Privacy policy

Information on the processing of your personal data according to Article 13 GDPR

General Information

Welcome to our website. The protection of your personal data is very important to us. We fully comply to the legal requirements of the EU General Data Protection Regulation (GDPR) and other applicable legal provisions on the protection, lawful handling and confidentiality of personal data. In this privacy statement we would like to inform you in a clear and understandable manner about the processing of your data in connection with the visit and the use of our website. If you have any questions about the processing of your data, please don’t hesitate to contact us using the contact details below.

Controller/Contact details

Wiener Riesenrad Dr. Lamac GmbH
Riesenradplatz 1
A-1020 Vienna, Austria

phone: +43 1 729 54 30
fax: +43 1 729 54 30 20
e-Mail: info@wienerriesenrad.com
web: www.wienerriesenrad.com

A data protection officer pursuant to Article 37 GDPR has not been appointed.

Purposes of processing, legal basis, storage period and data recipients

Visiting our website (log files):

When you visit our website, we collect and process access data in log files (access logs) in order to ensure the permanent functionality and accessibility of the website. In this context, we process the following data and information:

IP address
Date and time of access
Websites from which you reached our site (referrer URL)
Operating system
Name of your Internet service provider
Product and version information of the browser used (including browser language)
Amount of data transferred, loading time

The legal basis for data processing is our legitimate interest in accordance with Art 6 Par. 1 (f) GDPR. Our legitimate interests lie in ensuring the functionality, safety and accessibility of the website for all site visitors, and, if necessary, in the establishment, exercise or defence of legal claims.

You have the right to object to this processing of personal data (data subject’s right to object to data processing in the legitimate interest pursuant to Art 21 Par. 1 GDPR). In this case, we will only process your data if there are compelling legitimate grounds for the processing on our part or the processing serves the establishment, exercise or defence of legal claims.

It is not possible to draw any direct conclusions about your identity form the information collected.

Storage period: The data is automatically deleted after the aforementioned purpose has been achieved. We will retain log file data for a period of 6 months from the date of your visit on our website.

Contact form:

We provide a contact form on our website for easy contact with us. To use this contact form, please provide us at least with the information marked as mandatory – so that we can respond to your enquiry. Optionally, you can also provide us with further information so that we can address to your enquiry in more detail.

We process your personal data exclusively for the purpose of responding to your enquiry/to contact you. Our legal basis for data processing is legitimate interest Article 6 (1) (f) GDPR (our legitimate interest lies in the provision of electronic contact and communication options), and – if applicable – performance of a contract according to Article 6 (1) (b) GDPR (contract or precontractual relationship to which the data subject is party).

Against data processing based on legitimate interest you have the right to object (data subject´s right to object according to Article 21 GDPR). In this case we will no longer process your personal data, unless there are compelling legitimate grounds for the processing of your data.

As an alternative to using the contact form, it is possible to contact us via e-mail, phone call or postal letter.

Data transfers: We only pass on your data to the extent that is absolutely necessary for handling the communication.

Storage period: Data transmitted to us via the electronic contact form will be retained for a period of 3 years from the end of the calendar year in which the communication took place.

Google Maps:

We use “Google Maps”-services on our website. Google Maps is an application that enables you to locate our company more easily – it is provided to us from Google Ireland Limited (hereinafter “Google”).

The service Google Maps automatically transmits data to Google. The data transfer to Google is based on your freely given consent Art 6 Par. 1 (a) GDPR, that you have granted us by clicking on the button “load map”. No data will be transmitted to Google before consent is given. The giving of consent is voluntary and can be withdrawn an any time with effect to the future. It is not possible to use Google Maps-services without consent.

Google subsequently uses the data for its own purposes (advertising, market research, further development of services, etc.). For information on data processing by Google, see https://policies.google.com/privacy?hl=en-US.

Storage period: Personal data collected by Google is not stored by us. Information on the duration of storage by Google can be found under https://policies.google.com/privacy?hl=en-US.

Ticket shop:

You can purchase tickets (admission tickets) to the Vienna Giant Ferris Wheel via our online shop. When purchasing tickets via our online shop, you provide us with personal data. We use this data to process ticket purchases (payment processing, delivery of tickets, issuing and transmitting of the invoice, carrying out any necessary queries, etc.).

Our legal bases for data processing are Article 6 (1) (b) GDPR (contract, precontractual relationship and fulfilment of post-contractual obligations to which the data subject is party), compliance with legal obligations Article 6 (1) (c) GDPR (fulfilment of legal storage obligations §132 BAO, §212 UGB), and if applicable legitimate interest pursuant to Art 6 (1) (f) GDPR (establishment, exercise or defence of legal claims).

Data transfer: We pass on personal data to third parties only if it absolutely necessary for the stated purposes (e.g. data transfer in connection with communication, delivery of tickets and invoices). When processing payments we transfer personal data to payment service providers/payment intermediaries. We offer following payment options:

PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) – payment via PayPal-account or creditcard
Stripe (Stripe Payments Europe Ltd, Block 4, Hartcourt Centre, Hartcourt Road, Dublin 2, Irland – a subsidiary company of Stripe, 510 Townsend Street, San Francisco, CA 94103, USA) – payment via creditcard
“Sofort-Überweisung“ (a service of Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden) – transfer from your bank account by Klarna Bank AB

Depending on the selected payment method, we transmit your personal data to the respective provider. We explicitly point out that the purchase of tickets is also possible on site at the cash desk!

Information on data processing by the payment service providers can be found at:

Storage period: Your data will only be stored for the period necessary to fulfil the stated purposes including compliance with legal storage obligations. Pursuant to §132 BAO and §212 UGB we must retain accounting-related information for a period of 7 years from the end of the calendar year to which the information relates.

Cookies

Cookies are used on our website. Cookies are small files that are stored either for the duration of your browser session in your internet browser’s cache (session cookies), or for a fixed period on your hard drive (permanent cookies). Cookies enable recognition so that you can be provided with faster and more targeted content tailored to your needs and wishes during future visits to our website.

We use exclusively cookies that are technically necessary for the operation of our website (and therefore must be set initially). In this case data processing is based on the legitimate interests pursuant to Art 6 (1) (f) GDPR (ensuring the functionality of the website). The cookies used by us are:

„pll_language“ – Cookie for storage of the user’s language setting, retention period: session

Adjust cookie preferences

Data transfer and data recipients – general information

As a rule, we only pass on your personal data, if it is absolutely necessary for the fulfilment of the stated purposes (operation and maintenance of the website via external service providers, passing on personal data to e-mail providers in the handling of communication). However, we may also be legally or by instruction of an authority obliged to pass on data to third parties (data transfer to law enforcement authorities).

When transferring personal data, we ensure that only the absolutely necessary information is being transferred. We strictly comply with the data protection requirements for data transfer (e.g. documented instructions for the data processor, obligation for maintenance of secrecy and confidentiality, obligation to fully comply with a sufficient level of protection in the processing of personal data – pursuant to Article 28 GDPR). Your personal data will not be transferred to third countries or international organisations.

Storage period – general information

Your data will only be stored for as long as it is technically and organisationally necessary to achieve the stated purposes and to fulfil our legal obligations. If necessary, we also retain your personal data on the legal basis of legitimate interest (defence and assertion of legal claims) for certain periods of time. When determining the duration of storage, we make sure not to violate your rights. If data storage is no longer required, we will delete your data immediately.

Automated individual decision-making including profiling

We do not use automated individual decision-making and do not carry out profiling measures (profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements).

Rights of the data subject

Regarding your personal data processed by us, you are entitled to a number of rights. You can assert all these rights free of charge and informally (by e-mail, telephone or mail) – if necessary after proof of your identity – at the contact details provided. Your rights in detail:

Right of access: You are entitled to ask for access to personal data processed by us at any time in a formless way. You will receive written information about the purposes of processing, which data we process, the recipients and categories of recipients and the duration of data storage. We will answer to your request without undue delay and in any event within one month of receipt of the request (this period may be extended by two months when necessary).

Right to erasure: You have the right to obtain the erasure of your personal data. We will comply to your request if your personal data is no longer necessary for the purposes for which it was provided, if you withdraw your consent and there is no other legal basis for processing, if you object to processing pursuant to Art 21 (1) GPDR and there are no overriding legitimate grounds for continuing processing of your data is necessary to fulfil a legal obligation.

Right to rectification: In case we are processing inaccurate or incomplete data about you, you have the right to rectification – following your request we will correct your data.

Right to restriction of processing: If the deletion of your data is not possible or you don’t ask for complete erasure, but you do not consent to any use beyond the storage of the data, we are obliged to restrict the further processing of your personal data upon your request.

Right to data portability: We will provide you with the data we have stored about you, which we have received on the basis of a contract or on the basis of your consent, upon your informal request free of charge in a common file format. You can use this data for your own purposes and pass it on to future contractual partners. If you wish and if it is technically feasible, we will also transfer your data directly to an addressee named by you. In this case, we will inform you after the transfer has taken place. We will respond to your request immediately, but no later than within one month.

Right to object: If we process your data on the basis of our legitimate interest, you have the right to object to further processing of your personal data. In case you object we will no longer process your personal data for the purpose to which you have objected – unless there are legitimate reasons on our side for further processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to withdraw a consent given: You can revoke your consent to data processing at any time with future effect, in which case we will stop processing personal data. The lawfulness of processing based on consent is not affected before its withdrawal.

All the above-mentioned rights can usually be asserted free of charge, an informal application/notice to us is sufficient. We will comply to your request as early as possible – as a general rule at the latest within one month.

Right to lodge a complaint

The EU General Data Protection Regulation guarantees you the above-mentioned rights. If you think that these rights have been violated by us, you have the opportunity to lodge a complaint with a data protection supervisory authority. The Data Protection Authority in Austria is the

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna, Austria
Phone: +43 1 52 152-0
mail: dsb@dsb.gv.at
web: www.dsb.gv.at

Claims against us, to which you are entitled on the basis of other legal bases, remain unaffected. Before lodging a complaint, please give us the opportunity to address your concerns and clarify any issues.

Data security

We take all necessary and appropriate technical and organisational security measures to protect your personal data from loss and misuse. Your data will be stored in a secure, state-of-the-art operational environment.

Access to our website is secured via HTTPS. This means that communication between your terminal device and our servers is encrypted.

Additional Information

On our website you may find links to websites for which other organisations, institutions or companies are responsible. For information on the processing of personal data by these third parties, refer to the relevant privacy policies. You can recognise a redirect by the fact that a new browser window/tab opens and a new address/URL is displayed in your browser.

Icons relating to appearances on social media might be available on our website in order to refer to our presentations on the social media channels. Clicking on the pictograms/symbols will take you to our social media appearances. These symbols are mere links and not “social media plugins”. No personal data is being transmitted to the social media-enterprises.

We expressly reserve the right to make future changes or adjustments to this privacy policy. If you have any questions, please contact us using the contact details provided.

05/2022