1. DATA PROTECTION OFFICER
The data protection officer pursuant to Art. 4 (7) of the EU General Data Protection Regulation (DSGVO) is the
Singverein der Gesellschaft der Musikfreunde
Musikverein Square 1
Tel: +43 1 5043348
2. DATA PROCESSING OF INDIVIDUALS IN THE BUSINESS ENVIRONMENT
DATA PROCESSING ACCORDING TO ART. 13 DSGVO
We process the data that various persons provide to us through their own statements, for example in the context of an enquiry by e-mail, for the purpose of initiating and concluding a contract or a business relationship.
DATA PROCESSING PURSUANT TO ART. 14 DSGVO
In addition, we process data of persons who may be part of a contractual relationship, which we have permissibly received in the context of information provided by third parties (event organisers provide us with the names of participants, companies provide us with data of their employees).
We process the following data from suppliers and third-party organisers: Company, title and names of contact persons, professional address data and contact data, bank details, contract data.
We process names and image data of artists.
PASSING ON OF DATA
Personal data will only be passed on to third parties if this is necessary for the purpose of processing and fulfilling the contract or if it is required by law.
STORAGE/DELETION OF DATA
Data will be deleted by us as soon as storage is no longer necessary/permitted or legal, e.g. statutory, retention obligations have expired. If the basis of the processing is consent, we will restrict the processing or delete the data if the consent is revoked - unless there are legal regulations to the contrary.
CONTACTING US BY E-MAIL FOR INFORMATION PURPOSES
When you contact us by e-mail, the data you provide will be stored by us in order to answer your questions. We delete the data accruing in this context after the processing is no longer necessary or restrict the processing if there are legal obligations to retain data.
PUBLICATION OF THE NAMES OF AUTHORS
We are required by law to disclose names of creators of image data (photos or videos) whenever we publish image data. We will delete this personal data automatically as soon as we stop using the image data or following a request for deletion from a data subject.
The legal basis for data processing is
o contract initiation and fulfilment pursuant to Art. 6 para. 1 lit. b DSGVO.
o legal obligations pursuant to Art. 6 para. 1 lit. c DSGVO, (for example, legally prescribed storage and documentation obligations, publication obligations pursuant to copyright law).
o legitimate interests of our company according to Art. 6 para. 1 lit. f DSGVO (e.g. use of software, replying to emails).
o Art. 6 para. 1 lit. a DSGVO when obtaining consent (for example when processing image data or for advertising purposes).
DATA PROCESSING IN THE USA
It cannot be ruled out that personal data will be transmitted to the USA through the use of our form.
The GDPR requires so-called suitable guarantees according to Art. 46 GDPR for a data transfer to a third country or to an international organisation. Such guarantees do not exist for the USA.
Possible risks that cannot currently be ruled out for you as a data subject in connection with the aforementioned information are in particular:
o Your personal data could possibly be passed on to other third parties (e.g. US authorities) by the respective service provider beyond the actual purpose of fulfilling the order.
o You may not be able to sustainably assert or enforce your rights of access against the respective service provider.
o There may be a higher probability of incorrect data processing because the technical organisational measures for the protection of personal data do not fully comply with the requirements of the GDPR in terms of quantity and quality.
With your consent to the processing of data via Google Forms, you explicitly consent to the transfer of data to the USA.
Legal basis: Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (contract initiation).
3. SOCIAL MEDIA PRESENCE
In the case of services with a US connection, the data collected is usually sent to a server in the USA and stored there. We have no influence or control over the type and scope of the data processed by these services, the type of processing and use or the transfer of this data to third parties. For options to restrict the processing of this data in the respective settings of these services, please refer to the detailed descriptions of the data protection declarations of the respective providers.
Furthermore, we point out that you use the respective services and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. sharing, commenting or rating).
4. YOUR RIGHTS
You have the following rights vis-à-vis us with regard to the personal data concerning you:
o Right to information, correction and deletion.
o Right to restriction of processing
o Right to object to processing
o Right to data portability
o Right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40 - 42, 1030 Vienna, telephone: +43 1 52 152-0, e-mail: dsb(a)dsb.gv.at.
If you are of the opinion that we have violated Austrian or European data protection law in the processing of your data and have thereby infringed your rights, we request that you contact us in order to clarify any questions you may have.
For this purpose, please direct your enquiries and concerns by e-mail to office(a)wiener-singverein.at or contact us using the contact details provided.