Privacy Policy

1.1 Contacting us

Data categories and purpose: When you contact us using our email addresses or our contact form, we process your personal data (name, email address or telephone number as well as the content of your inquiry, further correspondence regarding your inquiry; in the event of accreditations, also your profession and company) for the purposes of processing and answering your inquiry. 

Legal basis: The legal basis is the fulfillment of our (pre-)contractual obligations in accordance with Art. 6 (1) (b) GDPR or our legitimate interests in accordance with Art. 6 (1) (f) GDPR for the purposes of rapidly processing and responding to any queries. 

Storage period: We store your data within the framework of contact with us for a period of six months so that we may respond appropriately to follow-up questions. The data is only stored longer if a business relationship is subsequently established or due to statutory retention obligations or for defense in the event of any legal disputes. 

1.2 Newsletter and program folder 

Data categories and purpose: When you register for our newsletter about our services and offers, we will process your email address, the newsletter category you clicked, the time of your registration and the newsletter opening rates. We dispatch our newsletter with the aid of the software solution 1Tool (Körbler GmbH, Hofweg 1, 8430 Leitring, Austria), which acts as our processor. We process your name, your email address and your address when you order our program folder in order to enable us to send you our program by post on a quarterly basis. 

Legal basis: Processing for dispatching the newsletter is based on your voluntary and express consent in accordance with Art. 6 (1) (a) GDPR in conjunction with Section 174 TKG 2021. You may revoke your consent at any time with effect for the future (e.g. by email to tanzquartier@tqw.at or via the “Unsubscribe” link that you will find in every newsletter). The quarterly postal dispatch of our program booklet is based on our legitimate interest in accordance with Art. 6 (1) (f) GDPR for the purposes of informing you about current events subsequent to your order and to support the promotion of our cultural offers.

Storage period: We will process your personal data for your procurement of the newsletter until you withdraw your voluntary consent; no longer, however, than three years from the last contact with us.

1.3 Online shop and tikcet orders

Our online shop is operated by

mtms Solutions GmbH
Nordstraße 4
A-5301 Eugendorf
Austria.

It acts as our processor in accordance with Art. 28 GDPR.

Data categories and purpose: Where ticket orders are concerned, we process the personal data required to process the ticket purchase, including your first and last name, your email address and your billing or delivery address. The ticket and event data that you have selected, and the time of your order are also processed for the purposes of executing the order and sending you an order confirmation. The data required for payment processing is also processed by the respective payment service depending on the payment method you choose. If you register on the mtms Solutions GmbH website during the purchase of tickets, we will also process your title, your telephone number, your date of birth, and the (encrypted) password you have set, should you optionally provide us with this data. 

Legal basis: The processing of your personal data is necessary for the fulfillment of our (pre-)contractual obligations in accordance with Art. 6 (1) (b) GDPR. We cannot conclude the contract with you without this data. We also process this data to the extent required by law for the fulfillment of our corporate and tax obligations in accordance with Art. 6 (1) (c) GDPR. We process the data that you optionally provide to us during registration on the basis of our legitimate interests in accordance with Art. 6 (1) (f) GDPR so that we will be able to contact you by telephone if necessary and to provide you with a user account to facilitate the placing of orders.

Storage period: We store your personal data for the duration of the contractual relationship and beyond that for as long as is necessary to fulfill our statutory retention obligations. We store contract, payment and billing data for seven years (Section 132 Bundesabgabenordnung (BAO – Federal Fiscal Code), Sections 190 and 212 Unternehmensgesetzbuch (UGB – Commercial Code), Section 11 (2) Umsatzsteuergesetz (UStG – Value-Added Tax Law).

1.4 Event photos and videos 

Data categories and purpose: Video and photo recordings within the scope of our events that may also capture visitors. 

Legal basis: We use these recordings on the basis of our legitimate interests in accordance with Art. 6 (1) (f) GDPR for (i) documentation of the event and for (ii) internal and external reporting of the event for the purposes of PR and customer bonding, in particular to draw attention to further events, including in the form of posts to our website and our social media channels. We will procure your separate consent for processing in accordance with Art. 6 (1) (a) GDPR should it not be possible for us to base the use of images on our legitimate interests.

Storage period: If data processing has been carried out in our legitimate interest or that of a third party, your personal data will be deleted as soon as that interest no longer exists. If you revoke your consent for the future, we will delete your personal data if data processing was based on your consent.

1.5 Social media

Data categories and purpose: It is possible for you to interact with us on our social media pages by commenting on our posts, reacting to them (e.g. via the “Like” button), sharing them or sending them to other users. We will process your interactions, your username and any personal data of invited third parties during such interactions. It is also possible for this data to be processed by the platforms within the scope of such interactions. In that event, the respective platform and we become joint controllers in accordance with Art. 26 GDPR. That is why we have concluded agreements for joint responsibility. 

Legal basis: The data is processed for the purposes of answering your questions and of giving you the opportunity to make a statement as well as for purposes of enabling us to comment in response to your opinions or feedback and to promote our range of offers. Processing is therefore effected on the basis of both our and your legitimate interests in accordance with Art. 6 (1) (f) GDPR and to fulfill our (pre-)contractual obligations in accordance with Art. 6 (1) (b) GDPR. 

More information about data processing by the platforms, including the storage period, is available at: 

• Facebook: https://facebook.com/privacy/policy/
•  Instagram: https://facebook.com/help/instagram/155833707900388
• X: https://x.com/en/privacy
• YouTube: https://policies.google.com/privacy
• Vimeo: https://vimeo.com/legal/privacy/policy

1.6 Provision of the website and generation of log files

Data categories and purpose: The following technically required data within the meaning of Section 165 (3) TKG 2021 is automatically collected during your visit to our website for the purposes of displaying the website to you and ensuring its stability and security:

• Information about the browser type and version used,
• The operating system of users,
• The Internet service provider(s) of users,
• The IP address of users,
• Date and time of access,
• Content of the request (specific page),
• Websites from which users’ systems access our website.

Legal basis: Your web browser shares all this data when you call up our website. We process this data solely for the provision of the website and for the purposes of operational security; this data is therefore technically absolutely necessary within the meaning of Section 165 (3) TKG 2021. This processing is based on our legitimate interests in accordance with Art. 6 (1) (f) GDPR and also includes the logging of system usage, user authorization processes and the reviewing of server logs for problem analysis. 

Storage period: As a rule, we store your usage data when you visit the website for a period of one year . This data is not stored in conjunction with users’ other personal data.

1.7 Cookies

You will find a complete list of cookies in the cookie banner. The cookie banner is displayed automatically the first time you visit our website. It is also possible to access the cookie banner at any time through the “Cookie settings” menu item in the footer of the website. More information about the use of cookies is also available in our Cookie Policy.

It goes without saying that we treat your personal data confidentially. That is why we deliberately limit the recipients of your data to a small circle. 

We use service providers to operate our website and app, and these are also able to access personal data for the purposes of providing the commissioned services. Our processors are primarily providers of IT services:

• Software and service providers as well as providers of tools and solutions that support us in the provision of the website and the performance of our services,
• General IT administration (including support, software and maintenance, data center).

These processors only process your data on our behalf, on the basis of our instructions and for the provision of the above-mentioned performances. We have concluded agreements with all our processors in accordance with Art. 28 GDPR.

We further transfer your personal data to the extent that is necessary and in the event that it is required to the following recipients: 

• To external third parties to the extent that is necessary on the basis of our legitimate interests (e.g. auditors, debt collection companies, insurance companies in the event of an insurance claim, legal representatives in the event of litigation, etc.);
• To authorities and other public bodies to the extent required by law (e.g. tax authorities, data protection authorities, etc.).

Your personal data will not be passed on to any other third parties for their own purposes without your consent. 

As a rule, we only store your personal data for as long as we need it to fulfill the outlined purposes. We delete your personal data from our systems or anonymize it when we no longer need it and do so to make the identification of your person irrevocably no longer possible. 

Information about concrete storage periods may be found above under the respective purpose. 

When data is processed in our legitimate interest or that of a third party, your personal data is deleted as soon as this interest no longer exists, unless statutory retention obligations oblige us to store them for a longer period of time. That also applies to data processing on the basis of consent that has been granted. Personal data will be deleted immediately as soon as you revoke this consent for the future unless there is a legal obligation to retain it for a longer period of time.

We also observe the statutory limitation periods for the storage period, e.g. in accordance with the Allgemeines Bürgerliches Gesetzbuch (ABGB – General Civil Code), which is usually three years, in certain cases up to 30 years (Section 1489 ABGB).

We store your data related to the exercise of data subject rights for 18 months on the basis of our legitimate interests (Art. 6 (1) (f) GDPR) as evidence that your application has been processed.

The above applies without prejudice to cases in which longer storage is required for legal disputes, requests from the competent authorities or under applicable law.

Your personal data may be transferred to countries outside the European Union (EU) or the European Economic Area (EEA) that provide an adequate level of data protection as determined by adequacy decisions by the European Commission (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en).

Your personal data will only be transferred to countries that are not part of the EU/EEA and that do not guarantee an adequate level of protection if the controller and the recipients of the data have concluded the European Commission’s Standard Contractual Clauses (SCCs) as appropriate safeguards for the protection of your personal data, have carried out a Transfer Impact Assessment and have implemented supplemental security measures or you have given your express voluntary consent.

We have taken appropriate technical and organizational security measures within the meaning of Art. 32 GDPR to ensure the confidentiality and security of your personal data. 

You have a right to information about your personal data that we process as the controller (Art. 15 GDPR). You also have the right to rectification of incorrect data and erasure of your data (“right to be forgotten”) (Art. 16 and 17 GDPR). You may also have the right to restrict the processing of your data (Art. 18 GDPR) and the right to receive the data you have provided in a structured, commonly used and machine-readable format (“data portability”, Art. 20 GDPR). You may also revoke your voluntarily granted consent to the processing of personal data at any time with effect for the future, e.g. by email to datenschutz@tqw.at (Art 7 (3) GDPR). 

You also have the right to object at any time to direct marketing measures and data processing for reasons arising from your particular situation (Art. 21 GDPR). In this case, we will refrain from processing your personal data further unless we are able to demonstrate compelling legitimate grounds for such processing which override the interests, rights and freedoms of the data subject and if such processing serves the establishment and exercise of or defense against legal claims.

If you believe that we are processing your personal data unlawfully, you also have the right to lodge a complaint with the competent supervisory authority or to seek a judicial remedy (Art. 77 GDPR). In Austria that is: 

Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40-42
1030 Vienna
Email: dsb@dsb.gv.at

You may also lodge a complaint with the supervisory authority in the EU country in which you have your habitual residence or work, or with the supervisory authority in the place where the alleged infringement took place. 

You may contact us at any time to exercise these rights, e.g. by sending an email to datenschutz@tqw.at.

The further development of our range of offers may lead to changes. We will, of course, keep the Privacy Policy up to date and adapt it if necessary. We make the currently valid version of the Privacy Policy available on our website at https://www.tqw.at/en/data-protection and will inform you separately of any significant changes. We also recommend that you regularly inform yourself about the current version.