Privacy

Please note: This is a translation for convenience. The legally binding version is the German one, available at gutgebruellt.at/datenschutz.

This notice applies to the website www.gutgebruellt.at. It describes which personal data we process, why, on what legal basis, and what rights you have. It is provided under Articles 13 and 14 of the General Data Protection Regulation (GDPR).

A separate privacy notice applies to the member area “My gutgebrüllt”. You will find it there once the member area is available.

Controller

The controller within the meaning of Article 4(7) GDPR is:

Kulturverein gutgebrüllt
Hofzeile 10–12/1/4, 1190 Vienna, Austria
Austrian register of associations (ZVR): 572347315
Represented by the chair, Martina Gahleithner

Email: office@gutgebruellt.at
Phone: +43 677 643 88 247

We are a small non-profit cultural association and are not required to appoint a data protection officer (Article 37 GDPR). For any question about data protection, please use the contact details above.

What this website does not do

So that you can put the rest of this notice in context, here is the most important part first, and it is a short list. This website

• sets no cookies,
• uses no analytics or statistics services, including no Google Analytics,
• embeds no advertising networks and carries out no profiling,
• contains no social media plugins and no “like” buttons,
• embeds no third-party maps and no videos,
• loads no fonts from third-party servers, all fonts are served from our own server,
• makes no automated decisions within the meaning of Article 22 GDPR.

Simply opening a page therefore sends not a single record to any third party. For the same reason we do not need a cookie consent banner.

Visiting the website and server logs

Still to be completed: the name and address of the hosting provider, the location of the servers and the actual retention period for the log files. This section is complete only once the provider is confirmed and a data processing agreement under Article 28 GDPR is in place.

When you open our website, your browser transmits certain data for technical reasons, which our hosting provider stores in log files. These are usually:

• the address requested and the file retrieved,
• the date and time of access,
• the volume of data transferred and whether the request succeeded,
• browser type and operating system,
• the page visited previously, if your browser transmits it,
• your IP address.

Purpose: delivering the website, operational security, and investigating faults and attacks. Legal basis: our legitimate interest in a secure and functioning website (Article 6(1)(f) GDPR). Recipients: our hosting provider as a processor, bound by an agreement under Article 28 GDPR.

We do not combine these log entries with other data and do not analyse them to recognise individual visitors.

Storage on your device

We set no cookies. For two features, however, the website stores entries in your browser. These entries stay on your device and are not transmitted to us or to anyone else.

Entry	Type	Purpose	Lifetime
gg:vorhang	session storage	Remembers that the opening animation has already run in this session, so it does not restart on every page change.	Deleted when you close the browser tab.
gg.warenkorb.v1	local storage	The contents of your basket, so your selection survives a page change.	Stays until you empty the basket or clear site data in your browser.

Both entries are strictly necessary for the service you have explicitly requested and therefore require no consent under § 165(3) of the Austrian Telecommunications Act 2021. You can remove them at any time: the basket via the “Empty basket” button, and both entries via your browser’s function for clearing site data.

Contacting us by email and phone

Our website has no contact form. If you write or call, we process the details you provide, usually your name, your email address or phone number, and the content of your message.

Purpose: handling and answering your enquiry. Legal basis: pre-contractual steps or performance of a contract (Article 6(1)(b) GDPR), otherwise our legitimate interest in answering enquiries (Article 6(1)(f) GDPR). Retention: until your matter is settled; beyond that only where statutory retention obligations apply or claims may still be brought.

Please note that unencrypted email can be read by third parties in transit. For confidential matters, please call us instead.

Registering for theatre courses

Registration runs through the member area “My gutgebrüllt” or by email to theaterkurse@gutgebruellt.at. We process:

• the child’s first and last name and date of birth or age,
• the first and last name of the parent or guardian,
• postal address, email address and phone number,
• the course chosen and payment details.

Purpose: processing the registration, running the course, invoicing, and being able to reach you during course hours. Legal basis: performance of the course contract or pre-contractual steps (Article 6(1)(b) GDPR), and compliance with tax record-keeping obligations (Article 6(1)(c) GDPR). Necessity: without these details we cannot process the registration. Anything further is voluntary. Retention: details relevant for tax purposes are kept for seven years after the end of the calendar year in which they arose (§ 132 of the Austrian Federal Fiscal Code). We delete the remaining details once the course has been invoiced and no claims remain open.

Registration is carried out by parents or guardians. We do not address our offers directly to children and do not obtain consent from children.

Ticket orders

You can reserve tickets by email to karten@gutgebruellt.at, by phone, or through the basket on this website. For that we process your name, a means of contacting you, and the performance, date and number of seats.

Purpose: reservation, providing the tickets at the box office, and invoicing. Legal basis: performance of a contract (Article 6(1)(b) GDPR), and for invoicing also Article 6(1)(c) GDPR. Retention: as for course registration.

The basket on this website stores your selection solely in your browser (see above). Data reaches us only once you actually submit an order.

Photographs and video from courses and performances

This website shows photographs from rehearsals, courses and performances since 2007. Children and young people are identifiable in many of them. Such images are personal data.

Purpose: documenting our work and the association’s public communication. Legal basis: the consent of the person shown or of their parents or guardians (Article 6(1)(a) GDPR). In addition, the protection of a person’s likeness under § 78 of the Austrian Copyright Act applies. Withdrawal: you may withdraw consent at any time with effect for the future, at no disadvantage to you. Write to office@gutgebruellt.at and, if possible, tell us the page and the image. We will then take the photograph off the website. The lawfulness of processing up to the point of withdrawal is unaffected.

Recipients of your data

Your data stays with the association. Outside the association, it is received only by:

• our hosting provider, insofar as it operates the website technically (processor under Article 28 GDPR),
• the operator of the member area “My gutgebrüllt”, insofar as you use it,
• public authorities, where we are legally obliged to provide information.

We do not sell data, do not trade in addresses, and pass nothing on for advertising purposes.

Transfers to third countries

No personal data is transferred to countries outside the European Union or the European Economic Area.

Still to be verified: once the hosting provider is confirmed, it must be established that the servers are located within the EEA. Otherwise the legal basis for the transfer under Chapter V GDPR must be added here.

Retention at a glance

We keep personal data only as long as it is needed for the relevant purpose and delete it afterwards, unless a statutory retention obligation stands in the way, or we still need it to bring or defend against legal claims. The main factors are the seven-year retention period under § 132 of the Austrian Federal Fiscal Code and the general limitation periods.

Your rights

Under the GDPR you have the right to:

• access information on whether and which data we process about you (Article 15),
• rectification of inaccurate data (Article 16),
• erasure (Article 17),
• restriction of processing (Article 18),
• data portability (Article 20),
• object to processing based on a legitimate interest (Article 21),
• withdraw consent with effect for the future (Article 7(3)).

An informal message to office@gutgebruellt.at is enough. We reply without undue delay and within one month at the latest.

Right to lodge a complaint

If you believe that our processing of your data infringes data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna
Phone: +43 1 52 152-0
dsb@dsb.gv.at · www.dsb.gv.at

Links to other websites

On some pages we link to third-party websites, such as venues, press outlets or the pages of people involved in our productions. The respective providers alone are responsible for their content and for how they handle your data. A link becomes a data transfer only when you click it.

Changes to this notice

We update this notice when our website or the legal situation changes. The version published here is the one that applies.