Privacy Policy

1. Responsibility and Contact Information

The responsible person for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

Verein zur Förderung der Genusskultur am Arlberg
Strass 448, 6764 Lech am Arlberg
Central Register of Associations (ZVR): 1615163874
VAT ID: ATU8296612

Chairman: Clemens Riedl
Phone: +43 676 3849370
E-Mail: welcome@weinbergarlberg.at

2. General Information on Data Processing

We process personal data exclusively in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

Personal data is processed solely on the basis of a legal ground pursuant to Art. 6(1) GDPR, in particular:

for the performance of a contract,
for the implementation of pre-contractual measures,
due to legal obligations,
on the basis of legitimate interests, or
on the basis of your consent.

No automated decision-making or profiling takes place.

3. Processing of Personal Data When Visiting Our Website

When visiting our website, certain information is automatically transmitted by your browser or device to our server.

This includes in particular:

IP address
date and time of access
time zone difference to Greenwich Mean Time (GMT)
content of the request
access status / HTTP status code
previously visited website (referrer URL)
browser type and browser version
operating system and interface

This data is temporarily stored in so-called log files.

Purpose of Processing

The processing is carried out for:

providing and ensuring the technical functionality of the website,
ensuring system security,
error analysis,
preventing possible attacks, and
optimizing the website.

Legal Basis

Processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Storage Duration

The data will be deleted as soon as it is no longer required for the stated purposes, generally no later than seven days, unless further retention is necessary to investigate security-related incidents.

4. Contacting Us

If you contact us via email or contact form, we process the personal data you provide (e.g. name, email address, phone number and the content of your request) for the purpose of handling your inquiry.

Legal Basis

Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract)
Art. 6(1)(f) GDPR (legitimate interest in proper communication)

Storage Duration

Inquiries and related data are generally stored for up to three years after completion of the communication, unless statutory retention obligations require otherwise.

5. Ticket Purchases and Event Administration

In connection with ticket purchases and participation in our events, we process personal data including:

first and last name
email address
billing address
payment information
telephone number where applicable
information related to ticket transfers or waiting lists

The processing is carried out for:

processing ticket purchases,
payment processing,
invoicing,
organization and execution of events,
communication with guests,
administration of waiting lists and ticket transfers.

Legal Basis

Art. 6(1)(b) GDPR (performance of a contract)
Art. 6(1)(c) GDPR (legal obligations)
Art. 6(1)(f) GDPR (legitimate interest in efficient event organization)

Storage Duration

Data related to ticket purchases and invoices are stored for at least seven years in accordance with statutory retention obligations.

6. Payment Service Providers

For payment processing, we work with external payment service providers.

Stripe
https://link.com/de/privacy

PayPal
https://www.paypal.com/de/legalhub/paypal/privacy-full

Personal data is processed by these providers in accordance with their respective privacy policies.

7. Newsletter

If you subscribe to our newsletter, we process your email address and any additional voluntary information provided in order to send you information about events, offers and news.

Registration takes place using the double opt-in procedure.

Legal Basis

Art. 6(1)(a) GDPR (consent)

Withdrawal of Consent

You may withdraw your consent at any time with effect for the future, for example via the unsubscribe link included in every newsletter.

Newsletter Service Provider

Mailchimp
https://mailchimp.com/de/gdpr/

8. Photo and Video Recordings at Events

Photo and video recordings may be made during our events in which participants may be identifiable.

These recordings may in particular be published:

on our website,
on social media,
in newsletters,
in press materials, or
for other public relations purposes.

Legal Basis

Processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in documenting and promoting our events.

Objection

If you do not wish to be photographed or filmed, you may contact us at any time during the event.

9. Social Media

We maintain online presences on social networks and platforms in order to provide information about our events and activities.

Instagram, Facebook, LinkedIn, YouTube, TikTok

When using these platforms, personal data is processed by the respective providers in accordance with their privacy policies.

10. Cookies and Analytics Tools

Our website uses cookies and similar technologies to ensure the functionality of the website and, where applicable, to carry out analytics and reach measurements.

Where technically non-essential cookies or tracking technologies are used, this takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

Cookie Consent

When visiting our website for the first time, you can use our cookie banner to choose which cookies and services you wish to allow.

11. Web Analytics and Third-Party Providers

Google Analytics
Vimeo
YouTube
Mailchimp newsletter tracking

12. Storage Duration

Unless expressly stated otherwise in this privacy policy, we store personal data only for as long as necessary to fulfill the respective purposes or as required by statutory retention obligations.

13. Rights of Data Subjects

You generally have the following rights:

right of access
right to rectification
right to erasure
right to restriction of processing
right to data portability
right to object to processing
right to withdraw consent

You may contact us at any time to exercise your rights.

14. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with the competent supervisory authority.

In Austria, this is:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
www.dsb.gv.at

15. Updates to this Privacy Policy

We reserve the right to amend this privacy policy where necessary, in particular in the event of technical changes or legal developments.

Last updated: May 2026