Privacy Policy
Thank you for visiting our website, viennaairport.com. Flughafen Wien Aktiengesellschaft (hereinafter referred to as “we” or “Vienna Airport”) takes data protection very seriously. Data processing and use are carried out in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
You can find more detailed information about the use of your data here:
Name and address of the controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States, as well as other data protection regulations, is:
Flughafen Wien Aktiengesellschaft
Flughafen
1300 Vienna Airport
Austria
Tel.: +43 1 7007-0
Website: www.viennaairport.com
Name und Anschrift des Datenschutzbeauftragten
Anschrift des Datenschutzbeauftragten:
datenschutz@viennaairport.com
Den Datenschutzbeauftragten erreichen Sie auch unter der Postadresse des Verantwortlichen mit dem Zusatz „der Datenschutzbeauftragte“.
Data Processors
In some cases, we use external service providers (known as data processors) to process personal data. We have carefully selected and engaged these providers; they are bound by our instructions and are regularly monitored.
Transfer outside the EEA
Your data is also transferred to Facebook Inc. (“Facebook”), located at 1601 S. California Ave, Palo Alto, CA 94304, USA, including your IP address (in anonymized form, if applicable), information about website access (URL), and estimates regarding demographics and age. The legal basis for this transfer is our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes (Art. 6(1)(f) GDPR).
General Information on Data Processing
We generally collect and use our users’ personal data only to the extent necessary to provide a fully functional website and our content and services. The collection and use of our users’ personal data generally takes place only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by law.
Legal basis for the processing of personal data
To the extent that we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.
To the extent that the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override the former interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.
The data subject’s personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Data may also be stored if this is required by European or national legislation in EU regulations, laws, or other provisions to which the controller is subject. The data will also be blocked or deleted when a retention period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.
Website hosting and log file generation
Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.
The following data is collected in this process:
-
Information about the browser type and version used
-
Language and version of the browser software
-
The user’s operating system and its interface
-
The user’s IP address
-
Date and time of access and time zone difference from Greenwich Mean Time (GMT)
-
Amount of data transferred
-
Websites from which the user’s system accesses our website
-
Websites accessed by the user’s system via our website
-
Access status/HTTP status code
The data is also stored in our system’s log files. This data is not stored together with other personal data of the user.
The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the GDPR.
The system must temporarily store the IP address to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session.
Data is stored in log files to ensure the website functions properly. In addition, the data helps us optimize the website and ensure the security of our IT systems. The data is not analyzed for marketing purposes in this context.
These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR.
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this occurs when the respective session ends.
In the case of data stored in log files, this occurs after seven days at the latest. Storage beyond this period is possible. In this case, the users’ IP addresses are deleted or anonymized so that the client making the request can no longer be identified.
The collection of data for the purpose of providing the website and the storage of this data in log files is essential for the operation of the website. Consequently, users have no right to object.
Use of Cookies
Our website uses cookies. Cookies are text files that are stored in or by the web browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a unique string of characters that allows the browser to be uniquely identified when the website is visited again.
We use cookies to make our website more user-friendly. Some elements of our website require that the visiting browser can be identified even after a page change (“first-party cookies”). We process these cookies on the basis of a legitimate interest (Art. 6(1)(f) GDPR), as the website could not be displayed without them.
We also use cookies on our website that enable an analysis of users’ browsing behavior. Some of these cookies are set and used by third parties (“third-party cookies”). The data processing associated with these cookies is based on your consent (Art. 6(1)(a) GDPR), which you may revoke at any time.
The user data collected in this manner is pseudonymized through technical measures. Therefore, it is no longer possible to link the data to the user who accessed the site. The data is not stored together with other personal data of the users.
When visiting our website, the user is informed about the use of cookies for analytical purposes and their consent to the processing of the personal data collected in this context is obtained. In this context, reference is also made to this privacy policy.
The legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(f) of the GDPR.
The legal basis for the processing of personal data using cookies for analytical purposes is Article 6(1)(a) of the GDPR, provided that the user has given their consent.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary for the browser to be recognized even after changing pages.
The user data collected by technically necessary cookies is not used to create user profiles.
Analytics cookies are used to improve the quality of our website and its content. Analytics cookies allow us to understand how the website is used, enabling us to continuously optimize our offerings.
Cookies are stored on the user’s computer and transmitted to our site by the user. As a result, you, the user, have full control over the use of cookies. By changing the settings in your web browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, you may no longer be able to use all of the website’s features to their full extent.
Each browser differs in how it manages cookie settings. This is described in each browser’s Help menu, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Contact form and email contact
Our website features a contact form that can be used to contact us electronically. If a user chooses this option, the data entered in the form is transmitted to us and stored. This data includes:
-
Salutation
-
Title
-
Name
-
Email address
-
Comment
-
Reason for contact
-
At the time the message is sent, the following data is also stored:
-
Date and time of registration
Your consent is obtained for the processing of the data as part of the submission process, and reference is made to this privacy policy.
Alternatively, you may contact us via the email address provided in this document. In this case, the user’s personal data transmitted with the email will be stored.
In this context, the data will not be disclosed to third parties. The data will be used exclusively for processing the conversation.
The legal basis for processing the data is Article 6(1)(a) of the GDPR, provided the user has given consent.
The legal basis for processing data transmitted in the course of sending an email is Article 6(1)(f) of the GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.
We process the personal data entered in the form solely for the purpose of handling your inquiry. If you contact us via email, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our IT systems.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data entered in the contact form and data sent via email, this is the case once the respective conversation with the user has ended. The conversation is considered ended when it is clear from the circumstances that the matter in question has been conclusively resolved, as well as for traceability purposes for up to 26 months.
The user may withdraw their consent to the processing of personal data at any time. If the user contacts us via email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
To exercise your right to object, please contact datenschutz@viennaairport.com. As soon as we receive your objection, all personal data stored in the course of the contact will be deleted in this case.
Cargo Security
Note: Contractual and business partners are requested, insofar as they are companies, to bring this privacy policy to the attention of the individuals concerned (in particular employees).To access the freight area, you must enter your vehicle's license plate number at https://vie.nallian.io/vehicledb . When entering the freight area, the license plate of the respective vehicle is automatically recorded and compared with the license plates you have provided. If there is a match, the barrier will open.
The legal basis for license plate recognition is Article 6(1)(f) of the GDPR. Our legitimate interest is to ensure that only authorized vehicles enter the freight area.
The entry data is not shared with third parties. The data processor in this case is Nallian NV (Kraaiven 7, 3140 Keerbergen, Belgium, VAT: BE 0845.779.622), which provides the system through which license plates can be registered.
The credentials remain in the system for as long as you need access to the freight area. You can delete the credentials from the database yourself at any time. Credentials that have not been used for two years are automatically deleted.
Rights of the Data Subject
Applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data, about which we inform you below:
Rights of affected individuals
In particular, you have the right to access your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned retention period or the criteria for determining the retention period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved, the significance for you, and the intended consequences of such processing, as well as your right to be informed of the safeguards provided under Article 46 of the GDPR when your data is transferred to third countries;
You have the right to have inaccurate personal data concerning you corrected without delay and/or to have incomplete personal data stored by us completed;
You have the right to request the erasure of your personal data if the conditions set forth in Article 17(1) of the GDPR are met. However, this right does not apply, in particular, if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
You have the right to request the restriction of the processing of your personal data while the accuracy of your data, which you have contested, is being verified; if you object to the erasure of your data due to unlawful processing and instead request the restriction of the processing of your data; if you need your data to assert, exercise, or defend legal claims, after we no longer need this data once the purpose has been fulfilled, or if you have objected on grounds relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds override yours;
If you have exercised your right to rectification, erasure, or restriction of processing with the controller, the controller is obligated to notify all recipients to whom your personal data has been disclosed of such rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed of these recipients.
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller, provided this is technically feasible;
You have the right to withdraw your consent to the processing of your data at any time, with effect for the future. In the event of withdrawal, we will delete the relevant data immediately, unless further processing can be based on a legal ground that does not require consent. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to the withdrawal;
If you believe that the processing of your personal data violates the GDPR, you have the right-without prejudice to any other administrative or judicial remedy-to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your workplace, or the place where the alleged infringement occurred. In Austria, the competent supervisory authority is the Data Protection Authority.
If we process your personal data based on a balancing of interests due to our overriding legitimate interest, you have the right at any time to object to this processing with future effect for reasons arising from your particular situation.
If you exercise your right to object, we will cease processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. You may exercise this right as described above.
If you exercise your right to object, we will cease processing the relevant data for direct marketing purposes.
Please direct any inquiries regarding this matter to datenschutz@viennaairport.com.
Information on accessible access to the website
Eye-Able® is software developed by Web Inclusion GmbH to ensure barrier-free access to information on the Internet for everyone. The necessary files, such as JavaScript, stylesheets, and images, are loaded locally from this website. When functions are activated, Eye-Able® uses the browser’s local storage to save the settings. All settings are stored only locally and are not transmitted elsewhere. For more information about Eye-Able®, please see the following privacy policy: https://eye-able.com/de/datenschutz-eye-able
