Source: https://www.schlosshof.at/en/data-privacy-statement/
Timestamp: 2019-04-22 18:11:39+00:00

Document:
Personal user data (for instance name, e-mail address…) is processed by the Schloss Schönbrunn Kultur- und Betriebsgesellschaft mbH (in the following “Schloss Schönbrunn", "Hofburg Wien", "Hofmobiliendepot" (Imperial Furniture Collection), “Schloss Hof” solely according to the provisions of the Austrian Data Protection Law and the GDPR General Data Protection Regulation. These instructions on data protection are intended to inform you about the most important aspects of data processing in the context of our website.
If we grant third parties (especially order processors) access to data in the context of our processing , this is done either on the basis of a statutory authorisation (e.g. if the transfer of data to a third party or to payment service providers is necessary to fulfil a contract), or if you have given your consent, or if it is required by a legal obligation, or on the basis of our legitimate interests (e.g. use of web hosts, CRM tools, newsletter transmission tools, etc.).
The following items provide information on the type, range and purpose of the acquisition, processing and usage of personal data in the context of the web presence of Schloss Schönbrunn, Hofburg Wien, Hofmobiliendepot and Schloss Hof.
Schloss Schönbrunn, Hofburg Wien, Hofmobiliendepot and Schloss Hof stores the notified user data with the greatest of care (in accordance with Art 32 GDPR); however, we cannot take any responsibility for hacker attacks.
Your contact data is only processed for the purpose of direct advertising via e-mail or telephone with your permission according to Art. 6  lit a of the General Data Protection Regulation (“GDPR”).
Otherwise we process your personal data on the basis of our overriding legitimate interest, in order to achieve the purposes stated in this declaration (Art. 6  lit f GDPR).
Our website is hosted by Abaton EDV-Dienstleistungs GmbH, Hans-Resel-Gasse 17, 8020 Graz. Our host provider provides us with the IT infrastructure services, disk space, computing capacity, technical security and maintenance services that we need to cover the range of options of this web presence. The user data is processed in the context of these services within the framework of our legitimate interests (Art. 6  f GDPR) in enabling the provision of our online services.
Internet protocol (IP) address of the user’s computer.
This data is stored separate from any user data communicated (in particular name, address, telephone number, e-mail address, language) and is evaluated for statistical purposes in order to optimise the Internet presence and services at schoenbrunn.at, www.schoenbrunnmeetings.com, kaiserkinder.at, hofburg-wien.at, hofmobiliedepot.at, schlosshof.at, www.habsburger.net and ww1.habsburger.net (for more details, see below).
Our ticketing system is handled by the Ticket Shop of Imperial Austria Palaces Service GmbH, whose headquarters are at our company location – Schloss Schönbrunn, Kavalierstrakt, 1130 Vienna. We are informed by Imperial Austria Palaces Service GmbH about ticket reservations made via www.imperial-austria.at .
Specifically, during this process we receive the following data: name, address, telephone number, e-mail address, language, age (adult or children’s ticket), membership of a family or group (for family, student, group tickets).
For press accreditations: the medium, working title and short description of the project must be stated.
For online reservations by event organisers: the event organiser’s PIN.
The personal data and contract data (contract subject, term, customer categories) notified in the course of the ordering process are used exclusively for contract processing; payment data is protected by encryption and used solely for payment management during the contract processing.
The use of the ticketing system is necessary for processing ticket reservations. We have entered into a contract for order data processing with Imperial Austria Palaces Service GmbH.
This data usage is based on Art. 6  b GDPR.
name, address, telephone number, e-mail address, language, age (adult or children’s ticket), membership of a family or group (for family, student, group tickets). For press accreditations the medium, working title and short description of the project must be stated. For online reservations by event organisers the event organiser’s PIN must be stated.
The personal data notified in the course of the order processing is used exclusively for contract processing (Art. 6  lit b GDPR); payment information is protected by encryption and used solely for the payment management.
name, e-mail, telephone number if needed, postal address if needed. This data is used exclusively for the reply to the contact and to manage the competition in question.
name; e-mail address for newsletters and the postal address for company newspapers. This data is used exclusively for despatching the ordered newsletters / company magazines.
Our newsletters is only sent after a double opt-in, i.e., after registering in our newsletter list you will receive another, separate confirmation e-mail in order to conclude the registration for the newsletter.
Some cookies remain stored on your end device until you delete them. They enable us to recognise your browser on your next visit.
If you do not want this option, you can set your browser in such a way that you are informed about the placing of cookies and you can permit this specifically for individual cases.
Users can prevent the installation of cookies by an appropriate setting in their browser software; Schloss Schönbrunn, Hofburg Wien, Hofmobiliendepot and Schloss Hof wishes to inform you however that in this case not all website functions can be used in their entirety.
Google Analytics uses so-called cookies, text files that are stored on the user’s computer and that enable an analysis of the user’s website usage. The information generated by the cookie on usage of this website is normally transmitted to a Google server in the USA and stored there.
Our interest within the meaning of the GDPR/General Data Protection Regulation is the improvement of our offer and our web presence. Since our users’ privacy is important to us, user data is processed under a pseudonym. In addition, we apply the “Google Tag Manager” system so as to integrate and manage the Google analysis and marketing services into our website (Art. 6  lit f GDPR).
We have activated “anonymizeIp()” for our website; this extension allows IP addresses to be further processed in abbreviated form in order to eliminate direct personal references: IP anonymisation on this website first abbreviates the IP address of a Google user within the member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and abbreviated there.
In the course of the use of Google Analytics, Google evaluates website usage in order to compile reports on website activities and to provide additional services associated with website usage and Internet usage. The IP address transferred from a user’s browser within the framework of Google Analytics is not merged with other Google data. By using our web presence, the user confirms his/her agreement to the use of the data acquired from him/her as described above and for the aforementioned purpose.
User data is stored for the duration of 38 months.
Users can prevent the storage of cookies by an appropriate setting in their browser software; however, we point out that in this case the user might not be able to make use of all the functions of this website.
Internet users are shown advertisements both in Google Search and on numerous advertising-sponsored websites. This occurs in any event. Google Marketing Services enable ads to be provided to those users who presumably are interested in these advertised contents.
Conversely, Google enables us to show our advertising specifically only to those users who are potentially interested in it.
Remarketing means that users are presented with advertisements for products in which they last showed interest. This involves integrating so-called marketing tags into websites. When a user device accesses the website, a cookie (a small file) is stored which records the websites the user has visited. As he or she continues surfing, they are shown specific ads based on these records.
Google Adwords stores a “conversion cookie” on the user’s computer if the user has accessed our website via a Google ad. These cookies cease to apply after 30 days and do not serve personal identification.
Information accessed with the aid of the conversion cookie serves to create conversion statistics for AdWords users (for instance through the overall number of users who have clicked the ad). But when this is done, we do not receive information that can be used to identify the user personally.
The use of Google Marketing is based on (Art. 6  f GDPR). In addition, we have activated “anonymizeIp()” for our website, as explained in Section 8; this extension means that user data is further processed only under a pseudonym. This means that neither Google nor advertisers can specifically identify the user; name, e-mail address remain unknown in this procedure.
If you do not wish to take part in the tracking procedure, you can also reject the installation of the cookie required for this – for instance via the browser setting that generally deactivates cookies automatically, or by blocking cookies through the domain “googleadservices.com”.
You can also use the opt-out option installed by Google: http://www.google.com/ads/preferences.
Schönbrunn Palace, Vienna Hofburg, Imperial Furniture Collection and Schloss Hof do not use any social plugins on their Internet sites (such as Share or Like buttons), in order to avoid data being unnecessarily transferred to a social network in a way that at present cannot be fully tracked by the users of social plugins.
These Internet sites only contain links to our Facebook, Twitter, Instagram and Pinterest pages. Please note that if you access these networks and platforms, the relevant operator’s terms of business and data processing regulations will apply.
We operate our Facebook page with the assistance of the technical platform and services of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Facebook does not disclose exhaustively and clearly, nor do we know, the manner in which it uses Facebook visitor data for its own purposes, the extent to which activities on the Facebook page can be attributed to specific users and whether data from a Facebook visit is passed on to third parties.
When you access a Facebook page, the IP address allocated to your user device is sent to Facebook. According to Facebook, this IP address is anonymised and deleted after 90 days. In addition, Facebook stores information about its users’ devices (e.g. as part of “Unrecognised login notifications”).
If you are currently registered as a Facebook user, your device contains a cookie with your Facebook ID. This enables Facebook to identify the fact you visited this page and how you used it. This applies to all other Facebook pages. In addition, Facebook buttons integrated in websites (such as Like, as well as other social plugins) allow Facebook to record your visits to these websites and link them to your Facebook profile (as stated above, we do not use such plugins on our company’s websites). All the data about you collected by Facebook can be used to present content or advertising customized to your profile.
Please bear in mind that when you visit Facebook you will in any event be presented with advertising. The data collection sketched out above means that this advertising can at least be adjusted to your assumed interests, with the result that you will not be troubled by completely irrelevant advertisements.
If you want to prevent Facebook collecting data on third-party sites, you should log out of Facebook, or deactivate the “Keep me signed in” function, delete the cookies stored on your device and close and restart your browser. This deletes Facebook information that allows you to be directly identified. As a result, you can use our Facebook page without your Facebook ID being disclosed. However, please note that if you use interactive functions on the page (Like, Comment, Share, Messages etc.), you will see a Facebook log-in mask. If you log in, you will once again be identifiable to Facebook as a specific user.
We analyse and optimise our web presence using the so-called visitor action pixel (“Facebook Pixel”) of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, for users resident in the EU, Facebook Ireland Ltd, Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook" in the following).
The Facebook social network is financed through advertising. This advertising is displayed to every Facebook user. This means that Facebook ads are displayed to Facebook users in any event. Facebook Pixel used to show Facebook users advertising that presumably complies with their interests. This prevents completely irrelevant advertising being displayed that is in fact only a nuisance.
We also use Facebook Pixel in order to place Facebook advertisements which target only those Facebook users who are most likely to take an interest in our services. In doing so, we also create so-called custom audiences, for which we define characteristics (e.g. interests, age groups etc.) in order to show our advertising to those users who are most likely to be interested in them.
Facebook Pixel also enables us to determine whether our ad was interesting for Facebook users,especially if the user clicked the ad, by allowing us to see whether the user clicked the ad and was thus linked to our website. In this way, we can assess the effectiveness of our ads; nevertheless, the individual user who clicks the ad remains anonymous to us. We do not possess this data.
The Facebook Pixel is thus firstly an opportunity to prevent companies distributing advertising pointlessly to all users, regardless of whether they are interested in the services or not. Secondly, the Facebook Pixel is also useful for Facebook users, because it means that they are shown advertising that in all probability is in a field that interests them, while Facebook Pixel the advertisements would be displayed randomly. The use of Facebook Pixel thus represents a predominant and legitimate interest according to Art. 6  f GDPR.
Our newsletters is sent through the Austrian despatch service dialog-Mail eMarketing Systems GmbH, Nussgasse 31, A-3434 Wilfersdorf. The use of the despatch service is based on our legitimate interests according to Art. 6  f GDPR and an order processing contract according to Art. 28 [3 ,1] GDPR.
Our quiz-newsletter at www.habsburger.net is sent through the US despatch service MailChimp, The Rocket Science Group, LLC675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA. The use of the despatch service is based on our legitimate interests according to Art. 6  f GDPR and an order processing contract according to Art. 28 [3 ,1] GDPR.
As soon as you have registered for the newsletter, we send you a confirmation e-mail with a link for you to confirm registration (double opt-in). Newsletter registrations are recorded (registration date and time, confirmation date and time, IP address), so that we can verify the registration process according to legal requirements.
The use of dialog-Mail represents a legitimate interest in the application of a secure, user-friendly newsletter service. The following user data is processed: e-mail address, name, title and, for the dialog-Mail newsletter, a salutation.
When dialog-Mail is used, statistical data about the recipient’s access tto the newsletter is communicated (opening, time of opening, what links were activated). This information serves the improvement of our newsletter. Data is not merged for creating individual user profiles.
Schloss Schönbrunn, Hofburg Wien, Hofmobiliendepot and Schloss Hof uses the tool swat.io of the Vienna company “Die Socialisten” Social Software Development GmbH, Andreasgasse 6, Top1 1070 Vienna, for storage, display and management of the data on its pages on the social media platforms Facebook, Pinterest, Instagram and Twitter. “Die Socialisten” Social Software Development GmbH is directly subject to the GDPR regime and is bound by it. A contract has been entered into for processing order data.
The tool swat.io firstly serves customer service purposes, and therefore assists us in answering user comments in the social media contributions. In this process, it uses user names that are chosen by users on the relevant social media platforms and whose comments are used. An inference as to real names and addresses is not possible with the swat.io tool.
In addition, the tool is used for purposes of the collective processing and planning of content on these platforms. Finally, the tool enables us to assess the success of our contributions on social media platforms (the range and scope of a contribution, the intensity of interaction it triggers, etc.). However, in this it does not show an individual’s data. The use of this customer service and content tool is performed within the scope of an overriding and legitimate interest (Art. 6  f GDPR).
You are entitled to information, rectification, erasure, restriction, data portability, withdrawl of consent and objection to processing in relation to your personal data we use. If you believe that the processing of your data infringes data protection law, or your legal claims for data protection are violated in any other way, please contact us. You can also file a complaint with the supervisory authority. In Austria this is the Datenschutzbehörde (https://www.dsb.gv.at).
The data we process is erased as soon as it is no longer required for its purpose and provided that the erasure is not in conflict with any legal storage obligations.
If data is not deleted because it is required for other / legally permitted purposes (e.g. product liability etc.), its processing is limited, i.e., data is reduced to the extent necessary and not processed for other purposes. Please note: there is a warranty period of 2 years for purchases of moveable items; the data of the purchase procedure must be stored in order for us to handle possible claims. Moreover, according to Sec 132 BAO (Bundesabgabenordnung, Federal Tax Code), bookkeeping documents, receipts, bills, etc. must be stored for seven years, or 22 years if related to real estate.
Schloss Schönbrunn Kultur- und Betriebsges.m.b.H.
2. I consent to my IP address and log files (data on the use of the schoenbrunn.at site, kaiserkinder.at site, schoenbrunnmeetings.com site, hofburg-wien.at site, hofmobilien.at site, schlosshof.at site, habsburger-net site, ww1.habsburger.net site) being used for statistical evaluation of the Schloss Schönbrunn, Hofburg Wien, Hofmobiliendepot and Schloss Hof Internet presence.
To this purpose, Schloß Schönbrunn, Hofburg Wien, Hofmobiliendepot and Schloss Hof makes use of Google Analytics, in other words, the IP addresses and log files of my visit to the schoenbrunn.at site, kaiserkinder.at site, schoenbrunnmeetings.com site, hofburg-wien.at site, hofmobiliendepot.at site and schlosshof.at site, habsburger-net site and ww1.habsburger.net site are communicated to Google Inc. as service provider for the purpose of analysing the use of the schoenbrunn.at site, hofburg-wien.at, hofmobiliendepot.at and schlosshof.at. Through the extension “anonymizeIp()” my IP address is made anonymous, and consequently is no longer directly person-related. I acknowledge that I have the possibility of preventing the storage of cookies by an appropriate setting of my browser software, which would however mean that as a consequence I could not fully exploit all the functions of the website. Furthermore I acknowledge that I can deactivate Google Analytics for myself by installing a browser add-on (accessible at https://tools.google.com/dlpage/gaoptout?hl=en) and can thus revoke my consent to the use of Google Analytics.
3. I consent to the use of Google Adwords and Google Remarketing.
4 I consent to the use of the visitor interaction pixel.
for Google Ads through opt-out options at http://www.google.com/ads/preferences.
by cancelling the newsletter (simply by a click in any newsletter).
I acknowledge that I can revoke this declaration of consent wholly or in part at any time through the procedures detailed above, or in the Declaration of Data Protection.
I acknowledge that where Schloss Schönbrunn, Hofburg Wien, Hofmobiliendepot and Schloss Hof have a legitimate interest according to Art. 6  f GDPR that no declaration of consent is required on my part.

References: Art 32
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 28
 Art. 6