Privacy Policy

Controller Information

This website is operated by:

Data Collection and Use

We are committed to protecting your privacy and handling your personal data in compliance with the EU General Data Protection Regulation (GDPR).

What Data We Collect

We collect and process the following types of personal information:

• Contact details (name, email address, telephone number) when you contact us or register for events
• Usage data (IP address, browser type, pages visited, time spent on pages) through analytics tools
• Payment information when you book services or make reservations
• Communication data when you interact with us via email, contact forms, or phone

How We Use Your Data

We process your personal data for the following purposes:

• To provide and improve our website and services
• To handle inquiries and communication
• To manage event registrations and bookings
• To process payments and fulfill contracts
• To send newsletters (with your explicit consent)
• To comply with legal obligations
• To analyze website usage and improve user experience

Legal Basis for Processing

We process your personal data based on:

• Contract performance (Art. 6(1)(b) GDPR) - to fulfill our contractual obligations
• Legal obligations (Art. 6(1)(c) GDPR) - to comply with legal requirements
• Legitimate interests (Art. 6(1)(f) GDPR) - to improve our services and communicate with you
• Consent (Art. 6(1)(a) GDPR) - particularly for newsletter subscriptions

Data Sharing and Third Parties

We only share your personal data with third parties when:

• It is necessary for contract performance
• You have given your explicit consent
• There is a legal obligation to do so
• It serves our legitimate interests and does not override your rights

Third parties with whom we may share data include:

• Service providers (hosting, payment processing, email services)
• Analytics providers (Google Analytics, Matomo)
• Legal authorities when required by law

All third-party processors are bound by data protection agreements and process data only according to our instructions.

Cookies and Tracking

Our website uses cookies and similar tracking technologies to:

• Enable essential website functionality
• Analyze website traffic and user behavior
• Improve user experience
• Provide personalized content

Types of Cookies We Use

• Essential cookies - Required for website operation
• Analytics cookies - Google Analytics, Matomo (with anonymized IP)
• Functional cookies - Remember your preferences
• Marketing cookies - Only with your explicit consent

You can manage cookie preferences in your browser settings. Note that disabling certain cookies may limit website functionality.

Data Retention

We retain your personal data only as long as necessary for the purposes outlined above:

• Contact inquiries: 3 years after last contact
• Event registrations: 7 years (legal requirement for accounting)
• Newsletter subscriptions: Until you unsubscribe
• Analytics data: 26 months (Google Analytics default)

Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to access (Art. 15 GDPR) - Request a copy of your data
• Right to rectification (Art. 16 GDPR) - Correct inaccurate data
• Right to erasure (Art. 17 GDPR) - Request deletion of your data
• Right to restriction (Art. 18 GDPR) - Limit how we use your data
• Right to data portability (Art. 20 GDPR) - Receive your data in a structured format
• Right to object (Art. 21 GDPR) - Object to data processing
• Right to withdraw consent - Withdraw consent at any time
• Right to lodge a complaint - File a complaint with the Austrian Data Protection Authority

To exercise these rights, contact us at: office@funkhaus.wien

Data Security

We implement appropriate technical and organizational measures to protect your data against:

• Unauthorized access
• Loss or destruction
• Manipulation or alteration
• Accidental disclosure

Security measures include:

• SSL/TLS encryption for data transmission
• Secure server infrastructure
• Access controls and authentication
• Regular security audits
• Employee training on data protection

International Data Transfers

When we transfer data outside the European Economic Area (EEA), we ensure adequate protection through:

• EU Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Explicit consent when required

Children's Privacy

Our website is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. The "Last updated" date at the top indicates when changes were made. We encourage you to review this policy regularly.

Contact and Complaints

For questions about this privacy policy or to exercise your rights, contact:

To file a complaint, contact the Austrian Data Protection Authority: