Data Protection Notice of Salzburg Festival Fund

This notice provides you with information on how Salzburg Festival Fund (“we“) will process your personal data. 

Basic principles:

The protection of your privacy and your personal data has always been a central concern of ours. With the entry into force of the General Data Protection Regulation (DSGVO) this protection is now formalized.
We are always aware of the importance of the data entrusted to us and continue to process your data with the utmost care and responsibility.
Your data will be processed for your specific purpose in connection with your visit to the Salzburg Festival. We use recognized security measures to prevent misuse of your information.
You have the right to access your data! Below is explained how you can enforce your rights and contact us with any questions.
The following paragraphs outline in detail the purpose and duration of processing.

Purposes of data processing

We will process your personal data set out in Point 2 below exclusively for the purposes of your visit of our website, to process your ticket order and your visit of Salzburg Festival. Furthermore, to identify, prevent, investigate attacks on our website as well as to create user statistics. 

By using any of our websites, you consent to the use of your information in accordance with this Privacy Policy. You can revoke your consent to processing of your data at any time. Point 5 describes how this can be done.

The provision of your personal data as part of ordering a ticket, purchasing a card or registering is voluntary. However, we cannot process your card order, or you may not use all features of the website if you do not provide your personal information.

Categories of the data processed and legal basis of the processing

As part of your visit to our website, we will collect the following information: the date and time of accessing a page on our website, your IP address, name and version of your web browser, the website (URL) you visited before the visit of this website, certain cookies (see below) and the information that you provide yourself as part of the registration and ticket order. The legal basis for the processing of data of a simple website visit consists in our predominant legitimate interest (according to article 6 paragraph 1 letter f of the GDPR), which is to achieve the purposes mentioned under 1.

Cookies

Our website uses so-called cookies. These are small text files that are stored on your device using the browser. They do no harm. We use cookies to make our offer user-friendly. Some cookies remain stored on your device after you leave our website until you delete them. They allow us to recognize your browser on your next visit.

If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you allow this only in certain cases. The necessary settings differ depending on the browser and the terminal, you can usually find the corresponding instructions in the "Help feature" of the device or browser.

Disabling cookies may limit the functionality of our website

Google Analytics

In order to regularly improve our website and our offer for you and to correct errors, we use the web analysis tool Google Analytics.

On our website, general information about visitor usage patterns is collected using analysis tools. These include, for example, accessed pages, length of stay, referring pages and general information about your computer system, such as operating system, screen resolution, browser used, etc. All data collected is stored anonymously and does not allow any assignment to you. The IP address provided by Google Analytics will not be merged with other Google data. If you do not agree with this anonymized recording of your usage behaviour, you can prevent it by deactivating cookies in your browser.

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, in the event that IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union, or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.

You can object to the anonymized data processing by the aforementioned web analysis tools at any time, so that your visits to our website will no longer be recorded in the future.
This requires the activation of so-called "opt-out cookies". Please use the following links if you want to object to the pseudonymous data processing: opt-out for Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=de
Alternatively, the use of third-party cookies may be disabled by accessing the opt-out page of the Network Advertising Initiative: https://www.networkadvertising.org/choices/
For more information about Terms of Use and Privacy, please see
https://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/.

Ticket orders

We process the following of your personal data only with your consent in accordance with Article 6 paragraph 1 letter a of the General Data Protection Regulation ("GDPR").

Registration

In the course of an order or a purchase, the visitor must register with his personal data (name, address, telephone number, e-mail address, year of birth, user name) on the website. By registering on the Sites, you consent to the storage of personal information as a user profile for subsequent visits and the use of the data required to fulfil the contract.
On our website with registration function, we save the personal data you provided during registration with your consent as your personal profile, so that you can log in with your email address and password during future visits. This has the advantage that you do not have to re-enter your address data every time you use the website. You can contradict the storage of the data at any time. In this case, however, a renewed full registration is required for each use.
Your customer-related data will be stored and processed for customer care and will only be passed on to third parties if this is necessary for the fulfilment of the contract (see the section "Submitting your data to third parties").
Having a personally chosen username and password during the registration process will ensure that only you have access to your user account. Your password cannot be viewed by us.
You always have access to your data stored with us. The data in your profile, such as the addresses you provide, can be viewed and updated during the ordering process, but also in the protected area under "My Account".

Data storage for orders in the web-shop

Your orders and purchases made in the webshop will be stored by us and can be accessed by you at any time for the current season under "My Account – Order History".
Storage of credit card information
In the webshop you have the possibility to save your credit card information in your profile for later purchases. In order to offer you the highest possible security here, the storage happens in the so-called "tokenization" procedure. For this purpose, a sequence of numbers generated by our external payment service provider is stored as an identifier in the webshop. The actual payment data is stored encrypted on the servers of WireCard GmbH, without transmission of personal data from your personal user profile of our website.
WireCard credit card information is stored in compliance with the strict PCI DSS guidelines. Further information on the storage of credit card information and the tokenization procedure can be found on the WireCard GmbH website: (https://www.wirecard.de/produkte/zahlungsmethoden/tokenization/)

Transfer of personal data 

We do not share personally identifiable information with third parties except for the following purposes:

• IT service providers we use for support activities,
• the Post AG as well as other shipping companies used by us for the dispatch of postal dispatch, as e.g. the annual program,
• the respective credit card company, the payment service provider to pay for your order; The payment processing and storage of the credit card information is handled exclusively by our payment service provider WireCard GmbH. The Salzburg Festival Fund does not process credit card information,
• For the execution and execution of joint events, your data will only be sent to the respective co-organizers. We only pass on the data of the guests of the respective event

These recipient groups may not use these for other purposes and are also obliged to comply with the privacy policy.

Storage time

Your personal data will only be stored by us for as long as permitted by applicable law and reasonably considered necessary by us for the purposes set out in point 1 above. In any case, we store your personal data as long as there are statutory retention requirements or if limitation periods for potential legal claims have not yet expired.

Your rights in connection with personal data

Under current law, you are entitled (among other things, if the legal requirements are met):

• to check whether and which personal data we have stored about you and to obtain copies of this data (right to confirmation and information),
• to demand the correction, addition, or deletion of your personal data that is incorrect or improperly processed (right to rectification and cancellation),
• to require us to limit the processing of your personal data (right to restriction of processing),
• in certain circumstances, to object to the processing of your personal data or to revoke the prior consent given for processing (right to object to processing),
• to require data portability (right to data portability),
• to know and identify the identity of third parties to whom your personal data is transmitted
• to lodge a complaint with the competent authority.

Our contact details

You can exercise all rights by sending an email to info@salzburgfestival.at, by personal contact via telephone or by post. For this, it may be necessary for you to identify or contribute to your identification.

BOX OFFICE of Salzburg Festival
Herbert-von-Karajan-Platz 11
Tel. +43 662 8045 500
info@salzburgfestival.at

Salzburg Festival Fund
Hofstallgasse 1, 5020 Salzburg
+43-662-8045-0
info@salzburgfestival.at

If you have any further questions, please contact the Data Protection Officer of the Salzburg Festival Fund at datenschutz@salzburgfestival.at or at our mailing address.

Last updated May 2018