Privacy policy
IMPRINT
Mag. Philipp Graf,
state-certified tourist guide
VAT ID: ATU 54063908 Purpose of the company: tourist guiding
GISA no.: 39082428 Chamber: Vienna Chamber of Commerce (Wirtschaftskammer Wien)
Division: Tourism and Leisure Industry; Trade group: Leisure and Sports Businesses
PRIVACY POLICY
1. NAME AND ADDRESS OF THE CONTROLLER
The controller responsible for the processing of your personal data in accordance with the provisions of data protection law is
Mag. Philipp J. Graf
Spiegelgasse 10/9A, 1010 Vienna, Austria
welcome@wheninvienna.com
2. WHAT IS PERSONAL DATA?
Personal data is information about data subjects (natural persons) whose identity is determined or at least determinable (e.g. name, email address or IP address).
3. WEBSITE
In the course of your visit to this website, Mr Graf will automatically process the following personal data: the date and time you view a page on this website, as well as data about your interaction with the website (number of visits, length of stay and the language you choose); data on your device (e.g. screen resolution, ISP and operating system); IP address and IP location; referrer URL; name and version of your web browser; session ID; search engines and keywords you used to find us; log files (with the help of necessary cookies).
3.1. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
As far as the data of your visit to this website and online services are concerned, Mr Graf bases the processing on his legitimate interest pursuant to Art. 6 (1) (f) GDPR, which is to offer this website securely and to protect it from attacks.
3.2. PURPOSE OF DATA PROCESSING
Mr Graf processes your data in connection with your visit to his website for the following purposes: to provide you with this website and to further improve and develop it; to be able to detect, prevent and investigate attacks on his website and online services; and to compile anonymous usage statistics.
3.3. STORAGE PERIOD
Mr Graf generally stores your website visit data for a period of three months.
4. CONTACT
If you contact Mr Graf via the contact form on this website, by email or by telephone, he will process the personal data you provide (email, name, telephone number and your enquiry or any associated documents) in order to process and respond to your enquiry.
4.1. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
For processing and responding to your enquiry, Mr Graf bases the processing on his legitimate interest pursuant to Art. 6 (1) (f) GDPR, which is to process and respond to your enquiry quickly and, if necessary, to react to follow-up questions. If your enquiry results in a booking, he also processes the personal data from your enquiry on the basis of his (pre-)contractual obligations pursuant to Art. 6 (1) (b) GDPR.
4.2. PURPOSE OF DATA PROCESSING
Mr Graf processes your data in connection with your enquiries for the following purposes: to process your request as quickly as possible and to respond satisfactorily, and to be able to fulfil his role as a service provider.
4.3. STORAGE PERIOD
Mr Graf stores your data for a period of six months after processing your enquiry so that he can respond appropriately to follow-up questions. Longer storage only takes place if a booking follows, due to statutory retention periods or for defence in the event of legal disputes.
5. SOCIAL MEDIA
You can interact with Mr Graf & “when in vienna” on social media by commenting on posts, reacting to them (e.g. via the “Like” button), sharing them or sending them to other users. In doing so, Mr Graf processes your interactions, your username and, if applicable, the personal data of invited third parties. This data may also be processed by the platforms in this context. In this case, the respective platform and Mr Graf are joint controllers pursuant to Art. 26 GDPR. You can find more information on the processing of your data here:
Facebook: https://www.facebook.com/privacy/policy/
Instagram: https://help.instagram.com/155833707900388
LinkedIn: https://www.linkedin.com/legal/privacy-policy
5.1. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
The data is processed to answer your questions, to give you the opportunity to express yourself, to respond to your opinion or feedback, and to promote Mr Graf’s services. The processing is therefore based on his and your legitimate interests pursuant to Art. 6 (1) (f) GDPR or on the fulfilment of (pre-)contractual obligations pursuant to Art. 6 (1) (b) GDPR.
5.2. PURPOSE OF DATA PROCESSING
Mr Graf processes your personal data to interact with you, to respond to your feedback or to promote his services.
5.3. STORAGE PERIOD
Mr Graf stores your personal data for as long as he needs it to fulfil the purposes mentioned above. After that, your data will be deleted.
6. WILL YOUR DATA BE PASSED ON?
To operate this website and the associated communication channels, Mr Graf regularly uses IT service providers who, on his behalf and according to his instructions, may also have access to personal data in order to provide the commissioned IT services.
He also transfers your personal data to the following recipients: to external third parties to the extent necessary on the basis of his legitimate interests (e.g. auditors, insurance companies in the event of an insurance claim, legal representatives in the event of an incident, etc.); to authorities and other public bodies to the extent required by law (e.g. tax authorities, courts, etc.).
Your data will not be passed on to any other third parties for their own purposes without your consent.
7. USE OF COOKIES
Mr Graf uses technically necessary cookies on this website in order to display the website to you and to enable you to use it without problems. This data processing is necessary for the purpose of data security and the prevention of misuse and is therefore carried out on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR in conjunction with Section 165 (3) TKG (Austrian Telecommunications Act). If you voluntarily give your consent pursuant to Art. 6 (1) (a) GDPR, cookies from analytics providers are also used on the website. If your settings include providers that transfer data to countries without an adequacy decision pursuant to Art. 45 GDPR and without appropriate safeguards pursuant to Art. 46 GDPR, your consent also applies to this. There is a risk that data transferred in this way may be accessed by authorities in these third countries for control and monitoring purposes and that no effective legal remedies are available against this. You can change your individual consent at any time, e.g. via the “Cookies” menu item. There you can click [ACCEPT ALL] or [REJECT] to accept or reject all cookies requiring consent. You can also adjust your cookie settings individually using the sliders and the [ACCEPT SELECTION] button.
8. STORAGE PERIOD
Mr Graf generally only stores your personal data for as long as he needs it to fulfil the purposes outlined above and his contractual or legal obligations. When he no longer needs your personal data, he will delete it from his systems and records or anonymise it so that you can no longer be identified.
9. DATA PROTECTION
Mr Graf does his utmost to make your visit and use of this website as secure as possible. He therefore complies with the provisions of Art. 32 GDPR to ensure the confidentiality and security of your personal data and takes appropriate technical and organisational security measures.
10. YOUR RIGHTS AS A DATA SUBJECT
You have the right to information about the personal data Mr Graf processes about you. In addition, you have the right to have incorrect data corrected and your data deleted (“right to be forgotten”). If the processing is based on your consent, you may withdraw it with effect for the future. You may also have the right to restrict the processing of your data and the right to receive the data you have provided in a structured, commonly used and machine-readable format (“data portability”). You have the right to object to data processing at any time on grounds relating to your particular situation. You also have the option of lodging a complaint with a data protection supervisory authority. The supervisory authority responsible for this website is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, email: dsb@dsb.gv.at, tel.: +43 1 52 152-0. If you have any questions regarding your personal data, please contact Mr Graf at welcome@wheninvienna.com.
11. COOKIE BANNER
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found under data processing.
The legal bases for the processing of personal data in this context are Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide it, we cannot manage your consents.
