In short
This website uses no cookies, no tracking and no analytics tools. No third-party content is embedded; even the fonts are served from our own server. We only process personal data when you write to us via a form or by email.
Hosting and server logs
The website is hosted by our provider easyname in Austria (OPEN: exact company name and address according to the contract), which processes data on our behalf under a data processing agreement. When you visit the website, the server processes technically necessary data such as IP address, time, page requested and browser identifier in order to deliver the page and keep operations secure (Art. 6(1)(f) GDPR). These logs are deleted after OPEN: retention period according to easyname.
Workshop request
When you request a workshop, we process the details from the form: workshop and date or preferred date, whether you are booking privately or for a school, group or company (and its name), first and last name, email address, phone number (optional), number of adults and children, children’s ages (optional, without names) and your message (optional).
The purpose is to handle your request and, where applicable, to book the workshop (Art. 6(1)(b) GDPR). The details are not stored on the web server; they are only forwarded to us by email, and you receive a copy as confirmation. The emails are kept in our mailbox with the same provider.
Requests that do not lead to a booking are deleted once they have been dealt with. Records of bookings are kept for as long as statutory retention obligations require (generally 7 years under § 132 of the Austrian Federal Fiscal Code).
Contact form and email
When you write to us via the contact form or by email, we process your name, email address and message in order to reply (Art. 6(1)(b) or (f) GDPR). These details are also only forwarded to us by email and are deleted once the matter is settled and no retention obligation applies.
Spam protection
To prevent misuse of the forms, we count how often messages are sent from one IP address (at most 5 times per hour). For this we only store a pseudonymised check value (hash) of the IP address – not the address itself – together with the time; it is deleted after one hour (Art. 6(1)(f) GDPR).
Links to other websites
We link to OpenStreetMap for the map and to our Instagram profile. These services are not embedded: data is only transferred when you click such a link. The privacy policy of the respective provider then applies.
Your rights
You have the right to access, rectification, erasure and restriction of processing of your data, to data portability and to object to processing. Just send us an email.
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Datenschutzbehörde (Data Protection Authority), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
Last updated: October 2026