DATA PROTECTION DECLARATION AND LEGAL NOTICES

In cases in which we secure consent from the person involved for procedures entailing the processing of personal data, Art. 6 Para: 1 lit. a of the EU’s General Data Protection Regulation (GDPR) serves as the legal foundation for the processing of personal data.

In cases in which the processing of personal data is required to fulfil a contract to which the person involved is a contractual party, Art. 6 Para. 1 lit. a GDPR serves as the legal foundation. This also applies to processing procedures that are required to enable the implementation of pre-contractual measures.

In cases in which the processing of personal data is required to fulfil a legal commitment to which our company is subject, Art. 6 Para. 1 lit. c GDPR serves as its legal foundation.

In the cases in which the vital interests of the persons involved or those of another natural person necessitate the processing of personal data, Art. 6 Para, 1 lit. d GDPR serves as its legal foundation.

If processing be required to maintain a justified interest on the part of our company or that of a third party and if the basic rights and liberties of the party involve do not outweigh the interests mentioned above, Art. 6 Para. 1 lit. f GDPR serves as the legal foundation for its processing.

The personal data of the person involved is deleted or blocked as soon as the purpose for storing it no longer exists. Data storage can take place after this point in cases in which such is foreseen by European and national legislative bodies by EU regulations, laws or other rules to which the responsible party is subject. A blocking or deletion of the data also takes place in when the duration of storage imposed by the above-mentioned law expires, unless the continuation of storing the data is required to conclude or fulfil a contract.
 

Each time our Website is accessed, our system automatically registers data and information from the computer system of the computer accessing our Website.

The following data is gathered in this manner:

• Information on the kind of the browser and the version used

• Language and version of the browser software

• The operating system of the user and its interface

• The user’s IP address

• The date and time of day of access and the difference between the time zone in which it takes place and Greenwich Mean Time (GMT)

• The quantity of data transferred

• Websites from which the user’s system gains access to our Website

• Websites accessed by the user’s system via our Website

• Status of access/HTTP status code

The data is also stored in our system’s log files. Storage of this data along with other personal data of the user does not take place. 

The legal foundation for the temporary storage of data and log files is Art. 6 Para. 1 lit. f GDPR.

The temporary storage of the IP address by the system is necessary in order to enable the Website to be displayed on the user’s computer. For this reason, the IP address of the user remains stored for the duration of the session.

Storage of log files takes place to ensure the functionality of the Website. Moreover, the data serves to help us optimise the Website and ensure the security of our IT systems. In this regard, no evaluation of the data for marketing purposes takes place.

These purposes comprise our justified interest in data processing pursuant to Art. 6 Para. 1 lit. F GDPR. 

The data is deleted as soon as it is no longer required to achieve the objective underlying data compilation in the first place. In the case of data compilation as a means of facilitating the operation of the Website, this is the case when the respective session comes to an end.

In the case of the storage of the data in log files, data is deleted no later than after seven days. Storage beyond this term is possible. In such a case, the IP address of the user is deleted or altered beyond recognition, thus making it impossible to assign it to the client that gained access.

The compilation of data to make the Website available and the storage of data in log files is absolutely necessary to ensure the functionality of the Website. For this reason, the user has no possibility to file an objection. 

Our Website makes use of cookies, which are text files that are saved in the Internet browser, or by the Internet browser of the user’s computer system. If the user accesses a Website, a cookie can be stored in the user’s operating systems. This cookie contains a characteristic string of characters enabling the clear identification of the browser when the Website is accessed again.

We employ cookies for the purposes of configuring our Website to be user-friendly. Several elements of our Website require that the browser accessing it can also be identified after changing Websites (“first party cookies”). Our processing of these cookies is undertaken on the basis of our having a “justified interest”, as defined in Art. 6 Para. 1 lit f GDPR in light of the fact that the display of the Website would not be possible without the use of these cookies.

In addition, we also employ cookies that enable analyses of the pattern of surfing of our users on our Website. In several cases, these cookies are installed and employed by third parties (“third party cookies”). The processing of the data by these cookies is undertaken on the basis of your consent (Art. 6 Para. 1 lit a GDPR), which you can revoke at any time.

Technical measures are deployed to pseudonymise the user’s data gathered in this way. In turn, this precludes the data being linked to the user accessing the Website. The data is not stored together with any other personal data of the user.

When the user accesses our Website, he is informed on its use of cookies for purposes of analysis and is asked to grant consent to the processing of the personal data applied in this context. This also features reference to the data protection declaration.

GOOGLE.AT / 1P_JAR

The temporary storage of the IP address by the system is necessary in order to enable the Website to be displayed on the user’s computer. For this reason, the IP address of the user remains stored for the duration of the session.

Storage of log files takes place to ensure the functionality of the Website. Moreover, the data serves to help us optimise the Website and ensure the security of our IT systems. In this regard, no evaluation of the data for marketing purposes takes place.

These purposes comprise our justified interest in data processing pursuant to Art. 6 Para. 1 lit. F GDPR. 

The legal foundation for processing personal data using technically necessary cookies is Art. 6 Para. 1 lit. f GDPR.

The legal foundation for processing personal data using cookies for purposes of analysis is Art. 6 Para. 1 lit. a GDPR provided that the user has given his consent.  

The underlying purpose for using technically required cookies is to simplify Website use for the user. Several of our Website’s functions could not be offered without the use of cookies. These functions require the renewed recognition of the browser when changing over to a different Website. 

The data on users gathered by technically required cookies is not applied to create user profiles.

Analysis cookies are employed to improve the quality of our Website and of its contents. The analysis cookies enable us to be informed about how our Website is used. In turn, this enables the ongoing optimisation of our offering.

Cookies are saved on the user’s computer, which then transmits them to our Website. This provides you, the user, with complete control of the utilisation of cookies. By altering a setting in your Internet browser, you have the capability of deactivating or limiting the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also take place on an automatic basis. The deactivation of cookies for our Website can possibly lead to all of its functions not being able to be used to their full extent.

Each browser is characterized by an individual approach to the administration of cookie settings. This approach is described in the Help menu on each browser. It elucidates how you can change your settings on cookies. For your respective browser, this can be found by using the following links:

• Internet Explorer:  http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
• Firefox:  https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• Chrome:  http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
• Safari:  https://support.apple.com/kb/ph21411?locale=de_DE
• Opera:  http://help.opera.com/Windows/10.20/de/cookies.html

Our Website contains a contact form. It is to be used for contacting us on an electronic basis. If a user makes use of this option, the data entered on the form is transmitted to us and stored. This data includes the following:

• Salutation

• Title

• Name

• E-Mail address

• Commentary

• Reason for establishing contact

• The following data is saved as of the time of the dispatching of the message:

• Date and time of day of registration

As part of the dispatching process, your consent is secured as to the processing of your data. This also encompasses reference to this data protection declaration.

An alternative is our being contacted by sending an e-mail to the address provided in this document. In this case, the user’s personal data that is transmitted along with the e-mail is stored.

In this context, no data is transmitted to third parties. The data is solely used to process the conversation.

The legal foundation for processing data is existence of formal consent granted by the user pursuant to Art. 6 Para. 1 lit. a GDPR.

The legal foundation for processing data attached to an e-mail is Art. 6 Para. 1 lit. f GDPR. Should the contact via E-mail be undertaken to conclude a contract, Art. 6 Para. 1 lit. b GDPR is also applicable as a legal foundation for the processing.

The sole purpose of processing personal data stemming from the input mask is the processing related to establishing contact. Additionally, the initiation of contact based on the sending of an e-mail results in the justified interest in processing the data.

The processing of other personal data ensuing from the dispatching procedure is intended solely to prevent misuse of the contact form and to ensure the safety of our IT (information technologies) system.

The data is deleted as soon as it is no longer required to achieve the objective underlying data compilation in the first place. In the case of personal data stemming from the input mask of the contact form and data transmitted per e-mail, data is also deleted whenever the respective conversation with the user has come to an end. The conversation is considered to have come to an end whenever circumstances indicate that the matter at hand has been conclusively clarified. This period has a maximum term of 26 months for purposes of traceability.

The user has at any time the option of revoking her or his consent to the processing of personal data at any time. Should the user get in touch with us by dispatching an E-mail, he can file an objection to the storing of his personal data at any time. The lodging of this objection prevents the continuation of the conversation.

In order to avail yourself of your right to file an objection, please send an E-mail to p.kleemann@viennaairport.com. The receipt by us of an objection causes the deletion in this case of all personal data resulting from contacting us and the information being subsequently stored.

This Website employs Google Analytics, a Web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics employs so-called “cookies”. These are text files which are saved on your computer. They enable an analysis of your use of the Website. The information generated by the cookie with respect to your utilisation of the Website (with this including the abridged IP address) is, as a rule, transmitted to a server maintained by Google in the USA, where it is stored.

This Website’s use of Google Analytics is exclusively done by additionally employing the "_anonymizeIp()" extension. This ensures the anonymisation of the IP address by abridging it. This precludes any direct reference to a person. The extension causes your IP address to be abridged by Google on a prior basis in the countries that are members of the European Union or of others that are parties to the agreement establishing the European Economic Zone.  It is only in exceptional cases that your complete IP address is transmitted to a server maintained by Google in the USA, where it is then abridged.

In the exceptional cases of transmission of the IP address, processing is carried out pursuant to Art. 6 Para 1 lit. f GDPR and is based upon our justified interest in the compiling of a statistics-based analysis of user behaviour for optimisation and marketing purposes.

Acting on our behalf, Google is to use the information in order to evaluate your utilisation of the Website, to compile reports on Website activities, and to provide other services associated with this utilisation and with that involving the Internet. The IP address transmitted from your browser in the course of the employment of Google Analytics will not be merged with other data held by Google.

Data is stored for 26 months, after which it is automatically deleted.

Headquartered in the USA, Google LLC has certified itself to be part of Privacy Shield, which is the mechanism set up by the American-European agreement on data protection. This certification guarantees the adherence to the level of data protection in force in the EU.

Further information on the way Google Analytics handles user data is to be found in Google’s data protection declaration:

https://support.google.com/analytics/answer/6004245?hl=de

You have the right to promptly have inaccurate data involving you corrected, and/or to have completed the incomplete data on and from you that has been saved by us.

You have the right to demand the deletion of your personal data, should the preconditions for such established in Art. 17 Paragraph 1 GDPR be met. This right especially does not exist in the following special cases: when the processing is required by the exercising of the right to free speech and to secure information, or to fulfil a legal obligation; and whenever necessitated by public interests; or whenever needed to assert, exercise or defend a legal claim.

You have the right to demand the limitation of the processing of your personal data, in cases in which the correctness of your data has been disputed by you and this state of affairs is now being examined; in which you reject the deletion of your data due to impermissible processing of such, and in which you instead demand the limitation of the processing of your data; in which you require your data for the purposes of asserting, exercising or defending legal claims, and subsequent to our no longer needing the data due to our having achieved our objectives; or in which you have lodged an objective based on your special situation, and in which it has yet to be established whether or not our justified grounds outweigh your reasons for objecting.

In cases in which you have asserted vis-à-vis the responsible party your right to correction or deletion of your data, or the limitation of its processing, the latter is obliged to inform all recipients to which the personal data involving you was disclosed of the correction or deletion of this data, or of the limitation of its processing. Such actions proving to be impossible, or to be associated with a disproportionate expenditure, are exceptions to this. You have the right to be informed as to the names of the recipients.

You have the right to receive the personal data you supplied to us in a structured, customary and machine-readable way or to demand the transmission of such to another responsible party, in cases in which this is technically possible.

You have the right to revoke permission granted for the processing of your data at any time, which then applies to future actions. Such a revocation causes us to immediately delete the data, unless a further processing can be justified by the legal basis of a kind of processing not involving such granting of approval. The revocation of the authorisation does not affect the legality of the processing undertaken in the period until the revocation.

Should you be of the opinion that the processing of personal data pertaining to you violates the stipulations contained in the GDPR, you have the right – regardless of the existence of other forms of administrative or legal remedy – to lodge an objection with a supervisory authority, with this especially to be that of the member nation in which you are currently dwelling, in which your place of work is located, or in which the suspected violation took place. In Austria, the supervisory body responsible for such cases is the Austrian Data Protection Authority.

In cases in which we are processing your personal data due to our own overriding and legitimate interest, outweighing other interests, you have the right to lodge an objection to this processing at any time. This objection would be based on grounds arising from your special situation and would impact future actions.