Data protection information pursuant to Art. 13 GDPR
Name and contact details of the controller
KunstHausWien GmbH
Untere Weißgerberstraße 13
1030 Vienna, Austria
E-mail: info@kunsthauswien.com
Phone: +43 (0)1 712 04 91
Contact details of the data protection officer:
Mag. jur. Siegfried Gruber, e-mail: datenschutz@wienholding.at
Server log files
When you visit our website, we record the IP address of your device, the date and time of access, the internet browser used and your operating system, your click behaviour on the website, your internet provider and the website from which you visit us.
We process this personal data in order to make these websites available to you;
to personalise the service and provide the content you have selected;
to prevent and detect security threats, fraud and other malicious activities; to comply with our legal obligations and enforce our agreements;
to secure online access;
In addition, we only process data if you voluntarily provide it to us, for example by disclosing your name or contact details.
The data is stored for a period of 14 days.
Your personal data will not be passed on by us.
Our servers are located within the EU.
Information on other plugins and tools
We use tools on our website for the interest-based analysis of user behaviour and describe below which technologies we use, why we do this and what this means for you. In order to keep this information transparent and comprehensible for you, we explain in detail in our cookie banner and here where and how your personal data may be processed. Using our cookie banner, you can give and manage your consent and your refusals yourself in a granular manner. If you have given us your consent to the use of cookies, the lawfulness of the use of the data collected in this context is governed by Art. 6 para. 1 lit. a GDPR.
The following description of the tracking and analysis tools also shows the respective processing purposes and the data processed.
Google Tag Manager (GTM)
If you have given us your consent (Art 6 para 1 lit a GDPR - see the consent option in the Privacy Manager / ‘Cookie Manager’), we use the Google Tag Manager (GTM) when you visit our website. GTM is a tag management system that makes it possible to centrally manage website tags and scripts. The GTM itself does not analyse user data, but loads other services such as analysis or marketing tools. Although the GTM itself does not store any personal data, a connection to Google servers is established when the script is loaded, whereby personal data may be transmitted, in particular the IP address of the end device, browser and device information and usage behaviour (e.g. clicks, page views), provided that associated tags are activated. The tools used are listed in the following points.
GTM data is transmitted to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) or, in the European Economic Area, to Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Ireland also processes this data for its own purposes and may also transfer data to its parent company Google LLC. In such cases, Google acts as the data controller. You can find information on data processing by Google at https://policies.google.com/privacy?hl=de
Google Analytics 4 (GA4)
If you have given us your consent (Art. 6 para. 1 lit a GDPR, via the Privacy Manager or ‘Cookie Manager’), we use Google Analytics 4 (GA4), a web analysis service from Google, on our website. GA4 is used to statistically evaluate the use of our website and thus to analyse and improve the reach, usage patterns and technical stability of our website. In this context, information about your use of the website (e.g. page views and interactions as ‘events’), session statistics, approximate geolocalisation and browser and device information may be processed. In its standard implementation, GA4 uses a client ID that is stored in a first-party cookie (e.g. ‘_ga’) to distinguish between returning visitors and sessions.
We implement GA4 via the Google Tag Manager and use Google Consent Mode. Depending on your selection in the cookie banner, the consent mode controls whether GA4 may set or read cookies or comparable storage technologies. If you do not give your consent for ‘Analytics’, GA4 does not store a client ID according to Google documentation and no analytics cookies are used. Instead, depending on your technical implementation, limited signals (‘cookieless pings’) may be transmitted to Google in order to take the consent status into account and to measure the use of cookies.
Data is transferred to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) or, in the European Economic Area, to Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Ireland also processes this data for its own purposes and may also transfer data to its parent company Google LLC. In such cases, Google acts as the data controller. You can find information on data processing by Google at https://policies.google.com/privacy?hl=de
YouTube
If you have given us your consent (Art 6 para 1 lit a GDPR - see the consent option in the Privacy Manager / ‘Cookie Manager’), we use a plugin from YouTube so that videos can be played by you.
For this purpose, Google (Google Ireland Limited Gordon House, Barrow Street Dublin 4) collects various personal data (such as comments, chat messages, a like or dislike, as well as your IP address or user ID) and provides us with anonymous statistics on general user behaviour on our channel based on this data. The data collected when you visit our pages is also processed by Google for its own purposes. You can find more information about which data Google processes for its own purposes and how you can exercise your rights against Google at: https://policies.google.com/privacy?hl=de.
Application documents
If you send us application documents by email, we process them on the basis of Art. 6 (1) (b) GDPR (pre-contractual communication) for the purpose of carrying out the application process.
Specifically, the following data is processed if you provide it to us (name, contact details, citizenship, date and place of birth, CV, certificates and proof of qualifications, other documents you submit). Your data will be stored for 7 months and will not be passed on to third parties.
Information about our social media channels
In addition to this website, we use the following social media channels, for which this privacy policy also applies:
LinkedIn
When you visit our LinkedIn page, LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) collects, among other things, your IP address and other information that is stored on your PC in the form of cookies. If you are currently logged in to LinkedIn as a user, LinkedIn is able to identify you and understand that you have visited our site and how you have used it. This information is used to provide us with statistical information about the use of our LinkedIn page. LinkedIn provides more information on this and on how you can assert your rights against LinkedIn at the following link: https://de.linkedin.com/legal/privacy-policy?trk=content_footer-privacy-policy
We would like to point out that you use these LinkedIn pages and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).
Facebook & Instagram
When you visit our Facebook or Instagram page, Meta (Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland) collects, among other things, your IP address and other information that is stored on your PC in the form of cookies. If you are currently logged in to Facebook/Instagram as a user, Meta is able to identify you and understand that you have visited our site and how you have used it. This information is used to provide us with statistical information about the use of our Facebook/Instagram page. Facebook provides more information on this and on how you can assert your rights against Facebook at the following link: https://about.meta.com/de/actions/protecting-privacy-and-security/
We would like to point out that you use these Facebook/Instagram pages and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).
YouTube
When you visit our YouTube channel, Google (Google Ireland Limited Gordon House, Barrow Street Dublin 4) collects various personal data (such as comments, chat messages, a like or dislike, as well as your IP address or user ID) and provides us with anonymous statistics on general user behaviour on our channel based on this data.
The data collected when you visit our pages is also processed by Google for its own purposes. You can find more information about which data Google processes for its own purposes and how you can exercise your rights against Google at: https://policies.google.com/privacy?hl=de.b
Your rights
If the legal requirements are met, you have the following rights under the GDPR: right of access, rectification, erasure, restriction of processing, data portability, objection to processing. You have the right to lodge a complaint with a supervisory authority if you believe that your personal data is being processed unlawfully. For Austria: Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, e-mail: dsb@dsb.gv.at
Version: 1.0 from 18/02/2026
Art 13 Information on the enquiry form
Information pursuant to Art. 13 GDPR
We process your personal data provided in this form for the purpose of planning and organising group tours on the basis of Art. 6 (1) (b) GDPR ((pre)-contractual communication). Your data will not be passed on to third parties and will be stored for a period of 2 years.
If the legal requirements are met, you have the following rights under the GDPR: right of access, rectification, erasure, restriction of processing, data portability, objection to processing. You have the right to lodge a complaint with a supervisory authority if you believe that your personal data is being processed unlawfully. For Austria: Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, e-mail: dsb@dsb.gv.at