Some cookies are technically necessary and can also be used to improve our online services and make them more convenient. You can find further information on this in this cookie banner and in our data protection declaration (see below). View Details Necessary cookies only Allow all cookies Home MUSIC THEATER Theater Chamber games YOUNG THEATER NET STAGE DE LOG IN PIECES DATES & TICKETS SUBSCRIPTIONS SERVICE THEATER MEDIATION BLOG PRESS ABOUT US CONTACT PRIVACY POLICY ACCORDING TO ART 13 OF THE GDPR Last update: 24. November 2021 Thank you for your interest in the information on our website! With the help of this Privacy Policy we would like to inform the users of our website about the type, scope and purpose of the personal data processed. Personal data in this context are all information with which you can be personally identified as a user of our website, including your IP address and information that is stored in cookies. In a general section of this Privacy Policy, we provide you with information on data protection, which generally applies to our processing of data, including data collection on our website. In particular, you as a data subject will be informed about the rights to which you are entitled. The terms used in our Privacy Policy and our data protection practice are based on the provisions of the EU General Data Protection Regulation ("GDPR") and other relevant national legal provisions. CONTROLLER ACCORDING TO THE GDPR Oö. Theater und Orchester GmbH FN 265841v Promenade 39 4020 Linz Austria e: datenschutz@landestheater-linz.at t: +43 732 7611-0 f: +43 732 7611-333 Data Protection Officer: Mr. Ronald Kopecky DATA COLLECTION ON OUR WEBSITE On the one hand, personal data is collected from you when you expressly communicate such data to us, on the other hand, data, especially technical data, is automatically collected when you visit our website. Some of this data is collected to ensure that our website functions without errors. Other data may be used for analysis. However, you can use our website without a need to provide personal information. TECHNOLOGIES ON OUR WEBSITE ADDTHIS On our website we use the service AddThis of Oracle America Inc., 500 Oracle Parkway, Redwood Shores, CA 94065, USA ("AddThis") to share the contents of our online offer within social networks (so-called sharing). ATTENTION: Within the scope of this service, data is transferred to the US or such a transfer cannot be excluded. By using AddThis, users of our website are able to share certain content of our website in various social media as well as with other internet users via email. You can recognize AddThis by the buttons embedded on our website. AddThis uses personal information of the users for the provision and execution of the sharing function within the social media. Here is a list of processed data: - Unique ID of a cookie placed in the web browser - Address of the visited webpage - Time of the web page visit - Search queries through which a visitor has reached the page with AddThis - Duration of the visit to the respective website - The IP address of the end device - Mobile Ad IDs (Apple IDFA or Google AAID) - Information contained in HTTP headers or other transmission protocols used - Which program on the end device (browser) or which operating system was used (iOS) AddThis also provides tools to help analyze and improve the use of their own website or to enable direct user targeting. In doing so, AddThis also uses cookies and webbeacons (small graphics, "tracking pixels" that enable log file recording and log file analysis). When you use AddThis, your browser establishes a direct connection with the servers of AddThis and, if applicable, the selected social network. If you share content from our website with social networks, a connection can be established between your visit to the website and your user profile on the corresponding social network. The processing of your data is based on your consent in the sense of Art 6 paragraph 1 lit. a GDPR. You can revoke this consent at any time with effect for the future. AddThis retains collected data for a period of up to 13 months from the date of data collection. AddThis also offers an opt-out option at https://datacloudoptout.oracle.com/. An opt-out cookie is set, which must not be deleted in order to keep this setting. Further information on AddThis and its privacy policy can be found at https://www.oracle.com/legal/privacy/addthis-privacy-policy.html. CLOUDFLARE On our website Cloudflare is used as a so-called content delivery network (CDN). Cloudflare is a service of Cloudflare Inc., 101 Townsend Street, San Francisco, California 94107, USA, ("Cloudflare"). ATTENTION: Within the scope of this service, data is transferred to the US or such a transfer cannot be excluded. A CDN is a service that helps us to provide content from our website, especially large media files, such as images, by using regional and Internet-connected servers to be delivered faster. Delivering content through servers near you reduces average website load times. Cloudflare contributes both web optimization and security services. Cloudflare blocks threats and limits misuse of server resources and bandwidth. Our website is significantly more powerful and less vulnerable to spam or other attacks thanks to Cloudflare. Cloudflare uses cookies and processes data of our website users. If you visit our website, your requests will be directed by the server of Cloudflare. In this case, statistical access data is collected when visiting our website. Access data includes: - your IP address, - the addresse(s) of our website you have visited, - type and version of the internet browser you are using, - the operating system you are using, - the website from which you have switched to our website (referrer URL), - the time of your stay on our website and - the frequency of calling our websites. This data helps Cloudflare in particular to detect new threats and to ensure a high security standard for the operation of our website. Your data is processed to maintain the security and functionality of the CDN and to optimize our loading times. The use of cookies by Cloudflare is done for security reasons to ensure the trustworthiness of an end device and is absolutely necessary for the security function. This represents a legitimate interest within the meaning of Art 6 paragraph 1 lit. f GDPR. Cloudflare keeps data logs only as long as necessary and this data is deleted within 24 hours in most cases. However, there is information that Cloudflare keeps indefinitely as part of its permanent logs in order to improve Cloudflare's overall performance. However, this data is not personal and is anonymized by Cloudflare. What data is involved can be found at https://www.cloudflare.com/application/privacypolicy/. For more information on handling the transferred data to Cloudflare, see Cloudflare's Privacy Policy: https://www.cloudflare.com/security-policy. COOKIES AND LOCAL STORAGE We use cookies to make our website as user-friendly and functional as possible for you. Some of these cookies are stored on the device you use to access the site. Cookies are small packages of data that are exchanged between your browser and our web server whenever you visit our website. They do not cause any damage and are used solely to recognise website visitors. Cookies can only store information provided by your browser, e.g. information that you have entered into your browser or that is available on the website. Cookies cannot execute code and cannot be used to access your terminal device. The next time you access our website using the same device, the information stored in the cookies can then either be sent back to us (“first-party cookie”) or to a web application of third party to whom the cookie belongs (“third-party cookie”). The information that is stored and sent back allows each web application to recognise that you have already accessed and visited the website using the browser on your device. Cookies contain the following information: Cookie name Name of the server from which the cookie originates Cookie ID number An expiry date, after which the cookie will be automatically deleted We classify cookies in the following categories depending on their purpose and function: Technically necessary cookies, to ensure the technical operation and basic functions of our website. These types of cookies are used, for example, to maintain your settings while you navigate our website; or they can ensure that important information is retained throughout the session (e.g. login, shopping cart). Statistics cookies, to understand how visitors interact with our website by collecting and analysing information on an anonymous basis only. In this way we gain valuable insights to optimize both the website and our products and services. Marketing cookies, to provide targeted promotional and marketing activities for users on our website. Unclassified cookies are cookies that we are trying to classify together with individual cookie providers. Depending on the storage period, we also divide cookies into session and persistent cookies. Session cookies store information that is used during your current browser session. These cookies are automatically deleted when the browser is closed. No information remains on your device. Persistent cookies store information between two visits to the website. Based on this information, you will be recognized as a returning visitor on your next visit and the website will react accordingly. The lifespan of a persistent cookie is determined by the provider of the cookie. The legal basis for using technically necessary cookies is our legitimate interest in the technically fault-free operation and smooth functionality of our website as described in Art. 6 paragraph 1 lit. f of the GDPR. The use of statistics and marketing cookies is subject to your consent, in accordance with Art. 6 paragraph 1 lit. a of the GDPR. You can withdraw your consent for the future use of cookies at any time in accordance with Art. 7 paragraph 3 of the GDPR. Your consent is voluntary. If consent is not given, no disadvantages arise. For more information about the cookies we actually use (specifically, their purpose and lifespan), refer to this Privacy Policy and to the information in our cookie banner about the cookies we use. You can also set your web browser so that it does not store any cookies in general on your device or so that you will be asked each time you visit the site whether you accept the use of cookies. Cookies that have already been stored can be deleted at any time. Refer to the Help section of your browser to learn how to do this. Please note that a general deactivation of cookies may lead to functional restrictions on our website. On our website, we also use so-called local storage functions (also called "local data"). This means that data is stored locally in the cache of your browser, which continues to exist and can be read even after you close the browser - as long as you do not delete the cache or data is stored within the session storage. Third parties cannot access the data stored in the local storage. If special plug-ins or tools use the local storage functions, you are informed within the description of the respective plug-in or tool. If you do not wish plug-ins or tools to use local storage functions, you can control this in the settings of your respective browser. We would like to point out that this may result in functional restrictions. GOOGLE ANALYTICS We use the functions of the web analytics service Google Analytics on our website to analyse user behaviour and to optimise our website. The provider of this service is Google Ireland Limited, Barrow Street, Dublin 4, Ireland ("Google"). ATTENTION: Within the scope of this service, data is transferred to the US or such a transfer cannot be excluded. Google Analytics uses cookies that enable an analysis of the use of our website. In general, information about your use of the website is transferred to a Google server and stored there, such as the type and version of browser you used, the operating system you used, the site you visited prior to accessing our site, the host name of the computer (IP address) you used to access the site, and the time of your server request. For this purpose, we have entered into a contract with Google for contractual processing of your data in accordance with Art. 28 of the GDPR. At our request, Google will use this information to analyse the use of our website, to create reports on the activities within our website and to render additional services related to the use of our website and of the internet. According to Google, the IP address submitted by your browser will not be added to other data held by Google. We use Google Analytics only with IP anonymisation activated, which means we have expanded this website to include the code ‘anonymizeIP’. This ensures that your IP address is masked, so that all data is collected anonymously. Only under exceptional circumstances will a full IP address be transmitted to a Google server and truncated there. During the website visit, the following data is collected: the pages you call up, your "click path" Achievement of "website goals" (conversions, e.g. newsletter registrations, downloads, purchases) Your user behavior (for example clicks, duration of stay, bounce rates) Your approximate location (region) Your IP address (in shortened form) technical information about your browser and the end devices you use (e.g. language settings, screen resolution) Your internet provider the referrer URL (via which website / via which advertising medium you came to our website) The data about the use of our website is immediately deleted after expiration of the storage limits that we have set. Google Analytics gives us the following options for the storage limits: 14 months, 26 months, 38 months, 50 months or no automatic deletion. You can ask us any time for the current storage limit that we have set. The processing of your data using Google Analytics is subject to your explicit consent in the sense of Art 6 paragraph 1 lit. a of the GDPR. You can revoke your consent at any time with effect for the future. You can also block the collection of data by downloading and installing the browser plugin available through the link below: http://tools.google.com/dlpage/gaoptout You can find out exactly where Google data centres are located here: https://www.google.com/about/datacenters/inside/locations/ For more information about how Google uses your data, and about options for settings and withdrawal of consent, refer to the Google Privacy Policy at https://policies.google.com/privacy The data processing terms and conditions for Google products and the standard contractual clauses for data transfers to third countries can be found at https://business.safety.google/adsprocessorterms/ GOOGLE FONTS To display fonts consistently, our website uses Web Fonts which are provided by Google. Google Fonts is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). ATTENTION: Within the scope of this service, data is transferred to the US or such a transfer cannot be excluded. To display web fonts, the web browser you use must connect with a Google server. This informs Google that our website is being accessed via your IP address. The IP address from the browser of the device you are using to access our site is also stored by Google. If your browser does not support Web Fonts, your device will display the site using a standard font type. With each Google Font request, your IP address is automatically transferred to a Google server along with information such as your language preferences, display resolution, version and name of your browser. The usage data collected by Google enables them to determine the popularity of specific font types. Google publishes these findings on internal analytics sites (e.g. Google Analytics). Google Fonts enables us to use fonts on our own website without uploading them to our server. Google Fonts is an important building block for maintaining the high quality of our website. All Google fonts are automatically optimised for the web. This reduces the data volume and is particularly advantageous for use on mobile devices. When you visit our site, the low file size allows for quicker loading times. Furthermore, Google Fonts are secure Web Fonts that support all major browsers. The processing of your data therefore takes place on the basis of our legitimate interest in maintaining a consistent, attractive presentation for our website. This is a legitimate interest under Art. 6 paragraph 1 lit. f of the GDPR. Google stores requests for CSS assets for one day on its servers. This enables us to use the fonts with the support of a Google style sheet. The font files are stored by Google for one year. To delete data prematurely, you must contact Google Support (https://support.google.com). You can find out exactly where Google data centres are located here: https://www.google.com/about/datacenters/inside/locations/ For more information about Google Fonts, refer to https://developers.google.com/fonts/faq and the Google Privacy Policy: https://policies.google.com/privacy The data processing terms and conditions for Google products and the standard contractual clauses for data transfers to third countries can be found at https://business.safety.google/adsprocessorterms/ GOOGLE MAPS We embed the service Google Maps on our website to make it easier to read the user’s geographical information, particularly so that we can display our location and provide you with route directions. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). ATTENTION: Within the scope of this service, data is transferred to the US or such a transfer cannot be excluded. Google Maps is an online map service that makes geographical information more readable for you as a user via your device. Among other things, directions are displayed or map sections of a location can be integrated into a website. When Google Maps is started, your browser establishes a connection to Google's servers. This enables Google to know that our website has been accessed via your IP address. The use of Google Maps enables Google to collect and process data on the use of the service. In addition to your IP address, Google Maps processes search terms entered and latitude and longitude coordinates for the provision of this service. If you use the route planner function of Google Maps, the starting address entered will also be stored. This data processing takes place exclusively through your voluntary use of Google Maps and is not within our sphere of influence. We would like to point out that a setting cookie called "NID" is set by Google for this service. Google Maps does not currently offer us the option of operating this service in a mode without this cookie. The NID cookie contains a unique ID that Google uses to store your preferred settings and other information, such as your preferred language. Google anonymises data in server logs by deleting part of the IP address and cookie information after 9 and 18 months respectively. Location and activity data are stored for either 3 or 18 months - depending on your decision - and then deleted. You can also manually clear history at any time via your Google Account. If you want to completely prevent your location tracking, you will need to turn off the "web and app activity" section in your Google Account. For further information, refer to the Google Privacy Policy: https://www.google.com/policies/privacy/ You can find out exactly where Google data centres are located here: https://www.google.com/about/datacenters/inside/locations/ The data processing terms and conditions for Google products and the standard contractual clauses for data transfers to third countries can be found at https://business.safety.google/adsprocessorterms/ GOOGLE MARKETING PLATFORM / GOOGLE AD MANAGER (FORMER DOUBLECLICK) We use the service Google Marketing Platform / Google Ad Manager provided by Google on our website for purposes of analysis and optimisation and for the commercial operation of our website. This tool is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). ATTENTION: Within the scope of this service, data is transferred to the US or such a transfer cannot be excluded. This service works by means of a pseudonymous identification number (pID), which is received by and assigned to your browser. This pID enables the service to detect which ads have already been displayed to you and which have been accessed. This data is used to display ads throughout a website be enabling Google to identify which pages you have visited. The information collected is transferred to a Google server in the USA and stored there for analysis. Google is only allowed to transfer data to third parties in accordance with legal regulations or in the context of contractual data processing. Under no means is Google permitted to add your data to other data that it has collected. The processing of your data is subject to your consent in the sense of Art 6 paragraph 1 lit. a of the GDPR. You can withdraw this consent at any time, with effect for the future. You can find out exactly where Google data centres are located here: https://www.google.com/about/datacenters/inside/locations/ For more information about how Google uses your data, and about options for settings and withdrawal of consent, refer to the Google Privacy Policy at https://policies.google.com/technologies/ads as well as the settings for Google ad display under https://adssettings.google.com/authenticated Data processing conditions for Google advertising products: Information on services Data processing conditions between data controllers and standard contractual clauses for third country transfers of data: https://business.safety.google/adscontrollerterms GOOGLE RECAPTCHA Our website uses the reCAPTCHA service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to protect against abuse by non-human visitors (bots) and to prevent spam. ATTENTION: Within the scope of this service, data is transferred to the US or such a transfer cannot be excluded. When reCAPTCHA is started, your browser establishes a connection to Google's servers. This enables Google to know that our website has been accessed via your IP address. The purpose of reCAPTCHA is to check whether the data entry on our website is made by a human or by an automated programme. To do this, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as the website visitor enters our website. For the analysis, reCAPTCHA evaluates various information. According to our information, the following data is processed by Google: the address of the page from which the visitor comes IP address Information about the operating system Cookies Mouse and keyboard behavior Date and language settings All Java-Script Objects Screen resolution The data collected during the analysis is forwarded to Google and used by Google. The reCAPTCHA analyses run completely in the background. Cookies are used for the execution of the service. These cookies require a unique identifier for tracking purposes. According to Google, the IP address is not merged with other data from other Google services unless you are logged into your Google account while using the reCAPTCHA plug-in. Furthermore, reCAPTCHA also uses the local storage on the user's end device to store data. You can find out exactly where Google data centres are located here: https://www.google.com/about/datacenters/inside/locations/ Further information on Google reCAPTCHA can be found here: https://developers.google.com/recaptcha/ For Google's privacy policy, please see the following link: https://policies.google.com/privacy GOOGLE TAG MANAGER We use the service Google Tag Manager on our website. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). ATTENTION: Within the scope of this service, data transfer to the USA takes place or cannot be ruled out. When the Tag Manager is started, your browser establishes a connection to Google's servers. This informs Google that our website has been accessed via your IP address. Google Tag Manager is used to manage website tags via an interface. This enables us to embed code snippets such as tracking codes or conversion pixels into our website without interfering with the source code. In this process, Tag Manager data is only transferred; it is not collected or stored. The Tag Manager itself is a cookie-less domain and does not process any personal data, because it is used solely to manage other services used on our website. The Tag Manager triggers other tags which in turn collect data under specific circumstances. However, the Tag Manager has no access to this data. If you have chosen to deactivate cookies on our site in general or to deactivate specific cookies, this will remain in effect for all tracking tags that are implemented using the Tag Manager. You can find out exactly where Google data centres are located here: https://www.google.com/about/datacenters/inside/locations/ For more information about data protection, refer to the following Google websites: Privacy Policy: https://policies.google.com/privacy FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html Use Policy Google Tag Manager: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/ Google Ads Data Processing Terms including standard contractual clauses for third country transfers: https://business.safety.google/adsprocessorterms/ HOSTING In the process of hosting our website, we store all data related to the operation of our website. This is necessary for enabling operation of our website. Therefore, we process this data on the legal grounds of our legitimate interest in optimising our website as described under Art. 6 paragraph 1 lit. f of the GDPR. To provide access to our website, we use the services of web hosting providers, to whom we supply the aforementioned data within the context of contractual processing in accordance with art. 28 of the GDPR. JQUERY CONTENT DELIVERY NETWORK On our website we use the JavaScript library jQuery. The Content Delivery Network (CDN) is provided by StackPath LLC, 2021 McKinney Ave, Suite 1100, Dallas, TX 75201, USA. ATTENTION: Within the scope of this service, data is transferred to the US or such a transfer cannot be excluded. This library primarily enables a modern design of our websites. In order to increase the loading speed of our web pages, we use the CDN (Content Delivery Network) of jQuery to load this library. Even if your browser already has a copy of the jQuery library in its cache, a connection is established to the jQuery server in the USA and your IP address is sent to StackPath LLC, the CDN provider of jQuery.com. The service is integrated to optimize our websites according to our legitimate interest, according to art. 6 paragraph 1 lit. f GDPR. Developer of the jQuery JavaScript library is the jQuery Team of the JS Foundation: https://jquery.org/team/, https://js.foundation/contact For more information about StackPath LLC's privacy policy, please visit: https://www.stackpath.com/privacy-statement/#Contact-Information SERVER LOG FILES For technical reasons, particularly to ensure a functioning and secure website, we process the technically necessary data about accesses to our website in so-called server log files which your browser automatically sends to us. The access data we process includes: The name of the website you are accessing The browser type (including version) you use The operating system you use The site you visited before accessing our site (referrer URL) The time of your server request The amount of data transferred The host name of computer (IP address) you are using to access the site This data cannot be traced back to any natural person and is used solely to perform statistical analyses and to operate and improve our website while also optimising our site and keeping it secure. This data is sent exclusively to our website operator. The data is neither connected nor aggregated with other data sources. In case of suspicion of unlawful use of our website, we reserve the right to examine the data retroactively. This data processing takes place on the legal grounds of our legitimate interest in maintaining a technically fault-free and optimal website, as described under Art. 6 paragraph 1 lit. f of the GDPR. The access data is deleted within a short period of time after serving its purpose (usually within a few days) unless further storage is required for evidence purposes. In such cases, the data is stored until the incident is definitively resolved. SSL ENCRYPTION Within your visit to our website, we use the widespread SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser. We use this encryption procedure on the basis of our justified interest in the use of suitable encryption techniques in accordance with Art. 6 paragraph 1 lit. f GDPR. We also make use of suitable technical and organisational security measures in accordance with Art. 32 GDPR to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments and kept state-of-the-art. WEBCARE In order to obtain consent for the use of cookies on our website in accordance with data protection regulations, we use the Consent Banner of DataReporter WebCare. This is a service provided by DataReporter GmbH, Zeileisstraße 6, 4600 Wels, Austria ("DataReporter"). More information about this company can be found at www.datareporter.eu. The Consent Banner records and stores the consent to cookie use for the respective user of our website. Our Consent Banner ensures that statistical and marketing cookies are only set when the user has given his express consent to their use. We store information on the extent to which the user has confirmed the use of cookies. The user's decision can be revoked at any time by calling up the setting for cookies and managing the declaration of consent. Existing cookies will be deleted after revocation of the consent. A cookie is also set to store information on the status of the user's consent, which is indicated in the cookie details. Furthermore, the IP address of the respective user is transmitted to DataReporter's server for calling this service. The IP address is neither stored nor associated with any other data of the user, it is only used for the correct execution of the service. The use of the above data is therefore based on our legitimate interest in the legally compliant design of our website in accordance with Art. 6 paragraph 1 lit. f GDPR. Further information can be found in the DataReporter data protection declaration at https://www.datareporter.eu/datenschutz. Please feel free to send your enquiries about this service to office@datareporter.eu. WEBCARE CONSENT CONSERVE On our website, we have activated the WebCare Consent Conserve function. The provider of this service is DataReporter GmbH, Zeileisstraße 6, 4600 Wels, Austria ("DataReporter"). The WebCare Consent Conserve function enables us both to prove the consent of users of our website via our Consent Banner and to make the users' personal consent history transparent and traceable. This function generates a unique Consent ID for each user and records every action concerning consent or revocation via our Consent Banner in connection with the Consent ID. The history of the user's decisions is stored in a protected memory area and can be viewed by the user at any time. For us as the website operator, an assignment of a history to a specific person can only take place after knowledge of the respective Consent ID. Each action via the Consent Banner of a user is stored for 60 days and then automatically deleted. The storage location for the Consent ID is Frankfurt / Germany (EU). No logs are kept on the server that store the IP or other personal data, except for the Consent ID and the data on the actions. The use of this function is due to our documentation and accountability obligations according to Art 5 GDPR. We assume that these obligations to provide evidence regarding the consent of data subjects will also be strengthened in view of the expected ePrivacy Regulation in the online sector. More information on this function can be found in the provider's help section at: https://help.datareporter.eu/docs/webcare/webcare_consent_conserve/ Further information on data protection can be found at: https://www.datareporter.eu/datenschutz/ WEBCARE STATISTICS We have activated the WebCare Statistics function on our website. The provider of this service is DataReporter GmbH, Zeileisstraße 6, 4600 Wels, Austria ("DataReporter"). The WebCare statistics function enables us to anonymously record the interactions of the users of our website with our Consent Banner. The statistics only record whether the Consent Banner was opened and which actions were carried out (purposes of consent, revocation). Only statistical data and no activities related to the specific user are stored. The visitor's IP address is only used for the purpose of the connection and is completely deleted after the connection is terminated. The use of the WebCare statistics function is based on our legitimate interest in reviewing the performance of our Consent Banner and the related user-friendliness and accessibility of our online offer. The statistical data is stored for 30 days, older data is automatically deleted. You can find more information about this function in the provider's help section at: https://help.datareporter.eu/docs/webcare/webcare_consent_statistic/ Further information on data protection can be found at: https://www.datareporter.eu/datenschutz/ YOUTUBE On our website, we use the "YouTube" service to embed videos. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("YouTube"). ATTENTION: Within the scope of this service, data is transferred to the US or such a transfer cannot be ruled out. We have activated the extended data protection mode on YouTube. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch a video. However, the disclosure of data to YouTube partners is not excluded by the extended data protection mode. As soon as you start a YouTube video, a connection to YouTube's servers is established. This tells YouTube which of our pages you have visited. If you are logged into your YouTube account, you thereby enable YouTube to assign your surfing behaviour directly to your personal profile. This can be prevented by logging out of your account. Furthermore, YouTube can save various cookies on your end device after starting a video or use comparable technologies (e.g. device fingerprinting). YouTube also uses the local storage on your end device. In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts. YouTube is used in the interest of an appealing presentation of our website. This represents a legitimate interest within the meaning of Art. 6 paragraph 1 lit. f GDPR. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 paragraph 1 lit. a GDPR; the consent can be revoked at any time for the future. The applicable privacy policy of YouTube can be found at: https://www.google.com/policies/privacy/, Opt-out option: https://adssettings.google.com/authenticated GENERAL INFORMATION ON DATA PROTECTION The following provisions in its principles apply not only to the data collection on our website, but also in general to other processing of personal data. PERSONAL DATA Personal data is information that can be assigned to you individually. Examples include your address, name, postal address, email address or telephone number. Information such as the number of users who visit a website is not personal data because it is not assigned to a person. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA Unless more specific information is provided in this Privacy Policy (e.g. in the case of the technologies used), we may process personal data from you on the basis of the following legal principles: consent in accordance with Art. 6 paragraph 1 lit. a of the GDPR - The data subject has given his or her consent to the processing of his or her personal data for one or more specific purposes. Fulfillment of a contract and pre-contractual measures pursuant to Art. 6 paragraph 1 lit. b of the GDPR - Processing is necessary for the fulfillment of a contract to which the data subject is a party or for the implementation of pre-contractual measures. Legal obligation pursuant to Art. 6 paragraph 1 lit. c of the GDPR - Processing is necessary for the performance of a legal obligation. Protection of vital interests pursuant to Art. 6 paragraph 1 lit. d of the GDPR - Processing is necessary to protect the vital interests of the data subject or of another natural person. Reasonable interests pursuant to Art. 6 paragraph 1 lit. f of the GDPR - The processing is necessary to protect the legitimate interests of the controller or of a third party unless the interests or fundamental rights and freedoms of the data subject prevail. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our home country. TRANSFER OF PERSONAL DATA Your personal data will not be transferred to third parties for purposes other than those listed in this Privacy Policy. We will only transfer your personal data to third parties if: you have given your express consent in accordance with Art. 6 paragraph 1 lit. a of the GDPR, the transfer pursuant to Art. 6 paragraph 1 lit. f of the GDPR is necessary to safeguard reasonable interests, as well as to assert, exercise or defend legal claims and there is no reason to assume that you have a prevailing interest worthy of protection by not disclosing your data, there is a legal obligation to transfer the data in accordance with Art. 6 paragraph 1 lit. c of the GDPR, as well as this is legally permissible and / or it is required according to Art. 6 paragraph 1 lit. b of the GDPR for the processing of contractual relationships with you. COOPERATION WITH PROCESSORS We carefully select our service providers who process personal data on our behalf. If we commission third parties to process personal data on the basis of a data processing agreement, this is done in accordance with Art. 28 of the GDPR. TRANSFER TO THIRD COUNTRIES If we process data to a third country or if this is done in the context of using the services of third parties or disclosure or transfer of data to other persons or companies, this is only done for the reasons described above for the transfer of data. Subject to express consent or contractual necessity, we process or allow data to be processed only in third countries with a recognized level of data protection or on the basis of special guarantees, such as contractual obligations through so-called standard contractual clauses of the EU Commission, the existence of certifications or binding corporate rules in accordance with Art. 44 - 49 of the GDPR. DATA TRANSFER TO THE US / DISCONTINUATION OF THE PRIVACY SHIELD We would like to expressly point out that as of July 16, 2020, due to a legal dispute between a private individual and the Irish supervisory authority, the so-called "Privacy-Shield", an adequacy decision of the EU Commission according to Art 45 GDPR, which confirmed an adequate level of data protection for the US under certain circumstances, is no longer valid with immediate effect. The Privacy Shield therefore no longer constitutes a valid legal basis for the transfer of personal data to the United States! If a transfer of data by us to the US takes place at all or if a service provider based in the US is used by us, we refer to this explicitly in this Privacy Policy (see in particular the description of the technologies used on our website). What can the transfer of personal data to the US mean for you as a user and what risks are involved? Risks for you as a user are at any rate the powers of the US secret services and the legal situation in the US, which, in the opinion of the European Court of Justice, no longer ensure an adequate level of data protection. Among other things, this concerns the following points: Section 702 of the Foreign Intelligence Surveillance Act (FISA) does not provide for any restrictions on the surveillance measures of the secret services or guarantees for non-US citizens. Presidential Policy Directive 28 (PPD-28) does not provide effective remedies for those affected against actions by U.S. authorities and does not provide barriers to ensuring proportionate measures. The ombudsman provided for in the Privacy Shield does not have sufficient independence from the executive; he cannot issue binding orders to the U.S. secret services. Legally compliant transfer of data to the US on the basis of standard contractual clauses? The standard contractual clauses adopted by the Commission in 2010 (2010/87/EU of 05.02.2010), Art. 46 paragraph 2 lit. c GDPR, are still valid, but a level of protection for personal data must be ensured which is equivalent to the level in the European Union. Therefore, not only the contractual relationships with our service providers are relevant, but also the possibility of access to the data by U.S. authorities and the legal system of the U.S. (legislation and jurisdiction, administrative practice of authorities). The standard contractual clauses cannot bind authorities in the US and therefore do not yet provide adequate protection in cases in which the authorities are authorized under the law in the US to intervene in the rights of the data subjects without additional measures by us and our service provider. Legally compliant transfer of data to the US on the basis of your consent? It is currently controversial whether informed consent and thus a deliberate and knowingly restriction of parts of your basic right to data protection is legally possible at all. What measures do we take to ensure that a data transfer to the US complies with the law? Insofar as US providers offer the option, we choose to process data on EU servers. This should technically ensure that the data is located within the European Union and cannot be accessed by US authorities. Furthermore, we carefully examine European alternatives to US tools used. However, this is a process that does not happen overnight, as it also involves technical and economic consequences for us. Only if the use of European tools and / or the immediate switch off of the US tools is impossible for us for technical and / or economic reasons, US service providers are currently still used. For the further use of US tools we take the following measures: As far as possible, your consent will be asked for before using a US tool and you will be informed in advance in a transparent manner about the functioning of a service. The risks involved in transferring data to the USA can be found in this section. We make every effort to conclude standard contract clauses with US service providers and to demand additional guarantees. In particular, we require the use of technologies that do not allow access to data, e.g. the use of encryption that cannot be broken even by US services or anonymization or pseudonymization of data, where only the service provider can make the assignment to a person. At the same time, we require additional information from the service provider if data is actually accessed by third parties or the service provider exhausts all legal remedies until access to data is granted at all. STORAGE PERIOD If no explicit storage period is specified during the collection of data (e.g. in the context of a declaration of consent), we are obliged to delete personal data in accordance with Art. 5 paragraph 1 lit. e of the GDPR as soon as the purpose for processing has been fulfilled. In this context, we would like to point out that legal storage obligations represent a legitimate purpose for the processing of personal data. Personal data will be stored and retained by us in principle until the termination of a business relationship or until the expiry of any applicable guarantee, warranty or limitation periods, in addition, until the end of any legal disputes in which the data is required as evidence, or in any event until the expiry of the third year following the last contact with a business partner. RIGHTS OF DATA SUBJECTS Data subject have the right: in accordance with Art. 15 of the GDPR, to request information about your personal data processed by us. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned duration of storage, the existence of a right of rectification, deletion, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, where applicable, meaningful information on the details thereof; in accordance with Art. 16 of the GDPR, to demand without delay the correction of incorrect or incomplete personal data stored by us; in accordance with Art. 17 of the GDPR, to demand the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims; in accordance with Art. 18 of the GDPR, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defense of legal claims or you have lodged an objection to the processing in accordance with Art. 21 of the GDPR; in accordance with Art. 20 of the GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller; in accordance with Art. 21 of the GDPR, if your personal data are processed on the basis of our legitimate interest, to object to the processing of your personal data for reasons arising from your specific situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without indicating a specific situation. in accordance with Art. 7 paragraph 3 of the GDPR, you may at any time revoke your consent to us. As a result, we may no longer continue the data processing based on this consent in the future. Among other things, you have the option of revoking your consent to the use of cookies on our website with effect for the future by calling up our Cookie Settings. in accordance with Art. 77 of the GDPR to complain to a data protection authority regarding the illegal processing of your data by us. As a rule, you can contact the data protetion authority at your usual place of residence or workplace or at the headquarters of our company. The responsible data protection authority for Oö. Theater und Orchester GmbH is: Österreichische Datenschutzbehörde Barichgasse 40-42, 1030 Wien, Österreich Tel.: +43 1 52 152-0, dsb@dsb.gv.at ASSERTION OF RIGHTS OF DATA SUBJECTS You yourself decide on the use of your personal data. Should you therefore wish to exercise one of your above-mentioned rights towards us, you are welcome to contact us by email at datenschutz@landestheater-linz.at or by post, as well as by telephone. Together with your application, please send us a copy of an official photo ID for clear identification and support us in concretizing your request by answering questions from our responsible employees regarding the processing of your personal data. In your request, please state in which role (employee, applicant, visitor, supplier, customer, etc.) and in which period of time you have been in contact with us. This enables us to process your request promptly. SECURITY OF PERSONAL DATA The security of your personal data is of particular concern to us. Therefore, in accordance with Art. 32 of the GDPR and taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the different probabilities of occurrence and severity of the risk to the rights and freedoms of natural persons, we take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk. These measures shall include, but not be limited to, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access, input, disclosure, safeguarding of availability and segregation of data relating to them. Furthermore, we have established procedures to ensure that data subjects' rights are exercised, data is deleted, and we respond to data threats. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware and software, in accordance with the principle of privacy by design and through data protection-friendly pre-settings in accordance with Art. 25 of the GDPR. Our understanding of security is also requested from the processors we use. ACTUALITY OF THIS PRIVACY POLICY Due to further developments or changes in legal requirements, it may become necessary to adapt this Privacy Policy from time to time. The current Privacy Policy can be found and printed out by you at any time here on this website. For questions regarding data privacy, you can reach us at datenschutz@landestheater-linz.at or at the other contact details stated in this Privacy Policy. Linz, on 24. November 2021 Download as PDF ABOUT COOKIES Cookies are small data packages that are exchanged between your browser and our web server. Cookies can only store information provided by your browser. Depending on the intended use, cookies are either technically necessary or are used for statistical or marketing purposes. The use of technically required cookies is based on our legitimate interest in the technically correct operation and smooth functionality of our website. The use of statistics and marketing cookies requires your consent. This is voluntary and can be revoked at any time for the future by calling up our cookie settings. You can also set your browser to generally prevent the storage of cookies. Once cookies have been set, you can delete them at any time. How all this works in details can be found in the help function of your browser. Please note that a general deactivation of cookies may lead to functional restrictions on our website. You can find more detailed information on what data is stored in cookies, for what purposes they are used and for how long data is stored in our data protection declaration and in our cookie banner. REQUIRED Technically necessary cookies are used to enable the technical operation of a website and make it functional for you. The use is based on our legitimate interest to provide a technically flawless website. However, you can generally disable the use of cookies in your browser. <br /> Surname Purpose Creator Storage time Domain websidprjmusicasacra counts the number of sessions and assigns an anonymous identifier to each visitor. Session www.landestheater-linz.at BCSI-CS- ensures the functionality, operation and login to internal tools such as CMS, internal gateways and portals. BlueCoat www.landestheater-linz.at CookieConsent contains the information to what extent the user has confirmed the use of cookies. 6 months www.landestheater-linz.at cookieconsent_mode contains the information to what extent the user has confirmed the use of cookies. DataReporter GmbH 12 months www.youtube.com cookieconsent_status contains the information to what extent the user has confirmed the use of cookies. DataReporter GmbH 12 months www.youtube.com CookieScriptConsent contains the information to what extent the user has confirmed the use of cookies. 6 months www.landestheater-linz.at ssm_au_c save settings and preferences of the user such as the current language setting. Session www.landestheater-linz.at _webcare_consentid contains the information to what extent the user has confirmed the use of cookies. DataReporter GmbH 12 months www.landestheater-linz.at atrfs ensures the functionality and usability of the page and is used to track errors. www.landestheater-linz.at atssc ensures the functionality and usability of the page and is used to track errors. www.landestheater-linz.at atuvc ensures the functionality and usability of the page and is used to track errors. 1 year www.landestheater-linz.at atuvs ensures the functionality and usability of the page and is used to track errors. 30 minutes www.landestheater-linz.at STATISTICS Statistics cookies collect information about how websites are used to improve their attractiveness, content and functionality. A use takes place only with your consent and only as long as you have not deactivated the respective cookie. Surname Purpose Creator Storage time Domain browserupdateorg Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. Browserupdate.org 1 week www.landestheater-linz.at perf_dv5Tr4n Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. www.landestheater-linz.at _ga Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. Google 2 years .bruckner-orchester.at _gac_UA-42055593-1 Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. Google 2 years www.landestheater-linz.at _gali Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. Google 2 years www.landestheater-linz.at _gat Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. Google 1 minute www.landestheater-linz.at _gat_gtag_UA_106855065_21 Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. Google 1 minute www.landestheater-linz.at _gat_gtag_UA_110155336_1 Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. Google 1 minute .bruckner-orchester.at _gat_MUSS%20getauscht%20werden Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. Google 1 minute www.landestheater-linz.at _gat_UA-42055593-1 Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. Google 1 minute www.landestheater-linz.at _gat_UA-90594352-64 Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. Google 1 minute www.landestheater-linz.at _gid Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. Google 1 day .bruckner-orchester.at TAG_ASSISTANT Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. Google www.landestheater-linz.at MARKETING Marketing cookies come from external advertising companies and are used to collect information about the websites visited by the user. A use takes place only with your consent and only as long as you have not deactivated the respective cookie. Surname Purpose Creator Storage time Domain NID registers a unique ID that identifies and recognizes the user. Used for targeted advertising. Google 6 months www.google.com test_cookie registers a unique ID that identifies and recognizes the user. Used for targeted advertising. Google 15 minutes .doubleclick.net VISITOR_INFO1_LIVE registers a unique ID that identifies and recognizes the user. Used for targeted advertising. YouTube 6 months .youtube.com YSC registers a unique ID that identifies and recognizes the user. Used for targeted advertising. YouTube Session .youtube.com _gcl_au registers a unique ID that identifies and recognizes the user. Used for targeted advertising. Google 3 months www.landestheater-linz.at _gcl_aw registers a unique ID that identifies and recognizes the user. Used for targeted advertising. Google www.landestheater-linz.at 2021 OÖ THEATER UND ORCHESTER GMBH - TERMS AND CONDITIONS DATA PROTECTION COOKIE POLICY IMPRINT CONTACT Bruckner Orchestra Anton CULTURE Youtube Facebook Twitter