Datenschutz

1. Controller and general information

The controller responsible for processing your personal data is the association Aerial Space Vienna (formerly Aerial Silk Vienna), represented by its Chair, Sophie Pfaffstaller, Domgasse 8, 1010 Vienna, Austria, Central Register of Associations (ZVR) no. 933975971, email: office@aerialspacevienna.at (hereinafter: ASV).

1.1 ASV runs aerial arts studios in Vienna. Through ASV you can book, reserve or purchase aerial classes, workshops, training programmes, retreats and other events (the “Services”). ASV provides these Services itself.

1.2 Protecting your data matters to us. We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).

1.3 This policy informs you, in accordance with Art 13 and 14 GDPR, which data we process for which purposes and what rights you have. Information on the subject of the contract, obligations and liability can be found in our General Terms and Conditions at www.aerialspacevienna.at.

2. What data we process

We process data that you provide when booking via the Eversports platform, or that you give us on site, by email or via our website:

Master data: first and last name, date of birth
Contact data: email address, postal address, phone number
Contract and booking data: booked classes, class passes, memberships and events, booking history, attendance
Billing data: invoices, amounts paid, payment method
Communication data: content of your enquiries and our correspondence with you
Website usage data: IP address, cookie and device data (see section 8)

In certain cases we also process photos and video recordings (section 9) and health information that you share with us on your own initiative (section 10).

3. Purposes and legal bases

We only process your data where one of the following legal bases applies (for photos and videos and for health information, see sections 9 and 10):

Bookings and reservations, managing class passes, memberships and credit, running classes and events: Performance of a contract (Art 6(1)(b) GDPR)
Informing you about timetable changes, cancellations and your bookings: Performance of a contract (Art 6(1)(b) GDPR)
Handling your enquiries: Pre-contractual steps or performance of a contract (Art 6(1)(b)) or legitimate interest (Art 6(1)(f))
Invoicing and accounting: Legal obligation (Art 6(1)(c) GDPR in conjunction with the Austrian Federal Fiscal Code (BAO) and Commercial Code (UGB))
Statistical analyses for planning our programme (e.g. class attendance): Legitimate interest in offering a programme that meets demand (Art 6(1)(f) GDPR)
Newsletter: Consent (Art 6(1)(a) GDPR)
Non-essential cookies on the website: Consent (Art 6(1)(a) GDPR in conjunction with § 165(3) TKG 2021)

We need the data required for bookings and invoicing in order to provide our Services; without it, no booking is possible. You can withdraw your consent at any time with effect for the future. You can object to processing based on legitimate interests. To do so, please contact office@aerialspacevienna.at.

4. Newsletter

You can subscribe to our newsletter via the Eversports widget on our website or in your account in the Eversports app. For this we need your email address and your consent to receive the newsletter.

You can unsubscribe at any time via the unsubscribe link in every newsletter email or by emailing office@aerialspacevienna.at. Your data will then no longer be used for the newsletter. The newsletter is sent via Eversports.

5. Retention period

We store your data for as long as is necessary for the purposes stated:

Customer and booking data: for the duration of the customer relationship and beyond, as long as statutory limitation periods run or claims can be asserted.
Invoice-related data: 7 years from the end of the calendar year (§ 132 BAO), longer in the case of pending proceedings.
Newsletter: until you unsubscribe.
Enquiries: until they have been fully dealt with, unless they lead to a contractual relationship.

Once these periods have expired, the data will be deleted.

6. Recipients and transfers to third countries

We only pass on your data where this is necessary for the purposes stated or required by law. The following service providers process data on our behalf (processors under Art 28 GDPR):

Eversports (booking platform), Austria (EU): bookings, customer management, invoices, newsletter, customer communication
world4you Internet Services GmbH, Austria (EU): email inbox and domain
Wix.com Ltd., Israel: hosting of our website

In addition, our tax advisers as well as authorities and courts receive data where we are legally obliged to provide it.

WhatsApp member group: We run a WhatsApp group for communication with our members. Participation is voluntary and based on your consent (Art 6(1)(a) GDPR); you can leave the group at any time. Your name, phone number and profile picture are visible to all group members. WhatsApp is operated by WhatsApp Ireland Ltd. (Meta) as an independent controller; data may be transferred to the USA in the process. WhatsApp’s privacy policy applies.

Third countries: For Israel, an adequacy decision of the European Commission exists (Art 45 GDPR). Transfers to the USA are made to providers certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision under Art 45 GDPR also exists. Where this is not the case, we rely on the European Commission’s standard contractual clauses (Art 46 GDPR).

7. Data security

7.1 Your customer data is stored in a closed, password-protected system (Eversports). Eversports has taken appropriate technical and organisational security measures (eversports.at/h/security). Only those people at ASV who need access for their tasks have it.

7.2 If a personal data breach occurs that is likely to result in a high risk to you, we will inform you without undue delay (Art 34 GDPR) and report the incident to the Data Protection Authority.

7.3 Our website contains links to other websites, such as Eversports or social networks. Their operators are responsible for their data processing; their privacy policies apply.

8. Website and cookies

Our website uses cookies – small text files that are stored on your device.

Strictly necessary cookies are needed for the website to work (e.g. to store your cookie preferences). They are set without consent (§ 165(3) TKG 2021, Art 6(1)(f) GDPR).
All other cookies, for example for statistics or marketing, are only set with your consent via our cookie banner. You can change or withdraw your choice there at any time.

Session cookies are deleted when you close your browser; persistent cookies remain until they expire or until you delete them. You can set your browser to block or delete cookies; in that case, the website may not work fully.

9. Photos and videos

9.1 In classes, we only take photos and videos for Instagram with the prior consent of the people shown (Art 6(1)(a) GDPR).

9.2 At events (e.g. shows and performances), we take photos and videos to report on our events and to present our association on Instagram. The legal basis is our legitimate interest in public relations (Art 6(1)(f) GDPR). We point out at events that recordings are being made. If you do not want to be photographed or filmed, please tell our team on site. We do not publish recordings that show people in a compromising way.

9.3 Children and young people are only photographed and filmed for publication with the consent of their parents or legal guardians – in classes as well as at events.

9.4 You can withdraw your consent or object to publication at any time, including retrospectively, by emailing office@aerialspacevienna.at. We will then remove the posts concerned from our channels. We cannot fully retrieve content that third parties have already shared or saved.

9.5 Instagram is operated by Meta Platforms Ireland Ltd.; data may be transferred to the USA in the process (see section 6). We keep recordings for as long as we use them to present the association, or until you withdraw your consent or object.

10. Health information

10.1 We do not ask for health data. Under our General Terms and Conditions, participants confirm that they are in good health and inform us themselves of any limitations relevant to training (e.g. injuries, pre-existing conditions, pregnancy).

10.2 If you share such information with us verbally or by email, we use it solely to make your training safe and to adapt exercises. The legal basis is your explicit consent, given by sharing the information voluntarily (Art 9(2)(a) GDPR). We only pass the information on to the instructors who teach you.

10.3 We do not write down information shared verbally. Information sent by email remains in our email inbox and is not transferred to any other system. Once a year we delete such emails from people who are no longer active with us; at your request, we will delete them earlier at any time.

10.4 In an emergency, we may pass on health information known to us to emergency services in order to protect your health (Art 9(2)(c) GDPR).

11. Your rights and contact

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art 15–21 GDPR), as well as the right to withdraw your consent at any time (Art 7(3) GDPR).

To exercise these rights or if you have any questions, you can reach us:

by email: office@aerialspacevienna.at
by post: Aerial Space Vienna, Domgasse 8, 1010 Vienna, Austria

If you believe that the processing of your data infringes data protection law, you can lodge a complaint with the supervisory authority at any time. In Austria, this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.

This English version is provided for convenience. In the event of any discrepancy, the German version shall prevail.

Last updated: October 2026