1. GENERAL The protection and security of your data is important to us. The Club of Viennese Coffeehouse Owners is committed to protecting your data and takes this duty seriously.

2. PERSONAL D ATA Personal data is information that relates to persons whose identity is identified or identifiable (e.g. name, address data, contact data, billing data, IP addresses).

3. PROCESSING OF YOUR PERSONAL D ATA Depending on whether you visit our website, subscribe to our newsletter, are an interested party or ball visitor, whether you are a club member or whether you are our supplier or business partner, we process your data in different ways:

3.1. Data processing of visitors to our website, subscribers to our newsletter and people interested in the Kaffeesiederball We process your personal data either – to safeguard our legitimate interests (Art 6 para 1 lit f GDPR), namely to ensure website operation, security and optimization; – because you have registered as a subscriber to our newsletter (Art 6 para 1 lit a GDPR); – to process your inquiries that you send to us via the contact form on our website, by e-mail or by telephone (Art 6 para 1 lit a GDPR). To optimize this website in terms of system performance, user-friendliness and the provision of useful information about our services, we process personal data to the extent technically necessary (name of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL and the requesting provider, IP address). This data cannot be assigned by us to specific persons and is not merged with data from other data sources. This data is not merged with personal data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use. You give us your consent by subscribing to the newsletter or by sending or submitting the request to us.

Contact form If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will only be stored by us for the purpose of processing the inquiry and in the event of follow-up questions after you have clicked the box. We will not pass on this data without your consent.

Newsletter If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not pass it on to third parties. You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter, or by sending a message to the e-mail address klub@kaffeesieder.at or by clicking on the unsubscribe link at the end of each newsletter or by notifying us in another form. The newsletter is sent using “MailChimp”, a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on MailChimp’s servers in the USA. MailChimp uses this information to send and analyze the newsletter on our behalf. Furthermore, MailChimp may, according to its own information, use this data to optimize or improve its own services, e.g. for the technical optimization of the dispatch and presentation of the newsletter or for economic purposes in order to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties. We have concluded a corresponding contract with MailChimp for commissioned data processing.

Privacy policy for the use of Google Analytics This website uses functions of the web analysis service Google Analytics. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by cookies about your use of this website is usually transferred to a Google server in the USA and stored there. The information generated by these cookies about your use of this website (including your IP address) is anonymized before it is stored on Google servers so that it can no longer be assigned to a computer. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de. You can prevent the collection of data generated by cookies and related to your use of the website and the processing of anonymized data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. We have concluded a corresponding contract with Google for commissioned data processing.

Social media This website contains a link to our profile on the social network Facebook to make us better known. This service is only integrated as a link to the corresponding social network. No data is transferred to the provider of the social network if you do not click on the respective links. After clicking on the embedded link, you will be redirected to the page of the respective provider. Only then will user information be transmitted to the respective provider.

Cookies Our website uses “cookies” to make our offer more user-friendly, effective and secure. Cookies are small files or other types of information storage that are transferred from our web server or third-party web servers to the user’s web browser and stored there for later retrieval. The cookies used when visiting our website only serve the purpose of simplifying the shopping process (e.g. by storing the items placed in a shopping cart) and enabling the use of certain functions of our web store. The cookies we use are deleted from your hard disk after you close your browser (session cookies). This data is collected on the basis of Section 96 (3) TKG. We also use cookies to statistically analyze the use of our website as part of the web analysis service Google Analytics (see below). If you have consented to the use of cookies in the “cookie banner”, cookies from third-party providers will be used during your visit to our website for the purpose of collecting and evaluating your usage behavior. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Data security Appropriate organizational and technical precautions are taken to protect your personal data. These precautions relate in particular to protection against unauthorized, unlawful or accidental access, processing, loss, use and manipulation. This site uses SSL encryption to protect the transmission of confidential content, such as the inquiries you send to us or in the ticket store. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties. Notwithstanding our efforts to maintain an appropriately high level of due diligence at all times, it cannot be ruled out that information that you disclose to us via the Internet may be viewed and used by other persons. Please note that we therefore accept no liability whatsoever for the disclosure of information due to errors in data transmission not caused by us and/or unauthorized access by third parties (e.g. malware on your end device, hacking attack on email account, interception of faxes).

3.2 Data processing in ticket sales We process your personal data either – to carry out pre-contractual measures or to fulfill our contractual obligations (Art 6 para 1 lit b GDPR) in the context of the customer relationship; – to fulfill our legal obligations (Art 6 para 1 lit c GDPR). The main purpose of processing your data is to execute and process the purchase contract. If you do not wish to provide us with your data, we will not be able to conclude a purchase contract with you. Data will not be transferred to third parties, with the exception of the transfer of credit card data to the processing bank/payment service provider for the purpose of debiting the purchase price, to the transport company/shipping company commissioned by us to deliver the ball tickets and to our tax advisor to fulfill our tax obligations. After canceling the purchase process, the data stored by us will be deleted. If a contract is concluded, all data from the contractual relationship will be stored until the expiry of the retention period under tax law (7 years). The data name, address, purchased goods and date of purchase are also stored until the expiry of the product liability (10 years).

3.3. Data processing of suppliers and business partners We process your personal data either – to carry out pre-contractual measures or to fulfill our contractual obligations (Art 6 para 1 lit b GDPR); – to fulfill our legal obligations (Art 6 para 1 lit c GDPR). The main purpose of processing your data is to initiate, maintain and process our contracts for goods and services.

3.4. Data processing of club members We process your personal data either – to safeguard our legitimate interests (Art 6 para 1 lit f GDPR), namely to ensure the promotion of traditional and innovative coffee house culture, in particular the promotion of cultural projects in the coffee houses, but also in the organization of the Kaffeesiederball and the organization of events for club members and their publication in print and online media, as well as to preserve and present the history of the association; – to carry out pre-contractual measures or to fulfill our contractual obligations (membership, Art 6 para 1 lit b GDPR); – to fulfill our legal obligations (Art 6 para 1 lit c GDPR); – to publish your membership on the club’s website (Art 6 para 1 lit a GDPR). Your data is processed primarily for the administration of club members, collection of club fees, payment of club grants and documentation of club activities. The names, contact and address details of other members are disclosed to members of the clubs to enable them to make contact and exchange information in line with the purpose of the association. Members also have the opportunity to disclose their membership on the club’s website. For the function and name of the organ representatives of the association, a notification to the association authority is required by law.

4. STORAGE PERIOD OF YOUR DATA We will not store data for longer than is necessary to fulfill our contractual or legal obligations and to defend against any liability claims. In particular, this would be – for tax law reasons, contracts and other documents as well as related correspondence from our contractual relationship for a period of seven years; – you will remain on our newsletter mailing list until you unsubscribe from it; – as a club member, your data will remain stored until the termination of your membership you will be deleted promptly, unless there is a significant exception.

5. data transfer to third parties In order to achieve these intended purposes, it may be necessary for us to disclose your data to third parties (e.g. website hosters, tax consultants, marketing companies, insurance companies, service providers that we use and to whom we make data available, etc.), to courts or authorities. . This disclosure may be made by transmission, dissemination or any other form of provision. Your data will only be disclosed on the basis of the GDPR and the DSG, in particular to fulfill your contract or on the basis of your prior consent. Some of the recipients of your personal data mentioned above are located outside your country or process your personal data there. The level of data protection in other countries may not be the same as in Austria. However, we only transfer your personal data to countries for which the EU Commission has decided that they have an adequate level of data protection or we take measures to ensure that all recipients have an adequate level of data protection, for which we conclude standard contractual clauses (2010/87/EC and/or 2004/915/EC).

6. rights to which you are entitled We would also like to inform you that you have the following rights at all times: – The right to request information about which of your data is processed by us (pursuant to Art. 15 GDPR), – The right to have your data rectified or erased (pursuant to Art. 16 GDPR), – The right to restrict the processing of your data (pursuant to Art. 18 GDPR), – The right to object to data processing (pursuant to Art. 21 GDPR) and – The right to data portability (pursuant to Art. 20 GDPR). If we process your data on the basis of your consent, you have the right to withdraw this consent at any time by sending an email to klub@kaffeesieder.at or by post to Klub der Wiener Kaffeehausbesitzer, Albertgasse 11/2, 1080 Vienna. This does not affect the lawfulness of the data processing carried out up to this point in time (see Art. 7 para. 3 GDPR). If, despite our efforts and our obligation to process your data lawfully, there is a breach of your right to lawful processing of your data, please contact us by post or e-mail so that we can learn about your concerns and resolve them. However, you also have the right to lodge a complaint with the Austrian Data Protection Authority or with another data protection supervisory authority in the EU, in particular at your place of residence or work. If you have any further questions about the processing of your data, you are welcome to contact us directly by email at klub@kaffeesieder.at or by post at Klub der Wiener Kaffeehausbesitzer, Albertgasse 11/2, 1080 Vienna.

7. OUR CONTACT DATA, RESPONSIBLE PERSON IN TERMS OF THE GDPR

Klub der Wiener Kaffeehausbesitzer Albertgasse 1a/3 1080 Wien T: +43 664 7946745 F: +43 1 9093639 E: klub@kaffeesieder.at ZVR-Zahl; 158868267