Privacy Policy
1. Data controller
Schultz & Schirm Bühnenverlag GmbH
Spengergasse 37
1050 Vienna
AUSTRIA
Firmenbuch (Commercial Register): FN 409425x
Managing Director: Dr Helen Zellweger
Telephone number: +43 1 3109942
Email address: office(at)schultzundschirm.com
2. Legal basis and purposes for the processing of personal data
The protection of your personal data is of particular importance to us. We therefore process your data exclusively in accordance with the statutory provisions (GDPR, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing in connection with our website.
We use terms such as “personal data” or “processing” in accordance with the definitions set out in Article 4 of the General Data Protection Regulation (GDPR).
In the course of our general activities (e.g. enquiries sent to us by email), the following personal data is processed: names, email addresses and content of the emails.
The term “user” covers all categories of data subjects affected by data processing. These include our business partners, customers, prospective customers and other visitors to our online offering. We process users’ personal data only in compliance with the relevant data protection regulations. This means that users’ data is processed only where there is a legal basis for doing so. This means
- if data processing is necessary for the provision of our contractual services (e.g. processing of orders and protection of copyright) or is required by law
- where the user has given their consent
- on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation and security of our online offering within the meaning of Article 6(1)(f) of the GDPR).
We would like to point out that the legal basis for consent is Article 6(1)(a) and Article 7 of the GDPR, the legal basis for processing to fulfil our services and carry out contractual measures is Article 6(1)(b) of the GDPR, the legal basis for processing to fulfil our legal obligations is Article 6(1)(c) GDPR, and the legal basis for processing to safeguard our legitimate interests is Article 6(1)(f) GDPR.
3. Security measures
We implement state-of-the-art organisational, contractual and technical security measures to ensure compliance with data protection legislation and to protect the data we process against accidental or deliberate manipulation, loss, destruction or access by unauthorised persons.
4. Disclosure of data to third parties
Data is only disclosed to third parties within the framework of legal requirements. We only disclose users’ data to third parties if this is necessary, for example, on the basis of Article 6(1)(b) of the GDPR for contractual purposes or on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR for the economic and effective operation of our business.
Where we engage subcontractors to provide our services, we take appropriate legal precautions and implement corresponding technical and organisational measures to ensure the protection of personal data in accordance with the relevant legal provisions.
Where, within the scope of this privacy policy, content, tools or other resources from other providers (hereinafter collectively referred to as “third-party providers”) are used and their registered office is located in a third country, it must be assumed that data will be transferred to the countries where the third-party providers are based. Third countries are defined as countries in which the GDPR is not directly applicable law, i.e. generally countries outside the EU or the European Economic Area. Data is transferred to third countries either where an adequate level of data protection exists, where the user has given consent, or where there is some other legal authorisation.
5. Contacting us
If you contact us by email, the data you provide will be stored by us for six months for the purpose of processing your enquiry and in the event of follow-up questions (in accordance with Article 6(1)(b) of the GDPR). The data may also be stored for longer if a pre-contractual relationship arises or other contractual and legal obligations of the publisher are affected (e.g. through the transmission of a copyright-protected text). We will not pass on this data without your consent.
6. Collection of access data and log files
TWe collect data on every access to the server on which this service is hosted (so-called server log files) on the basis of our legitimate interests within the meaning of Article 6(1)(f) of the GDPR. The access data includes the name of the webpage accessed, the file, the date and time of access, the amount of data transferred, a notification of successful access, the browser type and version, the user’s operating system, the referrer URL (the previously visited page), the IP address and the requesting provider.
Log file information is stored for two weeks for security reasons (e.g. to investigate misuse or fraud) and is then automatically deleted. Data that must be retained for further evidence purposes is exempt from deletion until the respective incident has been fully clarified.
7. Cookies
Within the scope of this online service, cookies are used exclusively to ensure the proper functioning of the website. We do not use any personal data cookies on our website. However, if you wish to block all cookies, various browsers offer different methods for blocking and deleting cookies.
8. Social Media
We would like to inform users of our Facebook fan page (https://www.facebook.com/grimmafshow/) and Instagram page (https://www.instagram.com/grimmafshow/) about the joint responsibility for data collection by Meta and Schultz & Schirm.
Schultz & Schirm Bühnenverlag GmbH and Meta Platforms Ireland Ltd. (hereinafter “Meta”) (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) are joint controllers within the meaning of Article 26 of the GDPR for the processing of Insights data on Facebook and Instagram.
Data
When you visit our Facebook fan page and Instagram page, personal data is processed. Meta provides fan page operators with the “Insights” feature. Through this, we receive anonymised statistical data about the users and visitors to our fan pages with the help of cookies. We have no influence over the manner in which the data is collected, made available or processed. For certain categories of individuals (e.g. fans, subscribers), specific data is provided by Facebook, such as the number of views, likes, reach, video views, comments, shared content, gender, users’ location and language.
Purpose
The fan page and data collection (Insights) are used for public relations purposes to provide information about events and campaigns and to promote our services. As the operator of the fan page, the Burgtheater’s ‘ ’ has no interest in collecting or otherwise processing personal data for analytical or marketing purposes.
We do not carry out profiling or automated decision-making.
Regarding data processing by Meta: https://www.facebook.com/about/privacy/
The processing of personal data is based on Article 6(1)(f) of the GDPR (legitimate interest). This interest lies in utilising the opportunity to participate in an internationally widespread social media platform in order to provide information to its users and to be able to interact with them.
There is no contractual or legal requirement to provide the data. Nor is the data subject under any obligation to do so.
The data is stored by Meta until it is no longer required to provide services and products, or until the account is deleted. Meta is solely responsible for specifying the storage period.
Data sharing
The data is used exclusively by us and is not disclosed to third parties. In particular, it is not disclosed to recipients in third countries.
Rights
You have the right to access, restrict processing, rectify, erase, object to processing and data portability. You must exercise your rights as a data subject with Meta, as only Meta has access to the user data.
You have the right to lodge a complaint with a supervisory authority, with the Austrian Data Protection Authority being the competent authority in Austria. Additionally, you have the right to lodge a complaint with the Irish Data Protection Commission.
If you wish to prevent us from continuing to collect data, you have the option to stop posts from appearing on your profile by selecting: “I no longer like this page” or “Unfollow”, thereby also disconnecting the fan page from your profile.
9. Your rights – Right of withdrawal
You have the right to access, rectify, erase, restrict, data portability, withdraw consent and object. If you believe that the processing of your data breaches data protection law or that your data protection rights have otherwise been infringed, you may lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority.
You can contact us using the following details:
Schultz & Schirm Bühnenverlag GmbH
Spengergasse 37
1050 Vienna
AUSTRIA
Tel.: +43 1 3109942
Fax: +43 1 3109942
Email: office(at)schultzundschirm.com
Last updated: June 2026