Datenschutz

DATA PROTECTION DECLARATION AND LEGAL NOTICES

We welcome your visit to our Website aoev.at. The Austrian Airports Association (hereafter “we” or “AOEV”) takes the protection of data very seriously. The processing and use of data adhere to the EU’s General Data Protection Regulation (GDPR) and the Austrian Data Protection Act  (Datenschutzgesetz -DSG).

Below please find in-depth information on the use of your data:

NAME AND ADDRESS OF THE RESPONSIBLE PARTY

The responsible party – as designated and required by the General Data Protection Regulation and other national data protection regulations enacted by the EU member countries is:

THE Austrian airports association (AOEV)

Office Park 1, Top B
A-1300 Vienna Airport
Telephone: +43 - 1 – 7007 - 0
Fax: +43 - 1 – 7007 - 23806

Internet:   http://www.aoev.at

NAME AND ADDRESS OF THE DATA PROTECTION OFFICER

The data protection officer of the responsible party is:

Mr. Peter Kleemann MAS
p.kleemann@viennaairport.com

who is to be reached at the following address:
 
Flughafen Wien AG, Postfach 1, A-1300 Vienna Airport, Austria. Any correspondence is to include the additional line “AOEV / Data Protection Officer”.

The data protection officer is also to be reached at the postal address of the responsible party. Any correspondence is to bear the additional line “The AOEV / Data Protection Officer”.

COMMISSIONED DATA PROCESSORS

In some cases, we avail ourselves of the services of external service providers (so-called “commissioned data processors”) in order to process personal data. Such processors are carefully selected and commissioned by us, are committed to adhering to our instructions, and are checked on a regular basis.


Transmission outside the european economic area

  • Fulfilling a commission placed by us, Google LLC (“Google”), whose headquarters are 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, processes data. We transmit your IP address (if need be, in anonymised form), information on your access to Websites (URL), and estimates as to demographics and age to Google. The legal foundation for this transmission is our justified interest in procuring a statistics-based analysis of user behaviour. This is for purposes of optimisation and marketing (Art. 6 Para. 1 lit f GDPR).

  • Google has been certified as adhering to the Privacy Shield. This US-European data protection agreement guarantees that the level of data protection in force in the EU is maintained. Our generally applicable and Group-wide security measures are complemented by the pseudonymisation of data to be transmitted. Therefore, a specific linking of the data to you is not possible.

  • Your data is also transmitted to Facebook Inc. (“Facebook”), which is headquartered in 1601 S. California Ave, Palo Alto, CA 94304, USA. We also transmit your IP address (if need be, in anonymized form), information on your access to Websites (URL), and estimates as to demographics and age to Facebook. The legal foundation for this transmission is our justified interest in procuring a statistics-based analysis of user behaviour. This is for purposes of optimisation and marketing (Art. 6 Para. 1 lit f GDPR).

general information on data processing

As a general rule, we gather and use personal data only when such is required to operate a functional Website that contains our contents and activates our services. In accordance with the relevant rules, the gathering and use of the personal data of our users takes place only after they have consented to such. An exception is constituted by such cases in which practical reasons make it impossible to secure this consent on a prior basis, and in which the processing of the data is permitted by legal regulations.


In cases in which we secure consent from the person involved for procedures entailing the processing of personal data, Art. 6 Para: 1 lit. a of the EU’s General Data Protection Regulation (GDPR) serves as the legal foundation for the processing of personal data.

In cases in which the processing of personal data is required to fulfil a contract to which the person involved is a contractual party, Art. 6 Para. 1 lit. a GDPR serves as the legal foundation. This also applies to processing procedures that are required to enable the implementation of pre-contractual measures.

In cases in which the processing of personal data is required to fulfil a legal commitment to which our company is subject, Art. 6 Para. 1 lit. c GDPR serves as its legal foundation.

In the cases in which the vital interests of the persons involved or those of another natural person necessitate the processing of personal data, Art. 6 Para, 1 lit. d GDPR serves as its legal foundation.

If processing be required to maintain a justified interest on the part of our company or that of a third party and if the basic rights and liberties of the party involve do not outweigh the interests mentioned above, Art. 6 Para. 1 lit. f GDPR serves as the legal foundation for its processing.

The personal data of the person involved is deleted or blocked as soon as the purpose for storing it no longer exists. Data storage can take place after this point in cases in which such is foreseen by European and national legislative bodies by EU regulations, laws or other rules to which the responsible party is subject. A blocking or deletion of the data also takes place in when the duration of storage imposed by the above-mentioned law expires, unless the continuation of storing the data is required to conclude or fulfil a contract.
 

OPERATION OF THE WEBSTIE AND COMPILATION OF LOG FILES

Each time our Website is accessed, our system automatically registers data and information from the computer system of the computer accessing our Website.

The following data is gathered in this manner:

  • Information on the kind of the browser and the version used

  • Language and version of the browser software

  • The operating system of the user and its interface

  • The user’s IP address

  • The date and time of day of access and the difference between the time zone in which it takes place and Greenwich Mean Time (GMT)

  • The quantity of data transferred

  • Websites from which the user’s system gains access to our Website

  • Websites accessed by the user’s system via our Website

  • Status of access/HTTP status code

The data is also stored in our system’s log files. Storage of this data along with other personal data of the user does not take place. 

The legal foundation for the temporary storage of data and log files is Art. 6 Para. 1 lit. f GDPR.

The temporary storage of the IP address by the system is necessary in order to enable the Website to be displayed on the user’s computer. For this reason, the IP address of the user remains stored for the duration of the session.

Storage of log files takes place to ensure the functionality of the Website. Moreover, the data serves to help us optimise the Website and ensure the security of our IT systems. In this regard, no evaluation of the data for marketing purposes takes place.

These purposes comprise our justified interest in data processing pursuant to Art. 6 Para. 1 lit. F GDPR. 

The data is deleted as soon as it is no longer required to achieve the objective underlying data compilation in the first place. In the case of data compilation as a means of facilitating the operation of the Website, this is the case when the respective session comes to an end.

In the case of the storage of the data in log files, data is deleted no later than after seven days. Storage beyond this term is possible. In such a case, the IP address of the user is deleted or altered beyond recognition, thus making it impossible to assign it to the client that gained access.

The compilation of data to make the Website available and the storage of data in log files is absolutely necessary to ensure the functionality of the Website. For this reason, the user has no possibility to file an objection. 

use of cookies

Our Website makes use of cookies, which are text files that are saved in the Internet browser, or by the Internet browser of the user’s computer system. If the user accesses a Website, a cookie can be stored in the user’s operating systems. This cookie contains a characteristic string of characters enabling the clear identification of the browser when the Website is accessed again.

We employ cookies for the purposes of configuring our Website to be user-friendly. Several elements of our Website require that the browser accessing it can also be identified after changing Websites (“first party cookies”). Our processing of these cookies is undertaken on the basis of our having a “justified interest”, as defined in Art. 6 Para. 1 lit f GDPR in light of the fact that the display of the Website would not be possible without the use of these cookies.

In addition, we also employ cookies that enable analyses of the pattern of surfing of our users on our Website. In several cases, these cookies are installed and employed by third parties (“third party cookies”). The processing of the data by these cookies is undertaken on the basis of your consent (Art. 6 Para. 1 lit a GDPR), which you can revoke at any time.

Technical measures are deployed to pseudonymise the user’s data gathered in this way. In turn, this precludes the data being linked to the user accessing the Website. The data is not stored together with any other personal data of the user.

When the user accesses our Website, he is informed on its use of cookies for purposes of analysis and is asked to grant consent to the processing of the personal data applied in this context. This also features reference to the data protection declaration.

GOOGLE.AT / 1P_JAR

COOKIE DURATION: 1 month

NOTE: Further information: https://www.policies.google.com/technologies/cookies

RECIPIENT OF / ACCESS TO STORED DATA: Google (all data); GroupM (aggregate data)

EXTERNAL PROVIDER (STORAGE LOCATION): Google (global)

GOOGLE.AT / CONSENT

COOKIE DURATION: 20 years

NOTE: Further information: https://www.policies.google.com/technologies/cookies

RECIPIENT OF / ACCESS TO STORED DATA: Google (all data); GroupM (aggregate data)

EXTERNAL PROVIDER (STORAGE LOCATION): Google (global)

GOOGLE.AT / NID

COOKIE DURATION: 6 months

NOTE: Further information:  https://www.policies.google.com/technologies/cookies

RECIPIENT OF / ACCESS TO STORED DATA: Google (all data); GroupM (aggregate data)

EXTERNAL PROVIDER (STORAGE LOCATION): Google (global)


The temporary storage of the IP address by the system is necessary in order to enable the Website to be displayed on the user’s computer. For this reason, the IP address of the user remains stored for the duration of the session.

Storage of log files takes place to ensure the functionality of the Website. Moreover, the data serves to help us optimise the Website and ensure the security of our IT systems. In this regard, no evaluation of the data for marketing purposes takes place.

These purposes comprise our justified interest in data processing pursuant to Art. 6 Para. 1 lit. F GDPR. 

The legal foundation for processing personal data using technically necessary cookies is Art. 6 Para. 1 lit. f GDPR.

The legal foundation for processing personal data using cookies for purposes of analysis is Art. 6 Para. 1 lit. a GDPR provided that the user has given his consent.  

The underlying purpose for using technically required cookies is to simplify Website use for the user. Several of our Website’s functions could not be offered without the use of cookies. These functions require the renewed recognition of the browser when changing over to a different Website. 

The data on users gathered by technically required cookies is not applied to create user profiles.

Analysis cookies are employed to improve the quality of our Website and of its contents. The analysis cookies enable us to be informed about how our Website is used. In turn, this enables the ongoing optimisation of our offering.

Cookies are saved on the user’s computer, which then transmits them to our Website. This provides you, the user, with complete control of the utilisation of cookies. By altering a setting in your Internet browser, you have the capability of deactivating or limiting the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also take place on an automatic basis. The deactivation of cookies for our Website can possibly lead to all of its functions not being able to be used to their full extent.

Each browser is characterized by an individual approach to the administration of cookie settings. This approach is described in the Help menu on each browser. It elucidates how you can change your settings on cookies. For your respective browser, this can be found by using the following links:

CONTACT FORM AND E-Mail CONTACT

Our Website contains a contact form. It is to be used for contacting us on an electronic basis. If a user makes use of this option, the data entered on the form is transmitted to us and stored. This data includes the following:

  • Salutation

  • Title

  • Name

  • E-Mail address

  • Commentary

  • Reason for establishing contact

  • The following data is saved as of the time of the dispatching of the message:

  • Date and time of day of registration

As part of the dispatching process, your consent is secured as to the processing of your data. This also encompasses reference to this data protection declaration.

An alternative is our being contacted by sending an e-mail to the address provided in this document. In this case, the user’s personal data that is transmitted along with the e-mail is stored.

In this context, no data is transmitted to third parties. The data is solely used to process the conversation.

The legal foundation for processing data is existence of formal consent granted by the user pursuant to Art. 6 Para. 1 lit. a GDPR.

The legal foundation for processing data attached to an e-mail is Art. 6 Para. 1 lit. f GDPR. Should the contact via E-mail be undertaken to conclude a contract, Art. 6 Para. 1 lit. b GDPR is also applicable as a legal foundation for the processing.

The sole purpose of processing personal data stemming from the input mask is the processing related to establishing contact. Additionally, the initiation of contact based on the sending of an e-mail results in the justified interest in processing the data.

The processing of other personal data ensuing from the dispatching procedure is intended solely to prevent misuse of the contact form and to ensure the safety of our IT (information technologies) system.

The data is deleted as soon as it is no longer required to achieve the objective underlying data compilation in the first place. In the case of personal data stemming from the input mask of the contact form and data transmitted per e-mail, data is also deleted whenever the respective conversation with the user has come to an end. The conversation is considered to have come to an end whenever circumstances indicate that the matter at hand has been conclusively clarified. This period has a maximum term of 26 months for purposes of traceability.

The user has at any time the option of revoking her or his consent to the processing of personal data at any time. Should the user get in touch with us by dispatching an E-mail, he can file an objection to the storing of his personal data at any time. The lodging of this objection prevents the continuation of the conversation.

In order to avail yourself of your right to file an objection, please send an E-mail to p.kleemann@viennaairport.com. The receipt by us of an objection causes the deletion in this case of all personal data resulting from contacting us and the information being subsequently stored.

GOOGLE ANALYTICS

This Website employs Google Analytics, a Web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics employs so-called “cookies”. These are text files which are saved on your computer. They enable an analysis of your use of the Website. The information generated by the cookie with respect to your utilisation of the Website (with this including the abridged IP address) is, as a rule, transmitted to a server maintained by Google in the USA, where it is stored.

This Website’s use of Google Analytics is exclusively done by additionally employing the "_anonymizeIp()" extension. This ensures the anonymisation of the IP address by abridging it. This precludes any direct reference to a person. The extension causes your IP address to be abridged by Google on a prior basis in the countries that are members of the European Union or of others that are parties to the agreement establishing the European Economic Zone.  It is only in exceptional cases that your complete IP address is transmitted to a server maintained by Google in the USA, where it is then abridged.

In the exceptional cases of transmission of the IP address, processing is carried out pursuant to Art. 6 Para 1 lit. f GDPR and is based upon our justified interest in the compiling of a statistics-based analysis of user behaviour for optimisation and marketing purposes.

Acting on our behalf, Google is to use the information in order to evaluate your utilisation of the Website, to compile reports on Website activities, and to provide other services associated with this utilisation and with that involving the Internet. The IP address transmitted from your browser in the course of the employment of Google Analytics will not be merged with other data held by Google.

You have the capability of preventing the saving of cookies on your browser. This is to be done by adjusting the corresponding setting on its software. However, we wish to notify you that doing such may result in your not being able to completely use all of this Website’s functions. In addition, in order to preclude the data generated by the cookie and relating to your utilisation of the Website (including your IP address being transmitted to Google and the processing of such by it), you can download and install the following browser plugin: http://tools.google.com/dlpage/gaoptout?hl=de.

Data is stored for 26 months, after which it is automatically deleted.

Headquartered in the USA, Google LLC has certified itself to be part of Privacy Shield, which is the mechanism set up by the American-European agreement on data protection. This certification guarantees the adherence to the level of data protection in force in the EU.

Further information on the way Google Analytics handles user data is to be found in Google’s data protection declaration:

https://support.google.com/analytics/answer/6004245?hl=de

Rights of the person affected

The applicable data protection regulations provide you, as the person concerned, with a comprehensive range of rights (to information and of intervention). These apply to the responsible party and comprise the processing of your personal data. We will inform you about these rights as follows:

AFFECTED RIGHTS
You especially have the right to information on how your personal data has been processed by us, the purposes of this processing, the categories to which the personal data have been assigned, the recipient or categories of such to which your data has been disclosed or will be such, the planned term of storage or the criteria to be applied to such, the right to correct and delete, the right to limit the processing, and to lodge an objection against the processing, the right to register a complaint with a supervisory body, the right to discover the origin of your data in cases in which it was not gathered by us from you, the right to find out whether or not an automated decision-making process has been instituted, with this including profiling, and with this comprising, should such apply, pertinent information on the logic involved and on scope for you and ramifications striven for by such a processing, as well as your right to being informed as to which guarantees have been established – in accordance with Art. 46 GDPR – for the transmission of your data to third party countries;

You have the right to promptly have inaccurate data involving you corrected, and/or to have completed the incomplete data on and from you that has been saved by us.

You have the right to demand the deletion of your personal data, should the preconditions for such established in Art. 17 Paragraph 1 GDPR be met. This right especially does not exist in the following special cases: when the processing is required by the exercising of the right to free speech and to secure information, or to fulfil a legal obligation; and whenever necessitated by public interests; or whenever needed to assert, exercise or defend a legal claim.

You have the right to demand the limitation of the processing of your personal data, in cases in which the correctness of your data has been disputed by you and this state of affairs is now being examined; in which you reject the deletion of your data due to impermissible processing of such, and in which you instead demand the limitation of the processing of your data; in which you require your data for the purposes of asserting, exercising or defending legal claims, and subsequent to our no longer needing the data due to our having achieved our objectives; or in which you have lodged an objective based on your special situation, and in which it has yet to be established whether or not our justified grounds outweigh your reasons for objecting.

In cases in which you have asserted vis-à-vis the responsible party your right to correction or deletion of your data, or the limitation of its processing, the latter is obliged to inform all recipients to which the personal data involving you was disclosed of the correction or deletion of this data, or of the limitation of its processing. Such actions proving to be impossible, or to be associated with a disproportionate expenditure, are exceptions to this. You have the right to be informed as to the names of the recipients.

You have the right to receive the personal data you supplied to us in a structured, customary and machine-readable way or to demand the transmission of such to another responsible party, in cases in which this is technically possible.

You have the right to revoke permission granted for the processing of your data at any time, which then applies to future actions. Such a revocation causes us to immediately delete the data, unless a further processing can be justified by the legal basis of a kind of processing not involving such granting of approval. The revocation of the authorisation does not affect the legality of the processing undertaken in the period until the revocation.

Should you be of the opinion that the processing of personal data pertaining to you violates the stipulations contained in the GDPR, you have the right – regardless of the existence of other forms of administrative or legal remedy – to lodge an objection with a supervisory authority, with this especially to be that of the member nation in which you are currently dwelling, in which your place of work is located, or in which the suspected violation took place. In Austria, the supervisory body responsible for such cases is the Austrian Data Protection Authority.

In cases in which we are processing your personal data due to our own overriding and legitimate interest, outweighing other interests, you have the right to lodge an objection to this processing at any time. This objection would be based on grounds arising from your special situation and would impact future actions.

Your availing yourself of your right to object causes us to stop processing the data affected. However, we reserve the right to undertake further processing, in cases in which we can prove the existence of compellingly prevalent reasons for the undertaking of such processing, on in which this processing serves the establishment, exercising or defending of legal claims.

In cases in which your personal data is processed in order to pursue direct advertising, you have the right to lodge an objection at any time to this processing of personal data involving you for purposes of engaging in such advertising. You are entitled to exercise this right to lodge an objection as described above.

Should you avail yourself of your right to object, we will stop the processing of the data that had been undertaken for purposes of direct advertising.

Please address such inquiries to  p.kleemann@viennaairport.com.