This Privacy Policy applies to all processing of personal data carried out by Vienna International Music School in connection with our website (vims.online), online registrations, newsletters, purchases (e.g., gift cards, online programs), and offline activities related to providing music education services. It covers data collected via contact forms, email, telephone, enrolment contracts, and payments.
Categories of Personal Data We Process
Depending on the context, we may process:
Identification data: name, surname, date of birth, place of birth, postal address.
Contact data: email address, phone number, and for minors also parent/guardian details (name, address, email, phone).
Contractual data: chosen instrument, semester of enrolment, tuition fee, contract date, signature.
Financial and transaction data: payment details necessary for processing.
Technical data: such as IP address and browser information.
Communication data: messages sent via forms or email, including attachments.
Photos / video recordings (for promotional purposes), only with prior explicit consent.
Special category data: we do not intentionally collect other sensitive data. If such data are provided voluntarily, they are processed only when necessary and with appropriate safeguards
Legal Bases for Processing (Art. 6 GDPR)
Pre-contractual measures (Art. 6(1)(b) GDPR): responding to inquiries and providing information prior to potential enrolment. Contract performance (Art. 6(1)(b) GDPR): enrolment, lesson scheduling, course administration, online courses or gift card purchases. Legal obligation (Art. 6(1)(c) GDPR): retention of accounting and tax records, typically 7 years under Austrian BAO. Consent (Art. 6(1)(a) GDPR): newsletters, marketing emails, promotional use of photos/videos, non-essential cookies (analytics/advertising). You may withdraw consent at any time. Legitimate interest (Art. 6(1)(f) GDPR): ensuring IT security, maintaining server logs, and preventing misuse, with strict data minimisation.
Cookies and Tracking
We use essential cookies required for the operation of our website. Any analytics or marketing cookies are set only with your prior consent in accordance with §165(3) TKG 2021 and Article 6(1)(a) GDPR. You may withdraw your consent at any time via our cookie banner. Further details (names, purposes, retention periods) are provided in our –Cookie Policy-.
Newsletters and Direct Marketing
We send newsletters and promotional emails only with your explicit double opt-in consent, in line with §174 TKG 2021.
Each message contains an unsubscribe link. You may withdraw consent at any time.
Children’s Data
Under Austrian law, children under 14 years of age cannot give valid consent for information society services. If we process personal data of children under 14 based on consent (e.g., online registrations, newsletters), we require verifiable parental consent. For additional protection, we may request parental consent also for minors above 14 years of age. Offline enrolment contracts for minors are signed by parents/guardians.
Recipients and Processors
We only share personal data only with trusted service providers who process data on our behalf under Article 28 GDPR, such as hosting providers, email and newsletter services, payment processors, analytics/marketing platforms (only with consent), and accounting services where legally required.
For transfers outside the EEA, we rely on the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs), with supplementary measures where necessary.
Retention Periods
We retain personal data only as long as necessary for the purposes set out in this Privacy Policy or as required by statutory retention obligations (e.g., under Austrian tax and commercial law). After expiry of these periods, data are deleted or anonymised in accordance with legal requirements.
Your Rights
You have the rights of access, rectification, erasure, restriction, data portability, and objection under Articles 15–21 GDPR, as well as the right to withdraw consent at any time. Requests shall be sent to office@vims.online. We respond within one month in accordance with GDPR.
You may also lodge a complaint with the Austrian Data Protection Authority (DSB).
Security
We implement appropriate technical and organisational measures in accordance with Article 32 GDPR to protect personal data.
Changes to this Policy
We may update this Privacy Policy occasionally. Updates will be posted with a new effective date.
Third-Party Services and Disclaimer
Our website may integrate services or content provided by third parties, such as Google Analytics, Google Maps, YouTube, Meta (Facebook/Instagram) tracking tools, or payment providers (e.g., PayPal, Stripe, banks).
Please note:
When you use these services, your personal data may be processed directly by these third-party providers under their own responsibility.
Vienna International Music School has no control over the extent, purposes, or duration of such third-party processing.
For further information, please consult the respective providers’ privacy policies:
Liability Limitation
While we carefully configure and monitor our website, we cannot assume liability for the accuracy, completeness, or up-to-date status of content provided by third-party services or external websites linked from our pages. Responsibility lies exclusively with the operators of the respective services or websites.
Contact
For any privacy inquiries, requests, or complaints, please contact:
Data Controller: Vienna International Music School
Business Address: Rautenweg 22/1, 1220 Vienna, Austria
Contact for data protection inquiries:
Email: office@vims.online
Tel: +43 650 223 70 71
Supervisory authority for complaints: Österreichische Datenschutzbehörde (DSB)
Last updated on 02. October 2025