Privacy
Security and Protection of Your Personal Data
We consider it our primary duty to keep the personal data you provide confidential and to protect it from unauthorised access. The Municipality of Spittal an der Drau is subject to the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG) and has implemented technical and organisational measures to protect your data.
This privacy policy applies to the website of the International Choir Competition Spittal an der Drau (chorwettbewerb-spittal.at) and to the online registration form it contains.
Controller and Data Protection Officer
Controller within the meaning of Article 4 (7) GDPR:
Municipality of Spittal an der Drau (Stadtgemeinde Spittal an der Drau)
Burgplatz 5
9800 Spittal an der Drau, Austria
Phone: +43 (0) 4762 5650-0
Email: stadt.spittal@spittal-drau.at
Contact for the choir competition: Department 7 – Culture & City Marketing, phone +43 (0) 4762 5650-221, email info@chorwettbewerb-spittal.at
Data Protection Officer:
Kärntner Gemeindebund
Gabelsbergerstraße 5/1
9020 Klagenfurt am Wörthersee, Austria
Phone: +43 463 55 111-250
Email: datenschutz@ktn.gde.at
Definitions
This privacy policy uses the terms of the GDPR. Personal data means any information relating to an identified or identifiable natural person. Processing means any operation performed on personal data, such as collection, storage, use, transmission or erasure. The controller is the body that decides on the purposes and means of processing; a processor is a body that processes personal data on behalf of the controller. Consent means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which they signify agreement to the processing.
Lawfulness of Processing
We process personal data only where a legal basis under Article 6 (1) GDPR exists: your consent (point a), the initiation or performance of a contract (point b), a legal obligation (point c), the performance of a task carried out in the public interest (point e) or the pursuit of legitimate interests (point f).
Registration for the Choir Competition
As part of the registration for the choir competition we process the data entered in the registration form: details of the choir (name, address, country, phone, website), of the conductor, of the contact person and of the numbers of participants, the selected songs, a digital photo of the choir, uploaded audio samples (MP3) or links to recordings provided externally, and a report on the history of the choir and its activities to date.
The purpose of the processing is the organisation and running of the choir competition: the selection of the participating choirs by the jury, contacting the registered choirs, accommodation and meals, the production of the programme booklet and the public presentation of the competition (for example the publication of the choir photo and choir description in the programme booklet and on this website).
The legal basis is the initiation and performance of the participation contract (Art. 6 (1) (b) GDPR) and the performance of the municipality's cultural tasks in the public interest (Art. 6 (1) (e) GDPR). The information is required for participation; without it the registration cannot be processed.
Access to the Registration Area
Access to the registration form works without a password, via a login link that we send to the email address given by the choir. For this we process that email address as well as the time, IP address and browser identifier of each login. This logging serves the security of our systems and protection against misuse (Art. 6 (1) (f) GDPR).
To protect the login form against automated requests we use the Cloudflare Turnstile service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Your IP address is transmitted to Cloudflare in the process. Cloudflare is certified under the EU-US Data Privacy Framework. Information: https://www.cloudflare.com/privacypolicy/
Contact by Email
If you contact us by email, we store the data you provide (your email address, your name and the content of the message) in order to answer your enquiry. We delete the data arising in this context once storage is no longer necessary, or restrict processing if statutory retention obligations exist. The legal basis is Art. 6 (1) (b), (c), (e) and (f) GDPR.
Emails to the registered choirs (confirmations, login links, messages from the Department of Culture) are sent through the mail server of our hosting provider.
Collection of Personal Data When Visiting the Website
When you use the website purely for information, we collect only the personal data that your browser transmits to our server and that is technically necessary to display the website to you and to ensure its stability and security (legal basis: Art. 6 (1) (f) GDPR):
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (the specific page)
- Access status/HTTP status code
- Amount of data transferred
- Website from which the request originates
- Browser
- Operating system and its interface
- Language and version of the browser software
Use of Cookies
Cookies are small text files that your browser stores on your device. A distinction is made between transient cookies, which are deleted automatically when you close the browser, and persistent cookies, which are deleted after a set period. You can configure your browser settings according to your wishes and, for example, refuse to accept cookies. With cookies disabled, the registration area cannot be used.
This website uses technically necessary cookies only. No tracking or analysis of your usage behaviour takes place.
| Name | Purpose | Expiry | Provider |
|---|---|---|---|
| nuxt-session | Session of the logged-in choir in the registration area | 30 days | this website |
| i18n_redirected | Stores the chosen language (German/English) | 1 year | this website |
Fonts
This website loads the fonts Cormorant Garamond and Inter from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you open the website, your browser connects to Google's servers and transmits your IP address. We use Google Fonts in the interest of a consistent and appealing presentation of our website (Art. 6 (1) (f) GDPR). Google also processes personal data in the USA. Privacy policy: https://policies.google.com/privacy?hl=en
Embedded Videos and Audio Recordings
Individual pages of this website may embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) or Vimeo (Vimeo.com, Inc., 330 West 34th Street, New York, NY 10001, USA) and audio recordings from SoundCloud (SoundCloud Global Limited & Co. KG, Rheinsberger Str. 76/77, 10115 Berlin, Germany). When you open such a page, your browser connects to the servers of the respective provider and transmits your IP address; the provider may set cookies. We embed YouTube videos in privacy-enhanced mode (youtube-nocookie.com) and Vimeo videos with tracking disabled. If you are logged in with one of these providers, the visit can be linked to your account; log out if you do not want this. Google and Vimeo also process personal data in the USA. Privacy policies: https://policies.google.com/privacy?hl=en, https://vimeo.com/privacy, https://soundcloud.com/pages/privacy
Processors
We use external service providers (processors) who act solely on our instructions and with whom we have concluded data processing agreements:
- Hosting of the website, the registration system and the uploaded files, and email dispatch: Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany (data centres in the European Union).
Recipients
To the extent necessary, we pass on data of the registered choirs to the members of the jury, to the presenters of the event, to Singkreis Porcia as co-organiser, to the accommodation providers for lodging, and to the Austrian Broadcasting Corporation (ORF) in connection with the programme. Data is passed on to other third parties only where we are legally obliged to do so.
Retention Period
The data collected during registration is stored until the end of the choir competition and for one further year thereafter, unless longer statutory retention obligations exist. Account and login data is deleted twelve months after the last login. Photos and descriptions of participating choirs may remain in the archive of the event beyond that. Web server log data is deleted after 14 days at the latest.
Children
Persons under 18 years of age should not transmit personal data to us without the consent of their parents or legal guardians.
Rights of the Data Subject
You have the following rights vis-à-vis the controller. To exercise them, use the contact details given above.
- Withdrawal of consent. Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
- Right to confirmation. You have the right to obtain confirmation from the controller as to whether we process personal data concerning you.
- Right of access. You have the right to obtain information about the data processed, in particular the purposes of processing, the categories of data, the recipients, the envisaged retention period, the existence of the rights to rectification, erasure and restriction, the right to lodge a complaint with a supervisory authority, the source of the data and the existence of automated decision-making. We provide you with a copy of the personal data undergoing processing.
- Right to rectification. You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and the completion of incomplete data.
- Right to erasure ("right to be forgotten"). You have the right to obtain the erasure of your personal data without undue delay where the data is no longer necessary for the purposes, you have withdrawn your consent and there is no other legal basis, you have objected and there are no overriding legitimate grounds, the data has been processed unlawfully, or a legal obligation requires erasure. The right does not apply insofar as processing is necessary to comply with a legal obligation, to perform a task in the public interest, for archiving, research or statistical purposes, or to establish, exercise or defend legal claims.
- Right to restriction of processing. You have the right to obtain restriction of processing where you contest the accuracy of the data, the processing is unlawful and you request restriction instead of erasure, we no longer need the data but you require it to establish legal claims, or you have objected and it is not yet established whether our legitimate grounds override yours.
- Right to data portability. You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller, where processing is based on consent or a contract and is carried out by automated means.
- Right to object. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6 (1) (e) or (f) GDPR. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
- Automated individual decision-making, including profiling. You have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you. No automated decision-making takes place on this website; the participating choirs are selected by the jury.
- Right to lodge a complaint with a supervisory authority. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, https://www.dsb.gv.at/
- Right to an effective judicial remedy. Without prejudice to any available administrative or non-judicial remedy, you have the right to an effective judicial remedy where you consider that your rights have been infringed as a result of processing that does not comply with the GDPR.
Last amended: 7 September 2026