Legal
Privacy.
Information about privacy, the newsletter, contact form and services used on this website.
Last updated: 27 September 2026
1. Controller
The controller responsible for the processing of personal data on this website is:
Verein Opera Moderne Wien / Vien.noir
Vienna, Austria
Email: office@viennoir.com
For privacy-related enquiries, you can contact us at the email address above.
2. General information about data processing
We process personal data only where necessary to operate this website, respond to enquiries, send our newsletter or comply with legal obligations. Depending on the processing activity, we rely in particular on Article 6(1)(a) GDPR (consent), Article 6(1)(b) GDPR (contract or pre-contractual measures) or Article 6(1)(f) GDPR (legitimate interests).
We do not use our own web analytics or advertising platform. External services required for hosting, fonts, the newsletter and the contact form are described below.
3. Hosting via GitHub Pages
This website is provided as a static website using GitHub Pages. The service is provided by GitHub. According to GitHub, when a GitHub Pages website is visited, the visitor's IP address is logged and stored for security purposes. Other technically necessary connection and access information may also be processed, such as the time of access, requested resource, browser or device information and referrer.
This processing is carried out to provide the website securely and reliably and is based on our legitimate interest under Article 6(1)(f) GDPR. GitHub may also process data outside the European Economic Area. Further information is available in the GitHub Privacy Statement.
4. Encrypted transmission
The website is provided over HTTPS. Data transmitted between your browser and the website or the integrated services is therefore encrypted in accordance with current technical standards.
5. Google Fonts
We use Google Fonts to display the typography used on this website. The font files are currently loaded from Google servers. When they are requested, your browser establishes a connection to Google and transmits technically necessary connection data, in particular your IP address and browser/device information.
We use Google Fonts to provide a consistent and visually coherent presentation of the website. The legal basis is our legitimate interest in an attractive and technically reliable presentation under Article 6(1)(f) GDPR. For users in the European Economic Area, the provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing in third countries cannot be ruled out. Further information is available in the Google Privacy Policy.
6. Contact form via Form.taxi
We use Form.taxi, operated by wrkt*biz Reinhard Söllradl, 4070 Eferding, Austria, for our contact form. When you submit the contact form, the data you enter – in particular your name, email address, subject and message – as well as technically necessary transmission data is sent to Form.taxi, processed there and used to deliver your enquiry to us.
If your enquiry relates to entering into or performing a contract, processing is based on Article 6(1)(b) GDPR. Other enquiries are processed on the basis of our legitimate interest in receiving, handling and responding to enquiries under Article 6(1)(f) GDPR.
According to the provider, processing and storage generally take place within the European Union. Form.taxi uses ALL-INKL.COM for hosting, with a data centre in Dresden, Germany, and Mailjet for email transmission. Form.taxi states that the content of form submissions may be stored for up to one year. Messages received by us are retained only for as long as necessary to deal with the enquiry and to comply with any applicable statutory retention obligations.
Further information is available in the Form.taxi Privacy Policy.
7. Contacting us by email
If you contact us directly by email, we process the data you provide, in particular your email address, the content of your message and, where applicable, your name, in order to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR where the communication concerns a contract or pre-contractual measures, and otherwise Article 6(1)(f) GDPR. The data is deleted when it is no longer required for the relevant purpose and no statutory retention obligation applies.
8. Newsletter via Brevo
We use Brevo to manage subscriptions and send our newsletter. Brevo is operated by companies within the Brevo/Sendinblue group; depending on the contractual relationship, this may include Sendinblue SAS in France or a German Brevo/Sendinblue entity.
When you subscribe, we process your email address and the newsletter consent you provide. Technical information relating to registration and email delivery may also be processed, such as the time of subscription, IP address, delivery status and technical event data. Brevo resources embedded on this website may establish a technical connection to Brevo or sibforms.com when a page is loaded.
Subscription requires you to actively select the consent checkbox. The legal basis for sending the newsletter is your consent under Article 6(1)(a) GDPR. After you subscribe, we currently send a simple confirmation email; no additional confirmation link is required. You can withdraw your consent at any time with effect for the future, in particular by using the unsubscribe link in every newsletter or by emailing office@viennoir.com.
Brevo provides functions for analysing sending, delivery, opens and clicks in email campaigns. Depending on the account settings, such events may be attributed to a specific contact or analysed anonymously. Brevo states that open and click events can be tracked on an individual recipient basis by default unless the relevant anonymisation setting has been enabled.
Newsletter contact data is generally stored for as long as the newsletter subscription remains active. After unsubscribing, certain information may be retained in a suppression or evidence list where necessary to prevent further messages or to document consent and withdrawal.
A data processing agreement can be concluded with Brevo. Further information is available in the Brevo Privacy Policy.
9. External links and social media
Our website contains links to external services, in particular ticketing platforms and Instagram, Facebook, TikTok, LinkedIn and YouTube. As a rule, merely displaying a link does not cause us to transmit data collected by us to the destination website. When you open an external link, the privacy terms of the relevant provider apply.
10. Cookies and audience measurement
We currently do not use our own web analytics, advertising tracking or non-essential first-party marketing cookies. Third-party services technically integrated into the website may process connection data and, where applicable, additional technical information as part of their services. The services and settings described in this privacy policy apply.
11. Retention periods
Where no specific retention period is stated in this privacy policy, we retain personal data only for as long as necessary for the relevant processing purpose. We may retain data for longer where statutory retention or evidence obligations apply or where this is necessary for the establishment, exercise or defence of legal claims.
12. Recipients and international data transfers
We disclose personal data only where necessary for the purposes described above, where we are legally required to do so, or where we are otherwise entitled to do so. When external service providers are used, data may be transferred to processors and their subprocessors. Where processing takes place outside the European Economic Area, it is carried out subject to the applicable data protection requirements, for example on the basis of an adequacy decision or appropriate safeguards such as standard contractual clauses.
13. Your rights
Subject to the applicable legal requirements, you have in particular the following rights:
- access to your personal data,
- rectification of inaccurate or incomplete data,
- erasure of your data,
- restriction of processing,
- data portability,
- objection to processing based on legitimate interests, and
- withdrawal of consent with effect for the future.
To exercise your rights, please contact us at office@viennoir.com.
14. Right to lodge a complaint
If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with a data protection supervisory authority. In Austria, the competent authority is:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria
Email: dsb@dsb.gv.at
dsb.gv.at
15. Changes to this privacy policy
We update this privacy policy when our website, the services we use or the applicable legal requirements change. The version published on this website at the relevant time applies.