1. GENERAL
The protection and security of your data are of great importance to us. The Vienna Coffee House Owners’ Club is obliged to protect your data and takes this responsibility very seriously.

2. PERSONAL DATA
Personal data is information that relates to persons whose identity is identified or identifiable (e.g. name, address data, contact data, billing data, IP addresses).

3. PROCESSING OF YOUR PERSONAL DATA
Depending on whether you visit our website, subscribe to our newsletter, are a prospective member or a ball attendee, a club member, or one of our suppliers or business partners, we process your data in different ways:

3.1. Data processing of visitors to our website, subscribers to our newsletter and people interested in the Kaffeesiederball

We process your personal data either
• to protect our legitimate interests (Art. 6(1)(f) GDPR), namely to ensure website operation, security, and optimization;
• because you have subscribed to our newsletter (Art. 6(1)(a) GDPR);
• to process your inquiries submitted to us via the contact form on our website, by email, or by phone (Art. 6(1)(a) GDPR).

To optimize this website in terms of system performance, user-friendliness and the provision of useful information about our services, we process personal data to the extent technically necessary (name of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL and the requesting provider, IP address). This data cannot be assigned by us to specific persons and is not merged with data from other data sources. This data is not merged with personal data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

You give us your consent by registering for the newsletter or by sending or submitting the request to us.

Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will only be stored by us for the purpose of processing the inquiry and in the event of follow-up questions after you have clicked the box. We do not pass on this data without your consent.

Newsletter

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter, or by sending a message to the e-mail address klub@kaffeesieder.at or by clicking on the unsubscribe link at the end of each newsletter or by notifying us in another form.

Newsletters are sent via “MailChimp,” a newsletter distribution platform provided by the U.S. company Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
The email addresses of our newsletter subscribers, as well as their other data described in this notice, are stored on MailChimp’s servers in the United States. MailChimp uses this information to send and analyze the newsletters on our behalf. Furthermore, according to MailChimp’s own information, MailChimp may use this data to optimize or improve its own services—for example, for technical optimization of the delivery and presentation of the newsletters, or for business purposes to determine which countries the recipients are from. However, MailChimp does not use the data of our newsletter subscribers to contact them directly or to share it with third parties.

We have concluded a corresponding contract with MailChimp for order data processing.

Privacy policy for the use of Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

The information generated by these cookies regarding your use of this website (including your IP address) is anonymized before it is stored on Google’s servers, so that it can no longer be associated with a specific computer. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. Google uses this information to evaluate your use of the website, to compile reports on website activity for the website operators, and to provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google. For more information on how Google Analytics handles user data, please see Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

You can prevent the collection of data generated by the cookies and related to your use of the website, as well as the processing of this anonymized data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Please note, however, that in this case you may not be able to use all features of this website to their full extent.
We have entered into a corresponding data processing agreement with Google.

Social Media

This website contains a link to our profile on the social network Facebook to make us better known.

This service is only integrated as a link to the corresponding social network. No data is transferred to the provider of the social network if you do not click on the respective links. After clicking on the embedded link, you will be redirected to the page of the respective provider. Only then is user information transmitted to the respective provider.

Cookies

Our website uses “cookies” to make our offer more user-friendly, effective and secure. Cookies are small files or other types of information storage that are transferred from our web server or third-party web servers to the user’s web browser and stored there for later retrieval. The cookies used when visiting our website only serve the purpose of simplifying the shopping process (e.g. by storing the items placed in a shopping cart) and enabling the use of certain functions of our web store. The cookies we use are deleted from your hard disk after you close your browser (session cookies). This data is collected on the basis of Section 96 (3) TKG. We also use cookies to statistically analyze the use of our website as part of the web analysis service Google Analytics (see below).

If you have consented to the use of cookies in the “cookie banner”, cookies from third-party providers will be used during your visit to our website for the purpose of collecting and evaluating your usage behavior.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Data Security

Your personal data is protected through appropriate organizational and technical measures. These measures are designed, in particular, to protect against unauthorized, unlawful, or accidental access, processing, loss, use, and manipulation. This site uses SSL encryption to protect the transmission of confidential content, such as the inquiries you send to us or those made in the ticket shop. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock icon in your browser bar.

If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Notwithstanding our efforts to maintain a consistently high standard of due diligence, we cannot rule out the possibility that information you disclose to us via the Internet may be viewed and used by others.
Please note that we therefore assume no liability of any kind for the disclosure of information resulting from data transmission errors not caused by us and/or unauthorized access by third parties (e.g., malware on your device, hacking of your email account, interception of faxes).

3.2 Data processing in ticket sales

We process your personal data either
• to take steps prior to entering into a contract or to fulfill our contractual obligations (Art. 6(1)(b) GDPR) within the framework of the customer relationship;
• to comply with our legal obligations (Art. 6(1)(c) GDPR).

The main purpose of processing your data is to execute and process the purchase contract. If you do not wish to provide us with your data, we will not be able to conclude a purchase contract with you.

Data will not be transferred to third parties, with the exception of the transfer of credit card data to the processing bank/payment service provider for the purpose of debiting the purchase price, to the transport company/shipping company commissioned by us to deliver the ball tickets and to our tax advisor to fulfill our tax obligations.

After canceling the purchase process, the data stored by us will be deleted. If a contract is concluded, all data from the contractual relationship will be stored until the expiry of the retention period under tax law (7 years).

The data name, address, purchased goods and date of purchase are also stored until the product liability expires (10 years).

3.3. Data processing of suppliers and business partners

We process your personal data either
• to take steps prior to entering into a contract or to fulfill our contractual obligations (Art. 6(1)(b) GDPR);
• to comply with our legal obligations (Art. 6(1)(c) GDPR).
The processing of your data serves primarily to initiate, maintain, and fulfill our contracts for goods and services.

3.4. Data processing of club members

We process your personal data either

– to safeguard our legitimate interests (Art 6 para 1 lit f GDPR), namely to ensure the promotion of traditional and innovative coffee house culture, in particular the promotion of cultural projects in the coffee houses, but also in the organization of the Kaffeesiederball and the organization of events for club members and their publication in print and online media, as well as to preserve and present the history of the association;
– to carry out pre-contractual measures or to fulfill our contractual obligations (membership, Art 6 para 1 lit b GDPR);
– to fulfill our legal obligations (Art 6 para 1 lit c GDPR);
– to publish their membership on the club’s website (Art 6 para 1 lit a GDPR).

The processing of your data is primarily used to manage club members, collect club dues, disburse club grants, and document the club’s activities.
Club members are provided with the names, contact information, and addresses of other members to facilitate communication and interaction in accordance with the club’s purpose. Furthermore, members have the option to disclose their membership on the club’s website.
The association is legally required to report the positions and names of its organizational representatives to the association authority.

4. RETENTION PERIOD FOR YOUR DATA

We will not retain data for longer than is necessary to fulfill our contractual or legal obligations and to defend against any potential liability claims. In particular, this would include:
• For tax purposes, contracts and other documents, as well as related correspondence arising from our contractual relationship, are generally retained for a period of seven years;
• You will remain on our newsletter mailing list until you unsubscribe;
• As a club member, your data will be stored until your membership ends and will be deleted promptly thereafter, unless there is a significant exception.

5. DISCLOSURE OF DATA TO THIRD PARTIES

In order to achieve these intended purposes, it may be necessary in some cases for us to disclose your data to third parties (e.g., website hosts, tax advisors, marketing companies, insurance companies, service providers we use and to whom we provide data, etc.), to courts, or to government authorities. . This disclosure may take the form of transmission, dissemination, or any other method of provision. Your data will be disclosed exclusively in accordance with the GDPR and the DSG, in particular to fulfill your contract or based on your prior consent.
Some of the recipients of your personal data listed above are located outside your country or process your personal data there. The level of data protection in other countries may not be equivalent to that in Austria. However, we only transfer your personal data to countries for which the European Commission has determined that they have an adequate level of data protection, or we implement measures to ensure that all recipients maintain an adequate level of data protection, for which we enter into standard contractual clauses (2010/87/EC and/or 2004/915/EC).

6. RIGHTS TO WHICH THEY ARE ENTITLED

We would also like to inform you that you have the following rights at any time:
• The right to request information about which of your data we process (pursuant to Art. 15 of the GDPR),
• The right to have your data corrected or deleted (pursuant to Art. 16 of the GDPR),
• the right to restrict the processing of your data (pursuant to Art. 18 GDPR),
• the right to object to the processing of your data (pursuant to Art. 21 GDPR),
• the right to data portability (pursuant to Art. 20 GDPR).

If we process your data based on your consent, you have the right to revoke this consent at any time by email to klub@kaffeesieder.at or by mail to Kaffeesieder Ball Veranstaltungs GmbH, Erzherzog-Karl-Straße 252/9+10, A-1220 Vienna. This will not affect the lawfulness of the data processing carried out up to that point (see Article 7(3) of the GDPR).
If, despite our efforts and our obligation to process your data lawfully, there is a breach of your right to lawful processing of your data, please contact us by post or e-mail so that we can learn about your concerns and resolve them. However, you also have the right to lodge a complaint with the Austrian Data Protection Authority or with another data protection supervisory authority in the EU, in particular at your place of residence or work.

If you have any further questions regarding the processing of your data, please feel free to contact us directly by email at klub@kaffeesieder.at or by mail at Kaffeesieder Ball Veranstaltungs GmbH, Erzherzog-Karl-Straße 252/9+10, A-1220 Vienna.

7. OUR CONTACT DETAILS, RESPONSIBLE PARTY WITHIN THE MEANING OF THE GDPR

Kaffeesieder Ball Veranstaltungs GmbH
Erzherzog-Karl-Straße 252/9+10
A-1220 Vienna
FN 677503d
VAT ID: ATU 83323538

T: +43 664 7946745
F: +43 1 9093639
E: ball@kaffeesieder.at