We appreciate your interest in our website. Protecting your personal data is important to us. We process personal data in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the relevant provisions of the Telecommunications Act 2021 (TKG 2021).

This privacy policy informs you which personal data is processed in connection with the use of our website, for what purposes this processing takes place, and what rights you have.

1. Controller

Further details about our association can be found in our Legal Notice.

2. Hosting and Technical Provision

Our website, as well as emails sent through our website (for example confirmation and notification emails), are provided through the servers of our hosting provider.

The provider is:

When you access our website and when emails are sent through this provider, the technically necessary data, in particular IP address, time of access and further connection data, is processed on ALL-INKL’s servers.

This processing is carried out on the basis of our legitimate interest in a reliable and secure provision of our website and our email delivery pursuant to Art. 6(1)(f) GDPR. Where required, we have entered into a data processing agreement with ALL-INKL pursuant to Art. 28 GDPR.

3. Data Processing When You Visit Our Website

When you access our website, technically necessary information is processed so that the website can be properly provided, displayed, and protected against technical attacks.

In particular, the following data may be processed:

• IP address
• date and time of access
• the page or file accessed
• amount of data transferred
• referrer URL
• browser and browser version
• operating system
• device type
• HTTP status code

This processing takes place for the secure and technically flawless provision of our website, as well as to detect and defend against misuse and attacks.

The legal basis is our legitimate interest in a secure and functional website pursuant to Art. 6(1)(f) GDPR.

4. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Cookies are small pieces of information that may be stored on your device.

We distinguish between technically necessary technologies and those used for statistics, analytics or marketing.

Technically necessary cookies and functions are used to the extent required to operate our website, to store your privacy preferences, or to provide a function you have explicitly requested.

Analytics and marketing technologies are only activated after you have given your corresponding consent via our consent management tool.

Processing based on your consent takes place pursuant to Art. 6(1)(a) GDPR. To the extent information is stored on or read from your device, the requirements of § 165 TKG 2021 also apply.

You can change or withdraw consent you have given at any time, with effect for the future, via the cookie settings on our website.

Information on the individual cookies used and their storage duration is provided via our cookie settings and our consent management tool.

5. Consent Management – Complianz

We use Complianz to manage consent for cookies as well as analytics and marketing technologies.

On your first visit to our website, you can decide via the cookie banner which categories of data processing you consent to. Your choice is saved so that it can be taken into account on later visits.

Google Analytics, the Meta Pixel, and other analytics or marketing technologies requiring consent are only activated after you have given the corresponding consent.

You can change or withdraw your choice at any time via the cookie settings on our website.

6. Contact and Contact Form

If you contact us via a contact form, by email, or by other means, we process the data you provide in order to handle your inquiry.

This may in particular include your name, email address, phone number, and the content of your message.

For forms on our website, for example notification and contact forms, we use the WordPress plugin Forminator. Your details are stored in our website’s WordPress database and are additionally sent to us by email so that we can process your inquiry. Email delivery takes place through the hosting provider named in Section 2.

If your inquiry relates to an existing or prospective contractual relationship, processing takes place pursuant to Art. 6(1)(b) GDPR.

In other cases, processing is based on our legitimate interest in handling incoming inquiries pursuant to Art. 6(1)(f) GDPR.

Your data is deleted as soon as it is no longer required to handle your inquiry and no statutory retention obligations apply.

7. Newsletter and Event Information

If you sign up for a newsletter we offer, or for information about upcoming events, we process in particular your email address and, where applicable, your name.

We use the platform Brevo to send our newsletter.

The provider is:

The data you provide when signing up for the newsletter is transmitted to Brevo for the purpose of sending the newsletter and is processed there.

Processing takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Where required, we have entered into a data processing agreement with Brevo pursuant to Art. 28 GDPR.

You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link in every newsletter email.

8. Google Tag Manager

Our website uses Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used for the technical management and deployment of various website tags.

The Tag Manager can be used, among other things, to integrate analytics and marketing services. Services that require consent are only activated after you have given the corresponding consent.

When this service is technically invoked, connection data between your browser and Google may be processed.

9. Google Analytics 4

We use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics helps us understand how our website is used and how visitors reach our website. This allows us to analyze and improve our website, our content, and our advertising efforts.

In particular, the following data may be processed:

• pages accessed
• page views and sessions
• interactions with the website
• approximate geographic region
• browser and operating system
• device type
• language settings
• referrer or origin of the visit
• information on the effectiveness of campaigns
• pseudonymous user and session identifiers

The IP address is used, among other things, to technically determine an approximate geographic location. According to Google, individual IP addresses are not logged or stored within Google Analytics 4.

Google Analytics is only activated after your consent pursuant to Art. 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future via the cookie settings.

The retention period is governed by the retention settings we have configured in Google Analytics, as well as the provider’s applicable requirements.

When using Google services, personal data may be processed outside the European Economic Area, in particular in the USA. Where required, such transfers take place on the basis of the safeguards provided for under the GDPR.

10. Meta Pixel / Facebook Pixel

We use the Meta Pixel of Meta Platforms Ireland Limited, Ireland, on our website.

The Meta Pixel allows us to understand how visitors interact with our website after, for example, seeing or clicking on an ad on Facebook or Instagram.

In particular, the following data may be processed:

• pages accessed
• clicks on links and buttons
• timing of interactions
• referrer information
• browser and device information
• IP address and technical connection data
• pseudonymous cookie and user identifiers

We use this information to measure and optimize our advertising campaigns and to analyze the effectiveness of our advertising on Facebook and Instagram.

The Meta Pixel is only activated after your prior consent pursuant to Art. 6(1)(a) GDPR.

You can change or withdraw your consent at any time with effect for the future via the cookie settings on our website.

Meta may combine the information transmitted with other information Meta processes about you in connection with its own services.

To the extent we and Meta are jointly responsible for the collection and transmission of certain data, the corresponding arrangements pursuant to Art. 26 GDPR are in place.

Personal data may be processed outside the European Economic Area, in particular in the USA. Where required, such transfers take place on the basis of the safeguards provided for under the GDPR.

11. Integration of YouTube

Our website may embed videos from the YouTube platform operated by Google.

YouTube content is embedded on our website in such a way that a connection to YouTube or Google is only established after you have consented to the corresponding data processing, or have activated content after giving consent.

When a video is loaded or played, in particular the following data may be processed:

• IP address
• browser and device information
• the page accessed
• time of access
• information about your use of the video

If you are logged into a Google or YouTube account at the same time, Google may be able to associate the visit with your user account.

Activation of YouTube content requiring consent is based on your consent pursuant to Art. 6(1)(a) GDPR.

12. Ticket Booking via Pretix

We use Pretix for the booking and processing of tickets.

The provider is:

If you click a ticket link on our website, you will be redirected to the corresponding booking page on Pretix.

As part of a ticket booking, in particular the following data may be processed:

• name
• email address
• booking and ticket information
• invoice data, where required
• information on the chosen payment method
• further details required for the respective event

This processing takes place to carry out the ticket booking and to fulfil the contract concluded with you pursuant to Art. 6(1)(b) GDPR.

Where statutory retention obligations apply, further storage takes place pursuant to Art. 6(1)(c) GDPR.

Pretix processes ticket data on our behalf as part of providing the booking platform. According to Pretix, data is stored on servers in Germany.

13. Payment Provider PayPal

Where payment via PayPal is available for our offers, choosing this payment method transmits the data required to process the payment to PayPal.

The provider is:

This processing takes place to carry out the payment transaction and thus to fulfil the contract pursuant to Art. 6(1)(b) GDPR.

Further processing of personal data by PayPal takes place under PayPal’s own data protection responsibility.

14. Recipients and Processors

To operate our website and our offers, we may engage service providers who process personal data on our behalf or under their own data protection responsibility.

These may in particular include:

• hosting and email service providers (ALL-INKL)
• analytics and marketing providers (Google, Meta)
• consent management providers (Complianz)
• ticketing providers (Pretix)
• payment service providers (PayPal)
• newsletter providers (Brevo)

The respective providers and further details on the processing can be found in the corresponding sections of this privacy policy.

Where a service provider processes personal data on our behalf, we enter into a data processing agreement pursuant to Art. 28 GDPR where required.

15. Transfer of Personal Data to Third Countries

When using certain providers, in particular Google or Meta, personal data may also be processed outside the European Union or the European Economic Area.

Such a data transfer only takes place on a basis permitted under the GDPR, for example an adequacy decision of the European Commission or appropriate safeguards pursuant to Art. 44 et seq. GDPR.

Our other service providers, in particular ALL-INKL, Pretix, Brevo and PayPal, process data, according to their own statements, within the European Union or the European Economic Area.

16. Retention Period

As a general rule, we only store personal data for as long as is necessary to fulfil the respective purpose.

Booking and invoice data relating to ticket purchases is retained for seven years as a general rule, due to statutory tax retention obligations, in particular § 132 BAO (Austrian Federal Fiscal Code).

After this, the data is deleted or anonymized, unless statutory retention obligations or legitimate reasons require longer storage.

The specific retention periods for individual cookies and tracking technologies can also be found via our cookie settings.

17. Data Security

We use appropriate technical and organizational measures to protect personal data against loss, manipulation, unauthorized access, and unauthorized disclosure.

Transmission of our website generally takes place in encrypted form via HTTPS/TLS.

18. Your Rights

Subject to the applicable statutory requirements, you have in particular the following rights:

• right of access pursuant to Art. 15 GDPR
• right to rectification pursuant to Art. 16 GDPR
• right to erasure pursuant to Art. 17 GDPR
• right to restriction of processing pursuant to Art. 18 GDPR
• right to data portability pursuant to Art. 20 GDPR
• right to object pursuant to Art. 21 GDPR
• right to withdraw consent already given pursuant to Art. 7(3) GDPR

Withdrawing consent does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise your rights, you can reach us using the contact details provided above.

19. Right to Lodge a Complaint

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

The competent Austrian supervisory authority is:

20. Changes to this Privacy Policy

We reserve the right to amend this privacy policy if our website, the services we use, or legal requirements change.

Last updated: August 2026