Data controller within the meaning of the GDPR
Verein für Freizeitveranstaltungen und Kulturförderung
Registration No. (ZVR): 1441651205
Wilhelminenstraße 164/2
1160 Vienna, Austria
E-Mail: contact@pfadiball.at
Introduction
We take the protection of our website users' data very seriously and are committed to protecting the information users provide to us in connection with the use of our website. This privacy policy explains our practices regarding the collection, use, and disclosure of your data when using our digital offerings. By using our services, you accept the terms of this privacy policy. If you do not agree with this policy, please discontinue use of our services.
What data do we collect?
We may collect the following types of data:
Non-personal data
Technical and aggregated usage information that does not allow conclusions to be drawn about your identity (e.g. browser type, device data, session duration, session behaviour).
Personal data
Any information that identifies you or makes you identifiable (e.g. name, email address, phone number, IP address, postal address). If personal data is combined with non-personal data, we treat the combined data as personal data.
How do we collect data?
-
through your active input (e.g. via contact forms or email)
-
automatically when using our website (e.g. session and usage data)
-
if applicable, via third-party providers when you sign in through them (e.g. Google or Facebook)
Why do we collect this data?
We use your data exclusively for the following purposes:
-
Providing, operating, and improving our services
-
Communicating with you and responding to inquiries
-
Analysing usage behaviour (anonymised only)
-
Complying with legal requirements and enforcing our rights
-
Data security, fraud prevention, and protection against misuse
-
Sending newsletters (only with consent)
The legal bases for this are Art. 6(1)(a) (consent), (b) (performance of a contract), (c) (legal obligation), and (f) (legitimate interest) GDPR.
Who do we share data with?
-
our service providers (e.g. hosting providers, IT service providers) as part of data processing under Art. 28 GDPR
-
authorities or courts, where legally required
-
in connection with a business sale or restructuring
-
third parties, to improve user experience (non-personal data only)
We do not sell personal data.
Cookies and Similar Technologies
Our website uses only technically necessary cookies, which are required for the secure operation of the site and do not store personal data for advertising or tracking purposes.
It is not possible to use the website without these cookies.
Cookies used include: XSRF-TOKEN, hs, svSession, SSR-caching, TS*, bSession, fedops.logger.sessionId, _wixAB3|*, server-session-bind, client-session-bind
Storage and Transfer of Data
Non-personal data may be processed worldwide.
Personal data may also be processed outside the EEA (e.g. USA, Israel, Ireland, Taiwan, South Korea), where this is necessary for the proper provision of our services or legally required.
For this purpose, we use Standard Contractual Clauses in accordance with Art. 46 GDPR as appropriate safeguards.
Hosting & Data Security
Our website is hosted via Wix.com Ltd., Nemal St. 40, 6350671 Tel Aviv, Israel.
Wix acts as a data processor in accordance with Art. 28 GDPR. A data processing agreement is in place.
Wix stores data on secure servers behind a firewall and provides HTTPS access.
All available payment methods comply with the PCI-DSS standard for the secure handling of credit card data.
Retention Period
We only store personal data for as long as necessary for the purposes for which it was collected, or as long as we are legally obliged to do so.
Data may be corrected or deleted once it is no longer needed.
Handling of Minors
Our website is not directed at persons under the age of 14.
We do not knowingly collect personal data from children under 14. Should we become aware of this, we will delete it immediately.
Rights of Data Subjects
As a data subject within the meaning of the GDPR, you have the right to:
-
Access (Art. 15 GDPR)
-
Rectification (Art. 16 GDPR)
-
Erasure (Art. 17 GDPR)
-
Restriction of processing (Art. 18 GDPR)
-
Data portability (Art. 20 GDPR)
-
Object (Art. 21 GDPR)
You also have the right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).
You may request access to and deletion of your data by contacting us using the contact details provided below.