Privacy Policy
The protection of your personal data is of particular importance to us, GoVisit Digital GmbH. We process your data exclusively on the basis of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Telecommunications Act (TKG). This privacy policy informs you about the key aspects of data processing in connection with our website, our products and services – in particular, the Vienna E-Pass.
1. General Information
We process personal data in accordance with GDPR, DSG and TKG. This policy explains how and why we process data when you use our website, products and services.
2. Controller
GoVisit Digital GmbH
Seitenstettengasse 5/37
1010 Vienna, Austria
Email: [email protected]
Phone: +43 660 690 4924
3. Purpose of Data Processing
- Operation of the Website: To provide, improve, secure and optimise our online services, in particular the presentation and use of the Vienna E-Pass.
- Contract Performance: To carry out pre-contractual measures and to fulfil contracts (e.g. purchase and management of passes, tickets, vouchers, and customer support).
- Communication: To respond to enquiries via email, contact form or live chat.
- Marketing and Newsletter: Only based on your explicit consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time with effect for the future.
- Legal Protection and Security: To assert and defend legal claims and to ensure IT operations and data security.
4. Legal Basis of Processing
The processing of your personal data is carried out on the following legal bases pursuant to Art. 6 GDPR:
- Art. 6(1)(a) – Consent
- Art. 6(1)(b) – Contract performance or pre-contractual measures
- Art. 6(1)(c) – Compliance with legal obligations
- Art. 6(1)(f) – Legitimate interests (e.g. IT security, fraud prevention, direct marketing to existing customers)
5. Categories of Personal Data
- Master data: name, address, contact details
- Contract data: booked services, pass numbers, payment details, billing address
- Communication data: enquiries via email, contact form or chat
- Usage data: IP address, date and time of access, pages visited, browser type, operating system
- Marketing data: newsletter subscriptions, consents, tracking preferences
6. Recipients / Disclosure of Data
Personal data are only disclosed to third parties to the extent necessary for the purposes mentioned above or where a legal basis exists. Recipients may include in particular:
- IT service providers (e.g. hosting, technical maintenance, cloud storage)
- Payment service providers (e.g. Stripe, PayPal, credit card institutions)
- Shipping or logistics partners (for physical products, if applicable)
- Marketing and analytics providers, provided consent has been given
- Authorities and public bodies, where legally required
Data transfers to countries outside the EU or EEA are carried out only if an adequate level of data protection is guaranteed (e.g. through EU Standard Contractual Clauses or an adequacy decision by the European Commission).
7. Cookies and Tracking
Our website uses cookies to enable core functionalities and to analyse the use of our services.
- Technically necessary cookies: set to ensure the proper functioning of the website.
- Analytics and marketing cookies: set only with your explicit consent.
You can change your cookie preferences at any time via the cookie banner or through your browser settings.
8. Web Analytics
To improve our services and analyse website usage, we may use analytics tools (e.g. Google Analytics or Matomo). The data collected are processed in anonymised form so that no conclusions can be drawn about individual persons. The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR.
9. Newsletter
You may subscribe to our newsletter. For this purpose, we require your email address and your consent to receive newsletters. Subscription is completed via the double-opt-in process. You may unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly.
10. Duration of Data Storage
We retain personal data only for as long as necessary for the respective purposes or as required by statutory retention periods. After the storage purpose ceases to apply or the period expires, the data will be deleted or anonymised.
11. Data Security
We implement technical and organisational security measures to protect your personal data from loss, manipulation, or unauthorised access. Our security measures are continuously reviewed and adapted to the current state of technology.
12. Your Rights (Data Subject Rights)
Under the GDPR, you have the following rights:
- Right of access to your stored personal data
- Right to rectification of inaccurate or incomplete data
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time with future effect
To exercise your rights, please contact: [email protected]
If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the Austrian Data Protection Authority (DSB).
13. Obligation to Provide Data
The provision of your personal data is required for the conclusion of a contract or for the use of certain website functions. Without this data, the Vienna E-Pass cannot be used properly.
14. Automated Decision-Making / Profiling
Automated decision-making or profiling within the meaning of Art. 22 GDPR does not take place.
15. Changes to this Privacy Policy
We reserve the right to amend this privacy policy to reflect legal or technical developments. The current version is always available on our website at https://ticketsinvienna.com.
Last updated: October 2025
Controller: GoVisit Digital GmbH, Vienna