Privacy policy
Short version: this website sets no tracking cookies, uses no analytics service and loads no external scripts or fonts.
Controller
Erich Pöttinger
4560 Kirchdorf an der Krems, Austria
office@festivadget.com
What this website stores
Visiting these pages does not create a user profile. There is no analytics tool, no advertising network, no social media plugin and no external font or script – everything is served from our own server.
Your language preference is stored in a single functional cookie (fa_lang) so that the site opens in the language you chose. It contains nothing but a language code and expires after one year.
Server log files
Our hosting provider records the usual access data whenever a page is requested: IP address, date and time, the page requested, referrer, browser and operating system. This is technically necessary to deliver the website and to keep it secure. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a stable and secure service. The data is not merged with other sources and is deleted by the provider after a short retention period.
Contact form and e-mail
If you use the contact form we process the data you enter (name, organisation, e-mail, phone, event details, message) solely to answer your enquiry. Legal basis: Art. 6(1)(b) GDPR for pre-contractual measures and Art. 6(1)(a) GDPR for your consent.
The form writes to no database. Your enquiry reaches us as an e-mail and is kept for as long as it takes to handle it and as long as commercial retention obligations require. To fend off spam the form checks a hidden field, the age of the form and how many enquiries came from your connection within the past hour; for that a shortened cryptographic value derived from your IP address is stored temporarily – the address itself is not stored.
Hosted products (CrewCare and Festivadget)
This privacy policy covers the website only. If you use CrewCare as a hosted customer instance, we process crew data on your behalf as a processor under Art. 28 GDPR; that is governed by a separate data processing agreement, and the privacy information for the app itself is provided inside the app.
Services requiring consent (statistics, external media)
Some services load only with your consent: Google Analytics (usage statistics, provided by Google Ireland Ltd.) and externally embedded media such as YouTube videos (Google Ireland Ltd.). Without consent these services are not loaded and no data reaches the providers. Legal basis: Art. 6(1)(a) GDPR.
Your choice is stored in a cookie (fa_consent, one year). You can change or withdraw it at any time via "Cookie settings" in the footer; for transfers to the US the providers rely on the EU-US Data Privacy Framework.
Processors
We work with the following service providers, each bound by a data processing agreement:
- Webhosting: World4You
- Server: World4You
Your rights
Under the GDPR you have the right to:
- access the data we hold about you (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data erased (Art. 17)
- restrict processing (Art. 18)
- receive your data in a portable format (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- withdraw consent at any time with effect for the future (Art. 7)
To exercise any of these rights, write to office@festivadget.com
Right to complain
If you believe your data is processed unlawfully you may complain to the Austrian Data Protection Authority (Oesterreichische Datenschutzbehoerde, Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at).
This text is a carefully prepared template, not legal advice. Have it reviewed by a lawyer before going live and update it whenever the site or the services change.