Privacy Policy

Data Controller

AEF GmbH

Schmidinger-Straße 6, 4631 Krenglbach, Austria

Email: office@alter-ego-events.com

Managing Director: Florian Störinger

Supervisory Authority

Austrian Data Protection Authority (Datenschutzbehörde)

Barichgasse 40-42, 1030 Wien

Phone: +43 1 52 152-0

Email: dsb@dsb.gv.at

Scope

This privacy policy applies to all data processing activities carried out through this website, our online shop, and any related digital services operated by AEF GmbH.

Legal Bases for Processing

We process personal data on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR) — where you have given explicit agreement
• Contract performance (Art. 6(1)(b) GDPR) — to fulfill contractual obligations or pre-contractual requests
• Legal obligation (Art. 6(1)(c) GDPR) — to comply with applicable laws
• Legitimate interest (Art. 6(1)(f) GDPR) — for business operations, security, and service improvement

Your Rights

Under GDPR Articles 13–22 and 77, you have the right to:

• Access — request information about your stored personal data
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ('right to be forgotten')
• Restriction — limit processing without deleting data
• Data portability — receive your data in a structured, machine-readable format
• Objection — oppose processing based on legitimate interest, direct marketing, or profiling
• Lodge a complaint — file a complaint with the Austrian Data Protection Authority

To exercise any of these rights, contact us at office@alter-ego-events.com.

Data Retention

Personal data is retained only as long as necessary for the purpose it was collected. Legal retention periods may require extended storage — for example, 10 years for invoices under Austrian tax law and 6 years for general business records.

Hosting

This website is hosted on a server operated by Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany. The server is located in Germany. When you visit this website, the server processes technical data required to deliver it:

• IP address
• Browser type and version
• Operating system
• Referrer URL
• Date and time of access
• Requested resources

These server logs are necessary to ensure the security, stability and proper operation of the website. The processing is based on Art. 6(1)(f) GDPR (legitimate interest) in providing a reliable online service. Uploaded media files are stored on the same infrastructure within the European Union.

Website Analytics

We do not use a web analytics service. See “Meta Pixel” below for the only third-party tracking on this website.

Cookies

This website sets the following cookies:

Strictly necessary (no consent required, Art. 6(1)(f) GDPR): “c15t” stores your cookie preferences for 12 months. Administrative cookies (“payload-token”, “ae_maint_bypass”) are only set for staff logging into the content management system.

Marketing (only with your consent, Art. 6(1)(a) GDPR): “_fbp” and “_fbc” are set by the Meta Pixel, see below. They are not set unless you accept marketing cookies in the banner. You can change or withdraw your choice at any time via “Cookies” in the footer.

Meta Pixel

With your consent, this website uses the Meta Pixel from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. The pixel lets us measure the reach of our advertising on Facebook and Instagram and show ads to people who visited our website. It sets the cookies “_fbp” and “_fbc” and transmits the following data to Meta:

• IP address and browser information
• Visited pages
• Events such as ticket link clicks

Meta may transfer this data to the USA. The transfer is covered by Meta’s certification under the EU-US Data Privacy Framework. The pixel only loads after you accept marketing cookies. Legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via “Cookies” in the footer. Meta’s privacy policy: https://www.facebook.com/privacy/policy

Consent Management

This website uses a consent management tool to record and manage your cookie and data processing preferences. Your consent choices are stored locally and may be retained for up to 2 years. The processing is based on Art. 6(1)(c) GDPR (legal obligation to document consent) and Art. 6(1)(f) GDPR (legitimate interest in GDPR compliance).

Payment Processing

When you make a purchase, payment is processed through Stripe. The following data may be shared with the payment provider:

• Name and billing address
• Bank or credit card details
• Transaction amount and reference

We only receive confirmation of successful or failed transactions — your full payment details are stored exclusively by the payment provider. The processing is based on Art. 6(1)(b) GDPR (contract performance). Data is retained in accordance with Austrian accounting and tax law (up to 10 years for invoices).

Ticket Registration

Holders of a ticket for the cancelled festival can register it for the next ALTER EGO Festival on this website. We process the following data:

• First name and last name
• Email address
• Time of registration and confirmation status

After submitting the form you receive an email with a confirmation link. Your registration only counts once you click it. Purpose of the processing is assigning your existing ticket to the next festival date and granting the additional free guest. Legal basis is Art. 6(1)(b) GDPR (contract performance).

Confirmation emails are sent through Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, acting as our processor under a data processing agreement. Transfers to the USA are based on the EU Standard Contractual Clauses. Resend’s privacy policy: https://resend.com/legal/privacy-policy

Registration data is deleted after the next ALTER EGO Festival has taken place. Unconfirmed registrations are deleted at the latest at the same time.

Security

This website uses TLS encryption (HTTPS) to protect data in transit. We implement appropriate technical and organizational measures in accordance with Art. 25 GDPR to safeguard your personal data against unauthorized access, loss, or misuse.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The current version is always available on this page.