Data Controller and Data Protection Officer

The controller responsible for processing the personal data you provide in the entry form (hereinafter referred to as "your data") is the Spanish Riding School – Lipizzaner Stud Piber, Michaelerplatz 1, 1010 Vienna, office@srs.at (hereinafter referred to as "SRS"). You can contact the SRS Data Protection Officer via email at datenschutz@srs.at.

Purposes of Processing and Legal Basis

Your data will be processed for the following purposes:

a) To determine the winners from the competition participants through a drawing, as well as to notify them and deliver the prize. This data processing is justified as necessary to provide you with the opportunity to participate in the competition (data processing for contractual purposes in accordance with Art. 6(1)(b) GDPR).

b) To allow SRS to send you, from time to time, information and advertising about the Spanish Riding School, the Lipizzaner Stud Piber, and their events and activities via email (to the email address provided). This data processing is justified by SRS's legitimate interest in promoting its institution and services in order to secure the financial resources necessary for its operations and the fulfillment of its legal mandate under the Spanish Riding School Act (data processing based on legitimate interest in accordance with Art. 6(1)(f) GDPR).

Data Transfer to Third Parties

Your data will not be shared with third parties.

Your Rights as a Data Subject

You have the right to access and rectify your data. If any of the reasons outlined in Art. 17(1) GDPR apply, particularly if your data is no longer required for the specified processing purposes, you may also request its deletion. Under the conditions specified in Art. 18 GDPR, you can request the restriction of data processing. Furthermore, if your data is processed based on Art. 6(1)(b) GDPR, you have the right to data portability, and if your data is processed based on Art. 6(1)(f) GDPR, you have the right to object to the processing.

If you believe that the processing of your data violates applicable data protection laws, you may file a complaint with the relevant data protection authority. In Austria, this is the Austrian Data Protection Authority (www.dsb.gv.at).