Privacy Policy

PRIVACY POLICY
kahlenberg-kirche.at

This Privacy Policy is intended to provide you with information on how your personal data is processed during your visits to our website, as well as when you contact our company or use our services. It serves to provide you with the information referred to in Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("RODO"). The privacy policy is for informational purposes and does not imply any obligations for you (it is not a regulation or contract).

Who is the controller of your personal data?

1. The administrator of your personal data is Rev. Roman Krekora CR, St. Josefskirche auf dem Kahlenberg, Am Kahlenberg 38 - Kirche, A - 1190 Wien
2. For all data protection issues, you can contact us by email at: [email protected], by mail to the address: Am Kahlenberg 38 - Kirche, A - 1190 Wien

How do we keep your personal information safe?

1. Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("RODO") and other currently applicable data protection laws.
2. We use, as required by national and EU laws, technical and organizational measures to ensure the protection of processed personal data and to secure personal data against unauthorized access, acquisition by unauthorized persons, processing in violation of the law, and alteration, loss or destruction.
3. The provision of personal data is voluntary, but necessary for the use of the website functionalities that require it, as well as for the conclusion of a contract related to the use of our services and the issuance of accounting documents related to the concluded contract.
4. Where the basis for the processing of personal data is consent, failure to do so will prevent us from taking the action to which that consent relates. You may withdraw your consent at any time, however, this will not affect the lawfulness of our processing of your personal data that we performed on the basis of consent before its withdrawal.

For what purpose and on what basis do we process your personal data and how long will we keep it? 

In particular, we process your personal data in order to provide the services we offer and to perform the contracts we have thus concluded, as well as to take action prior to concluding them. We also process your personal data in order to provide services electronically in connection with your use of our website. Your personal data may be processed by us in order to:

 

1. Provision of services

Your personal data provided by you in connection with the use of our company's services (in particular: your name, address [street, building number, premises number, city, country], e-mail address, telephone number, and, in the case of entrepreneurs, also the name and address of the company and Tax Identification Number), are or may be processed by us for the following purposes and on the following legal grounds:

1. performance of the service and execution of the contract thus concluded, as well as taking action, at your request, prior to its conclusion (Article 6(1)(b) of the DPA),
2. possible establishment, investigation or defense of claims that may arise in connection with your use of our services, as well as other purposes (e.g., archival for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) RODO),
3. issuance and storage of accounting documents and processing of any complaints, in accordance with applicable regulations (Article 6(c) of the DPA).

We will process your personal data for the period of performance of the contract, unless further retention of the data is required by generally applicable law (e.g. tax, accounting regulations) or justified by the statute of limitations on claims, or justified by our overriding interest arising from the pursuit of legitimate interests. In each case, the longer term of storage of personal data is decisive.

 

2. Services provided electronically

Your personal data provided by you or other data collected in connection with your use of our website (such as, in particular: Your IP address, request URL, device identifier, amount of time spent on particular pages, browser type, browser language, date and time of website use, screen resolution, operating system type and version), are or may be processed by us for the following purposes and on the following legal grounds:

1. provision of services by electronic means, based on an agreement for the provision of services by electronic means, as well as to take action, at your request, prior to the conclusion of the aforementioned agreement (Article 6(1)(b) RODO),
2. possible establishment, investigation or defense of claims that may arise in connection with your use of our website, as well as other purposes (e.g., archival for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) RODO).

We will process your personal data for the duration of the provision of electronic services, unless further retention is justified by the statute of limitations for claims, or by generally applicable law, or is justified by our overriding interest in pursuing legitimate interests. In each case, the longer term of storage of personal data shall be decisive.

3. Marketing and analytics of the service

Your personal data provided by you, or other data collected in connection with your use of our website, is or may be processed by us for the following purposes and on the following legal grounds:

1. marketing of our services, which is our legitimate interest to conduct marketing activities (Article 6(1)(f) RODO), with the proviso that our sending of commercial information or conducting direct marketing by means of telecommunication terminal equipment and automatic calling systems is possible only with your prior consent (granting of this consent is voluntary, but necessary for sending commercial information), in which case the basis for the processing of personal data may also be your consent (Article 6(1)(a) RODO)
2. Creating compilations, analyses and statistics, including reporting, planning service development, development work, creating statistical models, which is our legitimate interest to improve and develop the website (Article 6(1)(f) RODO),
3. possible establishment, investigation or defense of claims that may arise in connection with your use of our website, as well as other purposes (e.g., archival for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) RODO).

Our marketing activities may involve presenting you with offers and advertisements tailored to you based on profiling (e.g., based on your activity on our website), so that we can better tailor offers to specific groups of our customers, as well as your preferences. However, our marketing activities do not affect you in a material way, and in our opinion, displaying personalized ads is more beneficial than presenting an offer with no connection to your needs. In the case of marketing activities carried out on the basis of consent, we will process your personal data until it is withdrawn, while in the case of marketing activities carried out on the basis of the premise of legitimate interest until you object, unless further storage (in both cases) of data is justified by the statute of limitations for claims or results from generally applicable laws or is justified by the overriding interest of the Administrator resulting from the implementation of legitimate interests.

4. Newsletter

Your personal data provided by you in connection with your subscription to the Newsletter, is or may be processed by us for the following purposes and on the following legal grounds:

1. Provision of Newsletter service under the terms and conditions, consisting of sending commercial information to the e-mail address you provide (Article 6(1)(b) RODO),
2. possible establishment, investigation or defense of claims that may arise in connection with your use of the Website, as well as other purposes (e.g., archival for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) RODO).

We will process your personal data for the period of your subscription to the Newsletter, unless further retention is justified by the statute of limitations for claims or by generally applicable law or is justified by our overriding interest in pursuing our legitimate interests. In each case, the longer retention period will be decisive.

5. Contact by email or phone

Your personal data provided by you in connection with email or telephone contact (i.e., data necessary to establish and maintain contact), as well as collected in the course of further communication, are or may be processed by us for the following purposes and on the following legal grounds:

1. responding to email or telephone contact, which is our legitimate interest (Article 6(1)(f) of the DPA),
2. to take pre-contractual action at your request, if this is what the communication will be about (Article 6(1)(b) of the DPA),
3. possible establishment, investigation or defense of claims that may arise in connection with your use of the Website, as well as other purposes (e.g., archival for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) RODO).

We will process your personal data up to the time of correspondence, unless further retention is justified by the statute of limitations for claims, or by generally applicable law, or is justified by the overriding interest of the Administrator arising from the pursuit of legitimate interests. In any case, the longer term of storage of personal data shall be decisive.

What are cookies?

1. The Website uses cookie technology, as well as functionalities similar to it. Cookies are saved on the final device of the person visiting the Website. Each person visiting the Website has the possibility to choose the scope of using cookies, and then give their consent within the so-called cookie banner, displayed during the first visit to the Website.
2. Cookies are IT data, in particular text files, which are stored on the final device of a person visiting the Website and are intended for the use of the Website. Cookies usually contain the name of the Website from which they come, the time they are stored on the end device and a unique number.
3. Cookies are used primarily to ensure proper operation of the Website. Depending on the visitor's choice of the scope of use of cookies, cookies may also be used for other purposes, such as the creation of statistics that help to understand how Users use the Website, which makes it possible to improve its structure and content, as well as for marketing purposes consisting, among others, in reaching visitors who have previously visited the Website with an advertising message when they use other websites or social networks (in this regard, cookies of third parties, i.e. providers of tools used by the Administrator for this purpose, may also be used).
4. Depending on the choice of the scope of use of cookies, they collect various types of information, which, as a rule, do not constitute personal data. However, some of the information collected in this way, depending on the type of cookies, may contain information that makes it possible to identify the visitor to the Website, especially when linked to other data. This applies primarily to cookies, the use of which requires the consent of the visitor to the Website. Other provisions of the Privacy Policy shall apply to such information, including in particular the rights of the data subject.
5. Detailed information on the scope and types of cookies used within the Website can be found within the cookie banner displayed when visiting the Website for the first time, as well as by clicking on the button with the "overbite cookie with the letter Y" icon in the lower left corner of the website. In the same way, a visitor to the Website may change his or her preferences regarding the use of cookies at any time, including the withdrawal of previously granted consents, without affecting the legality of actions performed on the basis of consent before its withdrawal.
6. In terms of ensuring the proper operation of the Website, cookies are used on the basis of Article 173(3)(2) of the Telecommunications Law. In the remaining scope, obtaining and storing information with the use of cookies takes place on the basis of the consent of the visitor to the Website, expressed within the cookie banner displayed during the first visit to the Website, or as a result of changing the settings after clicking on the "Cookies settings" button. This consent also includes the transfer of data collected in this way to providers of marketing and analytical tools.
7. To the extent that cookies may contain information constituting personal data, the basis for their processing is the legitimate interest of the Administrator (Article 6(1)(f) RODO) in the form of, among other things, researching and analyzing traffic on the Website for statistical purposes, as well as conducting marketing activities by the Administrator or third parties. To the extent that such third parties will have direct access to such information, then the legal basis for such processing will be the legitimate interests of such third parties or a separate consent given by the visitor (e.g. within the privacy settings of a social networking site). To the extent that the information collected through cookies is necessary for the proper provision of electronic services on the Website, the basis for processing such information is Article 6(1)(b) of the DPA.
8. Depending on the purposes and legal basis for processing personal data, information collected by cookies may be stored for different periods. Information about the storage period of information collected by individual cookies can be found within the cookie banner displayed when you first visit the Website, as well as at any time by clicking on the "Cookie Settings" button. In the event that the information collected by cookies constitutes personal data, it will be stored in principle until you object. Personal data may also be stored until the statute of limitations for claims or for the time required by law. In each case, the longer period of storage of personal data will be decisive.
9. The Website uses marketing and analytical tools of other providers who use cookies (third-party cookies) on the Website. The providers of these tools are the entities listed in the section below. For more information on the cookies of these entities, please refer to their privacy policies On the final device of a visitor to the Website, cookies from these third parties may be stored, who may be their independent administrators or act as co-administrators together with the Administrator.
10. The website uses marketing and analytical tools provided by the following entities, which use external cookies and technologies similar to them:
    • Google Ireland Limited (Google Ads, Google Analytics, Google Tag Manager, Google Merchant Center, reCaptcha, etc.). - https://business.safety.google/privacy/,
    • CookieYes - https://www.cookieyes.com/privacy-policy/,[7]

11. Some of the above-mentioned suppliers may store your data outside the European Economic Area. In such situations, your data will be transferred only to countries that provide an adequate degree of protection, and to countries that do not provide an adequate degree of protection, only if adequate safeguards are provided, including but not limited to standard contractual clauses adopted by the European Commission.
12. The website also uses additional features of Google Analytics (Google Analytics Advertising Features). You can change this through the appropriate settings of your web browser, but also through your Google Ads preference settings.

What rights do you have?

You have a number of rights in connection with our processing of your personal data. You can exercise each of your rights by contacting us by email or letter at the address indicated in Section 2. of the "Who is the controller of your personal data?" section.

You are entitled to:

1. access to your personal data and the right to request rectification, erasure and restriction of processing. To the extent that processing is based on the premise of our legitimate interest, you have the right to object to the processing of your personal data,
2. to the extent that the processing of your personal data is based on consent, you have the right to withdraw consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal,
3. to the extent that the processing of your personal data is based on consent or contract, you also have the right to portability of your data, i.e. a request to receive your personal data from us, in a structured, commonly used format,
4. lodge a complaint to the President of the Office for Personal Data Protection (Stawki 2 Street, 00-193 Warsaw), whenever you consider that the processing of personal data violates your rights.

Who do we share your personal information with?

Your personal data may be transferred to entities authorized to obtain personal data on the basis of the law, as well as to entities to whom we entrust data on the basis of contracts, concerning the provision of services related to the functioning of our website, among others, hosting services, marketing services and the supply of IT systems, and in case the processing of your data is related to the conclusion of a contract, also to entities providing software for the issuance of accounting documents and an accounting office. We may also transfer your personal data to providers of tools for: conducting analytical research, creating statistics, tracking traffic on our website, marketing automation.

In certain cases within our website, we use Google reCAPTCHA to avoid the use of text fields by automated bots. For this reason, Google Ireland Limited may obtain information about your IP address.

Some entities providing services to us may store your data outside the European Economic Area. In such situations, your data will be transferred only to countries that provide an adequate degree of protection, and to countries that do not provide an adequate degree of protection, only if adequate safeguards are provided, including but not limited to standard contractual clauses adopted by the European Commission.