PRIVACY POLICY


German version


Personal data (usually referred to just as "data" below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, selling digital guidebooks (PDFs), event tickets, and other services offered there.
Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the "GDPR"), "processing" refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.
The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience, which may result in said third parties also processing data they collect and control.

1. Rights of Users and Data Subjects
With regard to the data processing described in more detail below, users and data subjects have the right:
  • to confirm whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. Art. 15 GDPR);
  • to correct or complete incorrect or incomplete data (cf. Art. 16 GDPR);
  • to the immediate deletion of data concerning them (cf. Art. 17 GDPR), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
  • to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. Art. 20 GDPR);
  • to file complaints with the supervisory authority if they believe that data concerning them is being processed in breach of data protection provisions (cf. Art. 77 GDPR).
In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.
Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller's future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

2. Information About the Data Processing
Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.
a. Server Data
For technical reasons, the following data sent by your internet browser to us or to our hosting provider will be collected, especially to ensure a secure and stable website: browser type and version, operating system, referrer URL, pages visited, date and time of access, and IP address.
The data thus collected will be temporarily stored, but not in association with any other of your data.
Legal basis: Art. 6 Para. 1 lit. f) GDPR (legitimate interest in stability, functionality, and security of the website).
Data are deleted within seven days unless retention is required for evidence purposes.

b. Newsletter / Waiting List
You can subscribe to our newsletter and/or event waiting lists through the website.
We collect your name and email address to send information about Vienna-related content, events, offers, and projects.
You may unsubscribe at any time via the link in each email or by contacting us directly.
Legal basis: Art. 6 Para. 1 lit. a) GDPR (consent).
Data are processed until you withdraw consent.
For sending newsletters, we may use third-party providers (e.g., Mailchimp, Brevo, or ConvertKit). These processors operate under GDPR-compliant data processing agreements (DPAs).

c. Online Sales (Guidebooks and Event Tickets)
When purchasing digital products or tickets through our website, we collect personal data necessary for order fulfillment, including name, email, billing address, and payment data.
Processing is carried out:
  • To fulfill our contractual obligations (Art. 6 Para. 1 lit. b) GDPR)
  • To comply with legal obligations (e.g., tax law, Art. 6 Para. 1 lit. c) GDPR)
  • On the basis of our legitimate interest in preventing fraud and ensuring secure transactions (Art. 6 Para. 1 lit. f) GDPR)
Payments are processed via external payment service providers such as Stripe, PayPal, or ticketing systems like Pretix.
These providers act as independent controllers for payment data.
Please review their privacy policies for more information:
Invoice data is stored for up to 7 years as required by Austrian tax law.

d. Cookies
Our website uses cookies to make our services more user-friendly. Cookies are small text files stored on your device.
We use both session and persistent cookies. Persistent cookies may remain stored until deleted manually or automatically after a specified period.
You can manage your cookie preferences at any time via our cookie settings tool.
Legal basis: Art. 6 Para. 1 lit. a) GDPR (consent) and Art. 6 Para. 1 lit. f) GDPR (legitimate interest in website optimization).
If you reject cookies, some functions of the website may not work properly.

e. Analytics and Marketing Tools
We use third-party services (such as Google Analytics, Meta Pixel, and TikTok Pixel) to analyze usage patterns and improve our online offerings.
These tools may process your IP address and device data.
You can consent or withdraw consent at any time via the cookie settings panel.
Legal basis: Art. 6 Para. 1 lit. a) GDPR (consent).

3. Information About Us as Controllers of Your Data
Vienna in Touch e.U.
Owner: Ganna Pazhyvilka
Address: Kaiserstraße 68, 1070 Vienna, Austria
E-Mail: contact@viennaintouch.com
Phone: available upon request
UID-Nr: ATU78991316
Company register: FN 663055 g

Supervisory Authority:
Datenschutzbehörde (DSB)
Barichgasse 40-42, 1030 Wien
Austria
Website: https://www.dsb.gv.at