(Datenschutzerklärung auf Deutsch)

1. General information

The website barracudamusic.at including its subdomains (hereinafter referred to as „the website“) is operated by Barracuda Music GmbH, Alser Strasse 24/13, 1090 Vienna, as service provider, media owner, controller (under data protection law) and publisher (hereinafter referred to as „Barracuda Music“, „we“, „us“). Our contact details are: office@barracudamusic.at; Tel: +43 1 522 522 0 11.

The protection and security of your personal data is important to us. We therefore store and process data exclusively in compliance with the applicable legal provisions, in particular the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter referred to as „GDPR„).

2. Categories of data processing

Processing of enquiries / correspondence: When you contact us (e.g. by email or telephone), we process your contact details (name, email address, telephone number) and the information you provide to us in order to process and respond to your enquiry. This can be based on our legitimate interest in responding to enquiries (Art 6 para 1 lit f GDPR). Alternatively, if applicable, this can also be based on the necessity to fulfil a contract or to carry out pre-contractual measures (Art 6 para 1 lit b GDPR).

Data processing related to our events: If you purchase a ticket for an event via one of our third-party providers (e.g. a ticket platform), this third-party provider may possibly transfer your contact details (name, e-mail address) to us. Such processing of your contact details enables us to inform you about any changes to the planned event schedule or even about a necessary cancellation of the event or to provide you with other relevant information in connection with the event. This processing can be based on the necessity to fulfil a contract or to carry out pre-contractual measures (Art 6 para 1 lit b GDPR).

Press account: If you create a press account on the website, you will be asked to enter the following data during the registration process: First and last name, e-mail address, username, password, company name (your employer). We store this data as long as you do not delete your press account. This processing is based on your consent (Art 6 para 1 lit a GDPR).

In individual cases: Data transfer to the band Tool: If you purchase tickets for the concert of the band Tool from the third-party providers „oeticket“, „Stadthalle Wien“ and „Wien Ticket“, you can expressly consent to your personal data (full name, e-mail address) being transmitted to us by the operators of the respective ticket platforms and by us – as controller under data protection law – to the band Tool in the USA for information purposes (Art 49 para 1 lit a GDPR). The recipient and controller is: TOOL TOURING Inc. There is no adequate level of data protection in the USA (compared to the EU). Therefore, there is a particular risk that your data could be exposed to access by US authorities for control and monitoring purposes and that you would have no effective legal remedies against this. This consent can be withdrawn at any time by sending an email to office@barracudamusic.at. The withdrawal does not affect the legality of the processing carried out based on the consent until the withdrawal.

3. Newsletter

If you enter your email address on our website and click on „Subscribe to newsletter“, you give us your consent to send you newsletters (Art 6 para 1 lit a GDPR). This consent can be revoked at any time by clicking on the unsubscribe link at the end of each newsletter. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. The personal data will be stored and used for sending the newsletter until you unsubscribe, or until we stop sending newsletters. Statistical data on the use of our newsletter is collected to optimize these services.

We use „MailChimp“, an email marketing platform of the US provider The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA, to send newsletters. This provider is certified in accordance with the EU-US Data Privacy Framework, which ensures the permissibility of data transfer to the USA (based on an adequacy decision by the European Commission in accordance with Art 45 GDPR).

4. Data transfer to third parties / data transfer to third countries

We may share your data with the following categories of third parties („recipients“) where necessary for the purposes set out in this Privacy Policy:

• IT service provider for maintenance and support.
• IT service provider for web analysis services; this involves data transfer to the USA (see point 5.).
• IT service provider for newsletter dispatch; this involves data transfer to the USA (see point 3.).
• In individual cases: TOOL TOURING Inc.; this involves data transfer to the USA (see point 2.).
• In individual cases: authorities, courts or other public bodies if we are obliged by law or by an official or court order of an EU member state to disclose data to these bodies.

Apart from the cases mentioned above, no data is transferred to third countries.

5. Categories of automated data processing

Server logs: The IP address of the requesting computer, along with the date, the time, the request, the requested file (name and URL), the amount of data transferred to you, a message indicating whether the request was successful, identification data of the browser and operating system, as well as the website from which the access was carried out (if the website was accessed via a link). We store the server logs to be able to check the system security, to administer the website technically and to be able to optimize the website technically. If there has been a hacking attack, this data will be passed on to the law enforcement authorities. No other data will be passed on to third parties. This can be based on our aforementioned legitimate interests (Art 6 para 1 lit f GDPR). The server logs are stored for a maximum of 3 months.

Cookies: Cookies are small text files that are stored on your computer by the website in order to recognize it. Cookies can contain information about the use of the website. The information contained in the cookies is used to determine whether you are logged in or what data you have already entered. Most web browsers automatically accept cookies. You can prevent this by changing your browser settings. You can remove cookies stored on your PC at any time by deleting the temporary internet files. Specifically, the cookies mentioned below are stored beyond the respective session.

We use Google Analytics, a web analytics service provided by Google Inc („Google“). Google Analytics uses cookies. The information generated by cookies about your use of the website is usually transmitted to a Google server in the USA and stored there. We use IP anonymization, so your IP address will be abbreviated by Google within the EU or EEA before the transfer to the US. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. Google will use this information on our behalf to analyze your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the websites (including your anonymized IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

Google Analytics uses the following cookies: __utma (storage period 2 years), __utmt (storage period 10 minutes), __utmb (storage period 30 minutes), __utmc (for the duration of the session), __utmz (storage period 6 months), __utmv (storage period 2 years)

Google is certified in accordance with the EU-US Data Privacy Framework, which ensures the permissibility of data transfer to the USA (based on an adequacy decision by the European Commission in accordance with Art 45 GDPR).

Further information on the terms of use and data protection of Google Analytics: https://policies.google.com/terms?hl=en, https://support.google.com/analytics/answer/6004245?hl=en.

6. Links to other websites

The website contains links to other websites over whose content we have no influence. We accept no liability for this content. The respective provider of the linked website is solely responsible for the content and accuracy of the information provided there. Regarding the personal data processed on the other websites, reference is made to the privacy statements of the respective websites.

7. Storage duration

We will only retain your data for as long as is permitted by data protection law and necessary for our business purposes, the protection of our legitimate interests or due to legal requirements. Data retention is based either on the legal basis of Art 6 para 1 lit c GDPR (if the processing is necessary for compliance with a legal or statutory obligation) or on the legal basis of Art 6 para 1 lit f GDPR (if the processing is necessary for the purposes of our legitimate interests or the legitimate interests of third parties, e.g. as evidence in legal disputes).

8. Further information

You have – under the respective legal prerequisites – the right to access (Art 15 GDPR), right to rectification (Art 16 GDPR), right to erasure (Art 17 GDPR), right to restriction of processing (Art 18 GDPR), right to data portability (Art 20 GDPR) and right to object (Art 21 GDPR).

If the processing is based on consent, you have the right to withdraw your consent at any time without affecting the legality of the processing carried out based on the consent until withdrawal.

You have the right to lodge a complaint with the Austrian supervisory authority:

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna

When collecting the data, we will inform you if the provision of your personal data is required by law or contract or is necessary for the conclusion of a contract. At the same time, we will inform you whether you are obliged to provide the personal data and what the possible consequences of not providing it would be.

Automated decision-making, including profiling, is not carried out. If personal data is processed for a purpose other than that for which the personal data was collected, we will disclose this information about this other purpose to you.

9. Changes to the privacy policy

Our privacy policy may be amended from time to time. The current version of the privacy policy is always published on our website.