Privacy Policy & Data Protection

1. Identity of the Data Controller

The controller responsible for data processing on this website (festivalsortspark.bond) is:

2. Fundamental Principles of Data Processing

We treat your personal information with utmost confidentiality and in strict adherence to the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (Datenschutzgesetz - DSG), and the Telecommunications Act (TKG 2021). We collect only data that is strictly necessary for delivering archival research content, fulfilling inquiries, and maintaining cyber-security.

3. Categories of Data Collected & Purposes

3.1 Automated Server Log Data

When accessing our web portal, our web hosting infrastructure automatically logs standard technical telemetry transmitted by your browser:

• IP address of the requesting terminal device (anonymized after 7 days)
• Date, exact time, and timezone of server access
• Requested URI path and protocol status code
• Referrer URL (the site from which you navigated to us)
• User agent string including browser type, engine version, and operating system

Legal Basis: Article 6(1)(f) GDPR (Legitimate interest in maintaining server stability, preventing DDoS attacks, and ensuring archival uptime).

3.2 Direct Communication via Dispatch Forms

When you submit inquiries through our Curator Desk or email channels, we process your full name, email address, institutional affiliation, and the contextual body of your communication solely to respond to your research or curatorial inquiry.

Legal Basis: Article 6(1)(b) GDPR (Performance of a contract or pre-contractual measures) and Article 6(1)(a) GDPR (Your explicit consent upon form submission).

4. Cookie Architecture & Storage Mechanisms

Our portal utilizes technical cookies and local browser storage (such as localStorage) to record your cookie consent choice and maintain user interface display preferences. We do not engage in invasive behavioral tracking or cross-site profiling without your explicit consent. For complete itemized details, please consult our Cookie Policy.

5. Third-Party Processors & Data Transfers

We partner exclusively with verified European and international service providers bound by strict Data Processing Agreements (DPAs) in compliance with Article 28 GDPR:

• Web Hosting & CDN Providers: High-security infrastructure located within the European Economic Area (EEA).
• Typography & Script Libraries: Standard open-source WebGL / Three.js libraries and Google Fonts loaded in privacy-respecting configurations.

No personal data is sold, leased, or transferred to unvetted third parties.

6. Data Retention Schedules

We retain personal data only for the duration necessary to satisfy the purposes for which it was collected or to comply with statutory commercial and fiscal retention obligations under Austrian law (e.g., Section 212 of the Austrian Commercial Code - UGB, requiring 7 years for financial records). Form inquiries without commercial follow-up are purged after 12 months.

7. Your Statutory Rights Under the GDPR

As a data subject, you hold comprehensive rights enforceable at any time:

• Right of Access (Art. 15 GDPR): Obtain confirmation and copies of personal data stored about you.
• Right to Rectification (Art. 16 GDPR): Correct inaccurate or incomplete records.
• Right to Erasure (Art. 17 GDPR): Request deletion of your data ("Right to be forgotten").
• Right to Restriction (Art. 18 GDPR): Restrict processing under specific statutory circumstances.
• Right to Data Portability (Art. 20 GDPR): Receive data in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests.
• Right to Withdraw Consent (Art. 7(3) GDPR): Revoke consent at any time without affecting past processing legality.

8. Supervisory Authority & Complaints

If you believe the processing of your personal data violates data protection legislation, you have the right to lodge a formal complaint with the competent supervisory authority:

9. Modifications to this Privacy Policy

We reserve the right to revise this Privacy Policy periodically to reflect technological enhancements or updates in statutory jurisprudence. Changes take immediate effect upon publication on this URL.