Last updated: August 17, 2026

1. Data protection at a glance

Protecting your personal data is of particular importance to us.

We treat personal data confidentially and in accordance with applicable statutory data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Telecommunications Act 2021 (TKG 2021).

This privacy policy provides information about which personal data is processed when visiting our website, making a contact or appointment request, or using the secure Junge Symphonie student portal.

We process only the personal data necessary for the respective purpose.

2. Data Controller

The party responsible for processing personal data is:

Edgar Schlegel
Business name: Young Symphony
Asbangstraße 12
1030 Vienna
Austria

Email: office@junge-symphonie.at

3. Hosting

Our website is hosted by easyname .

As part of the hosting process, technically necessary data that arises when visiting our website or using its functions may be processed.

This may include, in particular:

• IP address
• Date and time of access
• Pages and files accessed
• Browser type and version
• Operating system used
• Referrer URL
• Hostname or technical device information
• Technical error and security information

Processing this data is necessary to provide our website, ensure secure technical operation, and detect potential errors or security incidents.

Processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable, and technically flawless operation of our website and IT systems.

Where the hosting provider processes personal data on our behalf, this is done in accordance with legal requirements for data processing agreements.

4. Server log files

When you visit our website, technical access data may be automatically stored in so-called server log files.

In particular, the following data may be processed:

• IP address
• Time of page access
• Page or file accessed
• Browser and browser version
• Operating system
• Referrer URL
• Technical status and error information

This information is not used to create personal user profiles.

Processing is carried out specifically for technical provision, error analysis, IT security, and protection against unauthorized access.

The legal basis is Article 6(1)(f) of the GDPR.

The data will be deleted or anonymized as soon as it is no longer required for these purposes, provided there are no statutory retention obligations or specific security reasons necessitating longer storage.

5. Contacting us via our website or email

When you contact us via our website or by email, we process the data you provide as part of your inquiry.

This may include, in particular:

• First and last name
• Email address
• Phone number
• Age or age group of the student
• Desired instrument or subject
• Desired program or course path
• Preferred appointment time
• Details regarding a trial lesson
• Content of your message
• Other information you provide voluntarily

This data is used exclusively to process your request, to contact you, and, if applicable, to organize potential lessons or trial sessions.

Requests submitted via our website are sent to:

office@junge-symphonie.at

transmitted.

Based on our current technical configuration, request content is not stored additionally as a standalone customer record in the public website system.

Technically necessary server, security, or email log data may be generated independently of this.

Processing is carried out in particular on the basis of Art. 6 (1) (b) GDPR for the performance of pre-contractual measures.

Insofar as an inquiry does not relate to a possible conclusion of a contract, processing may be based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in processing and responding to incoming messages.

An inquiry via our website does not constitute a binding registration or the conclusion of a teaching contract.

6. Appointment requests and trial lessons

You can request lesson appointments or available time slots via our website.

The first appointment can also be arranged as a trial or introductory lesson.

As part of an appointment request, the following information in particular may be processed:

• Name
• Contact details
• Desired instrument or subject
• Desired program or course path
• Preferred appointment time
• If applicable, age or age group
• Indication that the appointment is requested as a trial or introductory lesson

Processing is carried out to handle the request and prepare for a potential teaching relationship on the basis of Art. 6 (1) (b) GDPR.

An appointment request is non-binding and does not constitute a teaching contract.

7. Protected school portal

Junge Symphonie provides students, parents or legal guardians, and teachers with a secure digital area for organizing lessons.

The school portal is not publicly accessible.

Public self-registration is not available. User accounts are set up and managed by the Junge Symphonie administration.

The school portal only processes the personal and organizational data necessary for the administration and delivery of lessons.

This may include in particular:

• First name
• Last name
• For teachers, if applicable, title
• Phone number
• Username
• Technically necessary authentication data
• Assignment between teacher and student
• Lesson appointments and organizational scheduling information
• Roles and access permissions

Email addresses are not displayed to other school portal users.

8. Teacher access rights

Teachers are granted access only to the students and parents currently assigned to them.

For the purpose of direct organization and communication, the following data may be visible:

• First name
• Last name
• Phone number

Teachers cannot view the personal data of other students or parents who are not assigned to them.

Data may only be used for purposes related to instruction and the associated communication.

9. Access rights for students and parents

Students and parents are granted access only to the teacher currently assigned to them.

In this context, the following information may be visible:

• First name
• Last name
• titles, if applicable
• Phone number

There is no general access to other teachers or their contact details.

10. School portal administration

The administration of Jungen Symphonie has access rights to the extent necessary to:

• set up and manage user accounts
• assign students to teachers
• manage lesson appointments
• configure user roles and permissions
• resolve technical issues
• ensure system security

Administrative access occurs exclusively for the organization and operation of the music school.

11. Changing a teacher

If a teacher assignment changes, the affected students and parents will be informed accordingly.

The new teacher will then be assigned in the school portal, and the previous assignment will be removed.

Once the assignment is removed, the previous teacher's access to the personal data of the student or parents also ends.

The new teacher will only receive information necessary for organizing and conducting lessons.

12. Username, password, and login security

Access to the school portal is via a personal username and password.

The authentication data required for login is processed exclusively for the provision and protection of the user account.

Login credentials are personal and must not be shared with others.

For the security of the school portal, technical information regarding login attempts may also be processed, for example:

• time of a login attempt
• IP address
• technical browser or device information
• information about successful or failed login attempts

This processing is primarily used to detect and prevent unauthorized access.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the protection of the school portal, user accounts, and the personal data processed therein.

13. Google reCAPTCHA

To secure the school portal login against automated access, bots, and abusive login attempts, we use Google reCAPTCHA.

The service provider is Google.

When accessed or when the security check is performed, reCAPTCHA analyzes technical information to determine whether an access attempt is likely made by a human or an automated system.

In particular, the following information may be processed:

• IP address
• Browser and device information
• Date and time
• Referrer information
• technical usage and interaction information
• security and risk information
• reCAPTCHA token
• Cookies or comparable technical information

As part of the reCAPTCHA verification, Google may, in particular, set or read _GRECAPTCHA the cookie required for security analysis.

We use reCAPTCHA exclusively for the security of our website and our protected school portal, not for advertising purposes.

Processing by Junge Symphonie is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in protecting our school portal, our user accounts, and personal data from automated attacks, spam, and abusive access.

Where technically necessary information is stored on or read from the end device, this is done in accordance with the legal provisions of the TKG 2021.

When using Google services, it cannot be ruled out that data may also be processed outside the European Economic Area. Any such transfer is carried out in accordance with applicable data protection requirements and appropriate safeguards.

Further information on how Google processes personal data can be found in Google's privacy policy and terms of service.

The automated security analysis performed by reCAPTCHA is used solely to detect automated or abusive access. Junge Symphonie does not make any exclusively automated decisions that would have legal effects on you or significantly affect you in a similar way.

14. Cookies and technically necessary storage

Our website currently does not use cookies for personalized advertising or marketing tracking.

Technically necessary cookies or comparable storage mechanisms may be used if they are required for the safe and proper operation of the website, and in particular the school portal.

This may include in particular:

• Login and session cookies
• Security cookies
• WordPress technical cookies
• reCAPTCHA-related security information

These technical storage files are primarily used to:

• recognize logged-in users
• maintain a secure session
• protect user accounts
• prevent unauthorized access
• provide technical features

You can configure your browser to block or delete cookies.

If you completely disable technically necessary cookies, certain features of the website or the school portal may no longer function properly.

If analytics, marketing, or other non-essential cookies are used in the future, this privacy policy will be updated accordingly, and any necessary consent will be obtained.

15. Blog, Events, and Performances

Junge Symphonie may operate a blog or a section on the website for concerts, performances, projects, and other school activities.

Among other things, information, images, and announcements regarding performances may be published there.

If students are recognizable in the published content and consent is required for publication, this will be obtained separately.

Consent to such publication is voluntary and is not a prerequisite for participation in regular classes.

16. YouTube

Our website may include links to our YouTube content or content used by us, relating to performances and events.

As currently configured, no YouTube video player is loaded automatically on our website.

A video is only accessed when you select the corresponding link or button, which then opens YouTube.

Only from that moment on can YouTube process personal data in accordance with its own privacy policy.

Junge Symphonie does not have full control over the nature and scope of subsequent data processing by YouTube.

If YouTube videos are embedded directly on our website in the future, technical privacy measures and this privacy policy will be updated accordingly.

17. Instagram and Facebook

Our website may contain links to the official Junge Symphonie pages on Instagram and Facebook.

As currently designed, these are standard external links.

Social media feeds or other content from these platforms are not automatically embedded into our website.

Only when you select the relevant link will you be directed to the respective external platform.

From that moment on, your personal data will be processed according to the privacy policy of the respective platform operator.

Junge Symphonie has no direct control over how these external platforms process your data.

18. Photo, Audio, and Video Recordings

Photo, audio, or video recordings may be captured during Junge Symphonie concerts, recitals, or other events.

If personal recordings are to be published on our website, blog, YouTube, Instagram, Facebook, or other media based on consent, such consent will be obtained separately.

Providing consent is voluntary.

Refusing consent will not affect your participation in regular lessons.

For students who are minors, the required consent will be obtained from their legal guardians.

Where data processing is based on consent, it is carried out in accordance with Art. 6 (1) (a) GDPR.

Consent once given may be withdrawn at any time with future effect.

The legality of the processing carried out up until the time of withdrawal remains unaffected.

19. Disclosure of Personal Data

Personal data is only disclosed when necessary for the respective purpose or when there is a legal basis for doing so.

Potential recipients or categories of recipients include, in particular:

• Hosting and IT service providers
• Technical communication service providers
• The respective assigned teacher
• Students and/or parents regarding the contact details of their assigned teacher
• Tax advisors or accounting services, as necessary
• Public authorities or courts, to the extent that there is a legal obligation

Personal data will not be shared or sold to third parties for their own advertising purposes.

20. Processing Outside the European Union or the EEA

For certain external services, specifically Google and the external platforms YouTube, Instagram, and Facebook, personal data may be processed outside the European Union or the European Economic Area.

Where such data transfer takes place, it is conducted in accordance with the data protection requirements for international data transfers.

This may involve the use of adequacy decisions by the European Commission or appropriate safeguards, such as standard contractual clauses.

21. Storage Duration

We only store personal data for as long as is necessary for the respective purpose.

In doing so, the following principles apply in particular:

Inquiries:
Data from non-binding inquiries will be deleted once the inquiry has been fully addressed and there is no further communication, contractual relationship, or legal obligation to retain the data.

Enrollment relationship:
Data is processed for as long as necessary for the organization and delivery of instruction.

School portal:
A user account is deactivated or deleted when access is no longer required and there are no legal grounds for further retention.

Change of teacher:
When an assignment is revoked, the corresponding access for the previous teacher is also removed.

Contract and accounting data:
Data subject to legal retention obligations will be stored for the legally prescribed duration.

Legal archiving does not mean that this data remains visible within the active school portal for teachers or other users.

22. Legal basis for processing

Depending on the processing operation, we rely on the following legal bases for the processing of personal data:

Art. 6 para. 1 lit. a GDPR – Consent

For example, for voluntary publication of photos, audio, or video.

Art. 6 para. 1 lit. b GDPR – Contract and pre-contractual measures

For example, for lesson inquiries, appointment requests, trial lessons, and the initiation and performance of a tutoring contract.

Art. 6 para. 1 lit. c GDPR – Legal obligation

When data must be processed or retained due to legal requirements.

Art. 6 para. 1 lit. f GDPR – Legitimate interest

In particular for:

• secure operation of the website
• IT and portal security
• protection of user accounts
• prevention of spam and automated attacks
• error analysis
• technical administration
• handling general organizational inquiries

23. Data security

We take appropriate technical and organizational measures to protect personal data against:

• unauthorized access
• loss
• misuse
• Tampering
• unauthorized disclosure

Our website uses an encrypted HTTPS/TLS connection.

The school portal is protected by personal access credentials and a role- and assignment-based authorization system.

Teachers only have access to their own assigned students and parents.

Students and parents only have access to their own assigned teacher.

Access rights are adjusted or revoked as soon as they are no longer required.

24. No use for advertising profiles

Junge Symphonie does not use the personal data collected on the website or in the school portal to create personal advertising profiles.

Junge Symphonie does not engage in profiling for advertising or marketing purposes.

25. Your data protection rights

In accordance with legal requirements, you have the following rights, in particular:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to specific processing
• Right to withdraw consent

Consent can be withdrawn at any time for the future.

If you would like to exercise any of these rights, please contact:

office@junge-symphonie.at

If there are reasonable doubts regarding the identity of the person making the request, we may require appropriate proof of identity to protect personal data from unauthorized disclosure.

26. Right to lodge a complaint

If you believe that the processing of your personal data violates data protection regulations, you may contact the relevant data protection supervisory authority.

In Austria, this is:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria

Email: dsb@dsb.gv.at

27. Changes to this Privacy Policy

We update this privacy policy whenever the features of our website, the school portal, our service providers, or the legal framework change.

The currently published version on our website shall apply.

Last updated: August 17, 2026