1. General: Responsible Party; Data Protection Officer

It is an important concern for us, the state of Carinthia (Responsible Party), to adequately protect your personal data. Therefore, we comply with the applicable laws for the protection, lawful processing, and confidentiality of personal data, as well as for data security, in particular the Austrian Data Protection Act (current version "DSG"), the EU General Data Protection Regulation (current version "GDPR"), and the Telecommunications Act (current version "TKG").

This privacy policy informs you about the type, scope, and purposes of the collection and use of your personal data by the state of Carinthia in connection with the Carinthian Family Card, your visit and use of our website including subdomains, as well as participation in competitions and events related to the use of the Carinthian Family Card.

Contact Information:

Responsible Party pursuant to Art 24 DSGVO

Office of the Carinthian State Government

Department 13 – Society and Integration
Hasnerstraße 8, 9020 Klagenfurt
E-Mail: abteilung13.datenschutz@ktn.gv.at

Data protection Officer pursuant to Art 37 ff DSGVO

Carinthian State Government

Department 1 – Directorate of the State Office
Data Protection Officer
Arnulfplatz 1, 9021 Klagenfurt
E-Mail: abteilung13.datenschutz@ktn.gv.at

2. Collected Data

2.1. Access Data

In the course of your use of the website, we collect, gather, and store the following data based on your consent in accordance with Art. 6 Abs 1 lit a DSGVO:

IP address and IP location
Referrer URL (the previously and subsequently visited website)
Number, duration, and time (date and time) of visits (your interaction with the website) as well as language, content path, search history, IDs generated by analytics tools
Search engines and keywords you used to find us
Browser type, device type, screen resolution, Internet service provider, and operating system

We collect these so-called log files (access data) automatically using cookies (for details, see point 3).

2.2 Contact

If you contact us using the contact details provided above, we will process the personal data you provide (name, email address, phone number, as well as your inquiry or the associated documents) for the purpose of handling your inquiry and responding to you accordingly.

Legal base:

Your consent in accordance with Art. 6 Abs. 1 lit. a DSGVO
Performance of a contract or pre-contractual measures in accordance with Art. 6 Abs. 1 lit. b DSGVO

Storage duration:

Until the request has been processed or as long as statutory retention periods or limitation periods require.

2.3 Newsletter

We offer you a newsletter in which we inform you about editorial content, promotions, events, and competitions. Based on your consent to receive our newsletter, we will process the personal data you voluntarily provide (name, address, email address, password) for the purpose of sending the corresponding newsletter via email. The newsletter is sent through the email service provider Mailchimp. Information about the data protection policies of the service provider can be found at: https://www.intuit.com/privacy/statement/.

You can revoke your consent to receive the newsletter at any time with effect for the future (by email to familienkarte@ktn.gv.at or via the link at the end of each newsletter).

Legal base:

Your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO

Storage duration:

Until further notice

2.4 Registration and App Usage

If you register on our website to receive the Carinthian Family Card, the personal data you provide will be processed for the creation of a user account, the issuance of the Carinthian Family Card, the use of the services and offerings on our website, the recording and processing of user inquiries, as well as assistance and data updates.

Specifically, the following data are collected and processed when creating an account or subsequently during the use of the app:

Master data and access data (e.g., name, title, email, password, card number, date of birth, address, bPK number)
Special category data: Relation to the child (sexual life / sexual orientation)
Special category data: Nationality, residence permit (racial/ethnic origin)
Technical data (e.g., mobile phone model, device ID)
Technical data (e.g., mobile phone model, device ID)
Usage data in the broad sense (e.g., event participation, redeeming a voucher, participating in a sweepstake)
Social media and marketing monitoring / analysis (e.g., comments, likes, survey results)
Reviews of Goodie Partners

Legal base:

Your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO
Performance of a contract or pre-contractual measures pursuant to Art. 6 Abs. 1 lit. b DSGVO
On the basis of the K-FFG according to Article 6 Abs. 1 lit. c DSGVO
Processing of special categories of data in accordance with Art. 9 Abs. 2 lit. a and lit. b DSGVO

Storage duration:

Up to two months after account deletion
For the duration of statutory retention periods

2.5 Sweepstakes

If you participate in a sweepstakes, the personal data you provide will be processed for the purpose of conducting the sweepstakes (determining the winners, notifying the winners, sending the prize, informing cooperation partners about the winners for the handover of the prize).

Legal base:

Your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO

Storage duration:

Up to two months after the account is deleted
For the duration of statutory retention periods

2.6 Events

As part of the invitation to and participation in events organized by us, we process your name data (first name, last name, salutation) and contact data (address, phone number, email address). Furthermore, image or video recordings may be made during the events, which we will inform you about in the invitation and/or at the event. If cases of "joint responsibility" (Article 26 DSGVO) arise at individual events that we conduct with cooperation partners, this circumstance will also be indicated at the respective event and implemented with reference to the respective responsibilities.

Images or video recordings taken at events that contain personal data are used for the following purposes:

Use of the photos and/or videos for reporting on the event in media, both print and digital, either through an editorial article or as an advertorial;
Storing photos and/or videos taken at the event in an archive for organizational purposes (in particular to be able to use design and settings for comparison for future events);
Using photos that generally depict the event or the scene without highlighting specific individuals or showing individual persons or small groups, for the promotion of the same event in the following year or other events of ours, as well as for reporting on the event on the website and/or promotional materials of our respective cooperation partner, which was already known to the affected person at the time of registration.

Legal base:

Your consent pursuant to Article 6(1)(a) GDPR

Storage duration:

Until further notice

2.7 Analysis tools

To continuously optimize our website, we use the analytics tool Matomo. We use Matomo as a standalone installation on our own servers – this means that no data is transferred to third parties. Nevertheless, we ensure that only anonymized statistics are collected and, in particular, IP addresses are stored in an anonymized form so that no personal reference can be established.

Legal base:

Your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO

3. Cookies

“Cookies” are small files that allow us to store specific information related to you on your PC or digital device while you visit the website. The website uses or sets cookies in accordance with EU and Austrian law (Art. 5 Abs. 3 E-Privacy Directive and § 165 Abs. 3 TKG). Cookies help to determine the frequency of use and the number of users of the website, as well as to make the offerings as comfortable and efficient for you as possible. The content of the cookies used is usually limited to an identification number and usage data, which do not allow any personal reference to the user.

Basically, we collect information when you visit our website. This information is referred to as a 'cookie.' Together with the information you have provided to us, we can tailor your visits to our website even better to your needs.

With the exception of technically necessary cookies, cookies for the purposes mentioned are only set if you have previously given your consent to store and/or retrieve information on/from your device via the cookie banner. The use of our offerings is also possible without cookies, but may be limited as a result.You can disable the storage of cookies in your browser, restrict them to certain websites, or set your browser to notify you whenever a cookie is sent. You can also delete cookies from your PC's hard drive at any time. Please note, however, that in this case, you may experience a limited display of the site and restricted user navigation.

According to the law, we can store cookies on your device if they are strictly necessary for the operation of our website. Necessary cookies help make our website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies. The following necessary cookies are used:

cc_cookie

Owner of the Website

kaerntnerfamilienkarte.at

1 year

This cookie stores the cookie settings for the website.

NEXT_LOCALE

Owner of the Website

kaerntnerfamilienkarte.at

1 year

This cookie stores the cookie settings for the website.

auth-session

Owner of the Website

kaerntnerfamilienkarte.at

2 weeks

This cookie stores login information for the website account.

In addition, we use the following cookies:

Functionality-Cookies
Name		Creator		Domain	Description
SID, NID, AEC, APISID, HSID, OGPC, S, SAPISID, SIDCC, SOCS, SSID, __Secure‑1PAPISID, __Secure‑1PSID, __Secure‑1PSIDCC, __Secure‑1PSIDTS, __Secure‑3PAPISID, __Secure‑3PSID, __Secure‑3PSIDCC, __Secure‑3PSIDTS, __Secure‑BUCKET		Google Maps		google.com	These cookies are stored by Google Maps and allow Google to collect usage information for map services hosted by Google Maps.Further information on the purpose and scope of data collection: policies.google.com/privacy.
Statistics-Cookies
Name	Creator		Domain			Storage duration	Description
_pk_id	Matomo		kaerntnerfamilienkarte.at			13 months	Used to store some details about the user, such as the unique visitor ID.
_pk_ses	Matomo		kaerntnerfamilienkarte.at			30 minutes	Short-lived cookies that are used to temporarily store data for the visit.
_pk_ref	Matomo		kaerntnerfamilienkarte.at			6 months	Stores mapping information (the referrer that brought the visitor to the website).
_pk_testcookie	Matomo		kaerntnerfamilienkarte.at			Temporary cookie that expires almost immediately after being set.	Temporary cookie used to check if a visitor's browser supports cookies (set only in Internet Explorer).

These cookies help us gather information about the usage habits of visitors to our website or app (e.g., at what times most accesses occur) and about the performance and usability of our website/apps or specific content (e.g., articles). The information obtained is compiled using performance or web analytics tools and analyzed for the purpose of gaining insights into the usage, functionality, and user-friendliness of our website/apps, allowing us to continuously improve them. Consequently, these cookies are important for enhancing the quality of our services and also provide us with information about the success and effectiveness of our digital offerings.

4. Storage duration

We store your personal data only as long as we need it to fulfill the purposes described above and our contractual or legal obligations. When we no longer need your personal data, we delete it from our systems and records or anonymize it so that you can no longer be identified. We ask you to delete cookies yourself using the appropriate functions in your browser, as we cannot do this for you for technical reasons.

5. Transmission of data to third parties

We will not share your personal data collected based on the use of the website with third parties, unless it is necessary to fulfill our obligations, legally/officially required, or you have given your consent. However, your personal data is also processed on our behalf by our service providers (processors). These processors include, in particular, providers of marketing tools, IT service providers, providers of other tools and software solutions (e.g., web analytics tools), IT maintenance services, and other providers of similar services. All of our processors process your data solely on our behalf and according to our instructions for the purposes outlined above.

6. Data transfer to third countries

We may also transfer your personal data to countries outside of the country in which the information was originally collected. These countries may not have the same data protection laws as the country where you initially provided the personal data. When we transfer your data to other countries, we protect this data as described in this Privacy Policy; these transfers are subject to the applicable law.When we transfer personal data from the European Union to countries or international organizations outside the European Union, the transfer is based on one of the following grounds:

Adequacy decision of the European Commission.
In the absence of such a decision, based on other legally permissible grounds such as the existence of a legally binding and enforceable document between authorities or public bodies, standard data protection clauses, as well as approved or certified codes of conduct.
In exceptional cases, a data transfer may also be based on Article 49 DSGVO:

- pursuant to Art. 49 Abs. 1 lit. a DSGVO, if you have explicitly consented to the proposed data transfer after being informed of the existing potential risks of such data transfers without an adequacy decision and without appropriate safeguards,

- pursuant to Article 49 Abs. 1 lit. b DSGVO, when the transfer is necessary for the performance of a contract between you and us or for the implementation of pre-contractual measures at your request,

- pursuant to Art. 49 Abs. 1 lit. c DSGVO, if the transfer is necessary for the conclusion or performance of a contract concluded in your interest by us with another natural or legal person.

7. Data encryption

We do our best to make your visit and use of our website as secure as possible. Therefore, we comply with the provisions of Article 32 DSGVO to ensure the confidentiality and security of your personal data and implement appropriate technical and organizational security measures.To protect the security of your data during transmission, we use encryption methods (e.g., SSL) that are state-of-the-art via HTTPS. You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.

8. Data subject rights

You have the right to information about the personal data we process about you. In addition, you have the right to correct incorrect data and to delete your data. You can also revoke your consent to the processing of personal data with effect for the future if the processing is based on your consent. Furthermore, you may have the right to restrict the processing of your data and the right to receive the data you have provided in a structured, commonly used, and machine-readable format (data portability). In addition, you have the right to object to the processing of data at any time if there are reasons arising from your particular situation.

If you wish to request information, correction, or deletion of the personal data stored about you, have questions regarding the collection, processing, or use of your personal data, or want to revoke your given consents, please contact the following email address: abteilung13.datenschutz@ktn.gv.at

You also have the option to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority responsible for us is the Austrian Data Protection Authority, 1030 Vienna, Barichgasse 40-42.

9. Final provisions

In the course of the ongoing development of the Internet and our business processes, we will continue to adjust this privacy policy. We will announce changes on our website in a timely manner. Therefore, you should regularly access this statement and inform yourself about the current version. If parts or individual wording of this text should not, no longer, or not fully comply with applicable law, the remaining parts shall remain unaffected in their content and validity.

Privacy Policy

Office of the Carinthian State Government, Department 13 - Society and Integration, Hasnerstraße 8, 9021 Klagenfurt am Wörthersee