Privacy Policy
Your privacy is important to us — here you can find out how we protect your data.
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. For detailed information on the subject of data protection, please refer to our privacy policy set out below this text.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by COSMIC MUSIC GBHS OG. You can find their contact details in the legal notice (Impressum) of this website.
How do we collect your data?
Your data is collected in part by you providing it to us. This may include, for example, data you enter into a contact form.
Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right at any time to obtain information free of charge about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. For this purpose, as well as for further questions on the subject of data protection, you may contact us at any time at the address given in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
2. Hosting
External Hosting
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the servers of the host. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact details, names, website access data, and other data generated through a website.
The host is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).
Our host will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions with regard to this data.
3. General Information and Mandatory Disclosures
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the internet (e.g. communication by e-mail) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Notice Concerning the Responsible Party
The responsible party for data processing on this website is:
COSMIC MUSIC GBHS OG
Herrgottwiesgasse 192
8055 Graz
Österreich
E-Mail: sandro.humitsch@humitsch.at
The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).
Storage Duration
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the deletion will take place after these reasons cease to apply.
General Information on the Legal Basis for Data Processing
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, insofar as special categories of data are processed pursuant to Art. 9(1) GDPR.
If you have consented to the storage of cookies or access to information on your device (e.g. via device fingerprinting), data processing is additionally carried out on the basis of § 165 TKG 2021. Consent may be revoked at any time.
If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data if it is required to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR.
Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. The relevant legal bases applicable in each individual case are set out in the following sections of this privacy policy.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You may revoke any consent you have already given at any time. The legality of the data processing carried out prior to the revocation remains unaffected by the revocation.
Right to Object to Data Collection in Special Cases
IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
The competent data protection authority for us in Austria is:
Datenschutzbehörde
Barichgasse 40-42
1030 Wien
Telefon: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at
Website: https://www.dsb.gv.at/
4. Data Collection on This Website
Server Log Files
The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources.
The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website — for this purpose, the server log files must be collected.
Newsletter
If you wish to receive the newsletter offered on the website, we require an e-mail address from you. Registration is carried out via a double opt-in procedure. You may unsubscribe from the newsletter at any time.
We use the service Brevo (formerly Sendinblue) to send our newsletter. The provider is Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. Brevo processes your data on servers within the European Union. For further information, please refer to the Brevo privacy policy: https://www.brevo.com/legal/privacypolicy/.
The processing of the data entered in the newsletter sign-up form is carried out exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may revoke this consent at any time, for example via the unsubscribe link in each newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
Enquiries by E-Mail
If you contact us by e-mail, your enquiry including all personal data arising from it (name, enquiry) will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR, insofar as your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested.
The data you send to us via contact enquiries will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.
5. Social Media
Social Media Links
Our website contains links to social networks (Instagram, TikTok, YouTube, Spotify). These links direct you to the respective platforms. When you click on these links, you will be redirected to the external platforms. We have no influence over the data processing carried out by these providers.
The links to social media are provided via simple HTML links. No automatic data transfer or loading of external content takes place as long as you do not actively click on the links. Only when you click on a link do you leave our website and are redirected to the corresponding social media platform.
For information on the handling of your personal data when using social networks, please refer to the respective privacy policies of the providers.
6. Cookies and Website Technologies
Cookies
This website does not use tracking cookies or analytics tools. Only technically necessary cookies are used that are required for the operation of the website (e.g. language settings). Technically necessary cookies are exempt from the consent requirement pursuant to § 165(5) TKG 2021.
JavaScript
This website uses JavaScript for interactive features such as navigation and embedded content. JavaScript is only used for the basic functionality of the website and does not collect any additional personal data.
7. Your Rights as a Data Subject
As a data subject, you have the following rights:
Right of Access (Art. 15 GDPR)
You have the right to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from you, as well as the existence of automated decision-making including profiling and, where applicable, meaningful information about the details thereof.
Right to Rectification (Art. 16 GDPR)
You have the right to request the rectification and/or completion of your personal data processed by us, insofar as the personal data concerning you is inaccurate or incomplete. We shall carry out the rectification without undue delay.
Right to Erasure (Art. 17 GDPR)
You may request the erasure of your personal data, provided that the processing is not necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims.
Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer need the data, but you require it for the establishment, exercise, or defence of legal claims, or you have objected to processing and it has not yet been determined whether our legitimate grounds override yours.
Right to Data Portability (Art. 20 GDPR)
You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another controller.
Right to Object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
Right to Withdraw Consent
You have the right to withdraw your consent to data processing at any time. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent prior to its withdrawal.
Contact for Exercising Your Rights
If you wish to exercise any of the above-mentioned rights, please contact us at:
E-Mail: sandro.humitsch@humitsch.at
Or in writing to the address given in the legal notice (Impressum).
8. Data Security
We use the widely adopted SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit the website. This is typically 256-bit encryption. You can tell whether an individual page of our website is transmitted in encrypted form by the closed lock icon in the address bar of your browser.
We also employ appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
9. Changes to This Privacy Policy
We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
10. Questions About Data Protection?
If you have any questions about this privacy policy or would like to learn more about the processing of your personal data, please do not hesitate to contact us:
COSMIC MUSIC GBHS OG
Herrgottwiesgasse 192
8055 Graz, Österreich
E-Mail: sandro.humitsch@humitsch.at