
Privacy Policy
Data protection declaration in accordance with GDPR, TKG 2021 & DSG
Privacy Policy
As of: April 2026
1. Privacy at a Glance
The protection of your personal data is of particular concern to us. We process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2021, DSG). In this privacy policy, we inform you about the most important aspects of data processing within the framework of our website.
2. Controller & Contact
Responsible for data processing on this website is:
Kulturverein Circus- & Clownmuseum
Ilgplatz 7/1, 1020 Vienna
Austria
ZVR Number: 357515138
Email: office@circus-clownmuseum.at
3. Web Hosting by Vercel
We host our website with the provider Vercel (Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA). To provide the website, server log files (including IP address, browser type, operating system, date/time of access) are processed.
- Legal basis: Our legitimate interest in a technically error-free presentation and optimization of our website (Art. 6 para. 1 lit. f GDPR).
- Data processing & third country transfer: We have concluded a data processing contract (Data Processing Addendum) with Vercel. Vercel is certified under the EU-US Data Privacy Framework. In addition, the transfer of data to the USA is based on the Standard Contractual Clauses (SCCs) of the EU Commission to guarantee an adequate level of data protection.
4. Contact with Us
If you contact us via the form on the website or by email, the data you provide will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.
- Legal basis: Fulfillment of a contract or implementation of pre-contractual measures (Art. 6 para. 1 lit. b GDPR).
5. Newsletter (CleverReach)
You have the opportunity to subscribe to our newsletter via our website.
- Service provider: We use the German provider CleverReach (CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany) for sending. Your data is stored on servers in the EU. We have concluded a legally required data processing contract with CleverReach.
- Double-Opt-In: After registration, you will receive an email with a confirmation link. Only after this confirmation is the registration effective.
- Analysis: The newsletters contain so-called "web beacons" to determine whether emails were opened and which links were clicked. This serves to optimize our information offer.
- Revocation: You can unsubscribe from the newsletter at any time via the unsubscribe link in any email or by message to us.
- Legal basis: Your consent (Art. 6 para. 1 lit. a GDPR) or, in the case of existing association members or customers, our legitimate interest in direct marketing (§ 174 TKG 2021 in conjunction with Art. 6 para. 1 lit. f GDPR).
6. Storage Duration
We store personal data only as long as is necessary to fulfill the respective purposes or as required by law:
- Contact inquiries: Data from the contact form or by email will be deleted after final processing of your request, unless this results in a contract or a statutory retention obligation (e.g. tax obligations for ticket purchases).
- Newsletter data: Your data for sending the newsletter remains stored for the duration of the subscription. After unsubscribing, this data is immediately deleted or anonymized.
7. Cookie Consent & Tracking
We use a cookie consent banner (Silktide Consent Manager) on our website, which allows you to decide which cookie categories you wish to allow. Data collection and processing only take place after your explicit consent (opt-in). You can revoke your consent at any time with effect for the future via the cookie banner.
For statistical analysis and advertising purposes, we use the following services:
- Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) — with IP anonymization enabled
- Google Ads / Google Conversion Tracking (Google Ireland Limited)
- Eventim Light / Öticket (CTS Eventim AG, Raboisen 3–5, 20095 Hamburg, Germany) — ticket shop integration
- Eventjet (Eventjet GmbH) — ticket shop integration
A data processing agreement has been concluded with Google.
Overview of Cookies Used
| Cookie Name | Domain | Purpose | Storage Duration | Category |
| NEXT_LOCALE | circus-clownmuseum.at | Language preference | Session | Essential |
| CookieConsent | circus-clownmuseum.at | Stores your consent decision | 1 year | Essential |
| _ga | circus-clownmuseum.at | Distinguishes users (Google Analytics) | 2 years | Analytics |
| ga* | circus-clownmuseum.at | Session state (Google Analytics) | 2 years | Analytics |
| _gid | circus-clownmuseum.at | Distinguishes users (Google Analytics) | 24 hours | Analytics |
| _gat | circus-clownmuseum.at | Request throttling (Google Analytics) | 1 minute | Analytics |
| _gcl_au | circus-clownmuseum.at | Conversion tracking (Google Ads) | 3 months | Marketing |
| __cmp# | eventim-light.com | Consent management (Eventim) | 1 year | Marketing |
| _abck | eventim-light.com | Bot detection (Eventim/Akamai) | 1 year | Essential |
| ak_bmsc | eventim-light.com | Bot detection (Eventim/Akamai) | 2 hours | Essential |
| bm_sz | eventim-light.com | Bot detection (Eventim/Akamai) | 2 hours | Essential |
| bm_mi | eventim-light.com | Bot detection (Eventim/Akamai) | 2 hours | Essential |
| TAB_ID | eventim-light.com | Session identification (Eventim) | Session | Essential |
| ak_a | eventim-light.com | Authentication (Eventim/Akamai) | Session | Essential |
| ak_ax | eventim-light.com | Authentication (Eventim/Akamai) | Session | Essential |
| bmint_j | eventim-light.com | Bot detection (Eventim/Akamai) | Session | Essential |
| sentryReplaySession | shop.eventjet.at | Error analysis (Eventjet/Sentry) | Session | Marketing |
| attribution_parameters_* | shop.eventjet.at | Booking attribution (Eventjet) | Session | Marketing |
- Legal basis: Processing is based on your consent (Art. 6 para. 1 lit. a GDPR), which you give via our cookie banner. Technically necessary cookies (category "Essential") are based on our legitimate interest (Art. 6 para. 1 lit. f GDPR in conjunction with § 165 para. 3 TKG 2021).
8. External Content (Google Fonts, Maps, YouTube)
In order to design our content in an appealing and informative way, we integrate third-party services (e.g. Google Fonts, Google Maps or YouTube videos). For technical reasons, your IP address is transferred to the provider (e.g. Google).
- Legal basis: If consent was requested via the cookie banner, this is the legal basis (Art. 6 para. 1 lit. a GDPR). Otherwise, the integration takes place on the basis of our legitimate interest in an appealing presentation of our online offer (Art. 6 para. 1 lit. f GDPR).
9. Ticket Sales via Third Parties
We integrate third-party ticket shops directly on our website:
- Eventim Light (Öticket) — The ticket shop is loaded as an embedded iframe from
www.eventim-light.com. Cookies from Eventim and Akamai are set (see cookie table in section 7). The CTS Eventim AG's terms and privacy policy apply to the actual ticket purchase. - Eventjet — The ticket shop is integrated via a script from
shop.eventjet.at. Cookies for analysis and booking purposes may be set (see cookie table in section 7).
These services are embedded only after your consent via the cookie banner (category "Marketing"). The respective provider is responsible for the ticket purchase and payment processing. Please note their privacy policies.
10. Your Rights
You are generally entitled to the rights of access, rectification, erasure, restriction, data portability, revocation, and objection. If you believe that the processing of your data violates data protection law, you can complain to us or the supervisory authority.
Competent Supervisory Authority
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
Email: dsb@dsb.gv.at
Kulturverein Circus- & Clownmuseum • Ilgplatz 7/1, 1020 Vienna
