2. what data we process about you
In the course of your visit to this website, we will collect the following information: The date and time you access a page on our website, your IP address, the name and version of your web browser, the web page (URL) you visited before accessing this website, certain cookies (see point 4 below) and that information which you yourself provide by filling in the contact form.
There is no obligation to actually provide the data that we ask you to provide on our website. However, if you do not do this, you will not be able to use all the functions of the website.
We check links leaving our website very carefully from an editorial point of view. Nevertheless, we do not accept any responsibility or liability for the content of pages linked to from this website or any other website.
So-called cookies are used on this website. A cookie is a small file that can be stored on your computer when you visit a website. Basically, cookies are used to provide users with additional functions on a website. For example, they can be used to make it easier for you to navigate a website, to allow you to continue using a website where you left it and/or to save your preferences and settings when you visit the website again. Cookies cannot access, read or modify any other data on your computer.
Most of the cookies on this website are so-called session cookies. They are automatically deleted when you leave our website again. Permanent cookies, on the other hand, remain on your computer until you delete them manually in your browser. We use such persistent cookies to recognise you the Nächste time you visit our website.
If you want to control cookies on your computer, you can set your browser preferences to notify you when a website wants to store cookies. You can also block or delete cookies if they have already been stored on your computer. If you want to know more about how to set these steps, please use the “Help” function in your browser.
Please note that blocking or deleting cookies may affect your online experience and prevent you from making full use of this website.
5. Purposes of data processing
We will process your personal data for the following purposes:
- to provide you with this website with all its features and to further improve and develop this website;
- to be able to compile usage statistics;
- to be able to detect, prevent and investigate attacks on our website; and
- to respond to your enquiries
- to fulfil and process your order/purchase.
6. Legal basis for processing
The legal basis for processing your personal data is our overriding legitimate interest (pursuant to Art 6(1)(f) EU General Data Protection Regulation), which is to achieve the purposes set out in point 5 above.
7. transfer of your personal data
For the above-mentioned purposes (with the exception of online applications), we will transfer your personal data to the following recipients:
- IT service providers used by us: IT-Center & Kubid GmbH, Stauwerkstraße 5/1, 3370 Ybbs, Austria.
- the social plugins mentioned below
- Google Maps (exclusively your IP address): Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland (“Google”).
Some of the recipients mentioned above are located outside your country or process your personal data there. The level of data protection in other countries may not be the same as in your country. However, we only transfer your personal data to countries for which the EU Commission has decided that they have an adequate level of data protection or with which agreements exist that ensure an adequate level of data protection.
8. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. We process your data on the basis of our overriding legitimate interest in compiling easy-to-use website access statistics in a cost-effective manner (Art 6 (1) (f) of the General Data Protection Regulation).
The information generated by the cookie about your use of this website (including your IP address and the URLs of the websites accessed) will be transmitted to and stored by Google on servers in the United States. We do not store any of your data collected in connection with Google Analytics.
This website uses the IP anonymisation option offered by Google Analytics. Your IP address will therefore be shortened/anonymised by Google as soon as Google receives your IP address. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to us. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data by Google.
You can prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting your data in connection with Google Analytics by downloading and installing the browser plug-in available at the following link:
9. social plugins
Social plugins from Facebook
We use social plugins from facebook.com, operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. The plugins can be recognised by the Facebook logo or the addition “Facebook Social Plugin”. When you click on the “Like” button or post a comment, for example, the corresponding information is transmitted directly from your browser to Facebook and stored there. Furthermore, Facebook makes your likes public for your Facebook friends. If you are logged in to Facebook, Facebook can assign the call to our site directly to your Facebook account. Even if you are not logged in or do not have a Facebook account, your browser transmits information (e.g. which website you have called up, your IP address), which is stored by Facebook. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook.
Social plugins from Instagram
We use social plugins from Instagram. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged in to your Instagram account, you can link the content of our site to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our site with your user account. We would like to point out that we, as the provider of the site, have no knowledge of the content of the transmitted data or its use by Instagram.
Social plugins from YouTube
We use social plugins from YouTube, a site operated by Google. The operator of this site is Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland. When you visit our site equipped with a YouTube plugin, a connection to the YouTube servers is established. In doing so, the YouTube server is informed that you have visited our pages.
If you are logged into your YouTube account, you enable YouTube to assign your visit to our site to your user account. You can prevent this by logging out of your YouTube account.
You have the option of subscribing to our newsletter in writing or via our website. For this, we need your e-mail address and your declaration that you agree to receive the newsletter.
You can cancel your subscription to the newsletter at any time. Please send your cancellation to the following e-mail address: firstname.lastname@example.org. We will then immediately delete your data in connection with the newsletter dispatch.
11. pictures of events / photo reference
Pursuant to Articles 13 and 14 DSGVO (Duty to Inform), we inform you that we take photos and short videos of participants and guests in the course of our public events in order to use them for public relations, PR and presentation of our activities in order to increase our level of awareness, unless objected to in individual cases. The photos and videos will be used on our website, in our social media channels and for print media, in particular press, newspapers and folders. This will be clearly indicated in a suitable manner both when registering for the event and at the event location.
The person responsible for the processing and storage of image and video recordings, as well as the contact person for data subjects, is the person responsible for this website (see last point of the data protection declaration).
The legal basis of the processing is Art 6 para 1 lit f DSGVO. Our legitimate interest is to inform about our events through public relations, PR and presentation of activities, to refer to similar events and to present our work in order to increase our level of awareness. You have the right to object to the processing at any time. However, it can be assumed that the interest of the controller in the production and use of the photos and short videos does not unduly interfere with the rights and freedoms of the natural persons, especially since they have gone into the public space, the production and use of the photos and short videos was pointed out in advance and at the event, and care is taken both in the production of photos and the publication of the same that no legitimate interests of depicted persons are violated. If the rights and freedoms of a person depicted are violated for reasons particularly worthy of consideration, we will take appropriate measures to refrain from further processing. A deletion in print media that have already been issued cannot take place. Deletion on the website or in social media channels will take place within the scope of technical possibilities.
Recipients of the photos and videos are departments of the data controller that necessarily need to receive the data as part of the processing of the activity (e.g. EDP, other administrative units, marketing). Contractors and processors involved in the processing (production and publication). Tax advisors, authorities (tax office, other authorities) as well as legal representatives (in the enforcement of rights or defence of claims or in the context of official proceedings). The data is made available to the public on the internet and published in social media channels. The data will be published in print media, in particular press, newspapers and own folders. The data will not be passed on to recipients who pursue their own purposes with these data. In the case of social media channels, however, it may be that the respective social media service receives the right to exploit the published data. There is no transfer to recipients in a third country (outside the EU) or to an international organisation. There is no automated decision-making (profiling). There is no contractual or legal requirement to provide the data and there is no obligation to do so. As a data subject, you are generally entitled to the right to information, correction, deletion, restriction objection and data portability within the framework of the legal provisions.
12. Google reCAPTCHA
Our website uses “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
The purpose of reCAPTCHA is to check whether data entry on our websites (e.g. in a contact form) is made by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.
The data processing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM.
13. server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- browser type and browser version
- Operating system used
- referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of concrete indications of illegal use.
14. Duration of the storage of log data
We will generally store your log data for a period of four weeks. Longer storage will only take place insofar as this is necessary to investigate detected attacks on our website.
If you register in writing or on our website, we will store your data in any case for as long as your account exists and thereafter for only as long as legal obligations require.
15. SSL Encryption
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
16. Your rights in connection with personal data
Among other things, you have the right (subject to applicable law):
- to check whether and what personal data we hold about you and to obtain copies of that data
- request the rectification, integration or erasure of your personal data which is inaccurate or not processed in accordance with the law
- require us to restrict the processing of your personal data; and
object, in certain circumstances, to the processing of your personal data or withdraw consent Vorherigely given for such processing
- request data portability
- know the identity of third parties to whom your personal data is transferred; and
lodge a complaint with the competent authority
17. Our contact details
If you have any questions or concerns about the processing of your personal data, please contact us:
Erzherzog Franz Ferdinand Museum
Schloss Artstetten BetriebsGmbH
A – 3661 Artstetten