Datenschutzerklärung

Thank you for visiting our websites viennaairport-fbo.com for general aviation and vip.viennaairport.com for VIP services. Vienna Airport FBO GmbH (hereinafter: “we” or “Vienna Airport FBO”) takes data protection very seriously. Data processing and use is carried out in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

Here you will find more detailed information about how we use your data:

I. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

VIENNA AIRPORT FBO GMBH

Niki Lauda Allee 140
1300 Vienna Airport
Tel: +43 1 7007 22345 (24h Hotline)
Fax: +43 1 7007 28313
viennaairport-fbo.com; vip.viennaairport.com

II. Contact with the data protection officer

datenschutz@viennaairport.com

or by post to Flughafen Wien Group, PO Box 1, 1300 Vienna Airport, marked for the attention of “General Secretariat / Data Protection Officer”

You can also contact the Data Protection Officer at the postal address of the controller, marked for the attention of ‘the Data Protection Officer’.

III. Processor

In some cases, we use external service providers (so-called processors) to process personal data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

IV. General information on data processing

1. Scope of personal data processing

We collect and use our users' personal data only to the extent necessary to provide a functional website and our content and services. The collection and use of our users' personal data takes place regularly only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

Art. 6 (1) (b) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is party. This also applies to processing operations required to carry out pre-contractual measures.

Insofar as the processing of personal data is required for compliance with a legal obligation to which our company is subject, Art. 6 (1) (c) of the GDPR serves as the legal basis.

In the event that processing is necessary in order to protect the vital interests of the data subject or of another natural person, Article 6(1)(d) of the GDPR shall apply.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing.

3. Data erasure and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies. Storage beyond that time may occur if provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. Blocking or erasure of the data also occurs when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

V. Provision of the website and creation of log files

1. Description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the visiting computer.

The following data is collected:

• Information about the browser type and version used
• Language and version of the browser software
• The user's operating system and interface
• The user's IP address
• Date and time of access and time zone difference to Greenwich Mean Time (GMT)
• Amount of data transferred
• Websites from which the user's system accesses our website
• Websites that the user's system accesses via our website
• Access status/HTTP status code

The data are also stored in our system's log files. These data are not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Article 6, paragraph 1, point (f) of the GDPR.

3. Purpose of data processing

The system needs to store the IP address temporarily to enable the website to be delivered to the user's computer. To do this, the user's IP address must be stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, the data helps us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes also include our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR.

4. Duration of storage

The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. It is possible to store the data for a longer period. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign them to the accessing client.

5. Objection and removal options

The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no right of objection on the part of the user.

VI. Use of cookies

1. Type and scope of data processing

Our website uses cookies. Cookies are text files that are stored in or by the internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is visited again.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser be identifiable even after moving to a different page (“first-party cookies”). We process these cookies on the basis of a legitimate interest (Art. 6 (1) (f) GDPR), since it would not be possible to display the website without these cookies.

We also use cookies on our website that enable an analysis of the surfing behavior of users. In some cases, these cookies are set and used by third parties (“third-party cookies”). The data processing of these cookies is based on your consent (Art. 6 para. 1 lit. a GDPR), which you can revoke at any time.

The user data collected in this way is pseudonymized by technical means. Therefore, it is no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the user.

When accessing our website, the user is informed about the use of cookies for analytical purposes and his consent to the processing of personal data used in this context is obtained. In this context, reference is also made to this data protection declaration.

VII. Social Media

2. Legal basis

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) (f) GDPR.

The legal basis for the processing of personal data using cookies for analytical purposes is Art. 6 (1) (a) GDPR if the user has given consent to this.

3. Purpose

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some of our website's functions cannot be offered without the use of cookies. For these functions, it is necessary that the browser be recognized even after a page change.

The user data collected by technically necessary cookies are not used to create user profiles.

We use analysis cookies to improve the quality of our website and its content. Analysis cookies tell us how the website is used, enabling us to constantly optimize our offering.

4. Storage/deletion/objection and removal options

Cookies are stored on the user's computer and transmitted by it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it is possible that not all of the website's functions can be used to their full extent.

Each browser differs in the way it manages cookie settings. This is described in each browser's help menu, which explains how you can change your cookie settings. You can find these for the respective browsers at the following links:

Internet Explorer:
http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

Firefox:
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome:
http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647

Safari:
https://support.apple.com/kb/ph21411?locale=de_DE

Opera:
http://help.opera.com/Windows/10.20/de/cookies.html

VIII. Contact form and e-mail contact

1. Description and extent of data processing

Our website includes a contact form that can be used to get in touch with us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. These data are:

• Form of address
• Title
• Name
• E-mail address
• Comment
• Reason for making contact

At the time of sending the message, the following data is also stored:

• Date and time of registration

Your consent to the processing of the data is obtained as part of the sending process and reference is made to this data protection declaration.

Alternatively, you can contact us using the email address provided in this document. In this case, the user's personal data transmitted by email will be stored.

The data will not be passed on to third parties in this context. The data will be used exclusively for the purpose of processing the conversation.

2. Legal basis for data processing

The legal basis for the processing of the data is the consent of the user Art. 6 para. 1 lit. a GDPR.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) (f) GDPR. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.

3. Purpose of data processing

We process the personal data from the input mask solely for the purpose of processing the contact. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data are deleted as soon as they are no longer required for the purpose for which they were collected. For personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified, and for traceability up to 26 months.

5. Right to object and right to erasure

The user has the right to withdraw their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

To exercise your right of objection, please contact datenschutz@viennaairport.com. As soon as we receive an objection, all personal data stored in the course of establishing contact will be deleted in this case.

IX. Rights of the data subject

The applicable data protection law grants you comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we will inform you below:

• Right of access in accordance with Article 15 of the GDPR: In particular, you have the right to request information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the envisaged storage period or the criteria used to determine that storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the source of your data if not collected by us from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended impact of such processing on you, as well as your right to be informed of the safeguards pursuant to Art. 46 GDPR concerning the forwarding of your data to third countries;
• Right to rectification according to Art. 16 GDPR: You have the right to demand immediate rectification of incorrect data concerning you and/or completion of incomplete data concerning you that we have stored;
• Right to erasure in accordance with Article 17 of the GDPR: You have the right to request the erasure of your personal data if the conditions of Article 17 (1) of the GDPR are met. However, this right does not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the correctness of your data, which you dispute, is being verified, if you refuse the deletion of your data due to inadmissible data processing and instead request the restriction of the processing of your data, if you require your data for the assertion, exercise or defense of legal claims, after we no longer need this data after the purpose has been achieved, or if you have objected to processing for reasons relating to your particular situation, pending the verification of whether our legitimate grounds override yours.
• Right to be informed pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
• Right to data portability in accordance with Art. 20 GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, where technically feasible;
• Right to revoke consent granted pursuant to Art. 7 (3) GDPR: You have the right to revoke consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;
• Right to file a complaint in accordance with Article 77 of the GDPR: If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to file a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy. In Austria, the competent supervisory authority is the Austrian Data Protection Authority.
• Right to object : If we process your personal data on the basis of our overriding legitimate interest in the context of a weighing of interests, you have the right at any time, for reasons arising from your particular situation, to object to this processing with effect for the future.

If you exercise your right of objection, we will stop processing the data concerned. However, we reserve the right to further processing if we can demonstrate compelling overriding reasons for the processing which outweigh your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the right to object as described above.

If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.

Please direct any such requests to datenschutz@viennaairport.com.

Information on barrier-free access to the website

Eye-Able® is a software from Web Inclusion GmbH that ensures barrier-reduced access to information on the internet for everyone. The necessary files such as JavaScript, stylesheets and images are loaded locally from this website. Eye-Able® uses the browser's local storage to save the settings when functions are activated. All settings are only stored locally and are not transmitted further. Further information about Eye-Able® can be found in the following data protection declaration: https://eye-able.com/de/datenschutz-eye-able