Privacy policy
Protecting your personal data is a sincere concern of ours. We process your data solely on the basis of the statutory provisions (GDPR, TKG 2021) and as sparingly as possible: no advertising trackers and no sharing of data for advertising purposes. We only use a statistics service (Google Analytics) if you expressly agree to it.
1. Controller
Leon Rauter
Döblinger Hauptstraße 70-3-1, 1190 Vienna, Austria
E-mail: office@viennaconcertcollection.com
2. Data during a ticket booking
When you book tickets, we process the data you provide: name, e-mail address, selected event, number of tickets and the payment status. The purpose is to process your booking including ticket delivery and any refunds (Art. 6(1)(b) GDPR, performance of contract). We retain booking and invoicing data within the statutory retention periods (in particular § 132 BAO: seven years); after that they are deleted.
3. Payment processing
Payment is handled by the payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. You enter your card details exclusively on Stripe's encrypted payment page; our servers never receive your full payment data, only a confirmation of the success or failure of the payment. Stripe may also transfer data to Stripe Inc. in the USA; this is based on the EU standard contractual clauses or the EU-US Data Privacy Framework. Details: stripe.com/privacy.
4. Disclosure to organisers
To stage your booked event, we transmit your name, your e-mail address and the booking data to the respective organiser (Art. 6(1)(b) GDPR). The organiser is named on the respective event page or on your ticket. No further disclosure of your data takes place.
5. E-mail delivery and hosting
This website and our e-mail delivery are operated by World4You Internet Services GmbH (Linz, Austria), with whom a data processing agreement exists. When you access the website, the server processes connection data (IP address, time, page accessed) in log files for technical reasons; these serve operational security (Art. 6(1)(f) GDPR) and are deleted automatically.
6. Cookies
Technically necessary cookies: the session cookie “vccsession” enables the booking process, protects forms against misuse (CSRF protection) and is used for logging in to the administration area. It is deleted when you close the browser. The cookie “vcc_consent” stores your choice in the cookie notice for one year. No consent is required for these cookies (§ 165(3) TKG 2021).
Statistics cookies (Google Analytics, see section 7) are only set if you click “Accept all” in the cookie notice. You can change or withdraw your choice at any time via “Cookie settings” in the footer of every page. Fonts and technical libraries are served directly from our own server.
7. Google Analytics (only with your consent)
With your consent we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It helps us understand how our website is used (e.g. pages visited, time spent, type of device, approximate region) so that we can improve it. For this purpose cookies (_ga, _ga_*) are stored for up to two years. Google Analytics 4 does not store full IP addresses. Data may also be transferred to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision of the European Commission exists.
Legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). You can withdraw it at any time with effect for the future via “Cookie settings” in the footer; the statistics cookies are then deleted. Without consent Google Analytics is not loaded at all. More information: policies.google.com/privacy.
8. Newsletter
You receive our newsletter only if you have expressly requested it, either by ticking the box when booking or via the link in our e-mail after your concert. We use your e-mail address solely for this purpose (Art. 6(1)(a) GDPR, § 174 TKG 2021). Every newsletter contains a link to unsubscribe; you can also simply write to us.
9. Your rights
You have the rights to information, rectification, erasure, restriction of processing, data portability and objection. Simply contact the e-mail address named above. If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40-42, 1030 Vienna, dsb.gv.at).
Last updated: 10/2026