10. The data protection authority responsible for us
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
1. Responsible for the processing of my data (within the meaning of Art. 4 GDPR) is:
MyPilz GmbH
Wienerbergstrasse 55/13-15
1120 Vienna
2. What data do we process and where does it come from?
Personal data is information relating to an identified or identifiable natural person (hereinafter “data”).
3. On what legal basis are my data processed?
Your data will be processed in accordance with applicable data protection regulations (see General Data Protection Regulation GDPR). If we process your data for purposes other than those originally collected, we will ensure that there is a sufficient legal basis for doing so.
The following examples of legal bases are provided for the sake of transparency and are not intended to be an exhaustive list.
Fulfillment of a contract / pre-contractual measures (Art. 6 Para. 1 S. 1 lit. b) GDPR): In the course of fulfilling your purchase contract or any other contract with us, we must process certain data.
Fulfillment of a legal obligation (Art. 6 para. 1 sentence 1 lit. c) GDPR): We must process some of your data in order to comply with legal obligations to which we are subject.
Protection of legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR): We also process some of your data to protect our legitimate interests or those of third parties, but only if your interests do not outweigh them in the individual case.
4. For what purposes are your data processed?
Contractual processing purposes
Data collection and use for contract processing: We collect and process personal data when you voluntarily provide it to us as part of your order. The data collected is stated in the respective input forms. We use the data you provide to fulfill our contractual obligations to you and to process your inquiries.
5. Who is your data shared with?
We are committed to taking the necessary steps to ensure that your data is protected, processed and transmitted in accordance with legal requirements.
YouTube integration
Our website includes videos from YouTube. We use the "WP YouTube Lyte" plugin, which enables privacy-friendly integration. YouTube videos will only load when you actively click on the video and consent to the data transfer.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy Policy: https://policies.google.com/privacy?hl=de
By clicking on the video, you agree to the transfer of data to YouTube. The following data may be transmitted to YouTube: IP address, date and time of access, referrer URL, and other technical information.
Ticketing (oeticket.com)
We use the services of oeticket.com for ticket sales. During the purchase process, you will be redirected to the oeticket.com website, where öticket's privacy policy applies.
Provider: CTS Eventim Austria GmbH
Privacy Policy: https://www.oeticket.com/help/data-protection/
6. How long will your data be stored?
In accordance with Art. 17 GDPR, your data will be stored for as long as we are legally obliged to do so, or for as long as we need it for the purposes stated in Section 4. Your data will then be deleted in accordance with the principle of data minimization.
7. What data security measures are taken?
We encrypt your data using SSL encryption. Furthermore, we anonymize visitor statistics on our website. Contact forms are forwarded to us directly via one of our email accounts. However, an order processing agreement has also been concluded with our server and domain host.
8. What data protection rights can you assert?
Various data subject rights can be asserted. Please contact us for this purpose using the contact information provided in Section 1.
Right to information
Upon request, you will receive information about the following data stored by us (Art. 15 GDPR).
Copies of the data (emails, letters, database extracts) and the specific data processed, the purposes for which we processed it, and, if applicable, the recipients if we have transferred your data. We will provide you with this information free of charge.
Right to rectification and erasure
You can request both the correction of incorrect information (according to Art. 16 GDPR) and the deletion of your data (according to Art. 17 GDPR). This may be the case, for example, if
their data are no longer necessary for the purposes for which they were collected or processed;
you withdraw your consent, which is the basis for data processing;
you object to the processing of your data and there are no overriding legitimate grounds for the processing;
their data was processed unlawfully.
subject to compliance with a legal obligation requiring us to process your data, in particular with regard to statutory retention periods and for the establishment, exercise or defense of legal claims.
Right to restriction of processing
According to Article 18 GDPR, you have the right to restrict the processing of your data. This aims to limit the future processing of your data. This may be the case if
you contest the accuracy of your personal data while we verify the accuracy of the personal data;
you object to the processing pending the verification whether our legitimate grounds for processing override yours;
we no longer need your data, but you need it to assert, exercise or defend legal claims;
the processing is unlawful and you refuse to delete your data and instead request that the use of your personal data be restricted.
Right to data portability
According to Article 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format and the right to transmit this data to another controller without hindrance from our site.
Furthermore, you can request that we transmit your data directly to another responsible party, provided this is technically feasible.
Right to object
In accordance with Article 21 GDPR, you have the right to object to the processing of your data at any time for reasons related to your particular situation, provided that the processing of your data is based on your consent or on our legitimate interests or those of a third party.
In this case, we will no longer process your data unless we are legally obliged to do so, for example, to assert, exercise, or defend legal claims. Your right to withdraw your consent to processing remains freely revocable at any time, regardless of your right of objection.
9. Right to lodge a complaint with a supervisory authority
Pursuant to Article 77 GDPR, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you by us violates applicable data protection law.
10. The data protection authority responsible for us
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna