Privacy Policy for Data Subjects pursuant to Art. 13 and 14 GDPR
Thank you for your interest in our website and our company. Protecting your privacy and your personal data is very important to us! We collect, use and process your personal data in compliance with data protection regulations and endeavour to safeguard it carefully.
1. Controller of Data Processing
As the data controller, Kongresskultur Bregenz GmbH, Platz der Wiener Symphoniker 1, 6900 Bregenz, Austria, info@festspielhausbregenz.com, processes your personal data in accordance with applicable data protection law, in particular the General Data Protection Regulation (“GDPR”) and the Data Protection Act as amended (“DSG”).
No data protection officer has been appointed, as this is not legally required.
2. Purposes of Data Processing
We process your personal data for the following purposes and on the basis of the legal grounds set out below:
Contract performance and pre‑contractual measures pursuant to Art. 6(1)(b) GDPR: conclusion or amendment of contracts, preparation and handling of offers, processing of applications, contract drafting, contract management and execution, assessment and fulfilment of claims, customer support and advice, as well as administration of master and contract data and any changes to them.
Legitimate interests of Kongresskultur Bregenz GmbH or a third party pursuant to Art. 6(1)(f) GDPR.
Fulfilment of legal obligations pursuant to Art. 6(1)(c) GDPR.
Consent of the customer to data processing pursuant to Art. 6(1)(a) GDPR: We obtain the customer’s consent where none of the above legal grounds apply. Kongresskultur Bregenz requires the customer’s voluntary and revocable consent in particular for the sending of electronic messages and contacting by telephone for marketing purposes.
3. Categories of Data
Contact details (name, address, telephone number, e‑mail, etc.) as well as data necessary for the handling of the contractual relationship and administration (e.g.: object data, correspondence, etc.).
Access data when a website is accessed, which are used for statistical evaluations for the purposes of operation, security and optimisation activities, in the server log (e.g.: name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, user’s operating system, referrer URL (the previously visited site), IP address and the requesting provider).
However, we reserve the right to review the log data retrospectively if there are concrete indications of a justified suspicion of unlawful use. The data are stored separately from user data or personally identifiable data.
4. Website
Google Analytics / Google Ads
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics uses so‑called “cookies”, which are text files stored on the respective device and which enable an analysis of how you use the website. The information generated by the cookie about your use of this website (including the truncated IP address) is usually transmitted to a Google server and stored there; this may also include transfer to the servers of Google LLC in the USA.
This website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymisation of the IP address by truncation and excludes direct personal reference. With this extension, Google truncates your IP address within member states of the European Union or in other Contracting States of the Agreement on the European Economic Area in advance. Only in exceptional cases is the full IP address transmitted to a Google LLC server in the USA and truncated there.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide us with other services related to website and internet usage. The IP address transmitted by your browser to Google Analytics is not merged with other Google data.
Google Analytics also enables, via a special function, the so‑called “demographic characteristics”, the creation of statistics with information on the age, gender and interests of site visitors on the basis of an evaluation of interest‑based advertising and by including third‑party information. This allows the definition and differentiation of user groups of the website for the purpose of optimising marketing activities. Data sets captured via the “demographic characteristics” cannot, however, be assigned to a specific person.
In addition to Google Analytics, we also use the service offered by Google, Google Ads, with your consent, to measure the effectiveness of advertising campaigns we carry out. In this context, we receive information on the effectiveness of our online advertising and subsequent interactions with our website.
The processing described above, in particular the setting of Google Analytics and Google AdWords cookies for reading information on the device used, only takes place if you have given your express consent to this (in accordance with Art. 6(1)(a) GDPR). Otherwise, the use of Google Analytics and Google Ads is omitted during your visit to the website.
You can revoke a given consent at any time with future effect. We have concluded a data processing agreement with Google for the use of Google Analytics and Google Ads as part of the terms of use, which obliges Google to protect the data of visitors to our website and not to disclose it to third parties.
For the transfer of data from the EU to the USA, Google relies on the so‑called Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA. These Standard Contractual Clauses can be made available on request.
This website also uses the Google Tag Manager. According to Google’s information, no processing of personal data takes place in the context of the use of Google Tag Manager (https://support.google.com/tagmanager/answer/9323295?hl=de).
Cookie details:
Cookie name: _ga
Hostname: festspielhausbregenz.com
Expiry: 730 days
Description: Contains a unique identifier used by Google Analytics to determine that two different hits over multiple browsing sessions belong to the same user.
Cookie name: _gid
Hostname: festspielhausbregenz.com
Expiry: 1 day
Description: Contains a unique identifier used by Google Analytics to determine that two different hits over multiple browsing sessions belong to the same user.
Cookie name: _gat
Hostname: festspielhausbregenz.com
Expiry: 1 hour
Description: Used by Google Analytics to throttle the request rate (limiting data collection on high‑traffic websites).
Cookie name: _gcl_au
Hostname: festspielhausbregenz.com
Expiry: 90 days
Description: Used by Google AdSense to understand user interaction with the website by generating analytical data.
Further information on Google Analytics and Google Ads can be found in Google’s privacy policy available at: https://policies.google.com/privacy?hl=de&gl=de.
Facebook Pixel
Our website uses the Facebook Pixel from Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland.
If a user clicks on an advertisement we place that is displayed on Facebook, the URL of our linked page receives an addition by the Facebook Pixel. If our page allows the sharing of data with Facebook via the Pixel, this URL parameter is written into the user’s browser as a cookie, which our linked page itself sets. This cookie is then read by the Facebook Pixel and allows data to be forwarded to Facebook.
With the help of the Facebook Pixel, Facebook can determine visitors to our online offering as a target group for the display of advertisements (so‑called “Facebook Ads”). Accordingly, we use the Facebook Pixel to display our advertisements on Facebook only to those users who have shown an interest in our online offering or who exhibit certain characteristics that we transmit to Facebook (Custom Audiences). We can also evaluate the effectiveness of our advertisements for statistical and market research purposes by tracking whether users were forwarded to our website after clicking on an advertisement (conversion).
The data processing associated with the use of the Facebook Pixel takes place exclusively with your express consent. You can revoke your given consent at any time with future effect.
Cookie details:
Cookie name: fr
Hostname: facebook.com
Expiry: 90 days
Description: Used by Facebook to deliver a range of advertising products such as real‑time bids from third‑party advertisers.
Cookie name: _fbp
Hostname: festspielhausbregenz.com
Expiry: 90 days
Description: Facebook Pixel advertising cookie for first parties. Used by Facebook to track visits across websites and deliver a range of advertising products such as real‑time bids from third‑party advertisers.
Details on the purpose and scope of data collection and further processing and use of the data by Meta, as well as your related rights and settings options to protect your privacy, are available from Meta’s privacy notices: https://www.facebook.com/privacy/center.
Social Media Plugins - LinkedIn
This website embeds social media plugins from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, on some subpages, with activation only occurring with your consent.
Using these plugins, information about the use of the website including your IP address can be transmitted to LinkedIn.
When you access social plugins from LinkedIn on a subpage of the website, your browser establishes a direct connection with LinkedIn’s servers. The respective content is transmitted by LinkedIn directly to your browser and embedded in the website by it. Therefore, we have no influence on the extent of the data collected in this way. According to our knowledge, at least the following data may be collected, and potentially additional data if you are logged into your LinkedIn account during your visit:
- Date and time of the visit to the respective website
- Internet address or URL of the accessed website
- IP address
- Possibly location data
We have no influence on the further processing and use of data by LinkedIn and therefore cannot assume any responsibility for it. If you do not want LinkedIn to collect, process or use data about you via the website, you can refuse consent or deactivate JavaScript in your browser settings. In this case, however, you will not be able to use LinkedIn’s services.
Cookie name: lang
Hostname: ads.linkedin.com
Expiry: browser session
Description: Session cookie storing the language version chosen by the user.
Cookie name: lidc
Hostname: linkedin.com
Expiry: 1 day
Description: Used by LinkedIn for routing.
Cookie name: li_gc
Hostname: linkedin.com
Expiry: 180 days
Description: Used by LinkedIn to store consent for the use of cookies for non‑essential purposes.
Cookie name: bcookie
Hostname: linkedin.com
Expiry: 365 days
Description: First‑party Microsoft MSN cookie for sharing site content via social media.
Cookie name: UserMatchHistory
Hostname: linkedin.com
Expiry: 30 days
Description: Contains a unique identifier used by LinkedIn to determine that two different hits across browsing sessions belong to the same user.
Cookie name: bscookie
Hostname: www.linkedin.com
Expiry: 365 days
Description: Used by LinkedIn to track usage of embedded services.
Cookie name: AnalyticsSyncHistory
Hostname: linkedin.com
Expiry: 30 days
Description: Used by LinkedIn to store information about when a sync with the lms_analytics cookie occurred for users in specified countries.
Details on the purpose and extent of data collection and the further processing and use of data by LinkedIn, as well as your related rights and privacy protection options, are available in LinkedIn’s privacy policy: https://de.linkedin.com/legal/privacy-policy.
Third‑Party Services
This website embeds YouTube on some subpages to display videos, with activation only occurring with your consent.
YouTube is a service offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, with Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland acting as the controller in the EU/EEA. Using these services may result in information about website usage, including your IP address, being transmitted to Google.
When you access a subpage of the website that includes YouTube, your browser establishes a direct connection with Google’s servers. The content is transmitted by Google directly to your browser and embedded in the website by it. Therefore, we have no influence on the extent of the data collected by Google in this way. To our knowledge, at least the following data may be collected, and potentially additional data if you are logged into your Google account during your visit:
- Date and time of the visit to the respective website
- Internet address or URL of the accessed website
- IP address
- Possibly location data
We have no influence on the further processing and use of data by Google and therefore cannot assume any responsibility for it. If you do not want Google to collect, process or use data about you via the website, you can refuse consent or deactivate JavaScript in your browser settings. In this case, however, you will not be able to use Google’s services.
Details on the purpose and extent of data collection and further processing and use of data by Google, as well as your related rights and privacy protection options, are available in Google’s privacy notice: www.google.de/intl/de/policies/privacy/.
Cookie name: VISITOR_INFO1_LIVE
Hostname: youtube.com
Expiry: 180 days
Description: Cookie set by YouTube to measure your bandwidth to determine whether you receive the new or old player interface.
Cookie name: YSC
Hostname: youtube.com
Expiry: browser session
Description: Cookie set by the YouTube video service on pages with embedded YouTube videos to track views.
5. Newsletter
When subscribing to the newsletter, the personal data provided such as email address, first and last name, salutation, interests and company name are stored and used for sending the newsletter. The newsletter includes information on products and services of Kongresskultur Bregenz, information on events, company or partner news, information about competitions and topic‑related information and tips on event organisation.
The data collected through newsletter registration are processed by CleverReach GmbH & Co. KG (hereinafter referred to as CleverReach). CleverReach has been commissioned as a service provider for the management and dispatch of our newsletters and a data processing agreement has been concluded with CleverReach. CleverReach ensures that the processing is in accordance with data protection regulations and the rights of the data subject. To optimise content, interactions (clicks and opens) in the emails are tracked.
Consent to receive the newsletter can be revoked with each delivered newsletter via the unsubscribe link. In addition, it is possible at any time to unsubscribe in writing to info@festspielhausbregenz.com
. After unsubscribing, the stored data will be deleted from the existing database. Without unsubscription, the data will remain stored until revoked.
6. Data Security
Kongresskultur Bregenz GmbH has taken appropriate technical and organisational measures to protect your data, including against loss, manipulation or unauthorised access. The measures taken are regularly reviewed and continuously updated in line with the state of the art. Should there be a breach of the security of your personal data that is likely to result in a high risk to your rights and freedoms, we will notify you without delay and, if possible, within 72 hours.
7. Use by Minors
It is noted that all processing of personal data may only be used by persons who have reached the age of 16. Use of systems and tools and the resulting processing of data of users under this age limit is prohibited without the consent of parents/legal guardians. If such data processing nevertheless occurs, we will, as soon as we become aware of it, immediately stop and delete the processing of this data.
8. Transfer of Your Personal Data
In operating the website, it is sometimes necessary to forward data to third parties (e.g. service providers we use and to whom we make data available, etc.) or to administrative authorities, courts, and public law bodies as well as auditors and tax advisers for auditing purposes.
In addition to the recipients described above, personal data are also transferred to the following processors of the controller:
- isicore GmbH: website hosting provider
- beFRANZ Digital Agentur, Florian Franz Salzmann: social media consultancy
Some of the recipients of personal data named in this privacy policy are located outside the EU or EEA or process personal data there. The level of data protection in other countries may not correspond to that of Europe. We only transfer personal data to countries for which the EU Commission has decided that they have an adequate level of data protection or we implement measures to ensure that appropriate safeguards are in place, in particular by concluding Standard Contractual Clauses (EU/2021/914).
9. Retention Period
We generally store your personal data until the termination of the business relationship in the context of which we collected your data or until the expiry of the applicable statutory limitation and retention periods; furthermore until the conclusion of any legal disputes in which the data are needed as evidence. We store your personal data for marketing purposes until you object or withdraw your consent, insofar as the marketing activity is based on your consent. Data may only be stored in a form that allows identification of the data subjects for as long as is necessary for the purposes for which they are processed.
10. Data Subject Rights
The following rights may be asserted with regard to data processing:
Right of access
You can request confirmation as to whether and to what extent personal data about you is being processed.
Right to rectification
If we process incomplete or incorrect personal data about you, you can request correction or completion at any time.
Right to erasure
You can request the deletion of your personal data if the purpose for which it was collected no longer exists, an unlawful processing occurs, the processing disproportionately affects your legitimate interests, or the data processing is based on your consent and you have revoked it. However, please note that there may be other reasons that prevent immediate deletion, e.g. statutory retention obligations, pending proceedings, assertion, exercise or defence of legal claims, etc.
Right to restriction of processing
You have the right to request restriction of processing if you contest the accuracy of your data for the period that enables us to verify accuracy; the processing of your data is unlawful, you oppose deletion and instead request restriction of use; we no longer need the data for the intended purpose but you require it for the assertion, exercise or defence of legal claims; or you have objected to processing.
Right to data portability
You can request that we provide you with the data you have provided in a structured, commonly used and machine‑readable format, provided that we process the data on the basis of your consent or to fulfil a contract between us and the processing is carried out by automated means.
Right to object
If we rely on the necessity to safeguard our legitimate interests in processing, you can object to this processing if there is an overriding interest in your data protection. You can object to the sending of advertising without giving reasons at any time.
Right to complain
If you believe that we have violated Austrian or European data protection law in the processing of your data and thereby your rights have been infringed, we ask you to contact us to clarify any questions. You also have the right to complain to the Austrian Data Protection Authority or a European supervisory authority.
Right to withdraw consent
All consents you have given can be withdrawn independently of each other at any time. Withdrawal means that from that point on we no longer process your data for the purposes stated in the consent and that you can no longer make use of the associated rights, benefits, etc. These rights can be asserted directly with Kongresskultur Bregenz GmbH by a communication to the email address info@festspielhausbregenz.com. In case of doubt, we may request additional information to confirm your identity. This serves to protect your rights and your privacy.
11. Changes to the Privacy Policy
This privacy policy was last updated on 13/12/2022. In the event of changes to our privacy policy, it will be published here with an updated version date.
12. Contact Details
Kongresskultur Bregenz GmbH
Platz der Wiener Symphoniker 1
6900 Bregenz, Austria
info@festspielhausbregenz.com
