Privacy Policy

1. Privacy at a glance

Protecting your personal data is very important to us. Therefore, we process your data exclusively on the basis of the legal regulations (GDPR, TKG 2003). In this privacy information, we inform you about the most important aspects of data processing within the scope of our website.

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.

Data collection on our website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. Their contact details can be found in the imprint of this website.

How do we collect your data?

Your data is collected partly by you providing it to us. This can be data you enter in a contact form, for example.

Other data is automatically collected by our IT systems when you visit the website. This mainly includes technical data (e.g., internet browser, operating system, or time of page access). This data collection happens automatically as soon as you enter our website.

What do we use your data for?

Some data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to obtain free information about the origin, recipients, and purpose of your stored personal data at any time. You also have the right to request correction, blocking, or deletion of this data. For this purpose and for other questions regarding data protection, you can contact us at any time at the address provided in the imprint. Furthermore, you have the right to complain to the competent supervisory authority.

Analysis tools and third-party tools

When visiting our website, your surfing behavior may be statistically analyzed. This is mainly done using cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; it cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy.

You can object to this analysis. We will inform you about the objection options in this privacy policy.

 

2. General information and mandatory disclosures

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission over the internet (e.g., communication by email) can have security vulnerabilities. Complete protection of data from third-party access is not possible.

Note on the responsible party

The responsible party for data processing on this website is:

Bank Austria Kunstforum Wien
Freyung 8
1010 Vienna
Tel.: +43 1 537 33
E-Mail: office@kunstforumwien.at

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent you have given at any time. A simple notification by email to us is sufficient. The legality of data processing carried out until revocation remains unaffected by the revocation.

Right to complain to the competent supervisory authority

In the event of data protection violations, the affected person has the right to complain to the competent supervisory authority. In Austria, this is the Data Protection Authority.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract in a commonly used, machine-readable format and to have it transferred to yourself or a third party. If you request direct transfer to another responsible party, this will only be done to the extent technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as site operators. You can recognize an encrypted connection by the change from “http://” to “https://” in the browser address line and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Information, blocking, deletion

You have the right, within the applicable legal provisions, at any time to receive free information about your stored personal data, its origin, and recipients, and the purpose of data processing, and if applicable, the right to correction, blocking, or deletion of this data. For this and other questions regarding personal data, you can contact us at any time at the address provided in the imprint.

Objection to advertising emails

The use of contact data published under the imprint obligation for sending unsolicited advertising and informational materials is hereby contradicted. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

 

3. Data protection officer

For Bank Austria Kunstforum Wien, there is no legal requirement to appoint a data protection officer.
We have voluntarily appointed a data protection officer for our company:

Christian Szaal-Paul
Tel.: +43 1 53733
E-Mail: c.szaal-paul@kunstforumwien.at

 

4. Data collection on our website

Cookies

The websites partly use so-called cookies. Cookies do not cause damage to your computer and do not contain viruses. Cookies are used to make our offer more user-friendly, effective, and secure. Cookies are small text files stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Cookies required to carry out the electronic communication process or to provide certain functions requested by you (e.g., shopping cart function) are stored based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies to provide technically error-free and optimized services. Other cookies (e.g., cookies for analyzing your surfing behavior) are treated separately in this privacy policy.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version

Operating system used

Referrer URL

Hostname of the accessing computer

Time of the server request

IP address

These data are not merged with other data sources.

The basis for data processing is Article 6(1)(b) GDPR, which allows processing of data for the fulfillment of a contract or pre-contractual measures.

Contact form

If you send inquiries via the contact form, your data from the inquiry form, including the contact details you provide there, will be stored to process the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered into the contact form is thus carried out exclusively on the basis of your consent (Article 6(1)(a) GDPR). You can revoke this consent at any time. A simple notification by email is sufficient. The legality of the data processing carried out until revocation remains unaffected by the revocation.

The data you enter in the contact form remains with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after completed processing of your inquiry). Mandatory statutory provisions — especially retention periods — remain unaffected.

Processing of data (customer and contract data)

We collect, process, and use personal data only to the extent necessary to establish, shape content-wise, or change the legal relationship (inventory data). This is done based on Article 6(1)(b) GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures. Personal data about the use of our internet pages (usage data) are collected, processed, and used only to the extent necessary to enable or bill the user for using the service.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

 

5. Analysis tools and advertising

Google Analytics

This website uses features of the web analytics service Google Analytics. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies." These are text files stored on your computer that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server in the USA.

The storage of Google Analytics cookies is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both the website and its advertising.

IP anonymization

We have activated IP anonymization on this website. This means your IP address will be shortened by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser within Google Analytics will not be merged with other Google data.

Browser plugin

You can prevent the storage of cookies by configuring your browser software accordingly. However, we point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent the data generated by the cookie about your use of the website (including your IP address) from being sent to Google and processed by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent the collection of your data by Google Analytics. More information about handling user data in Google Analytics can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

We have concluded a contract on order processing with Google and fully implement the strict requirements of the Austrian data protection authorities when using Google Analytics.

Demographic features with Google Analytics

This website uses the "demographic features" function of Google Analytics. This allows reports to be created containing statements about the age, gender, and interests of the website visitors. These data come from interest-based advertising from Google and visitor data from third parties. These data cannot be assigned to any specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section "Objection to data collection."

Facebook Pixel

Our website uses the Facebook Pixel for conversion measurement by Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").

This allows the behavior of visitors to be tracked after clicking on a Facebook ad and being redirected to the provider's website. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The data collected is anonymous for us as the operator of this website; we cannot draw conclusions about the identity of users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible, and Facebook can use the data for its own advertising purposes according to Facebook's data usage policy. This allows Facebook to place ads on Facebook pages as well as outside Facebook. This use of the data cannot be influenced by us as site operators.

You can find further privacy information from Facebook at: https://www.facebook.com/about/privacy/.

You can also deactivate the remarketing function "Custom Audiences" in the ad settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged into Facebook to do this.

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

 

6. Newsletter

Newsletter data

If you want to receive the newsletter offered on the website, we need your email address and information that allow us to verify that you are the owner of the given email address and agree to receive the newsletter. No further data or only data voluntarily provided will be collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of data entered in the newsletter subscription form is exclusively based on your consent (Article 6(1)(a) GDPR). You can revoke the consent given for storing the data, the email address, and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of data processing carried out until revocation remains unaffected.

The data you provide to us for the purpose of receiving the newsletter will be stored until you unsubscribe from the newsletter and deleted afterward. Legal retention periods remain unaffected.

 

7. Plugins and tools

YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is
YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to YouTube's servers is established. In doing so, the YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of presenting our online offerings in an appealing way. This constitutes a legitimate interest pursuant to Art. 6(1)(f) GDPR.

Further information on the handling of user data can be found in YouTube's privacy policy at:
https://www.google.de/intl/en/policies/privacy

Google Web Fonts

This site uses so-called Web Fonts provided by Google for the uniform display of fonts. When you access a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

To do this, the browser you use must connect to Google’s servers. This lets Google know that our website was accessed via your IP address.

The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offerings. This constitutes a legitimate interest pursuant to Art. 6(1)(f) GDPR.

If your browser does not support web fonts, a standard font from your computer will be used.

More information about Google Web Fonts can be found at:
https://developers.google.com/fonts/faq
and in Google’s privacy policy:
https://www.google.com/policies/privacy/

Google Maps

This site uses the map service Google Maps via an API. The provider is
Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

The use of Google Maps is in the interest of providing an attractive presentation of our online offers and to make it easy to find the locations we indicate on the website. This constitutes a legitimate interest pursuant to Art. 6(1)(f) GDPR.

More information on the handling of user data can be found in Google's privacy policy:
https://www.google.de/intl/en/policies/privacy/