The protection of your privacy is particularly important to the Spanish Riding School - Lipizzaner Stud Piber Gesellschaft öffentlichen Rechts (hereinafter referred to as SRS-LGP). What we do to protect your data and what data we collect at all, we would like to explain to you in the following. For this purpose, we inform you in accordance with Art. 13 of the General Data Protection Regulation (GDPR) about the scope and purpose of the processing of personal data on our websites. For questions about terminology, we refer to Art 4 GDPR.
In principle, we process data within the legal framework of the General Data Protection Regulation (GDPR) and the Data Protection Act (DSG).
We are committed to protecting the data of visitors to our websites. Third parties will only be provided with the stored data in the manner described in this statement. Of course, no personal data will be passed on to advertising companies.
Personal user data is processed by SRS-LGP only in accordance with the provisions of the Austrian Data Protection Act (DSG).
The following points inform about the nature, scope and purpose of the collection, processing and use of personal data within the framework of the web presence of our company.
SRS-LGP keeps the disclosed user data carefully; however, no responsibility can be assumed for attacks by hackers.
2. Automatic data collection
For technical reasons, the following usage data, among others, which a user's Internet browser transmits to SRS-LGP, is recorded:
Browser type and version;
operating system used;
Website from which the user visits: www.srs.at, www.piber.com, www.fete-imperiale.at (referrer URL);
Website visited by the user;
Date and time of access;
Internet Protocol (IP) address of the user's computer.
3. use of data
The following personal data is requested during order processes:
Name, address, telephone number, e-mail address, language, age (adult, senior, student or child ticket), affiliation as a family or group (for family, student, group tickets). In the case of press accreditations, the respective medium, working title and brief description of the project must also be provided.
The personal data disclosed in the course of ordering transactions will be used exclusively for contract processing; payment information will be protected in an encrypted procedure and used only for payment processing.
When using contact forms on our website and participating in competitions, the following data is collected:
Name, e-mail, telephone number if any, postal address if any. This data is used exclusively for responding to contact requests and for carrying out the respective sweepstakes.
Cookie name and storage period:
- cookiesAccepted * stored for 1 year * it's information that page visitor accept using cookies.
- fe_typo_user * this is added by TYPO3 and it expires on session end (browser close)
- _ga * 2 years * Used to distinguish users. * Used for Google Analytics
- _gid * 24 hours * Used to distinguish users. * Used for Google Analytics
- _gat * 1 minute * Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_<property-id>. * Used for Google Analytics
- AMP_TOKEN * 30 seconds to 1 year * Contains a token that can be used to retrieve a Client ID from AMP Client ID service. Other possible values indicate opt-out, inflight request or an error retrieving a Client ID from AMP Client ID service. * Used for Google Analytics
- _gac_<property-id> * 90 days * Contains campaign related information for the user. If you have linked your Google Analytics and AdWords accounts, AdWords website conversion tags will read this cookie unless you opt-out. Learn more. * Used for Google Analytics
5. analysis of our website
Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. In doing so, pseudonymous usage profiles of the users can be created from the processed data.
We only use Google Analytics with IP anonymization activated. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the user's browser is not merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of the data generated by the cookie and related to their use of the online offer to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout.
For more information about Google's use of data, settings and opt-out options, please visit Google's websites: www.google.com/intl/de/policies/privacy/partners ("Data use by Google when you use our partners' websites or apps"), www.google.com/policies/technologies/ads ("Data use for advertising purposes"), www.google.de/settings/ads ("Manage the information Google uses to serve you ads").
6. Facebook Social Plugins
SRS-LGP uses social plugins ("plugins") of the social network facebook.com on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and are recognizable by one of the Facebook logos (white "f" on blue tile, the terms "Like", "Like" or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and appearance of Facebook social plugins can be viewed here: developers.facebook.com/docs/plugins/.
Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
When a user calls up a function of this online offer that contains such a plugin, his or her device establishes a direct connection with Facebook's servers. The content of the plugin is transmitted by Facebook directly to the user's device and integrated by the latter into the online offer. In the process, usage profiles of the users can be created from the processed data. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform users according to our level of knowledge.
By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged into Facebook, Facebook can assign the visit to his Facebook account. If users interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will learn and store his or her IP address. According to Facebook, only an anonymized IP address is stored in Austria.
If a user is a Facebook member and does not want Facebook to collect data about him or her via this online offer and link it to his or her membership data stored with Facebook, he or she must log out of Facebook and delete his or her cookies before using our online offer. Further settings and objections to the use of data for advertising purposes, are possible within the Facebook profile settings: www.facebook.com/settings or via the US site www.aboutads.info/choices/ or the EU site www.youronlinechoices.com. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
SRS-LGP has embedded YouTube videos on the website, which are stored on www.youtube.com and can be played directly from our website. These are all integrated in the so-called "extended data protection mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos are YouTube cookies stored on your computer and data transmitted to Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, as YouTube operator. The data transfer takes place regardless of whether you have a user account with Google, via which you are logged in, or whether there is no user account for you. If you are logged in, this data is directly assigned to your account. If you do not want the assignment to your profile, you must log out before activating the button. YouTube or Google, Inc. stores this data as usage profiles and uses it for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the provision of needs-based advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right you must contact Google Inc. as the operator of YouTube. For more information on the purpose and scope of data collection and its processing by Google, Inc., please visit www.google.at/intl/de/policies/privacy/. By playing the YouTube videos, you consent to the data processing by Google, Inc. A processing of the data concerned by us does not take place.
8. use of our webshop
If you would like to order in our webshop, it is necessary for the conclusion of the contract that you create a customer account and thus provide your personal data, which we need for the processing of your order. Mandatory data required for the processing of contracts are marked separately, other data are voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment data to our house bank. The legal basis for this is Art. 6 para. 1 p. 1 lit. b GDPR. through which we can store your data for future purchases. When creating an account under "My Account", the data you provide will be stored revocably. All other data, including your user account, you can always delete in the customer area
We are obliged by commercial and tax law to store your address, payment and order data for a period of seven years. However, we restrict processing after two years, i.e. your data is only used to comply with legal obligations.
To prevent unauthorized access by third parties to your personal data, especially financial data, the ordering process is encrypted using TLS technology.
9. data protection regulations when using external payment service providers
We offer several payment methods for the use of the webshop and use different payment service providers. Depending on which payment method you choose, different data will be transmitted to the respective payment service provider. The legal basis for the transmission is Art. 6 para. 1 p. 1 lit. a GDPR. We list our payment service providers below:
SIX Payment Services (Austria) GmbH
If you choose the payment method credit card, your personal data will be transmitted to the operator SIX Payment Services. The legal basis for the transmission of the data is Article 6 (1) a GDPR(consent) and Article 6 (1) b GDPR(processing for the performance of a contract).
Operator of the payment service:
SIX Payment Services (Austria) GmbH
Marxergasse 1B, A-1030 Vienna
Registered office Vienna; Company Register: Commercial Court Vienna; FN 54531
Phone: +43 1 71701-6318
Fax: +43 1 71701-6314
SIX Payment Services (Austria) GmbH collects the following data:
Name, title, billing and delivery address, e-mail address,
Information about ordered products
10. provision of information
Upon request, users will be provided with information about the data stored about them or their user name. The information can also be provided electronically upon request. Please contact us for the provision of information:
Spanish Riding School - Lipizzan Stud Piber GöR
Phone: +43/1/533 90 31