Data Protection Declaration

Personal user data (for instance name, e-mail address…) is processed by the Imperial Austria Palaces Service GmbH (in the following “Imperial Austria”) solely according to the provisions of the Austrian Data Protection Law and the GDPR– General Data Protection Regulation. These instructions on data protection are intended to inform you about the most important aspects of data processing in the context of our website.

1. Data controller and contact

Imperial Austria Palaces Service GmbH

Schloß Schönbrunn, Kavalierstrakt
1130 Vienna
datenschutz@schoenbrunn-group.com

As a matter of principle, we ensure that we only use the data that we actually need for our web presence, in particular:

-  for the processing of contracts that are concluded through our ticket shop and our online shop,

-  for answering queries,

-  for marketing purposes,

-  for optimisation of our web presence and our range of offers

If we grant third parties (especially order processors) access to data in the context of our processing , this is done either on the basis of a statutory authorisation (e.g. if the transfer of data to a third party or to payment service providers is necessary to fulfil a contract), or if you have given your consent, or if it is required by a legal obligation, or on the basis of our legitimate interests (e.g. use of web hosts, CRM tools, newsletter transmission tools, etc.).

The following items provide information on the type, range and purpose of the acquisition, processing and usage of personal data in the context of the web presence of Imperial Austria

Imperial Austria stores the notified user data with the greatest of care (in accordance with Art 32 GDPR); however, we cannot take any responsibility for hacker attacks.

 

2. Legal bases & storage duration 

In the case of concluded contracts and queries, personal data is processed because this is required in order to fulfil the contract, or, as the case may be, to process the query (Art. 6 [1] lit b GDPR – General Data Protection Regulation)

Your contact data is only processed for the purpose of direct advertising via e-mail or telephone with your permission according to Art. 6 [1] lit a of the General Data Protection Regulation (“GDPR”).

Otherwise we process your personal data on the basis of our overriding legitimate interest, in order to achieve the purposes stated in this declaration (Art. 6 [1] lit f GDPR).

We generally store data that you have made available to us exclusively for customer care, respectively marketing and information purposes until three years have elapsed since our last contact. If you do not wish this, we shall delete your data also before this term elapses, in so far as there is no legal hindrance preventing this.

In the case of a contract initiation or completion we process your person-related data after completed contract processing until the expiry of the guarantee, limitation and legal storage terms that apply to us, furthermore until the end of all possible legal disputes needing the data as evidence.

Your contact data is processed for the purpose of scientific research according to Art. 89 GDPR as well as Sect. 2 para. 7 (1) DSG. In regard to the principle of data minimisation, the goal is not to obtain results in a form relating to specific data subjects. According to Sect. 2 para. 7 (1) lit. 2. DSG, the controller may process personal data that has been lawfully collected for other purposes (e.g. Art. 6 [1] lit. b. GDPR) . The data we process is anonymised as soon as it is no longer required for the purpose of scientific research and so far as there is no legal hindrance preventing this.

 

3. Hosting

Our website is hosted by Abaton EDV-Dienstleistungs GmbH, Hans-Resel-Gasse 17, 8020 Graz. Our host provider provides us with the IT infrastructure services, disk space, computing capacity, technical security and maintenance services that we need to cover the range of options of this web presence. The user data is processed in the context of these services within the framework of our legitimate interests (Art. 6 [1] f GDPR) in enabling the provision of our online services.

 

4. Automatic data acquisition

For technical reasons, the usage data that a user’s Internet browser transfers to Imperial Austria includes the following:

• browser type and version;
• operating system being used;
• website visited by the user;
• date and time of access;
• Internet protocol (IP) address of the user’s computer.

 

This data is stored separate from any user data communicated (in particular name, address, telephone number, e-mail address, language) and is evaluated for statistical purposes in order to optimise the Internet presence and services at www.imperial-austria.at (for more details, see below).

 

5. Data transfer to Schloß Schönbrunn Kultur und Betriebsgesellschaft mbH

Imperial Austria is the ticket-shop of the Schloß Schönbrunn Kultur- und Betriebsgesellschaft mbH (in the following „SKB“), with headquarters in our company location – Schloss Schönbrunn, Kavalierstrakt, 1130 Vienna. We are informing SKB on ticket reservations made via www.imperialtickets.com.

Specifically, during this process we receive the following data: name, address, telephone number, e-mail address, language, age (adult or children’s ticket), membership of a family or group (for family, student, group tickets).

The person-related data and contract data (contract subject, term, customer categories) notified in the course of ordering procedures are used exclusively for contract processing; payment data is protected in a coded process and used solely for payment management during the contract processing.

The use of the ticketing system is necessary for processing ticket reservations. We have entered into a contract for order data processing with the SKB.

This data usage is based on Art. 6 [1] b GDPR.

 

6. Data usage

6.1 During the ordering process, the following personal data is requested:

name, address, telephone number, e-mail address, language, age (adult or children’s ticket), membership of a family or group (for family, student, group tickets). For press accreditations the medium, working title and short description of the project must be stated. For online reservations by event organisers the event organiser’s PIN must be stated.

The personal data notified in the course of the order processing is used exclusively for contract processing (Art. 6 [1] lit b GDPR); payment information is protected by encryption and used solely for the payment management.

6.2 The following data is acquired when using contact forms and participation in competitions (Art 6 [1] b GDPR):

name, e-mail, telephone number if needed, postal address if needed. This data is used exclusively for the reply to the contact and to manage the competition in question.

6.3 In registering for newsletters and company newspapers, the following data is acquired (Art. 6 [1] a GDPR): 

name; e-mail address for newsletters and the postal address for company newspapers. This data is used exclusively for despatching the ordered newsletters / company magazines.

Our newsletters is only sent after a double opt-in, i.e., after registering in our newsletter list you will receive another, separate confirmation e-mail in order to conclude the registration for the newsletter.

6.4 To establish contact for the purpose of scientific research (Art. 89 GDPR and Sect. 2 para. 7 DSG

For the purpose of sending out invitations to take part in scientific research projects personal contact data (name, e-mail address) is processed in combination with order and visitation data (date, time and tour of visit).

 

7. Cookies

Imperial Austria uses cookies for the provision of its services (Art. 6 Abs [1] lit f GDPR). Cookies are small text files that the user’s Internet browser places and stores on his or her computer. Cookies make our Internet presence user-friendlier and enable us to recognise multiple usage of this website by the same user. Cookies are needed in particular for using a web shop.

Some cookies remain stored on your end device until you delete them. They enable us to recognise your browser on your next visit.

If you do not want this option, you can set your browser in such a way that you are informed about the placing of cookies and you can permit this specifically for individual cases.

Users can prevent the installation of cookies by an appropriate setting in their browser software; Imperial Austria wishes to inform you however that in this case not all website functions can be used in their entirety.

 

8. Analysis of the Imperial Austria Internet presence

WEB ANALYSIS USING MATOMO (FORMERLY PIWIK)
Scope of processing of personal data:
We use the software "Matomo" (WWW.MATOMO.ORG) on this website, a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. The software sets a cookie (a text file) on your computer, with which your browser can be recognized. If subpages of our website are called up, the following data is stored:

• the IP address of the user, shortened by the last two bytes (anonymized)
• the sub-page called up and the time of the call-up
• the page from which the user accessed our website (referrer)
• which browser with which plugins, which operating system and which screen resolution is used
• the time spent on the website
• the pages that are visited from the accessed sub-page

The data collected with Matomo is stored on servers within the EU. It is not passed on to third parties.

Legal basis
The legal basis on which we process personal data using Matomo is Art. 6 (1) lit. f of the DSGVO.

Purpose of the data processing
We need the data to analyze the surfing behavior of users and to obtain information about usage of the individual components of the website. This enables us to constantly optimize the website and its user-friendliness. These purposes are the basis of our legitimate interest according to Art. 6 para. 1 lit. f DSGVO. We use Matomo with the anonymization function "Automatically Anonymize Visitor IPs". This anonymization function shortens your IP address by two bytes, so that an assignment to you or to the Internet connection you are using is impossible. By anonymizing the IP address, we take your interest in the protection of your personal data into account. The data will never be used to identify you personally and will not be merged with other data.

Duration of storage:
The data is deleted when it is no longer needed for our purposes.

Possibility to object
You can object to the recording of data in the manner described above in different ways:

1. you can completely prevent the storage of cookies in your browser. However, this means that you may no longer be able to use some functions of our website that require identification (shopping cart, orders, personal settings, etc.).

2. you can activate the "Do-not-Track" setting in your browser. Our Matomo system is configured to respect this setting.

 

9. Google Marketing

We use Google AdWords of Google LLC (“Google” in the following), Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is certified under the Privacy Shield Framework Agreement and thus guarantees compliance with European data protection law:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. We have entered into a corresponding contract with Google for order data processing. You can find the Google Data Protection Declaration here: https://policies.google.com/privacy?hl=de&gl=at

Internet users are shown advertisements both in Google Search and on numerous advertising-sponsored websites. This occurs in any event. Google Marketing Services enable ads to be provided to those users who presumably are interested in these advertised contents.

Conversely, Google enables us to show our advertising specifically only to those users who are potentially interested in it.

Google Adwords stores a “conversion cookie” on the user’s computer if the user has accessed our website via a Google ad. These cookies cease to apply after 30 days and do not serve personal identification.

Information accessed with the aid of the conversion cookie serves to create conversion statistics for AdWords users (for instance through the overall number of users who have clicked the ad). But when this is done, we do not receive information that can be used to identify the user personally.

The use of Google Marketing is based on (Art. 6 [1] f GDPR). In addition, we have activated “anonymizeIp()” for our website, as explained in Section 8; this extension means that user data is further processed only under a pseudonym. This means that neither Google nor advertisers can specifically identify the user; name, e-mail address remain unknown in this procedure.

If you do not wish to take part in the tracking procedure, you can also reject the installation of the cookie required for this – for instance via the browser setting that generally deactivates cookies automatically, or by blocking cookies through the domain “googleadservices.com”.

You can also use the opt-out option installed by Google: http://www.google.com/ads/preferences.

 

10. Newsletter Services

Our newsletters is sent through the Austrian despatch service dialog-Mail eMarketing Systems GmbH, Nussgasse 31, A-3434 Wilfersdorf. The use of the despatch service is based on our legitimate interests according to Art. 6  [1] f GDPR and an order processing contract according to Art. 28 [3 ,1] GDPR.

Our quiz-newsletter at www.habsburger.net is sent through the US despatch service MailChimp, The Rocket Science Group, LLC675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA. The use of the despatch service is based on our legitimate interests according to Art. 6 [1] f GDPR and an order processing contract according to Art. 28 [3 ,1] GDPR.

As soon as you have registered for the newsletter, we send you a confirmation e-mail with a link for you to confirm registration (double opt-in). Newsletter registrations are recorded (registration date and time, confirmation date and time, IP address), so that we can verify the registration process according to legal requirements.

The use of dialog-Mail represents a legitimate interest in the application of a secure, user-friendly newsletter service. The following user data is processed: e-mail address, name, title and, for the dialog-Mail newsletter, a salutation.

When dialog-Mail is used, statistical data about the recipient’s access tto the newsletter is communicated (opening, time of opening, what links were activated). This information serves the improvement of our newsletter. Data is not merged for creating individual user profiles.

 

11. User rights

You are entitled to information, rectification, erasure, restriction, data portability, withdrawl of consent and objection to processing in relation to your personal data we use. If you believe that the processing of your data infringes data protection law, or your legal claims for data protection are violated in any other way, please contact us. You can also file a complaint with the supervisory authority. In Austria this is the Datenschutzbehörde (https://www.dsb.gv.at). 

The data we process is erased as soon as it is no longer required for its purpose and provided that the erasure is not in conflict with any legal storage obligations. 

If data is not deleted because it is required for other / legally permitted purposes (e.g. product liability etc.), its processing is limited, i.e., data is reduced to the extent necessary and not processed for other purposes.   Please note: there is a warranty period of 2 years for purchases of moveable items; the data of the purchase procedure must be stored in order for us to handle possible claims. Moreover, according to Sec 132 BAO (Bundesabgabenordnung, Federal Tax Code), bookkeeping documents, receipts, bills, etc. must be stored for seven years, or 22 years if related to real estate.

 

12. Provision of information

On request, information on the data stored relating to a person or a user name will be provided. On request, the information can be provided electronically. To obtain this information please contact:

Schloß Schönbrunn Kultur- u. Betriebsges.m.b.H. 
Schönbrunner Schloßstraße 47 

1130 Vienna

Tel.: +43-1-81113-0

Fax: +43-1-8121106

info@imperialtickets.com