Privacy Policy

[Last updated — to be completed]

1. Who is responsible (Controller)

The controller responsible for data processing on this website within the meaning of the GDPR is the site operator:

2. What data we process

This site has no user accounts and no login. You can browse and discover events without registering or identifying yourself.

• Saved events (privacy-friendly): Events you save are stored only in your browser's localStorage on your own device. This data never leaves your browser and is never sent to or seen by our servers.
• Event submission & contact forms: When you submit an event or contact us, we process the name, email address and message you choose to enter. This is stored so we can review submissions, respond to you, and add or correct event listings.
• Technical server logs: Like most websites, our hosting infrastructure may temporarily process technical connection data (such as IP address, browser type and time of access) to deliver the site securely and reliably.

3. Analytics

When enabled, this site uses Google Analytics 4 (gtag) to understand how the site is used. Analytics only loads when it is configured by the operator (it is environment-gated) — if it is not configured, no analytics scripts or cookies are loaded at all.

When enabled, Google Analytics sets cookies and processes usage data; IP addresses are handled under Google's EU-specific data terms. You can opt out by declining cookies where offered, enabling your browser's "Do Not Track" (DNT) setting, or using browser extensions that block analytics.

4. Third-party services & embedded content

Some content is loaded from third-party servers. When such content loads, your IP address is necessarily transmitted to that provider so the content can be delivered to your browser:

• Map tiles (OpenStreetMap / CARTO via Leaflet): Our map view loads map tiles from OpenStreetMap and CARTO servers, which receive your IP address to serve the tiles.
• Event images (hotlinked): Some event images are loaded directly from the source sites (for example kultursommer.wien, ra.co, or TMDB), which receive your IP address when the image loads.
• External booking & organiser links: Links to venues, ticketing and organiser websites take you to third-party sites governed by their own privacy policies.
• Web fonts: If web fonts (e.g. Google Fonts) are used, the relevant font provider may receive your IP address when fonts are loaded.

5. Legal basis (GDPR Art. 6)

• Processing of form data to respond to you and review submissions: our legitimate interest and, where applicable, steps taken at your request (Art. 6(1)(b) and (f) GDPR).
• Secure, reliable delivery of the site (server logs): our legitimate interest (Art. 6(1)(f) GDPR).
• Analytics and non-essential third-party content, where required: your consent (Art. 6(1)(a) GDPR).

6. Data retention

We keep form submissions only as long as needed to handle your request and to maintain accurate event listings, after which they are deleted or anonymised. localStorage "saved events" remain on your device until you clear them via the site or your browser. Server logs are kept only for a short period for security and operational purposes.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, objection, and data portability regarding your personal data. To exercise any of these, contact us using the details above.

You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Data Protection Authority (Österreichische Datenschutzbehörde, DSB), Barichgasse 40–42, 1030 Vienna — dsb.gv.at.

8. Cookies — summary

This site sets no cookies of its own for browsing. "Saved events" use localStorage, not cookies. Cookies are only set by Google Analytics when analytics is enabled and, where required, with your consent. You can manage or delete cookies at any time in your browser settings.

9. Changes to this policy

We may update this privacy policy to reflect changes to the site or legal requirements. The current version always applies, dated at the top of this page.