Data Protection

Data Protection

1. General

Your personal data (“data”) is in safe hands with us! We are committed to protecting your data and we take our task very seriously. Please take the time to read the information about data protection in order to understand why we collect your data and how we process it.

Please note that information about data protection relating to the matter under discussion only applies to the data processing referred to in Points 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4 and 3.2 (website use and/or newsletter subscription); for other types of data processing, particularly that relating to registration and ticket purchase for Vienna UP events, the data protection information provided by the event organiser and ticketing platform operator applies.   

  • For information on how we process your data when you visit our website please see Points 3.1 and subs.
  • For information on how we process your data when you sign up to receive our newsletter, please see Point 3.2

2. What is personal data?

Personal data is all information related to an identified or identifiable natural person (for example, name, contact details, billing information, IP address).

3. How do we process your data?

Whether you are visiting our website or are subscribed to our newsletter, we process your data as follows:

3.1 Processing your data when you visit our website

When you visit our website the following data may be collected, stored, analysed or processed in some way:

  • Device (mobile, desktop, tablet)
  • Browser type
  • Operating system
  • Country
  • Date, time and length of access
  • IP address
  • Pages visited on our website, including entry and exit pages
  • Data downloaded
  • Data you provide via forms

For the successful operation of our website we sometimes need to disclose your data to the following recipients. This disclosure can take place via transmission, dissemination or some other form of provision.  

  • Recipient : next layer Telecommunications Services and Consulting GmbH 
    • Purpose: Website hosting, internet services
    • Legal basis: Legitimate interests (Art. 6 Para. 1(f) DSGVO [Austrian equivalent of GDPR] 
    • Address of recipient: Austria
    • Basis for disclosure to a third country*: Within the EEA** or standard data protection clauses
  • Recipient: LIMESODA Interactive Marketing GmbH
    • Purpose: Hosting the website
    • Legal basis: Legitimate interests (Art. 6 Para. 1(f) DSGVO  Maintaining the website
    • Address of recipient: Austria
    • Basis for disclosure to a third country*: Within the EEA** or standard data protection clauses

* ‘Third country’ refers to all states other than (1) the member states of the European Union and (2) the member states of the European Economic Area, i.e. Iceland, Liechtenstein and Norway, in addition to the EU member states.

** EEA stands for European Economic Area.

3.1.1 Use of cookies

Data is stored in ‘cookies’. Cookies are text files which are stored on your computer or mobile device, whether or not they are personalised. They enable user recognition and the temporary storing of information. Essentially, we only use cookies that are essential for us to interact with you through our website.

You can prevent cookies being stored – regardless of whether or they are stored without your consent (strictly necessary cookies) or with your consent (non-essential cookies) – via the corresponding settings on your browser; stored cookies can also be deleted at any time from your computer or mobile device. However, please note that if you do so, you may not be able to use some functions on this website to the full extent.

3.1.2 The use of strictly necessary cookies

To enable us to interact with you via our website, we need to temporarily store certain types of information. The legal basis for storing information in cookies on your computer or mobile device is
Art. 6 Para. 1(f) DSGVO (legitimate interest), which is only applicable when the interests of the website user do not override our interests.

The following strictly necessary cookies are used on our website:

  • Designation: fe_typo_user
    • Recipient: Limesoda
    • Purpose: Temporary storing of information at signup
    • Address of recipient: Austria
    • Duration of storage: Until user ends the session or logs off
  • Designation: LSCookieConsent
    • Recipient: Limesoda
    • Purpose: Storing of information about consent to cookies and services
    • Address of recipient: Austria
    • Duration of storage: One year

3.1.3 The use of non-essential cookies

Non-essential cookies are stored and used based on your voluntary consent. For example, they enable data on your surfing habits to be pooled with data from other websites. This makes it possible for us to offer you customised services and to continually improve our services.
The storing and use of the following cookies occurs only when you give your consent, in line with Section 165 of the Telecommunications Act (Telekommunikationsgesetz, TKG) 2021 in conjunction with Art. 6 Para 1(a) DSGVO.

You have the right to withdraw your consent at any time. You can do this by altering your cookie settings (by rejecting all strictly necessary cookies) on the website www.viennaup.com/data protection. Unfortunately, for technical reasons it is not possible to withdraw consent remotely, since this involves a setting which you can only use from your device.
This means that the legality of data processing that has already taken place is not affected (Art. 7 Para. 3 DSGVO).

  • Designation: _gat
    • Recipient: Google LL.C.
    • Purpose: Reduction of the rate of demand for information
    • Address of recipient: California, USA
    • Duration of storage: 1 minute
  • Designation: _ga
    • Recipient: Google LL.C.
    • Purpose: Returning-user recognition and pooling of data on individual users
    • Address of recipient: California, USA
    • Duration of storage: 1 year
  • Designation: _gid
    • Recipient: Google LL.C.
    • Purpose: Clear recognition of users
    • Address of recipient: California, USA
    • Duration of storage: 24 hours
  • Designation: _pk_id
    • Recipient: Vienna Business Agency
    • Purpose: Recognizing returning visitors and merging the data of the individual visits
    • Address of recipient: Austria
    • Duration of storage: 13 months
  • Designation: _pk_sess, _pk_cvar, _pk_hsr
    • Recipient: Vienna Business Agency
    • Purpose: Unique visitor identification of visitors
    • Address of recipient: Austria
    • Duration of storage: 30 minutes
  • Designation: _pk_ref
    • Recipient: Vienna Business Agency
    • Purpose: Recognizing the website users are coming from
    • Address of recipient: Austria
    • Duration of storage: 6 months
  • Designation: _fbp
    • Recipient: Vienna Business Agency
    • Purpose: Allows us to monitor how you use our website if you reach it via an advertisement on Meta.
    • Address of recipient: Meta Platforms Ireland Limited
    • Duration of storage: 3 months

3.1.4 Data protection information for using Google Analytics

This website uses Google Analytics, a web-analysis service of Google LL.C. (‘Google’). This enables analysis of your use of the website.

If you consent to the relevant cookies being stored, the information collected by the cookie about your use of the website is transferred to a Google server in the USA and stored there. If IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting member states in the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operators of this website to evaluate your use of the website in order to compile analyses of website activity and provide further services connected with website use and internet use to the website user. The IP address provided for the purposes of Google Analytics will not be pooled with other data by Google.

3.1.5 Data protection information regarding the use of Matomo

This website uses Matomo, a web analysis service. Matomo is software developed by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. It enables an analysis of your use of the website.

If you agree to the storage of the cookie required for this, the information generated by the cookie about your use of this website will be transmitted to and stored on a server managed by us, which is located within the European Union. IP anonymisation is activated and your IP address will be reduced. The generated information about the use of the website is not passed on to third parties.

3.1.6 Meta Pixel

For marketing purposes, we use Meta Pixel, an analysis tool provided by Meta.

Meta Pixel is an analysis tool that enables us to analyse user behaviour on our website and measure the efficacy of our advertising. The data we collect is transmitted to Meta. Meta can connect this data with your Meta account and also use it for its own purposes.

3.2 Data processing when you sign up to our newsletter

Provided we have your consent (in accordance with Art. 6 Para. 1(a) DSGVO), we will process your data in order to keep you regularly updated about the Vienna Business Agency through our newsletter.

In administering our newsletter subscriber list and sending out the newsletter, we process the following data about you:

  • Email address
  • First and last name (optional)
  • City (optional)
  • Time of your subscription to the newsletter

For the purpose of analysis, we collect from you and process the following data as you read the newsletter:

  • IP address (of the device on which the newsletter is being read)
  • Newsletter reading preferences (click behaviour)
  • Blocking and marking as spam
  • Time at which the newsletter is opened

If you do not wish to provide this information we would ask you not to sign up for the newsletter. You can unsubscribe from the newsletter at any time by clicking on the relevant links therein. This ensures that the legality of the data processing that has already taken place is not affected (Art. 7 Para. 3 DSGVO).

We store the data listed above in connection with sending out the newsletter until the user withdraws their consent. Please note that sending out the newsletter is not a form of direct marketing.

In sending out the newsletter, we may disclose your data to the following recipients (via transfer, dissemination or another form of provision):

  • Recipient: eworx Network & Internet GmbH
    • Purpose: Handling of newsletter distribution
    • Address of recipient: Austria
    • Legal basis for disclosure to a third country: Within the EEA

4. Automated decision-making

Please note that we do not carry out any data processing within the meaning of Art. 22 DSGVO. This means that we do not make any decisions based exclusively on automated processing (including profiling) which has a legal effect or impact of similar significance on you; each possible decision, with its corresponding effect, is made by a natural person.

5. What are your rights in respect of data processing?

Please be informed that you have the right:

  • at any time to request information about which personal data about yourself is being processed by us. The right to information also includes the right to receive a copy of the data, as long as doing so does not affect the rights and freedoms of another person (for details see Art. 15 DSGVO);
  • to request the correction or completion of incorrect or incomplete data relating to you (for details see Art. 16 DSGVO);
  • to request the deletion of your data (for details see Art. 17 DSGVO).  
    We should like to point out that we cannot comply with a deletion request if processing (storing) is necessary in order to fulfil a legal obligation (statutory archive requirement) or we have the right not to comply because of overriding interests (e.g. the assertion or defence of specific legal rights);
  • subject to certain conditions, to request a reduction in the processing of your data (for details see Art. 18 DSGVO);
  • to object to the processing of your data which is necessary to protect our legitimate interests or those of a third party. If an objection is raised, we will stop processing your data, unless the processing serves the assertion, execution or defence of legal claims or we can establish compelling reasons (worthy of protection) for the processing that override your interests. If you raise an objection to processing for the purposes of direct advertising, we will stop processing your personalised data for these purposes (for details see Art. 21 DSGVO);
  • to have the data supplied by you transferred in a structured, conventional and machine-readable format. The right to transferability of data only exists where processing is based on your consent or on a contract (for details see Art. 20 DSGVO).

In the unlikely event that, despite our commitment to processing your data lawfully, you think that your personal data is not being processed lawfully, please contact us by post or email (see contact details below) so that we are aware of your concerns and can deal with them. You also have the right to lodge a complaint with the Austrian Data Protection Authority or with another data protection regulatory authority in the EU, particularly one in your habitual place of residence or work. 

We hope that this information has helped to clarify how and for what purposes we process your data. If you have any further questions about the processing of your personalised data, please contact our Data Protection representative as per the details given below.

Wirtschaftsagentur Wien. Ein Fonds der Stadt Wien. [Vienna Business Agency. An Endowment Fund of the City of Vienna]
Mariahilfer Straße 20, 1070 Vienna
email: info@wirtschaftsagentur.at
Tel.: +43 1 25200

Contact details for the Data Protection representative:

Harald Kudlich
email: kudlich@wirtschaftsagentur.at 
T.: +43 (0)1 25200 853