Privacy

Controller

Exil BetriebsGmbH, Marktstraße 13, 2331 Vösendorf, FN 590889 f, UID ATU78940149, email contact@club-exil.at.

What data, what for

We only process what is needed for the purpose:

• Newsletter: email address and consent. Double opt-in (confirmation link). Unsubscribe any time via the link in the mail or by writing to us. Legal basis: Art. 6(1)(a) GDPR.
• Contact / Contribute / Lost & Found: subject, message and optional email you send us — only to handle the enquiry, not for the newsletter. Crew sees them internally. Art. 6(1)(b) or (f) GDPR.
• Tickets: depending on the event via ticket.io, another ticket shop or our own payment. Contract and privacy sit with the respective provider.
• Website operation: server logs (e.g. IP, time, page requested) for security and troubleshooting, short retention. Art. 6(1)(f) GDPR.

Processors

Hosting: Vercel. Database: Supabase. Confirmation and other system mail: Resend. Newsletter campaigns: Brevo. Some seats outside the EU; transfer only with suitable safeguards (in particular standard contractual clauses).

Reach and campaigns

Campaigns (Meta, ticket shop, website) are measured only after consent (banner). Currently no pixel and no banner on this page. Once pixels go live, Art. 6(1)(a) GDPR applies, withdrawal any time. Google Search Console is for indexing only, without a pixel. Maps opens as a link, without an embedded map. Crew login stores a session.

Retention

Newsletter: until withdrawal, then deletion unless a retention duty remains. Enquiries: as long as clarification takes, then statutory periods if needed. Logs: as short as operation reasonably allows.

Your rights

Access, rectification, erasure, restriction, objection, data portability, withdrawal of consent with effect for the future. Complaint: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.