// GDPR

Privacy Policy

Applicable to the ticket shop of Helenenbühne

01 Controller

The controller responsible for processing personal data in this ticket shop is the respective event organizer. Contact details are available on the event page or at the event itself.

02 Data We Process

The following personal data is collected during ticket purchase:

A unique QR code is generated from this data and provided as a PDF.

03 Purpose and Legal Basis

Your data is processed exclusively for completing the ticket purchase and for access control at the event. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

04 Disclosure to Third Parties

Stripe – Online payment

For online payment, the transaction is processed by Stripe Payments Europe, Ltd. Stripe processes payment data (e.g. card details) under its own privacy policy. The payment reference is used server-side to verify the transaction. Card data is never stored on our servers.

More information: stripe.com/privacy

Email delivery

Your ticket is sent by email via a configured SMTP server. Your email address is used solely for ticket delivery.

External resources (CDN / fonts)

This page loads fonts from Google Fonts and resources via external CDNs. Your IP address may be transmitted to these servers. No cookies are set and no user profiles are created.

05 Retention Period

Your ticket data (name, email, QR code) is stored for the duration of the event and a subsequent statutory retention period (in particular accounting and tax law). The specific duration is determined by the event organizer.

06 Your Rights

Under the GDPR you have the following rights with respect to the event organizer:

To exercise your rights, please contact the event organizer directly (contact details in the event announcement).

07 Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority:

Datenschutzbehörde (Austrian Data Protection Authority) Barichgasse 40–42, 1030 Vienna, Austria — dsb.gv.at

08 Automated Decision-Making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

09 Cookies

This site uses only technically necessary session cookies for language selection and displaying system messages. No tracking, analytics, or advertising cookies are used.