Controller
Schrall Daniel, Klausen 14, 6365 Kirchberg in Tirol, Austria. Email: schralldaniel@gmx.at. Telephone: +43 699 19498970.
Website delivery and security
Your IP address is processed technically to deliver the website. KITZLABS provides technical support. Regular access logs containing IP addresses are disabled for this website. Technical error logs may contain connection details and are deleted within 14 days. Secure operation is based on legitimate interests under Article 6(1)(f) GDPR. Infrastructure and network operators may process connection data needed for their services.
Event enquiries
Name, email and message are required; phone, date, event type and venue are optional. These details are used to answer and prepare a potential offer under Article 6(1)(b) GDPR. Other communications rely on legitimate interests under Article 6(1)(f). You may alternatively call or write an email. No automated booking decision is made.
Storage and email delivery
Requests are stored in a non-public server database and queued for forwarding to schralldaniel@gmx.at. An existing KITZLABS mailbox at World4You is used for technical delivery; the recipient mailbox is at GMX. The server copy is deleted within 90 days. Emails or resulting contract records may be kept longer when needed to handle the matter or meet retention requirements. Access is limited to people and providers needed for operation or handling.
Abuse prevention
The form uses a short-lived signed token, hidden check field and rate limits. A daily-changing pseudonymous check derived from the IP address helps limit abuse and is removed after one hour. The IP address is not stored in plain text in enquiry records. Your latest reference is stored in browser session storage for the confirmation page. No external CAPTCHA provider is loaded.
Optional aggregate statistics
Only with your permission, we count page views and selected phone, email, social, form and Spotify actions. Only day, page path, action and count are retained, not visitor identifiers, messages or email addresses. Counts are deleted within 400 days. The basis is consent under Article 6(1)(a) GDPR. Your choice may be stored locally for 180 days. You can withdraw it at any time without affecting prior lawful processing. Do Not Track and Global Privacy Control are respected.
Spotify and external links
Spotify is blocked until you explicitly load it. Once activated, Spotify may process IP address, device and usage data, use storage technologies and process data outside the EEA. Activation is voluntary. Remove the player or use privacy controls to stop the embedded connection; this does not erase data already sent. Spotify’s own privacy policy also applies. Normal social or map links open external providers only when followed.
Your rights and choices
Subject to legal conditions, you have rights of access, rectification, erasure, restriction, portability and objection. You may withdraw consent for the future. For processing based on legitimate interests, you may object based on your particular situation. Contact the controller or lodge a complaint with the Austrian Data Protection Authority at dsb.gv.at. Controls below manage optional statistics and remove the active Spotify player. No advertising pixels are used. Contact the controller for questions about service providers, retention or your enquiry.