Data Protection

Your personal data (“data”) is in safe hands with us! We are committed to protecting your data and we take our task very seriously. Please take the time to read the information about data protection in order to understand why we collect your data and how we process it.

Please note that information about data protection relating to the matter under discussion only applies to the data processing referred to in Points 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4 and 3.2 (website use and/or newsletter subscription); for other types of data processing, particularly that relating to registration and ticket purchase for Vienna UP events, the data protection information provided by the event organiser and ticketing platform operator applies.   

• For information on how we process your data when you visit our website please see Points 3.1 and subs.
• For information on how we process your data when you sign up to receive our newsletter, please see Point 3.2

Personal data is all information related to an identified or identifiable natural person (for example, name, contact details, billing information, IP address).

Whether you are visiting our website or are subscribed to our newsletter, we process your data as follows:

When you visit our website the following data may be collected, stored, analysed or processed in some way:

• Device (mobile, desktop, tablet)
• Browser type
• Operating system
• Country
• Date, time and length of access
• IP address
• Pages visited on our website, including entry and exit pages
• Data downloaded
• Data you provide via forms

For the successful operation of our website we sometimes need to disclose your data to the following recipients. This disclosure can take place via transmission, dissemination or some other form of provision.  

• Recipient : next layer Telecommunications Services and Consulting GmbH 
  • Purpose: Website hosting, internet services
  • Legal basis: Legitimate interests (Art. 6 Para. 1(f) DSGVO [Austrian equivalent of GDPR] 
  • Address of recipient: Austria
  • Basis for disclosure to a third country*: Within the EEA** or standard data protection clauses
• Recipient: LIMESODA Interactive Marketing GmbH
  • Purpose: Hosting the website
  • Legal basis: Legitimate interests (Art. 6 Para. 1(f) DSGVO  Maintaining the website
  • Address of recipient: Austria
  • Basis for disclosure to a third country*: Within the EEA** or standard data protection clauses

* ‘Third country’ refers to all states other than (1) the member states of the European Union and (2) the member states of the European Economic Area, i.e. Iceland, Liechtenstein and Norway, in addition to the EU member states.

** EEA stands for European Economic Area.

Data is stored in ‘cookies’. Cookies are text files which are stored on your computer or mobile device, whether or not they are personalised. They enable user recognition and the temporary storing of information. Essentially, we only use cookies that are essential for us to interact with you through our website.

You can prevent cookies being stored – regardless of whether or they are stored without your consent (strictly necessary cookies) or with your consent (non-essential cookies) – via the corresponding settings on your browser; stored cookies can also be deleted at any time from your computer or mobile device. However, please note that if you do so, you may not be able to use some functions on this website to the full extent.

To enable us to interact with you via our website, we need to temporarily store certain types of information. The legal basis for storing information in cookies on your computer or mobile device is
Art. 6 Para. 1(f) DSGVO (legitimate interest), which is only applicable when the interests of the website user do not override our interests.

The following strictly necessary cookies are used on our website:

• Designation: fe_typo_user
  • Recipient: Limesoda
  • Purpose: Temporary storing of information at signup
  • Address of recipient: Austria
  • Duration of storage: Until user ends the session or logs off
• Designation: LSCookieConsent
  • Recipient: Limesoda
  • Purpose: Storing of information about consent to cookies and services
  • Address of recipient: Austria
  • Duration of storage: One year

Non-essential cookies are stored and used based on your voluntary consent. For example, they enable data on your surfing habits to be pooled with data from other websites. This makes it possible for us to offer you customised services and to continually improve our services.
The storing and use of the following cookies occurs only when you give your consent, in line with Section 165 of the Telecommunications Act (Telekommunikationsgesetz, TKG) 2021 in conjunction with Art. 6 Para 1(a) DSGVO. The basis for using the Matomo Tag Manager is our legitimate interest according to Art. 6 para 1 lit f DSGVO.

You have the right to withdraw your consent at any time. You can do this by altering your cookie settings (by rejecting all strictly necessary cookies) on the website www.viennaup.com/data protection. Unfortunately, for technical reasons it is not possible to withdraw consent remotely, since this involves a setting which you can only use from your device.
This means that the legality of data processing that has already taken place is not affected (Art. 7 Para. 3 DSGVO).

• Designation: _gat
  • Recipient: Google LL.C.
  • Purpose: Reduction of the rate of demand for information
  • Address of recipient: California, USA
  • Duration of storage: 1 minute
• Designation: _ga
  • Recipient: Google LL.C.
  • Purpose: Returning-user recognition and pooling of data on individual users
  • Address of recipient: California, USA
  • Duration of storage: 1 year
• Designation: _gid
  • Recipient: Google LL.C.
  • Purpose: Clear recognition of users
  • Address of recipient: California, USA
  • Duration of storage: 24 hours
• Designation: _pk_id
  • Recipient: Vienna Business Agency
  • Purpose: Recognizing returning visitors and merging the data of the individual visits
  • Address of recipient: Austria
  • Duration of storage: 13 months
• Designation: _pk_sess, _pk_cvar, _pk_hsr
  • Recipient: Vienna Business Agency
  • Purpose: Unique visitor identification of visitors
  • Address of recipient: Austria
  • Duration of storage: 30 minutes
• Designation: _pk_ref
  • Recipient: Vienna Business Agency
  • Purpose: Recognizing the website users are coming from
  • Address of recipient: Austria
  • Duration of storage: 6 months
• Designation: _fbp
  • Recipient: Facebook Ireland Ltd.
  • Purpose: Allows us to monitor how you use our website if you reach it via an advertisement on Meta.
  • Address of recipient: Meta Platforms Ireland Limited
  • Duration of storage: 3 months
• Designation: _test_cookie
  • Recipient: Google LL.C.
  • Purpose: Functionality
  • Address of recipient: California, USA
  • Duration of storage: 15 minutes
• Designation: _IDE
  • Recipient: Google LL.C.
  • Purpose: Advertising
  • Address of recipient: California, USA
  • Duration of storage: 13 months EEA/UK, 24 months elsewhere
• Designation: __gcl_aw
  • Recipient: Google LL.C.
  • Purpose: Analytics, Advertising
  • Address of recipient: California, USA
  • Duration of storage: 90 days
• Designation: __gcl_dc
  • Recipient: Google LL.C.
  • Purpose: Analytics, Advertising
  • Address of recipient: California, USA
  • Duration of storage: 90 days
• Designation: __gcl_gb
  • Recipient: Google LL.C.
  • Purpose: Analytics, Advertising
  • Address of recipient: California, USA
  • Duration of storage: 90 days
• Designation: __bcookie
  • Recipient: LinkedIn
  • Purpose: This browser identifier cookie is used to uniquely identify devices accessing LinkedIn, to detect misuse of the platform, and for diagnostic purposes.
  • Address of recipient: California, USA
  • Duration of storage: 1 year
• Designation: __bscookie
  • Recipient: LinkedIn
  • Purpose: This cookie remembers the two-factor authentication status of a logged-in user
  • Address of recipient: California, USA
  • Duration of storage: 1 year
• Designation: __JSESSIONID
  • Recipient: LinkedIn
  • Purpose: This cookie is used to protect against CSRF (Cross Site Request Forgery) and to validate URL signatures.
  • Address of recipient: California, USA
  • Duration of storage: Session
• Designation: __lang
  • Recipient: LinkedIn
  • Purpose: This cookie stores a user's language setting and ensures that LinkedIn.com is displayed in the language the user has selected in their settings.
  • Address of recipient: California, USA
  • Duration of storage: Session
• Designation: __lidc
  • Recipient: LinkedIn
  • Purpose: This cookie provides for the selection of the data center.
  • Address of recipient: California, USA
  • Duration of storage: 24 hours
• Designation: __li_gc
  • Recipient: LinkedIn
  • Purpose: This cookie is used to store the consent of guests to the use of non-mandatory cookies
  • Address of recipient: California, USA
  • Duration of storage: 6 months
• Designation: __UserMatchHistory
  • Recipient: LinkedIn
  • Purpose: This cookie is used to synchronize the IDs of LinkedIn Ads
  • Address of recipient: California, USA
  • Duration of storage: 30 days
• Designation: __li_fat_id
  • Recipient: LinkedIn
  • Purpose: This cookie is an indirect member identifier used for conversion tracking, retargeting and analytics.
  • Address of recipient: California, USA
  • Duration of storage: 30 days
• Designation: ___guid
  • Recipient: LinkedIn
  • Purpose: This cookie identifies a LinkedIn member for advertising via Google Ads.
  • Address of recipient: California, USA
  • Duration of storage: 90 days
• Designation: ___li_giant
  • Recipient: LinkedIn
  • Purpose: Indirect identifier for groups of LinkedIn members, which is used for conversion tracking
  • Address of recipient: California, USA
  • Duration of storage: 7 days

This website uses Google Analytics, a web-analysis service of Google LL.C. (‘Google’). This enables analysis of your use of the website.

If you consent to the relevant cookies being stored, the information collected by the cookie about your use of the website is transferred to a Google server in the USA and stored there. If IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting member states in the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operators of this website to evaluate your use of the website in order to compile analyses of website activity and provide further services connected with website use and internet use to the website user. The IP address provided for the purposes of Google Analytics will not be pooled with other data by Google.

This website uses Matomo, a web analysis service. Matomo is software developed by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. It enables an analysis of your use of the website.

If you agree to the storage of the cookie required for this, the information generated by the cookie about your use of this website will be transmitted to and stored on a server managed by us, which is located within the European Union. IP anonymisation is activated and your IP address will be reduced. The generated information about the use of the website is not passed on to third parties.

For marketing purposes, we use Meta Pixel, an analysis tool provided by Meta.

Meta Pixel is an analysis tool that enables us to analyse user behaviour on our website and measure the efficacy of our advertising. The data we collect is transmitted to Meta. Meta can connect this data with your Meta account and also use it for its own purposes.

We use the website analytics feature LinkedIn Insight-Tag from LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2 Ireland; "LinkedIn").

The LinkedIn Insight tag enables the collection of data from your visit to our website, including URL, referrer URL, IP address, device and browser properties (user agent), and timestamp.

IP addresses are shortened or hashed. LinkedIn does not share any personally identifiable information with us, but uses the data collected on our website for reports (in which you are not identified) about website visitors and ad performance.

LinkedIn also provides retargeting for website visitors on LinkedIn, so we can use this data to display targeted ads outside of our website without identifying you.

LinkedIn also uses data that does not identify you to improve the relevance of ads and reach members across devices. If you do not want this to happen, you can opt out of retargeting.

For more information on data protection in connection with LinkedIn, please visit https://de.linkedin.com/legal/privacy-policy?_l=de_DEhier.

The use of the LinkedIn insight tag and the associated tracking is based on your consent. You can revoke this consent at any time with effect for the future.

The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to play advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be played on the basis of user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms led to the display of our advertisements and how many ads resulted in corresponding clicks.

We use the Google Ads Conversion offer to draw attention to our attractive offers on external websites with the help of Google Ads. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. In this way, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

If you access our website via a Google Ad, Google Ads will store a cookie on your terminal device. These cookies usually lose their validity after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values.

These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers' websites. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.

With Google Ads Remarketing, we can assign people who interact with our online offer to specific target groups in order to subsequently display interest-based advertising to them in the Google advertising network (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Ads Remarketing can be linked to Google's cross-device functions. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one end device (e.g. cell phone) can also be displayed on another of your end devices (e.g. tablet or PC).

If you have a Google account, you can object to personalized advertising at the following link: https://www.google.com/settings/ads/onweb/.

This website uses Matomo Tag Manager. This is a solution that allows marketers to manage website tags through one interface. The tool itself (which implements the tags) is a cookie-less domain and does not store any personal data. The tool triggers other tags, which in turn may collect data. Matomo Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will remain in place for all tracking tags implemented with Matomo Tag Manager. Matomo Tag Manager does not store any personal data. The basis is our legitimate interest according to Art. 6 para. 1 lit. f DSGVO .

For 3.1.4 as well as for 3.1.6, 3.1.7 and 3.1.8, transfers to third countries (also outside the EU, especially the USA) are possible. In particular, the USA is not certified by the European Court of Justice as having an adequate level of data protection due to the lack of a supervisory authority, no real data protection rules, no effective legal protection for EU citizens to enforce your data subject rights to erasure, etc. under the GDPR in the USA, as well as the risk that your data will be processed by US authorities for control and monitoring purposes without effective legal remedies against it.

Provided we have your consent (in accordance with Art. 6 Para. 1(a) DSGVO), we will process your data in order to keep you regularly updated about the Vienna Business Agency through our newsletter.

In administering our newsletter subscriber list and sending out the newsletter, we process the following data about you:

• Email address
• First and last name (optional)
• City (optional)
• Time of your subscription to the newsletter

For the purpose of analysis, we collect from you and process the following data as you read the newsletter:

• IP address (of the device on which the newsletter is being read)
• Newsletter reading preferences (click behaviour)
• Blocking and marking as spam
• Time at which the newsletter is opened

If you do not wish to provide this information we would ask you not to sign up for the newsletter. You can unsubscribe from the newsletter at any time by clicking on the relevant links therein. This ensures that the legality of the data processing that has already taken place is not affected (Art. 7 Para. 3 DSGVO).

We store the data listed above in connection with sending out the newsletter until the user withdraws their consent. Please note that sending out the newsletter is not a form of direct marketing.

In sending out the newsletter, we may disclose your data to the following recipients (via transfer, dissemination or another form of provision):

• Recipient: eworx Network & Internet GmbH
  • Purpose: Handling of newsletter distribution
  • Address of recipient: Austria
  • Legal basis for disclosure to a third country: Within the EEA

Please note that we do not carry out any data processing within the meaning of Art. 22 DSGVO. This means that we do not make any decisions based exclusively on automated processing (including profiling) which has a legal effect or impact of similar significance on you; each possible decision, with its corresponding effect, is made by a natural person.

Please be informed that you have the right:

• at any time to request information about which personal data about yourself is being processed by us. The right to information also includes the right to receive a copy of the data, as long as doing so does not affect the rights and freedoms of another person (for details see Art. 15 DSGVO);
• to request the correction or completion of incorrect or incomplete data relating to you (for details see Art. 16 DSGVO);
• to request the deletion of your data (for details see Art. 17 DSGVO).  
  We should like to point out that we cannot comply with a deletion request if processing (storing) is necessary in order to fulfil a legal obligation (statutory archive requirement) or we have the right not to comply because of overriding interests (e.g. the assertion or defence of specific legal rights);
• subject to certain conditions, to request a reduction in the processing of your data (for details see Art. 18 DSGVO);
• to object to the processing of your data which is necessary to protect our legitimate interests or those of a third party. If an objection is raised, we will stop processing your data, unless the processing serves the assertion, execution or defence of legal claims or we can establish compelling reasons (worthy of protection) for the processing that override your interests. If you raise an objection to processing for the purposes of direct advertising, we will stop processing your personalised data for these purposes (for details see Art. 21 DSGVO);
• to have the data supplied by you transferred in a structured, conventional and machine-readable format. The right to transferability of data only exists where processing is based on your consent or on a contract (for details see Art. 20 DSGVO).

In the unlikely event that, despite our commitment to processing your data lawfully, you think that your personal data is not being processed lawfully, please contact us by post or email (see contact details below) so that we are aware of your concerns and can deal with them. You also have the right to lodge a complaint with the Austrian Data Protection Authority or with another data protection regulatory authority in the EU, particularly one in your habitual place of residence or work. 

We hope that this information has helped to clarify how and for what purposes we process your data. If you have any further questions about the processing of your personalised data, please contact our Data Protection representative as per the details given below.