Facts & Figures

Privacy policy

www.woodstockacademy.at

General notes and mandatory information

1. Privacy policy

The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

2. information pursuant to Article 13 GDPR

2.1. Contact

ANKLANG Event & Marketing GmbH is responsible for data processing. Please address any data protection concerns to the relevant contact point:

ANKLANG Event & Marketing GmbH
Steingasse 6a/1
4020 Linz Austria

E-Mail: office@woodstockacademy.at
Website: www.woodstockacademy.at

VAT number: ATU73918709
Tax number: 46 502/9809
Company register number: FN503579h

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

2.2. General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy below this text.

3. the persons concerned

This privacy policy applies to different groups of persons, each of whom processes different data. To find out about the processing of your data, please read the relevant section carefully.

Data collection on this website

1. Why we process data

In the context of our website, we process the data of website visitors on the basis of their consent through cookies or our legitimate interest in the analysis, optimization and economic operation of our website for the following purposes:

• to make the website more user-friendly;
• to customize the service of Woodstock Academy to the preferences/needs of the website visitors;
• for troubleshooting, protection against misuse and tracking unauthorized access.

2 How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.
Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter this website.

3. To whom we pass on data

We pass on the data of website visitors to the following recipients or categories of recipients:

• Communication tools for support requests and customer communication
• Security tool and tools for error identification and rectification
• External hosting providers for data storage
• Tools for marketing purposes
• Companies of the SE Holding Group

4. Analysis tools and tools from third-party providers

When you visit this website, your surfing behavior can be statistically evaluated. This is mainly done using cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you.

You can object to this analysis or prevent it by not using certain tools. You can find detailed information about these tools and your options for objecting in the following data protection declaration.

5. Cookies

Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser the next time you visit our website.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. 1 lit. f GDPR is stored. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time.

Insofar as other cookies (e.g. cookies to analyze your surfing behavior) are stored, these are treated separately in this privacy policy.

Storage period: 6 months

6. Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP-Adress

This data is not merged with other data sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.

Hosting

1. External hosting

This website is hosted by an external service provider (hoster). Personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.

Conclusion of a contract for order processing

In order to guarantee data protection-compliant processing, we have concluded an order processing contract with our hoster.

2. SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

3. Encrypted payment transactions on this website

If there is an obligation to provide us with your payment data (e.g. account number for direct debit authorization) after the conclusion of a fee-based contract, this data is required for payment processing.

Payment transactions via the usual means of payment (Visa/MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. Eine verschlüsselte Verbindung erkennen Sie daran, dass die Adresszeile des Browsers von “http://” auf “https://” wechselt und an dem Schloss-Symbol in Ihrer Browserzeile

With encrypted communication, the payment data you transmit to us cannot be read by third parties.

Analysis tools and advertising

1. Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. Wurde eine entsprechende Einwilligung eingeholt (z.B. Einwilligung in die Speicherung von Cookies), erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a GDPR; consent can be revoked at any time.

2. IP anonymization

We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

3. Browser plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

4. Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Deactivate Google Analytics.
You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

5. Order processing

We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

6. Storage period

Data stored by Google at user and event level that is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 12 months. Details can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=de

Plugins and tools

1. Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. A connection to Google servers does not take place.

2. Google Maps (with consent)

This website uses the Google Maps map service via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To ensure data protection on this website, Google Maps is deactivated when you enter this website for the first time. A direct connection to Google’s servers is only established if you activate Google Maps yourself (consent pursuant to Art. 6 para. 1 lit. a GDPR). This prevents your data from being transmitted to Google when you first enter the site.

After activation, Google Maps will save your IP address. This is then usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission after the activation of Google Maps.

You can find more information on the handling of user data in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

Users of the contact form

1. Why we process data

By providing the contact form, customers can reach us more quickly with their inquiries. The data provided will be processed and stored on the basis of consent (Art. 6 para. 1 lit. a GDPR). We do not pass on this data without your consent.

2 Wie sammeln wir Ihre Daten?

On the one hand, your data is collected when you provide it to us. This is data that you enter in the contact form.

3. To whom we pass on data

We pass on data from the contact form to the following recipients or categories of recipients:

• Kommunikationswerkzeuge für Supportanfragen und Kundenkommunikation
• Companies of the SE Holding Group

4. When will this data be deleted?

All inquiries and requests that have already been answered and completed will be deleted after 3 months at the latest.

Registration on the website or booking platform

1. Create a user account

You can register on this website to use additional functions on the site. We only use the data entered for the purpose of using the respective offer or service for which you have registered. The basis for the storage and processing of this data is your consent (Art. 6 para. 1 lit. a GDPR) or fulfillment of a contract (Art. 6 para. 1 lit. b GDPR) if a contract is concluded. The mandatory information requested during registration must be provided in full. Otherwise we will reject the registration.

In the event of important changes, for example to the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way.

2. Why we process data

We process the data of users within the scope of contract fulfillment for the following purposes:

• to enable the user to book and use the services of Woodstock Academy after registration and activation of the user account
• to create and transmit booking confirmations and invoice documents;
• to enable appropriate customer support and customer communication;
• to customize the Woodstock Academy service to the user’s preferences and to develop new tools for the users.

3. How do we collect your data?

Zum einen werden Ihre Daten erhoben, wenn Sie sie uns zur Verfügung stellen. This is data that you enter when registering or reserving courses or making payments.

4. To whom we pass on data

Wir geben Daten aus dem Kontaktformular an folgende Empfänger oder Kategorien von Empfängern weiter:

• Payment service provider for processing online payments via the booking platform
• Communication tools for support requests and customer communication
• External hosting providers for data storage
• Public accountant
• Authorities of the financial administration
• Companies of the SE Holding Group

5. Data transfer to a third country

If we use service providers outside the EU or the European Economic Area (EEA), we take appropriate security precautions (e.g. additional technical and organizational measures such as encryption) to ensure an adequate level of data protection when transferring personal data. Please note that despite careful selection and engagement of a service provider, it may process data outside the EU or the EEA or may be subject to a different legal system due to its registered office and may therefore not offer an adequate level of data protection.

6. How long we store this data

The data collected during registration will be stored by us for as long as you are registered on this website and will then be deleted. Statutory retention periods remain unaffected.

Newsletter

1. Newsletter data

SE Holding GmbH is the processor responsible for graphics, text and broadcasting.

The legal basis for sending our newsletter is your consent pursuant to Art. 6 para. 1 lit. a DSGVO. We use the so-called double opt-in procedure for sending the newsletter, i.e. we will only send you a newsletter by e-mail if you have expressly confirmed to us beforehand that we should activate the newsletter service. We will then send you a notification e-mail and ask you to confirm that you wish to receive our newsletter by clicking on a link contained in this e-mail. When you register for our newsletter, we store your IP address, e-mail address and the date of registration. This storage serves solely as proof in the event that a third party misuses your e-mail address to subscribe you to the newsletter without your knowledge or authorization. If you no longer wish to receive newsletters from us, you can unsubscribe at any time. In this case, your stored data will be deleted from the newsletter distribution list. The legality of the data processing operations already carried out remains unaffected by the revocation.

In our newsletters, we use standard market technologies with which the interactions in the newsletter can be measured (e.g. opening the email, links clicked on). We use this data for general statistical evaluations and to optimize and further develop our content and customer communication. This is done with the help of graphics that are embedded in the newsletter (so-called pixels). The legal basis for this is our legitimate interest in accordance with. Art. 6 para. 1 lit. f GDPR. Our newsletter is an integral part of our event community through which we want to provide relevant content for our customers. Wenn Sie die Analyse des Nutzungsverhaltens nicht wünschen, können Sie die Newsletter abbestellen oder Grafiken in Ihrem E-Mail-Programm standardmäßig deaktivieren.

2. Mailchimp

Our newsletters are sent using the newsletter distribution platform of the US provider The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA (“Mailchimp”).

The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on Mailchimp’s servers in the USA. Mailchimp uses this information to send and analyze the newsletter on our behalf. Furthermore, Mailchimp may, according to its own information, use this data to optimize or improve its own services, e.g. for the technical optimization of the dispatch and presentation of the newsletter or for economic purposes in order to determine from which countries the recipients come. However, Mailchimp does not use the data of our newsletter recipients to write to them itself or pass it on to third parties.

We trust in the reliability and IT and data security of Mailchimp. As there is no adequacy decision for the USA, you can view Mailchimp’s privacy policy here.

Rights of data subjects

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. All you need to do is send us an informal message by e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).
IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING, WHICH INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right of appeal exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.

Right to information, erasure and rectification

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if necessary, a right to correction or deletion of this data. You can contact us at any time at the address given in the legal notice if you have further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the review, you have the right to request that the processing of your personal data be restricted.
If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of erasure.

If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.

If you file an objection pursuant to Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to demand the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

Objection to advertising e-mails

Objection to advertising e-mailsWe hereby object to the use of contact data published in the context of the imprint obligation to send unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.