Privacy Policy

Controller according to the GDPR

TOG Studio e.U.
Josef-Schwer-Gasse 9a
5020 Salzburg
Austria
Email: hello@togstudio.at
Phone: +43 664 865 35 23

1. General Information

Protecting your personal data is especially important to us. We process your data exclusively on the basis of legal regulations (GDPR, DSG 2018, TKG 2021).
This privacy policy explains the key aspects of data processing within our website and our services as an event agency.
Personal data includes all information relating to an identified or identifiable natural person (e.g., name, email, address, phone number).

2. Collection and Processing of Personal Data

2.1 When visiting our website

When accessing our website, technical data (IP address, browser type, referrer URL, time of access) is automatically transmitted by your browser and stored in server log files.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
Storage period: 30 days.

2.2 When using the contact form or emailing us

We store your information (name, email, message, phone number if provided) to process your inquiry.
Legal basis: Pre-contractual measures/contract fulfillment (Art. 6(1)(b) GDPR) or consent (Art. 6(1)(a) GDPR).
Storage period: Until the inquiry is resolved; longer if a contract is formed.

2.3 When booking/registering for events

We process your name, address, email, phone, payment data if necessary, and special details such as allergies.
Legal basis: Contract fulfillment (Art. 6(1)(b) GDPR) or consent for special categories (Art. 9 GDPR).
Storage period: 7 years for tax reasons (§ 132 BAO).

2.4 Photos and videos at events

Photos/videos may be taken at events and published online. We inform attendees in advance (e.g., signs) and obtain consent where required.
Legal basis: Consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR).
Objection is possible at any time.

3. Data Sharing

Data is shared only where necessary for contract fulfillment (e.g., caterers, venues, photographers with data processing agreements) or legally required.
No sale of data.
Transfers to third countries only occur with adequate safeguards (e.g., EU standard contractual clauses).

4. Cookies and Analytics

We only use technically necessary cookies.

5. Your Rights

You have the right to access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent.
You may file a complaint with the Austrian Data Protection Authority (dsb@dsb.gv.at).

6. Data Security

We take technical and organizational measures such as SSL encryption.

7. Changes

We may update this policy. The latest version is always available on our website.