The protection of your personal data is of particular concern to us. We process your data exclusively on the basis of the legal provisions of the Austrian Data Protection Act, the European General Data Protection Regulation (DSGVO) and the Austrian Telecommunications Act (TKG 2021). In this data protection information, we inform you about the processing of your personal data within the context of our website and the e-shop, and the claims and rights to which you are entitled under the data protection regulations.
Entity responsible for the processing of your data
Architekturzentrum Wien
Museumsplatz 1
1070 Vienna
Austria
T+43-1-522 31 15
F+43-1-522 31 55
office@azw.at
If you have any complaints, questions or suggestions regarding data protection, please do not hesitate to contact us at any time using the contact details provided.
Data processing in case of contact
If you contact us by form on the website or by e-mail, the data you provide will be stored by us for the purpose of processing your inquiry and for subsequent processing. The processing of your data is carried out for the implementation of pre-contractual measures ans/or for the fulfillment of a contractual relationship or is based on our legitimate interest in the organization and implementation of the inquiry response. If the transmission of the data is not necessary for the inquiry response, the data will not be disclosed to third parties without your consent. We process your data for as long as this is necessary for the processing of the inquiry and, in addition, in the case of a follow-up inquiry for one year after the last contact with you.
Data processing when receiving newsletter and monthly program
You have the possibility to subscribe, via our website, to our newsletters: Az W general newsletter, press newsletter, school newsletter and program releases with postal delivery. For this we need your e-mail address and contact details as well as your declaration of consent that you agree to receive the same. After subscribing to the newsletter, you will receive a confirmation e-mail with a link to confirm your subscription. Your data will not be transmitted to third parties for their own purposes.
You can cancel your newsletter subscriptions at any time. To do so, please use the unsubscribe link in your newsletter or send your cancellation to one of the following email addresses: newsletter@azw.at, presse@azw.at or bildung@azw.at. We will then update your data immediately.
Our newsletters are currently sent via a service of the company eyepin GmbH (eyepin.com). This operator acts as a contract processor for us. We have concluded an agreement respecting commissioned processing with the operator, in which it undertakes to protect the subscribers’ data, to process the data on our behalf and, in particular, not to pass it on to third parties. We do not evaluate the use of our newsletter individually, but only have anonymized statistics compiled to measure the success of our newsletter.
Data processing within the scope of the Az W Partner Program
When you register for the Az W Partner Program, we collect name, e-mail address, contact details and, depending on the program, date of birth, a matriculation number and company data. This data is used for contacting by the incentive programs and invoicing, and is stored in accordance with the currently applicable legal requirements. The legal basis for data processing is the fulfillment of a contractual obligation. The data will be stored by us in personal form until you terminate your participation in the respective program. Statutory retention obligations remain unaffected.
e-shop
Customers have the opportunity to purchase tickets and publications via our e-shop. For the purpose of processing contracts, we store personal data such as name, address, telephone number, e-mail address and IP address, as well as product, quantity, price, selected payment method and delivery method. Credit card information, Maestro card numbers and similar numbers for carrying out electronic payment transactions are not stored by us, as this is done by an external financial service provider with whom we have a contractual relationship for processing orders.
The data you provide are necessary for the performance of the contract and/or for the implementation of pre-contractual measures pursuant to Art 6 para 1 letter b DSGVO to enable the conclusion of a contract. We process the IP address to enable legal prosecution in the event of abusive behavior (e.g. an order under a false name). The data are passed on to the following recipients: Shipping service providers, IT service providers, tax consultants, public authorities (tax office, auditors). The data will be deleted after fulfillment of the order in accordance with the retention period pursuant to section 132 BAO after a period of seven years, or after a 10-year retention period in the case of a public subsidy recipient.
Download press images
When press images are downloaded, we record name, e-mail and medium. The legal basis is our legitimate interest in the traceability of the image transfer.
Server log files
When you visit our website, we collect data on each access to our server based on our legitimate interests. The access data includes: Address of the retrieved web resource / website, date and time of the retrieval, amount of data transferred, message about successful or failed retrieval, browser type along with version, the user’s operating system, referrer URL (the previously visited page), IP address. We store the IP address in unabbreviated form for a maximum of three months in order to be able to respond to any judicial or official inquiries (e.g. in the event of fraudulent inquiries under a false identity). After that, your IP address will be shortened so that it is no longer possible to draw conclusions about your person. The legal basis for the processing is our legal obligation to provide information (Art 6 para 1 letter c DSGVO) as well as our legitimate interest in protecting ourselves and users from abusive behavior and to investigate such behavior (Art 6 para 1 letter f DSGVO). We transmit the IP address only upon a judicial or official request. The remaining data are evaluated in a non-personal statistical analysis.
Disclosure of data and commissioned processing
Your personal data will be processed exclusively by us and will not be disclosed to third parties without your consent, a legal obligation or a judicial or official decision. If we use third parties (“commissioned processors”) to carry out orders, we ensure that they use your data exclusively in the scope of the agreement concluded with them and our orders, and in compliance with data protection regulations.
Third-party offers
We use the embedded third-party services listed below to improve the user experience and the security of the website. In doing so, information may be transmitted to the respective providers of the services or cookies may be set by them in your browser:
1. YouTube [https://www.youtube.com/] (Operator: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland; see https://www.youtube.com/t/impressum).
We have incorporated videos on our website that are made available by the provider YouTube. These videos are only displayed if you have given your consent to do so. In this case, personal data, for example your IP address, may be transmitted to the provider Google as soon as you call up a page of our website with a YouTube video. The legal basis for this is your consent (Art 6 para 1 letter a DSGVO).
2. reCaptcha [https://www.google.com/recaptcha/] security query (operator: Google LLC).
We use the service “Google reCAPTCHA” on our website, which is offered by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA), to prevent spam. The legal basis for the use is our legitimate interest in preventing the sending of spam and protecting ourselves from webbots (Article 6 para 1 letter f DSGVO). In the course of using reCAPTCHA, data is transmitted to Google, which Google uses to determine whether the visitor is a human or a (spam) bot. You can read which data is collected by Google and what this data is used for at https://policies.google.com/privacy?hl=de-AT. You can read the terms of use for Google services and products at https://policies.google.com/terms?hl=de-AT.
We would like to point out that we have concluded standard contractual clauses under data protection law with Google (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE), which guarantee an appropriate level of data protection. Nevertheless, it cannot be ruled out that the data sent to the U.S. is not currently subject to a level of protection adequate to EU data protection law and that the U.S. government in particular may gain access to this data.
3. Wordfence
[https://www.wordfence.com/] Security Plugin (Operator: Defiant Inc [https://www.defiant.com/]).
To secure our website, we use “Wordfence Security”, a service provided by Defiant Inc, 800 5th Ave, Suite 4100, Seattle, WA 98104, USA. This service places cookies on your terminal device to detect whether our website is visited by a real person or a machine. Wordfence also protects us from so-called brute force attacks (this refers to a flood of automated login attempts to disrupt the system). In this case, the IP addresses of the requesting machines are processed and stored on Wordfence’s servers. IP addresses classified as harmless are included in a white list. The legal basis for data processing is our legitimate interest in protecting our systems and our users (Art 6 para 1 letter f DSGVO). For more information on the collection and use of data by Wordfence Security, please visit https://www.wordfence.com/privacy-policy. We have concluded an agreement on commissioned processing with the operator.
Cookies
Our website uses so-called cookies. These are small text files that are stored on your terminal device with the help of the browser. They do not cause any damage.
If you use our e-shop, a technically necessary cookie will be set for the shopping basket data. These data are deleted within one hour if you cancel the shopping process.
Cookies that are required to provide certain desired functions are stored on the basis of Art. 6 para 1 letter f DSGVO. The operator of the website has a legitimate interest in storing cookies for error-free and optimized provision of its services.
If you do not wish this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases.
If cookies are deactivated, the functionality of our website may be limited.
Web analytics with Matomo
This website uses the analysis tool Matomo, an open source web analytics solution (https://matomo.org). Matomo helps us to learn more about and analyze the use of our website. When you use our website, the following data is collected and analyzed:
– your IP address, shortened by the last two bytes (anonymized)
– the sub-page called up and the time of the call-up
– the page from which you came to our website (referrer)
– which browser with which plugins, which operating system and which screen resolution you are using
– the time you spend on our website
– the pages that you visit from the respective sub-page you called up
The legal basis is our legitimate interest in improving our offer and our website. Your IP address is shortened before the analysis, so that the personal reference is omitted. We have configured Matomo so that no cookies are stored on your terminal device. We operate Matomo ourselves on the same web server on which our website is hosted. All analysis data therefore remains with us and is not passed on to third parties.
Your rights
Right to information about stored data according to Art 15 DSGVO.
You have the right to request information about whether we are processing your personal data. If this is the case, you have the right to information about this personal data as well as other information related to the processing.
Right to rectification of inaccurate data pursuant to Art 16 DSGVO.
In the event that personal data we process about you is not (or no longer) accurate or incomplete, you may request that these data be corrected and, if applicable, completed.
Right to deletion of data in accordance with Art 17 DSGVO.
If the legal requirements are met, you may request the deletion of your personal data.
Right to restriction of data according to Art 18 DSGVO.
If the legal requirements are met, you may request the restriction of the processing of data concerning you.
Right to data portability according to Art 20 DSGVO.
If the legal requirements are met, you may request the transfer of your data in a structured, common and machine-readable format.
Right to object to unreasonable data processing pursuant to Art 21 DSGVO.
For reasons arising from your particular situation, you may object at any time to the processing of data relating to you that we process on the basis of a legitimate interest pursuant to Art 6 para 1 letter f DSGVO.
Right to revoke consent
If processing is carried out on the basis of a declaration of consent, you have the option to revoke this at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
Right to complain to the data protection authority
If you are of the opinion that the processing of your personal data by us violates applicable data protection law or that your data protection rights have been violated in any other way, you have the possibility to complain to the competent supervisory authority (Austrian Data Protection Authority).
Further information
If you send us personal data by e-mail – thus away from this website – we cannot guarantee secure transmission and protection of your data. We therefore recommend that you never send confidential data by e-mail without encryption.
Automated decision-making, including profiling, does not take place. If we process your personal data for a purpose other than that for which we collected the data, we will disclose this fact to you and inform you of this other purpose.