PRIVACY
POLICY
1. Introduction
We are committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains how we collect, process, and store personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Austrian data protection laws.
By using this website, you consent to the practices described in this policy where applicable.
2. Data Controller
Heureka Music Agency GmbH
Lena Lombos-Kolyvek
Fritz-Kandl-Gasse 5. 4/16.
1210 Vienna, Austria
Email: l.kolyvek@heurekamusic.com
Phone: +43 676 631 1658
3. Scope of Application
This policy applies to:
-
this website and all its pages
-
booking inquiry forms
-
email communication
-
social media integrations
-
embedded third-party content
4. Types of Data Collected
We may process the following categories of personal data:
Contact Data
-
name
-
email address
-
phone number (optional)
Booking & Event Data
-
event type
-
location
-
date
-
additional event details provided by you
Technical Data
-
IP address
-
browser type and version
-
device type and operating system
Usage Data
-
pages visited
-
time spent on the site
-
interaction behavior
Media Interaction Data
-
video views (YouTube/Vimeo)
-
social embeds interaction
-
click behavior
5. Purpose of Data Processing
Your data is processed for the following purposes:
-
handling booking inquiries and communication
-
preparing offers and collaborations
-
providing and improving our services
-
website analytics and optimization
-
ensuring technical stability and security
-
marketing and audience engagement (with consent)
6. Legal Basis (GDPR)
We process personal data based on:
-
Art. 6(1)(a) GDPR – Consent
-
Art. 6(1)(b) GDPR – Contract / pre-contractual measures
-
Art. 6(1)(f) GDPR – Legitimate interests
7. Booking & Contact Forms
When you submit a form:
-
your data is used to process your inquiry
-
may be used for further communication regarding your request
-
will not be shared without legal basis
This is considered pre-contractual processing under GDPR.
8. Cookies & Consent Management
We use cookies and similar technologies to:
-
ensure website functionality
-
analyze user behavior
-
embed external content (video, social media)
-
improve user experience
You can:
-
accept or reject cookies via the consent banner
-
change settings at any time
We use a Consent Management Platform (CMP) to ensure GDPR compliance.
9. Analytics & Tracking Technologies
We may use:
-
Google Analytics
-
Meta (Facebook / Instagram) tracking
-
other analytical tools
These may collect:
-
pseudonymized IP address
-
device and browser data
-
interaction data
These tools are used only with consent
10. Embedded Content
Our website may include:
-
YouTube / Vimeo videos
-
Instagram / Facebook embeds
-
other media platforms
When interacting with this content:
-
data may be transmitted to those platforms
-
those providers may set cookies
Please review their respective privacy policies.
11. Social Media
We maintain social media profiles (e.g. Facebook, Instagram).
-
interaction may lead to data processing by these platforms
-
in some cases, joint responsibility under Art. 26 GDPR may apply
12. International Data Transfers
Some providers (e.g. Google, Meta) may transfer data outside the EU (e.g. USA).
We ensure safeguards through:
Standard Contractual Clauses (Art. 46 GDPR)
13. Data Retention
We store personal data only as long as necessary:
-
booking inquiries → until completion
-
communications → until no longer needed
-
legal obligations → up to 10 years
14. Data Security
We implement appropriate technical and organizational measures including:
-
secure hosting environments
-
encryption where possible
-
restricted access
-
monitoring and protection systems
15. Third-Party Services
We may use services such as:
-
website hosting providers
-
analytics tools
-
cloud services
-
communication tools
These providers act as data processors and are bound by contracts under GDPR.
16. Your Rights
Under GDPR, you have the right to:
-
access your data
-
correct inaccurate data
-
request deletion (“right to be forgotten”)
-
restrict processing
-
data portability
-
withdraw consent
-
object to processing
-
lodge a complaint
17. Supervisory Authority
Austrian Data Protection Authority (DSB)
https://www.dsb.gv.at/
18. Withdrawal of Consent
You may withdraw your consent at any time, e.g.:
-
via cookie settings
-
by contacting us
Withdrawal does not affect prior lawful processing.
19. Changes to this Policy
We reserve the right to update this Privacy Policy to reflect legal or technical changes.
20. Contact
For any privacy-related inquiries:

