Privacy Policy

Privacy at a Glance

What happens to your data when you visit our website?

When you visit this website, certain technical information is collected automatically, such as your IP address, browser type, and the pages you visit. If you contact us, we also process the information you provide, such as your name, email address, and message.

How do we collect your data?

  • Automatically when you visit our website (e.g. through server log files).
  • Directly from you when you complete a form or contact us.

How do we use your data?

  • To provide and secure our website.
  • To process your enquiries.

What are your rights?

  • Right of access, rectification, erasure, and restriction of processing
  • Right to withdraw your consent
  • Right to object to certain types of processing
  • Right to lodge a complaint with a supervisory authority

Privacy Policy

1. General Information

We take the protection of your personal data very seriously. We process your personal data confidentially and in accordance with the applicable data protection laws, including the General Data Protection Regulation (GDPR), and this Privacy Policy.

When you use this website, various types of personal data may be collected. Personal data is any information that can be used to identify you personally. This Privacy Policy explains what data we collect, how we use it, the legal basis for processing, and how long we retain it.

Please note that data transmission over the Internet (for example, when communicating by email) may have security vulnerabilities. Complete protection against access by third parties cannot be guaranteed.

Controller

The controller responsible for data processing on this website is:

Daniel Sattler
Freyung 6, Basement 1 & 2
1010 Vienna, Austria
Phone: +43 676 4395937
Email: office@farbrausch-events.at

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

Withdrawal of Your Consent

Many data processing operations are carried out only with your explicit consent. You may withdraw your consent at any time by sending us an informal email. The lawfulness of any processing carried out before the withdrawal remains unaffected.

Right to Object (Article 21 GDPR)

Where your personal data is processed on the basis of Article 6(1)(e) or (f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation. This also applies to profiling based on these provisions. The legal basis for each processing activity is described in this Privacy Policy.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

Where your personal data is processed for direct marketing purposes, you have the right to object at any time. This also applies to profiling related to such direct marketing. Once you object, your personal data will no longer be used for marketing purposes.

Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement. This right is without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive the personal data that we process automatically on the basis of your consent or the performance of a contract in a structured, commonly used, and machine-readable format. Where technically feasible, you also have the right to request that the data be transmitted directly to another controller.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential information, such as enquiries or bookings submitted via our website, this website uses SSL/TLS encryption.

You can recognise an encrypted connection when your browser’s address changes from “http://” to “https://” and a padlock symbol appears in the address bar.

When SSL/TLS encryption is enabled, the data you transmit cannot be read by third parties.

Your Rights of Access, Rectification and Erasure

Within the framework of the applicable legal provisions, you have the right to obtain information about your stored personal data, its origin and recipients, and the purpose of the processing. You also have the right to request the correction or deletion of your personal data where applicable.

If you have any questions regarding personal data or wish to exercise your rights, you may contact us at any time using the contact details provided in the Legal Notice.

Right of Access

You have the right to obtain confirmation as to whether we process your personal data. Where this is the case, you have the right to access your personal data and the following information:

  • the purposes of the processing,
  • the categories of personal data being processed,
  • the recipients or categories of recipients to whom your personal data has been or will be disclosed, particularly recipients in third countries or international organisations,
  • where possible, the intended period for which your personal data will be stored, or, if that is not possible, the criteria used to determine that period,
  • the existence of the right to request rectification or erasure of your personal data, restriction of processing, or to object to such processing,
  • the right to lodge a complaint with a supervisory authority,
  • where the personal data was not collected from you, any available information about its source,
  • the existence of automated decision-making, including profiling pursuant to Article 22(1) and (4) GDPR, and meaningful information about the logic involved, as well as the significance and expected consequences of such processing.

If your personal data is transferred to a third country or an international organisation, you have the right to be informed about the appropriate safeguards under Article 46 GDPR relating to the transfer.

We will provide you with a copy of the personal data undergoing processing. For any additional copies you request, we may charge a reasonable administrative fee. If you submit your request electronically, the information will be provided in a commonly used electronic format unless you request otherwise.

The right to obtain a copy must not adversely affect the rights and freedoms of others.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time using the contact details provided in the Legal Notice. This right applies in the following cases:

  • If you contest the accuracy of your personal data, we usually require time to verify this. During the verification period, you have the right to request the restriction of processing.
  • If the processing of your personal data is or has been unlawful, you may request restriction of processing instead of erasure.
  • If we no longer need your personal data, but you require it for the establishment, exercise, or defence of legal claims, you may request restriction of processing instead of deletion.
  • If you have objected to processing under Article 21(1) GDPR, processing may be restricted until it has been determined whether our legitimate grounds override yours.

Where processing has been restricted, your personal data may, apart from being stored, only be processed with your consent, for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

Objection to Promotional Emails

We hereby object to the use of the contact details published as part of our legal notice for the purpose of sending unsolicited advertising or informational material. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising, including spam emails.

2. Hosting and Content Delivery

External Hosting

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.

Personal data collected on this website is stored on the hosting provider’s servers. This may include IP addresses, contact enquiries, communication data, contractual data, contact details, names, website access data, and other information generated through the use of this website.

The hosting provider is used for the purpose of fulfilling contractual obligations towards our existing and prospective customers (Article 6(1)(b) GDPR) and in the interest of providing a secure, fast, and efficient online service through a professional hosting provider (Article 6(1)(f) GDPR).

Our hosting provider processes your personal data only to the extent necessary to fulfil its contractual obligations and in accordance with our instructions.

Server Log Files

When you visit this website, our hosting provider automatically collects and stores information in server log files transmitted by your browser. This information includes:

  • IP address of the requesting device (shortened or anonymised)
  • Date and time of access
  • Name and URL of the requested file
  • Referring website (referrer URL)
  • Browser type and, where applicable, your operating system
  • Hostname of the accessing device

This data is processed to ensure the stable and secure operation of the website, including error analysis, abuse detection, and protection against attacks.

Legal basis: Article 6(1)(f) GDPR (legitimate interest).

The log data is not combined with other data sources. Log files are generally stored for seven days and are then automatically deleted unless longer retention is required for security reasons.

Data Processing Agreement

To ensure GDPR-compliant processing, we have concluded a Data Processing Agreement (DPA) with our hosting provider.

3. Data Collection on this Website

Website Analytics with Independent Analytics

This website uses the privacy-friendly analytics tool Independent Analytics, which runs locally on our own server. No personal data such as IP addresses is stored, and no cookies are used.

Only anonymised information about page visits is collected to better understand how visitors use our website, such as which pages are visited, where visitors came from, and which type of device was used.

Processing is based on our legitimate interest under Article 6(1)(f) GDPR in improving the usability and technical performance of our website. No data is shared with third parties.

Contact by Email, Telephone or Contact Form

If you contact us by email, telephone, or via our contact form, your enquiry, including any personal data you provide (such as your name and message), will be stored and processed for the purpose of handling your request. We will not disclose this information without your consent.

Processing of your personal data is lawful under Article 6 GDPR only if at least one of the following legal bases applies:

  1. Your consent.
  2. Performance of a contract or pre-contractual measures.
  3. Compliance with a legal obligation.
  4. Protection of vital interests.
  5. Performance of a task carried out in the public interest or in the exercise of official authority.
  6. Our legitimate interests or those of a third party, provided your interests or fundamental rights do not override those interests.

Change of Purpose

If personal data is processed for a purpose other than the one for which it was originally collected, we carefully assess whether the new purpose is compatible with the original one. In doing so, we consider:

  • the relationship between the original and new purpose,
  • the nature of the personal data,
  • the possible consequences for the data subject, and
  • existing safeguards, such as encryption or pseudonymisation.

Data Retention and Data Minimisation

We retain personal data only for as long as necessary to fulfil the respective purpose or to comply with statutory retention obligations. Once the purpose no longer applies or the retention period expires, the data will be deleted.

Where we have a legitimate interest in retaining personal data (for example, for the establishment, exercise, or defence of legal claims), retention may continue for up to three years or longer in exceptional cases.

4. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy to reflect changes in legal requirements or changes to our services and data processing activities. Where user consent is required, or where contractual rights are affected, changes will only take effect with the user’s consent.

Users are encouraged to review this Privacy Policy regularly to stay informed about any updates.

Last updated: 15.04.2026