Data Privacy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to our privacy policy as outlined below this text.

Data Collection on This Website

 Who is responsible for the data collection on this website?

Data processing on this website is implemented by the website operator. You will find contact details of the website operator in the section “Information Concerning the Responsible Party” in this data protection statement.

How do we collect your data?

Your data is collected, in part, by information that you provide to us. This can be, for example, data that you enter in a contact form.

Our IT systems collect data automatically, or with your consent, when you visit our website. This is essentially technical data (such as internet browser, operating system, or time of page view). The collection of this data takes place automatically when you access this website.

How do we use your data?

Some of the data is collected to ensure error-free functioning of the website. Other data may be collected to analyze your conduct as a user.

What rights do you have in terms of your data?

You have the right at any time to receive information free of charge concerning the origin, recipient, and purpose of your stored data. If you have given your consent to data processing, you may revoke this consent at any time for future use. In certain circumstances, you also have the right to request restriction of processing of your personal data. Furthermore, you may have the right to lodge a complaint with the responsible supervisory authority.

You may contact us at any time regarding this and other questions concerning data protection.

2. Hosting

External Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. It may include IP addresses, contact requests, meta and communication data, contact data, names, accessed websites, and other data generated via the website.

The purpose of the host is to fulfill the contract with our potential and existing costumers (Art. 6 para. 1 lit. b. DSGVO) and in the interest of a secure, fast, and efficient functioning of our online offerings by a professional provider (Art. 6 para. 1 lit. f DSGVO). To the extent that an according consent has been requested, the processing is executed exclusively based on Art. 6 para. 1 lit. a DSGVO and sec. 25 para. 1 TTDSG, to the extent that the consent includes the storage of cookies or access to information in the user’s terminal device (for example, device fingerprinting) as defined by the TTDSG. Consent may be revoked at any time.

Our host will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding data.

We use the following web host:

GoDaddy: https://www.godaddy.com/en-ie

3. General Points and Mandatory Information

Data Protection

The operators of these pages take the protection of your data very seriously. We handle your personal data confidentially and in accordance with statutory data protection regulations and this data protection policy.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is happens.

Be aware that data transmission over the internet (such as communication by email) can have security gaps. A complete protection of the data against access by third parties is not possible.

Notice Concerning the Responsible Entity

The responsible party for data processing on this website is:

Stadt Wien Kunst GmbH

1. FOTO ARSENAL WIEN

MQ, Museumsplatz 1

1070 Vienna, Austria

Tel.: +43 (0)1 521 89-0

Email: office@fotoarsenalwien.at

The natural or legal person alone or jointly with others determines the purposes and means of processing of personal data (such as names, email addresses, etc.).

Storage Duration

Your personal data will remain with us until the purpose for data processing no longer applies, unless a more specific storage period has been specified within this data protection policy. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reason for storing your personal data (such as retention periods under tax or commercial law); in the latter case, your data will be deleted once these restrictions no longer apply.

General Information on the Legal Basis for Data Processing on This Website

If you have given your consent to data processing, we process your personal data based on Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DGSVO; if special categories of data are processed, we follow Art. 9 para. 1 DSGVO. In the case of explicit consent to the transfer of personal data to third-party countries, data processing is also based on Art. 49 para. 1 lit. a DGSVO. If you have given consent to the storage of cookies or to access to information in your terminal device (such as via device fingerprinting), the data can be revoked at any time. If your data is required for the performance of a contract or for the implementation of precontractual measures, we process your data based on Art. 6 para. 1 lit. b DSGVO. Moreover, if your data is required for the fulfillment of a legal obligation, we process it based on Art. 6 para. 1 lit. c DSGVO. Data processing may be executed for purposes of legitimate interest pursuant to Art. 6 para. 1 lit. f DSGVO. Information concerning the legal basis relevant to each individual case is provided in the following paragraphs of this data privacy policy.

Notice on Data Transfer to the United States and Other Third-Party Countries

We use software tools including those from companies based in the United States or other third-party countries that are not secure under data protection law. If these software tools are active, your personal data may be transferred to these third-party countries and processed there. No level of data protection is comparable to that of the EU. For example, American companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It cannot therefore be ruled out that American authorities (such as intelligence services) might process, evaluate, and permanently store your data located on American servers for monitoring purposes. We have no influence on these processing processes.

Revoking Your Consent to Data Processing

Many data processing processes are only possible with your express consent. You may revoke consent you have previously given at any time. The legality of the data processing carried out until permission is revoked remains unaffected by the revocation.

Right to object to data collection is special cases and direct marketing (Art. 21 DSGVO)

IF THE DATA PROCESSING IS EXECUTED ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING, WHICH OVERRIDES YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE PURPOSE OF ASSERTING, EXERCISING, OR DEFENDING LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21 PARA. 1 DSGVO).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING AT ANY TIME; THIS ALSO APPLIES TO THE PROFILING IN RELATION TO DIRECT MARKETING. IF YOU OBJECT, YOUR PERONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRCT MARKETING (OBJECTION PURSUANT TO ARTICLE 21 PARA. 2 DSGVO).

Right of Appeal to the Responsible Supervisory Authority

In the event of breaches of the GDPR, data subjects shall have the right of appeal to a supervisory authority, in the member state of their habitual residence, their place of work, or the place of the alleged breach. The right of appeal is without prejudice to other administrative or judicial remedies.

Right to Data Transfer

You automatically have right to data that we process based on your consent or in fulfillment of a contract given to you by a third party in a common, machine-readable format. If you request direct transfer of the data to another controller, this will only be executed if it is technically possible.

SSL/TLS Encryption

For security purposes, this site uses SSL or TLS encryption to prevent the transmission of confidential content, such as orders or requests that you send to us as the site operator. An encrypted connection may be recognized when the address line of the browser changes from http:// to https:// and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, Deletion, and Correction

According to the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient, and the purpose of data processing at any time, and a right to correction or deletion of this data, if required. You may contact us at any time for this purpose, or for any further questions on the subject of personal data.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. To make this request, you may contact us at any time. The right to restriction of processing exists in the following cases:

If you contest the accuracy of your personal data that is saved by us, we generally need time to assess the claim. You have the right, for the duration of the review, to request the restriction of the processing of your personal data.

If the processing of your personal data has happened/is happening unlawfully, you may request the restriction rather than deletion of data.

If you have filed an objection according to Art. 21 para. 1 DSGVO, a balancing of your and our interests must be executed. As long as it has not yet been determined which interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may—apart from being saved—only be processed with your consent or for the assertion, exercise, or defense of legal claims or the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a member state.

4. Data Collection on This Website

Cookies

Our internet pages use “cookies.” Cookies are small text files that do not cause any damage to your terminal device. They are stored either temporarily for the duration of a session (session cookies), or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain saved on your terminal device until you delete them yourself or they are automatically deleted by your web browser.

Cookies from third-party companies may, in some cases, also be stored on your terminal device when you enter our website (third-party cookies). These enable us to use certain services of the third-party company (such as cookies for processing payment services).

Cookies that are necessary (necessary cookies) to execute the electronic communication process, to provide specific functions that you have requested (such as for the shopping cart function) or to optimize the website (such as cookies that measure the web audience) are saved on the bases of Art. 6 (1) lit. f. DSGVO, unless another legal basis is specified. The website operator has a legitimate interest in saving necessary cookies for a technically error-free and optimized provision of its services. If consent to the saving of cookies and comparable recognition technologies has been requested, processing is based exclusively on this consent (Art. 6 para. 1 lit. a DSGVO and sec. 25 para. 1 TTDSG); consent may be revoked at any time.

You may set your browser so that you are informed on the cookies setting, opting to allow only cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate automatic deletion of the cookies when closing the browser. When deactivating cookies, the functionality of the website may be restricted.

When cookies are used by third-party companies or for analysis purposes, you will be informed about this separately within the framework of this data protection declaration and, if necessary, request your consent.

5. Newsletter

If you would like to subscribe to the newsletter offered on the website, you must agree to receive the newsletter, and we require an email address as well as information that enables us to verify that you are the owner of the specified email address. Further data is not collected, or only on a voluntary basis. For the distribution of the newsletter we use newsletter service providers, which are outlined as follows.

Mailchimp

This website uses the services of Mailchimp to send newsletters. The provider is: Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 20209, USA.

Mailchimp is a service with which, among other things, the sending of newsletters may be organized and analyzed. If you enter data for the purpose of receiving newsletters (such as email address), this data will be saved on Mailchimp’s servers in the US.

With the help of Mailchimp, we analyze our newsletter campaigns. When you open an email sent with Mailchimp, a file contained in the email (known as a web beacon) connects to Mailchimp’s servers in the USA. This is how it is determined whether a newsletter message has been opened and which links, if any, have been clicked. In addition, technical information is recorded (such as time of retrieval, IP address, browser type, and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for statistical analysis of newsletter campaigns. The results of this analysis can be used to better adapt future newsletters to the interests of the recipients.

If you do not wish to participate in any analysis by Mailchimp, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter.

The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You may revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already executed remains unaffected by the revocation.

The data you provide for subscribing to the newsletter will be stored by us or the provider of the newsletter services until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe. Data that has been saved by us for other purposes remains unaffected.

Data transfer to the US is based on the standard contractual clauses of the EU commission. Details may be found here: https://mailchimp.com/eu-us-data-transfer-statement/ und https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses.

After you have unsubscribed from the newsletter distribution list, your email address will be saved by us or the newsletter service provider in a blacklist if necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest with the meaning of Art. 6 para. 1 lit. f. DSGVO). There is no time limit on storage in the blacklist. You may object to the storage if your interests outweigh our legitimate interest.

For more details, refer to the Mailchimp privacy policy: https://mailchimp.com/legal/terms/.

6. Plugins and Tools

YouTube

This website embeds videos from the website YouTube. The operator of the website is: Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of our websites on which YouTube is imbedded, a connection to the YouTube services is established. This informs the YouTube server which of our pages you have visited.

YouTube may store various cookies on your terminal device or use comparable technologies for recognition (such as device fingerprinting), allowing YouTube to obtain information about visitors to its website. This information is used, among other things, to collect video statistics, improve the user experience, and prevent fraud attempts.

When you are logged into your YouTube account, you enable YouTube to assign your surfing patterns directly to your personal profile. You may prevent this by logging out of your YouTube account.

YouTube is used in the interest of providing an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If a corresponding consent has been requested, the processing is executed exclusively based on Art. 6 para. 1 lit. a DSGVO and sec. 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (such as device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

More information on the handling of user data is available on YouTube’s privacy policy: https://policies.google.com/privacy?hl=de.

Google Maps

This site uses the map service Google Maps. The provider is: Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site as no influence on this data transmission. If Google Maps is activated, Google may use Google Web Fonts for the purpose of uniform display fonts. When retrieving Google Maps, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offerings and it is an easy to locate places indicated by us on the website. This represents a legitimate interest with the meaning of Art. 6 para. 1 lit. f DSGVO. If a corresponding consent has been requested, the processing is executed exclusively based on Art. 6 para. 1 lit. a DSGVO and sec. 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (such as device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

Data transfer to the US is based on the standard contractual clauses of the EU commission. Details may be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ und https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

You may find more information on the handling of user data in Google’s privacy policy: Google: https://policies.google.com/privacy?hl=de.

Liability Exclusion

Stadt Wien Kunst GmbH is not responsible for errors in content or for technical malfunctions of the website or for errors in the preparation and provision of information and, in particular, accepts no responsibility for content provided or adopted by third parties.

Media of Stadt Wien Kunst (FOTO ARSENAL WIEN and FOTO WIEN) link to other websites on the internet. Stadt Wien Kunst GmbH, however, has no influence on these linked sites and their content, and therefore assumes no liability for the content, function, and legal conformity of the contents and references of these linked sites. The linking to such sites is also for purposes of documentation and therefore does not necessarily represent agreement with the fundamental direction of the medium. Linking does not constitute any form of consent by Stadt Wien Kunst GmbH to the content.

Stadt Wien Kunst GmbH accepts no responsibility for unsolicited project documents, concepts, or works of art.