Privacy Policy

The protection of your personal data is of particular concern to us. We process your data exclusively on the basis of the legal provisions (GDPR, TKG 2003).
This information on privacy policy contains advice on the most important aspects of data processing within the scope of our website.

1. Ordering information material
The data you enter when ordering information material about the festival will be used exclusively for the purpose of sending the requested information by post. During registration, the data collected can be viewed in the input mask. Your name including postal address and, if applicable, your company name or title are required. The data you provide is necessary in order to send you the requested information. Without this data it is not possible to send you the information. The data collected will not be sold or passed on to unauthorized third parties. The data processing is exclusively based on the legal provisions of Section 96 (3) TKG or Article 6 (1) a GDPR (consent). The data will be processed and stored until consent is revoked.

2. Purchase of tickets
In the course of purchasing tickets, the first and last name will be collected. Upon request, we will also send the tickets by mail and/or issue an invoice. In this case, we also need your postal address. The data provided by you is necessary for the fulfillment of the contract or for the execution of pre-contractual measures. Without this data we will not be able to conclude the contract with you. Data will not be transferred to third parties. In the case of electronic payment transactions in our Visitor and Press Center, your credit card information will be transmitted to our card system provider card complete (card complete Service Bank AG, Lassallestraße 3, 1020 Vienna, Austria) for technical processing. Information on the privacy policy of this partner company can be found at https://www.cardcomplete.com/en/private-customers/data-protection/?set_language=en.
Data processing takes place on the basis of the legal provisions of Article 6 (1) b GDPR (contract performance or pre-contractual measures).
The personal data will be stored for the period of the business relationship and beyond in accordance with the statutory retention periods.
When purchasing tickets via our website, you will be redirected to the webshop of oeticket (CTS Eventim Austria GmbH, Mariahilferstraße 41-43, 1060 Vienna). We do not receive any personal data from oeticket unless, in the course of ordering tickets, you choose to deposit the tickets at the box office or at the Visitor and Press Center, or you subscribe to our newsletter by selecting the appropriate option in the course of purchasing tickets. In this case, data processing takes place exclusively on the basis of the legal provisions of Section 96 (3) TKG as well as Article 6 (1) a GDPR (consent). Further information on the privacy policy of oeticket can be found at  https://www.oeticket.com/en/help/data-protection/.

3. Newsletter
You have the opportunity to subscribe to our newsletter via our website.
To do so, we need your email address and your declaration that you agree to receive the newsletter. As soon as you have subscribed to the newsletter, we will send you a confirmation by email. You may cancel your subscription to the newsletter at any time. This can be done via a link given in the newsletters or by sending a message to the contact options given below. If you cancel the newsletter, we will immediately erase your data in connection with the mailing of the newsletter. We send our newsletter using the MailChimp® newsletter service, a brand of the Rocket Science Group (The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA). The data collected in this form is transferred to MailChimp® solely for the purpose of sending you our newsletter. Your data is stored by MailChimp® in such a way that other clients of MailChimp® or third parties do not have access to this data. You can find further information at privacy policy of MailChimp. Data processing takes place exclusively on the basis of the legal provisions of Section 96 (3) TKG as well as Article 6 (1) a GDPR (consent).

4. Accreditation
There is the possibility for press representatives and trade visitors to obtain accreditation for the festival. For this purpose, we need your name, the medium for which you report or the institution for which you work, as well as your email address for the purpose of processing your accreditation request, contacting you, issuing the ticket and sending you further information about the festival by email. You can revoke your consent to the use of your data for the above purposes at any time in writing or by telephone to the contact details below. The personal data will be stored for the period of the business relationship and beyond in accordance with the statutory retention periods. The data collected will not be sold or passed on to unauthorized third parties. Data processing takes place on the basis of the legal provisions of Article 6 (1) a GDPR (consent) or Article 6 (1) b GDPR (contract performance or pre-contractual measures).

5. Webshop
On our website it is possible to purchase different products like publications, posters or merchandise items. To process the sale and to ship the ordered products we need the following personal data: First name, last name, address, email address, telephone number for any queries and, if applicable, company name and VAT number.
The data provided by you is necessary for the fulfillment of the contract or for the execution of pre-contractual measures (Article 6 (1) b GDPR). Without this data we will not be able to conclude the contract with you. No data is transmitted to third parties, with the exception of the transmission of payment information (name, account number, bank code, credit card number, invoice amount, currency and transaction number) to our payment system provider Stripe (Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland) for the technical processing of electronic payment transactions. In addition, the email address is required to send a transaction confirmation.
Data processing takes place on the basis of the legal provisions of Article 6 (1) b GDPR (contract performance or pre-contractual measures).
For authentication and fraud prevention, Stripe also collects your name, country and technical data about your device (IP address). Data processing takes place on the basis of the legal provisions of Article 6 (1) f GDPR (legitimate interest).
Information on the privacy policy of this partner company can be found at https://stripe.com/at/privacy.
The personal data will be stored for the period of the business relationship and beyond in accordance with the statutory retention periods.

6. If you contact us by email, the data you provide will be stored by us for the purpose of processing your inquiry and in case we have further questions. We do not pass on this data to third parties without your consent.

7. Picture and video recordings
During our events, pictures and video recordings are made. The controller for data processing in accordance with the GDPR is the steirischer herbst festival gmbh. On the basis of our overriding legitimate interest pursuant to Article 6 (1) f of the GDPR, we use and distribute the pictures and video recordings made for advertising and documentation purposes in all media of steirischer herbst festival gmbh and for forwarding to the reporting press and persons actively involved in the festival.
You have the right to object to this processing in accordance with Article 21 GDPR. Should there be a reason worthy of consideration for an objection, we will not continue to use the recordings in which you are pictured from the time of the objection.

8. Visiting the website
In the course of your visit to our website, we process the following personal data: Date and time of your access to the website, your IP address, name and version of your web browser, the website (URL) you visited before accessing our website, as well as certain cookies (see next point).

9. Cookies
Our website uses so-called "cookies". These are small text files that are stored on your terminal device with the help of the browser. They do not cause any damage. We use cookies to make our offer user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognize your browser when you visit us next. If you do not want this, you can set up your respective browser so that it notifies you about the setting of cookies and you only permit this in individual cases. If cookies are deactivated, the functionality of our website may be limited.

10. Matomo with anonymization feature
We use the open source web analytics service Matomo for statistical analysis of the accessed content. The information is stored only after shortening or anonymization of the IP address. The shortened IP address does not allow any conclusions to be drawn about the user; only a geolocation is performed. By using this website analysis tool, no personal data is collected and/or transmitted to third parties.

11. Integration of third-party service providers
We operate fan pages on Facebook, Twitter and Instagram in order to make our offer known to a wide audience. The legal basis for the use of third-party service providers is Article 6 (1) sentence 1 f GDPR. If you visit our site and click on the "Facebook", "Twitter" or "Instagram" field, you will be redirected to the respective website via a link. We would like to point out that we, as the provider of the site, have no knowledge of the content of the transmitted data or its use by Facebook, Twitter and Instagram. These third-party service providers are responsible for handling the data of their users in accordance with data protection laws. You can find information on this under the following links:

Facebook (Facebook Inc., 1601 South California Avenue, Palo Alto CA 94304, USA).
Privacy policy: https://de-de.facebook.com/policy.php
Information on how to control your personal privacy settings: https://www.facebook.com/help/568137493302217

Twitter (Twitter Inc. 1355 Market St, Suite 900, San Francisco CA 94103, USA)
Privacy Policy: http://twitter.com/privacy.

Instagram (Instagram LLC, 1601 Willow Road, Menlo Park CA, 94025, USA).
Data Policy: https://www.facebook.com/help/instagram/155833707900388

12. Vimeo Video
This website uses plugins from the video portal Vimeo (Vimeo.com Inc., 555 West 18th Street, New York, New York 10011, USA) in order to present our online offers in an appealing manner. When you visit one of our pages equipped with Vimeo videos and play the video, the system establishes a connection to the Vimeo server and tells it which pages you have visited. In addition, your IP address is transmitted and a unique ID is assigned to you, which makes you identifiable to the service across websites. Data processing takes place on the basis of the legal provisions of Article 6 (1) a GDPR (consent). Consent is given in advance via the cookie banner on our website ("Accept all cookies incl. US provider").
For more information on how Vimeo handles user data, please see Vimeo’s privacy policy (https://vimeo.com/privacy).

13. Recipients
Depending on the purpose of the processing, we pass on data to processors commissioned by us, insofar as this is necessary to fulfill the respective task. When selecting our processors, we ensure compliance with the provisions of data protection law and have entered into agreements with the processors to ensure that personal data is processed confidentially and carefully.
The data collected will not be sold or passed on to unauthorized third parties.

14. Data security and confidentiality
Data security is a matter of great concern to us. steirischer herbst festival gmbh has taken all necessary technical and organizational measures to ensure the security of data processing and to process personal data in such a way that they are protected against access by unauthorized third parties. The IT infrastructure complies with current security requirements and is checked regularly.
We only pass on data to order processors (including IT service providers) commissioned by us, ensure compliance with data protection regulations when selecting our order processors and have concluded agreements to ensure that personal data is processed confidentially and with care.
All employees of steirischer herbst festival gmbh have been bound to secrecy with regard to information entrusted to them or becoming known to them in the course of their work.

15. Your rights
In principle, you have the rights to information, correction, deletion, restriction, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in some way, you can complain to the supervisory authority. In Austria, this is the data protection authority.

Here are the contact details you can use to reach us:

steirischer herbst festival gmbh
Sackstraße 17, 8010 Graz, Austria
t +43 316 823 007, f +43 316 823 007 77
info [​at​] steirischerherbst.at
www.steirischerherbst.at

Due to the ongoing further development of our Internet offering and/or legal developments, it may be necessary for us to make adjustments to our privacy policy from time to time. For this reason, please note the current version of our privacy policy.

Version: October 2022