Data Protection Notice
This notice provides you with information on how Salzburg Festival Fund (“we“) will process your personal data.
The protection of your privacy and your personal data has always been a central concern of ours. With the entry into force of the General Data Protection Regulation (DSGVO) this protection is now formalized.
We are always aware of the importance of the data entrusted to us and continue to process your data with the utmost care and responsibility.
Your data will be processed for your specific purpose in connection with your visit to the Salzburg Festival. We use recognized security measures to prevent misuse of your information.
You have the right to access your data! Below is explained how you can enforce your rights and contact us with any questions.
The following paragraphs outline in detail the purpose and duration of processing.
Purposes of data processing
We will process your personal data set out in Point 2 below exclusively for the purposes of your visit of our website, to process your ticket order and your visit of Salzburg Festival. Furthermore, to identify, prevent, investigate attacks on our website as well as to create user statistics.
The provision of your personal data as part of ordering a ticket, purchasing a card or registering is voluntary. However, we cannot process your card order, or you may not use all features of the website if you do not provide your personal information.
Categories of the data processed and legal basis of the processing
As part of your visit to our website, we will collect the following information: the date and time of accessing a page on our website, your IP address, name and version of your web browser, the website (URL) you visited before the visit of this website, certain cookies (see below) and the information that you provide yourself as part of the registration and ticket order. The legal basis for the processing of data of a simple website visit consists in our predominant legitimate interest (according to article 6 paragraph 1 letter f of the GDPR), which is to achieve the purposes mentioned under 1.
If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you allow this only in certain cases. The necessary settings differ depending on the browser and the terminal, you can usually find the corresponding instructions in the “Help feature” of the device or browser.
Disabling cookies may limit the functionality of our website
In order to regularly improve our website and our offer for you and to correct errors, we use the web analysis tool Google Analytics.
On our website, general information about visitor usage patterns is collected using analysis tools. These include, for example, accessed pages, length of stay, referring pages and general information about your computer system, such as operating system, screen resolution, browser used, etc. All data collected is stored anonymously and does not allow any assignment to you. The IP address provided by Google Analytics will not be merged with other Google data. If you do not agree with this anonymized recording of your usage behaviour, you can prevent it by deactivating cookies in your browser.
The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, in the event that IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union, or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.
You can object to the anonymized data processing by the aforementioned web analysis tools at any time, so that your visits to our website will no longer be recorded in the future.
This requires the activation of so-called “opt-out cookies”. Please use the following links if you want to object to the pseudonymous data processing: opt-out for Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=de
Alternatively, the use of third-party cookies may be disabled by accessing the opt-out page of the Network Advertising Initiative: http://www.networkadvertising.org/choices/
http://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/.
We process the following of your personal data only with your consent in accordance with Article 6 paragraph 1 letter a of the General Data Protection Regulation (“GDPR”).
In the course of an order or a purchase, the visitor must register with his personal data (name, address, telephone number, e-mail address, year of birth, user name) on the website. By registering on the Sites, you consent to the storage of personal information as a user profile for subsequent visits and the use of the data required to fulfil the contract.
On our website with registration function, we save the personal data you provided during registration with your consent as your personal profile, so that you can log in with your email address and password during future visits. This has the advantage that you do not have to re-enter your address data every time you use the website. You can contradict the storage of the data at any time. In this case, however, a renewed full registration is required for each use.
Your customer-related data will be stored and processed for customer care and will only be passed on to third parties if this is necessary for the fulfilment of the contract (see the section “Submitting your data to third parties”).
Having a personally chosen username and password during the registration process will ensure that only you have access to your user account. Your password cannot be viewed by us.
You always have access to your data stored with us. The data in your profile, such as the addresses you provide, can be viewed and updated during the ordering process, but also in the protected area under “My Account”.
Data storage for orders in the web-shop
Your orders and purchases made in the webshop will be stored by us and can be accessed by you at any time for the current season under “My Account – Order History”.
Storage of credit card information
In the webshop you have the possibility to save your credit card information in your profile for later purchases. In order to offer you the highest possible security here, the storage happens in the so-called “tokenization” procedure. For this purpose, a sequence of numbers generated by our external payment service provider is stored as an identifier in the webshop. The actual payment data is stored encrypted on the servers of WireCard GmbH, without transmission of personal data from your personal user profile of our website.
WireCard credit card information is stored in compliance with the strict PCI DSS guidelines. Further information on the storage of credit card information and the tokenization procedure can be found on the WireCard GmbH website: (https://www.wirecard.de/produkte/zahlungsmethoden/tokenization/)
Transfer of personal data
We do not share personally identifiable information with third parties except for the following purposes:
- IT service providers we use for support activities,
- the Post AG as well as other shipping companies used by us for the dispatch of postal dispatch, as e.g. the annual program,
- the respective credit card company, the payment service provider to pay for your order; The payment processing and storage of the credit card information is handled exclusively by our payment service provider WireCard GmbH. The Salzburg Festival Fund does not process credit card information,
- For the execution and execution of joint events, your data will only be sent to the respective co-organizers. We only pass on the data of the guests of the respective event
Your personal data will only be stored by us for as long as permitted by applicable law and reasonably considered necessary by us for the purposes set out in point 1 above. In any case, we store your personal data as long as there are statutory retention requirements or if limitation periods for potential legal claims have not yet expired.
Your rights in connection with personal data
Under current law, you are entitled (among other things, if the legal requirements are met):
- to check whether and which personal data we have stored about you and to obtain copies of this data (right to confirmation and information),
- to demand the correction, addition, or deletion of your personal data that is incorrect or improperly processed (right to rectification and cancellation),
- to require us to limit the processing of your personal data (right to restriction of processing),
- in certain circumstances, to object to the processing of your personal data or to revoke the prior consent given for processing (right to object to processing),
- to require data portability (right to data portability),
- to know and identify the identity of third parties to whom your personal data is transmitted
- to lodge a complaint with the competent authority.
Our contact details
You can exercise all rights by sending an email to firstname.lastname@example.org, by personal contact via telephone or by post. For this, it may be necessary for you to identify or contribute to your identification.
BOX OFFICE of Salzburg Festival
Tel. +43 662 8045 500
Salzburg Festival Fund
Hofstallgasse 1, 5020 Salzburg
If you have any further questions, please contact the Data Protection Officer of the Salzburg Festival Fund at email@example.com or at our mailing address.
Last updated May 2018