Privacy at a Glance

What happens to your data when you visit our website?

When you visit this website, technical data such as your IP address, the browser you use, or the pages you visit is automatically stored. If you contact us, we also collect the data you provide to us (e.g. name, email address, message).

How do we collect your data?

  • Automatically when you visit the website (e.g. via server logs).
  • Manually when you, for example, complete a form.

What do we use your data for?

  • To provide and secure the website.
  • To process enquiries.

What rights do you have?

  • Access, rectification, erasure, restriction
  • Withdrawal of your consent
  • Objection to certain types of processing
  • Right to lodge a complaint with a supervisory authority

Privacy Policy

1. General Information and Mandatory Information

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this Privacy Policy.

When you use this website, various types of personal data are collected. Personal data is data that can be used to identify you personally. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done and how long we retain the data.

Please note that data transmission over the Internet (e.g. communication by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information about the controller

The controller responsible for data processing on this website is:

Konzertvereinigung Wiener Staatsopernchor
Opernring 2, A-1015 Vienna, Austria

Tel: +43 664 967 87 00
Email: office@konzertvereinigung-staatsopernchor.at

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, email addresses or similar data).

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You may withdraw consent that you have already given at any time. An informal notification by email is sufficient for this purpose. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected by the withdrawal.

Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)

If your data is processed on the basis of certain legal provisions (Article 6(1)(e) or (f) GDPR), you have the right to object at any time. This means that you may inform us that you no longer wish us to use your data. This also applies to automated analysis of your data (profiling). The specific legal bases used are set out in this Privacy Policy.

If you object, we will no longer process your data. An exception applies only where we can demonstrate compelling legitimate grounds that override your rights, or where we require the data to establish, exercise or defend legal claims (objection pursuant to Article 21(1) GDPR).

If your data is used for advertising purposes, you may object to this at any time. This also applies where your data is automatically analysed in order to tailor advertising to you. Once you object, we will no longer use your data for advertising purposes (objection pursuant to Article 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be carried out where technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the change in the browser’s address bar from “http://” to “https://” and by the padlock symbol in your browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Access, erasure and rectification

Within the scope of the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as, where applicable, a right to rectification or erasure of this data. For this purpose and for any further questions regarding personal data, you may contact us at any time using the address stated in the legal notice.

You have the right to request confirmation as to whether your personal data is being processed. If this is the case, you have the right to obtain access to this data as well as the following information:

  • the purposes of the processing,
  • the categories of personal data being processed,
  • the recipients or categories of recipients to whom your data has been or will be disclosed, in particular recipients in third countries or international organisations,
  • where possible, the envisaged period for which your data will be stored or, if this is not possible, the criteria used to determine that period,
  • the existence of a right to request rectification or erasure of your personal data or restriction of processing by the controller, or a right to object to such processing,
  • the existence of a right to lodge a complaint with a supervisory authority,
  • where your data was not collected from you, any available information as to its source,
  • the existence of automated decision-making, including profiling pursuant to Article 22(1) and (4), and, at least in those cases, meaningful information about the logic involved as well as the significance and envisaged consequences of such processing for you.

If your data is transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards pursuant to Article 46 in connection with the transfer.

The controller will provide you with a copy of the personal data undergoing processing. For any further copies you request, the controller may charge a reasonable fee based on administrative costs. If you make the request electronically, the information must be provided in a commonly used electronic format unless you request otherwise.

The right to obtain a copy must not adversely affect the rights and freedoms of others.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time using the address stated in the legal notice. The right to restriction of processing applies in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally require time to verify this. For the duration of the verification, you have the right to request restriction of the processing of your personal data.

If the processing of your personal data was or is unlawful, you may request restriction of data processing instead of erasure.

If we no longer require your personal data, but you require it for the establishment, exercise or defence of legal claims, you have the right to request restriction of processing instead of erasure.

If you have lodged an objection pursuant to Art. 21(1) GDPR, your interests and our interests must be weighed against each other. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data may – apart from storage – only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

Objection to promotional emails

We hereby object to the use of contact details published as part of the legal notice requirements for the purpose of sending unsolicited advertising and informational materials. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails.

2. Hosting and Content Delivery Networks (CDN)

External hosting

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, contractual data, contact details, names, website access data and other data generated via a website.

The hosting provider is used for the purpose of fulfilling contractual obligations towards our prospective and existing customers (Art. 6(1)(b) GDPR) and in our legitimate interest in the secure, fast and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

Our hosting provider will process your data only to the extent necessary to fulfil its service obligations and will follow our instructions with regard to this data.

Server log files

When you access the website, our hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits. These include:

  • IP address of the requesting device (shortened or anonymised)
  • Date and time of access
  • Name and URL of the requested file
  • Website from which the access originated (referrer URL)
  • Browser used and, where applicable, the operating system of your device
  • Hostname of the accessing computer

This data is processed to ensure stable and secure server operation (e.g. for error analysis, detection of misuse and defence against attacks).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

This data is not combined with other data sources. Log files are generally stored for 7 days and then automatically deleted unless security-related incidents require a longer retention period.

Data processing agreement

To ensure data protection-compliant processing, we have concluded a data processing agreement with our hosting provider.

3. Data Collection on This Website

Website analytics with Independent Analytics

This website uses the privacy-friendly analytics tool Independent Analytics, which runs locally on our server. No personal data such as IP addresses is stored and no cookies are set.

Only anonymised information about page views is collected in order to better understand visitor behaviour on our website (e.g. which pages are viewed and how often, which website visitors came from, the type of device used, etc.).

The processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in making our website user-friendly and technically stable. The data is not disclosed to third parties.

Enquiries by email, telephone or via the contact form

If you contact us by email, telephone or via the contact form, your enquiry, including all personal data arising from it (name, enquiry), will be stored and processed by us for the purpose of handling your request. We do not disclose this data without your consent.

The processing of your personal data is lawful under Art. 6 GDPR only if at least one of the following conditions applies:

  1. Consent: You have expressly consented to your data being processed for a specific purpose.
  2. Performance of a contract: Processing is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract.
  3. Legal obligation: Processing is required by law (e.g. tax-related retention periods).
  4. Vital interests: Processing is necessary to protect your vital interests or those of another person.
  5. Public interest / exercise of official authority: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
  6. Legitimate interests: Processing is necessary for the purposes of our legitimate interests or those of a third party, unless your interests or fundamental rights override those interests.

Note: Public authorities may rely on “legitimate interests” only to a limited extent.

Change of purpose

If personal data is to be further processed for a purpose other than the one for which it was originally collected, we carefully assess whether the new processing is compatible with the original purpose. In doing so, we take into account:

  • the context in which the data was originally collected,
  • the nature of the personal data,
  • possible consequences for the data subject,
  • as well as existing security measures (e.g. encryption, pseudonymisation).

Retention period and data minimisation

We store your personal data only for as long as is necessary to fulfil the respective purpose or for as long as statutory retention obligations apply. Once the purpose no longer applies or the retention period expires, the data will be deleted.

If we have a legitimate interest in continuing to store the data (e.g. for the establishment or defence of legal claims), the data may be stored for up to 3 years or, in exceptional cases, longer.

4. Cookies

Our websites use so-called “cookies”. Cookies are small text files and do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your device when you visit our website (third-party cookies). These enable us or you to use certain services provided by the third party (e.g. cookies used to process payment services).

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to analyse user behaviour or display advertising.

Cookies that are necessary for carrying out electronic communications (necessary cookies), for providing certain functions you have requested (functional cookies, e.g. for the shopping cart function), or for optimising the website (e.g. cookies used to measure website audiences) are stored on the basis of Art. 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing cookies in order to ensure the technically error-free and optimised provision of its services. Where consent to the storage of cookies has been requested, the relevant cookies are stored exclusively on the basis of that consent (Art. 6(1)(a) GDPR); consent may be withdrawn at any time.

You can configure your browser to inform you when cookies are being set and to allow cookies only in individual cases, to reject cookies in certain cases or generally, and to automatically delete cookies when the browser is closed. Disabling cookies may restrict the functionality of this website.

You can manage the cookie settings for this website at https://konzertvereinigung-staatsopernchor.at/de/cookie-richtlinie-eu/.

5. External Services

Some functions on this website occasionally make use of external services. At https://konzertvereinigung-staatsopernchor.at/de/cookie-richtlinie-eu/, you can find information about these services and activate or deactivate their use.

6. Changes to the Privacy Policy

We reserve the right to amend this Privacy Policy in order to adapt it to changes in the legal situation or to changes in the service and data processing. However, this applies only with regard to statements concerning data processing. Where user consent is required or where parts of the Privacy Policy contain provisions governing the contractual relationship with users, changes will only be made with the users’ consent.

Users are requested to regularly review the contents of this Privacy Policy.

Last updated: 19 December 2025