Privacy Policy

Introduction and Overview

We have drafted this privacy policy (Version 09.12.2023-112685231) to explain to you, in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, the personal data (referred to as "data") that we, as the responsible party, and our commissioned data processors (e.g., providers) process, will process in the future, and the legal options you have. The terms used are to be understood in a gender-neutral manner.

In short: We provide comprehensive information about the data we process about you.

Privacy policies usually sound very technical and use legal terminology. However, this privacy policy aims to describe the most important things for you as simply and transparently as possible. To promote transparency, technical terms are explained in a reader-friendly manner, links to further information are provided, and graphics are used. We inform in clear and simple language that we only process personal data within the scope of our business activities when there is a corresponding legal basis. This is not possible if one provides concise, unclear, and legally technical explanations, as is often the standard on the Internet when it comes to data protection. We hope you find the following explanations interesting and informative, and perhaps there is some information you were not familiar with.

If you still have questions, we invite you to contact the responsible office mentioned below or in the imprint, follow the provided links, and view further information on third-party sites. Our contact details can also be found in the imprint.

Scope

This privacy policy applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (data processors). By personal data, we mean information within the meaning of Art. 4 No. 1 GDPR, such as a person's name, email address, and postal address. The processing of personal data ensures that we can offer and bill our services and products, whether online or offline. The scope of this privacy policy includes:

All online presences we operate
Social media presences and email communication
Mobile apps for smartphones and other devices

In short: The privacy policy applies to all areas where personal data is processed in the company through the mentioned channels. If we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.

Legal Bases

In the following privacy policy, we provide you with transparent information about the legal principles and regulations, i.e., the legal bases of the General Data Protection Regulation, that allow us to process personal data.

Regarding EU law, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016. You can read this EU General Data Protection Regulation online at EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679.

We only process your data if at least one of the following conditions applies:

Consent (Article 6(1)(a) GDPR): You have given us your consent to process data for a specific purpose. An example would be storing the data you entered in a contact form.
Contract (Article 6(1)(b) GDPR): To fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a purchase contract with you, we need personal information in advance.
Legal obligation (Article 6(1)(c) GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally required to keep invoices for accounting purposes. These usually contain personal data.
Legitimate interests (Article 6(1)(f) GDPR): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we may need to process certain data to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.

Other conditions such as the exercise of tasks carried out in the public interest or the exercise of public authority, as well as the protection of vital interests, generally do not apply to us. If such a legal basis should be relevant, it will be indicated at the respective location.

In addition to the EU Regulation, national laws also apply:

In Austria, this is the Federal Act concerning the Protection of Personal Data (Data Protection Act), or DSG for short.
In Germany, the Federal Data Protection Act, or BDSG for short.

If additional regional or national laws apply, we will inform you in the following sections.

Contact Details of the Controller

If you have any questions about data protection or the processing of personal data, you will find the contact details of the responsible person or office below:

Irene Seewald Weinbergstraße 13/2 4111 Walding

Email: dance@euphorica.at Phone: +436642552441 Imprint: https://www.euphorica.at/impressum/

Storage Duration

The general criterion for us is that we only store personal data for as long as it is absolutely necessary for providing our services and products. This means that we delete personal data as soon as the reason for data processing no longer exists. In some cases, we are legally obligated to store certain data even after the original purpose has ceased, for example, for accounting purposes.

If you wish to delete your data or withdraw your consent for data processing, the data will be deleted as soon as possible, provided there is no obligation to store it.

We will inform you about the specific duration of each data processing below if we have further information on this.

Rights under the General Data Protection Regulation (GDPR)

According to Articles 13 and 14 of the GDPR, we inform you about the following rights to ensure fair and transparent data processing:

Right to information (Article 15 GDPR): You have the right to know whether we process data about you. If so, you have the right to receive a copy of the data and information about:

The purpose of the processing
The categories, i.e., the types of data processed
Who receives this data, and if the data is transferred to third countries, how security can be guaranteed
How long the data is stored
The right to rectification, erasure, or restriction of processing and the right to object to processing
The right to lodge a complaint with a supervisory authority (links to these authorities can be found below)
The origin of the data if it was not collected from you
Whether profiling is carried out, i.e., whether data is automatically evaluated to create a personal profile of you

Right to rectification (Article 16 GDPR): You have the right to have inaccurate data corrected.
Right to erasure ("right to be forgotten") (Article 17 GDPR): You have the right to request the deletion of your data.
Right to restriction of processing (Article 18 GDPR): You have the right to restrict the processing of data, meaning that we may only store the data but not use it further.
Right to data portability (Article 20 GDPR): You have the right to receive your data in a common format upon request.
Right to object (Article 21 GDPR): If the processing of your data is based on Article 6(1)(e) (public interest, exercise of official authority) or Article 6(1)(f) (legitimate interest), you can object to the processing. We will then check as soon as possible whether we can legally comply with this objection.

If data is used for direct marketing, you can object to this type of data processing at any time. After that, we may no longer use your data for direct marketing.
If data is used for profiling, you can object to this type of data processing at any time. After that, we may no longer use your data for profiling.

Right not to be subject to automated decision-making, including profiling (Article 22 GDPR): Under certain circumstances, you have the right not to be subject to a decision based solely on automated processing (e.g., profiling).
Right to lodge a complaint (Article 77 GDPR): You have the right to complain. This means you can complain to the supervisory authority at any time if you believe that the processing of personal data violates the GDPR.

In short: You have rights - do not hesitate to contact the responsible office listed above!

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to the supervisory authority.

For Austria, this is the Data Protection Authority, whose website you can find at https://www.dsb.gv.at/.

In Germany, there is a data protection officer for each federal state.

For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). The following local data protection authority is responsible for our company:

Cookies Cookies Summary

👥 Affected: Website visitors 🤝 Purpose: depends on the respective cookie.

More details can be found below or from the software provider that sets the cookie. 📓 Processed data: Depends on the respective cookie. More details can be found below or from the software provider that sets the cookie. 📅 Storage duration: depends on the respective cookie, can vary from hours to years ⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are Cookies?

Our website uses HTTP cookies to store user-specific data. Below, we explain what cookies are and why they are used, so you can better understand the following privacy policy.

Whenever you browse the internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

It cannot be denied: cookies are genuinely useful little helpers. Almost all websites use cookies. More precisely, these are HTTP cookies, as there are also other cookies for different application areas. HTTP cookies are small files that are stored by our website on your computer. These cookie files are automatically placed in the cookie folder, the "brain" of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data about you, such as language or personal page settings. When you revisit our site, your browser sends back the "user-related" information to our site. Thanks to cookies, our website knows who you are and offers you the settings you are used to. In some browsers, each cookie has its own file, while in others, such as Firefox, all cookies are stored in a single file.

The following graphic shows a possible interaction between a web browser such as Chrome and the webserver. Here, the web browser requests a website and receives a cookie back from the server, which the browser uses again when another page is requested.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, while third-party cookies are created by partner websites (e.g., Google Analytics). Each cookie must be individually evaluated, as each cookie stores different data. The expiration time of a cookie also varies from a few minutes to several years. Cookies are not software programs and do not contain viruses, trojans, or other "malware." Cookies cannot access information on your PC.

Cookie data can look like this, for example:

Name: _ga Value: GA1.2.1326744211.152112685231-9 Purpose: Distinguishing website visitors Expiration date: after 2 years

The browser should support at least these minimum sizes:

At least 4096 bytes per cookie
At least 50 cookies per domain
At least 3000 cookies in total

What Types of Cookies Are There?

The question of which cookies we use specifically depends on the services used and will be clarified in the following sections of the privacy policy. At this point, we would like to briefly address the different types of HTTP cookies.

Four types of cookies can be distinguished:

Essential cookies: These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed if a user puts a product in the shopping cart, then continues to browse other pages, and later goes to the checkout. These cookies prevent the shopping cart from being deleted even if the user closes their browser window.
Functional cookies: These cookies collect information about user behavior and whether the user receives error messages. Moreover, these cookies measure the loading time and the behavior of the website with different browsers.
Target-oriented cookies: These cookies ensure a better user experience. For example, entered locations, font sizes, or form data are stored.
Advertising cookies: These cookies, also called targeting cookies, serve to deliver individually adapted advertising to the user. This can be very practical but also very annoying.

Usually, when you first visit a website, you are asked which of these types of cookies you want to allow. And, of course, this decision is also stored in a cookie.

If you want to know more about cookies and do not shy away from technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments from the Internet Engineering Task Force (IETF) called "HTTP State Management Mechanism."

Purpose of Processing via Cookies

The purpose ultimately depends on the respective cookie. More details can be found below or from the software provider that sets the cookie.

What Data Is Processed?

Cookies are helpful assistants for many different tasks. Unfortunately, it is not possible to generalize which data is stored in cookies, but we will inform you about the processed or stored data as part of the following privacy policy.

Storage Duration of Cookies

The storage period depends on the respective cookie and is specified more precisely below. Some cookies are deleted after less than an hour, while others can remain stored on a computer for several years.

You also have an impact on the storage period. You can manually delete all cookies at any time using your browser (see also "Right to Object" below). Furthermore, cookies that are based on consent will be deleted at the latest after your consent is revoked, with the lawfulness of storage remaining unaffected until then.

Right to Object – How Can I Delete Cookies?

You decide for yourself whether and how you want to use cookies. Regardless of which service or website the cookies come from, you always have the option to delete, deactivate, or only partially allow cookies. For example, you can block third-party cookies but allow all other cookies.

If you want to find out which cookies have been stored in your browser, want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, enable, and manage cookies in Chrome
Safari: Manage cookies and website data with Safari
Firefox: Delete cookies to remove data that websites have placed on your computer
Internet Explorer: Deleting and managing cookies
Microsoft Edge: Deleting and managing cookies

If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. This way, you can decide for each individual cookie whether to allow it or not. The procedure is different depending on the browser. It is best to search for instructions on Google using the search term "Delete Chrome cookies" or "Disable Chrome cookies" in the case of a Chrome browser.

Legal Basis

Since 2009, there have been the so-called "cookie guidelines." In these, it is stipulated that storing cookies requires the user's consent (Art. 6 para. 1 lit. a GDPR). Within the EU countries, however, there are still very different reactions to these guidelines. In Austria, however, these guidelines were implemented in § 96 para. 3 of the Telecommunications Act (TKG). In Germany, the cookie guidelines were not implemented as national law. Instead, these guidelines were largely implemented in § 15 para. 3 of the Telemedia Act (TMG).

For essential cookies, even if no consent is given, there are legitimate interests (Art. 6 para. 1 lit. f GDPR), which are usually of an economic nature. We want to provide visitors to the website with a pleasant user experience, and for that, certain cookies are often absolutely necessary.

If non-essential cookies are used, this only happens with your consent. The legal basis is then Art. 6 para. 1 lit. a GDPR.

In the following sections, you will be provided with more detailed information about the use of cookies, in case the software used uses cookies.

Explanation of Terms Used

We always strive to write our privacy policy as clear and understandable as possible. However, this is not always easy, especially with technical and legal topics. It often makes sense to use legal terms (such as personal data) or specific technical terms (such as cookies, IP addresses). However, we do not want to use these without explanation. Below is an alphabetical list of important terms used, which we may not have sufficiently explained in the previous privacy policy. If these terms were taken from the GDPR and are definitions, we will also provide the GDPR texts here and, if necessary, add our own explanations.

Consent

Definition according to Article 4 of the GDPR:

Within the meaning of this Regulation, the term:

"Consent" of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

Explanation: In most cases, such consent is obtained through a cookie consent tool on websites. You are probably familiar with this. Whenever you visit a website for the first time, you are usually asked via a banner whether you agree to data processing or consent. You can usually also make individual settings and thus decide for yourself which data processing you allow and which you do not. If you do not consent, no personal data may be processed from you. In principle, consent can, of course, also be given in writing, i.e., not via a tool.