Privacy notice

1. Controller and contact details

Please use these contact details for questions about data protection or to exercise your rights.

2. Visiting the website and hosting

When you visit the website, technically necessary connection data is processed, including your IP address, the time of access, the requested address, browser and device information, and technical status and error data. This is used to deliver content, resolve errors and protect against misuse. The legal basis is our legitimate interest in a secure, functioning website under Article 6(1)(f) GDPR.

This website is hosted by Mittwald. Mittwald processes technical connection data to deliver the website.

Our website application does not maintain its own visitor database. The hosting platform retains technical logs for its operational and security purposes. When a specific error or security incident is investigated, relevant information may be needed until the matter is resolved.

3. Event and catering enquiries

Enquiries request the venue, event duration, preferred date or start and end dates, number of guests, event type, contact person's name and email address. Company name, street and building number, postcode, city and message are optional. Required fields allow us to allocate and respond to your enquiry. You may also contact us directly by email or telephone.

When you select “Send enquiry”, the form transmits your details over HTTPS to our server at Mittwald. The server validates them and forwards the enquiry via our email service provider using SMTP. Event enquiries are sent to location@anyact.at and catering enquiries to caka@anyact.at. The email service providers involved process the message to transmit it and provide the mailboxes.

To prevent automated or excessive submissions, the server stores a value derived from your IP address using a secret key, together with the time of submission. The limit counts submissions from the past hour only. Older entries are removed the next time the technical list is successfully updated. The legal basis is our legitimate interest in keeping the form available and preventing misuse under Article 6(1)(f) GDPR.

We use your details to advise you, prepare quotations and handle your enquiry. For your own contractual or booking enquiries, the legal basis is Article 6(1)(b) GDPR. For enquiries made as a company contact or other correspondence, it is our legitimate interest in business communication under Article 6(1)(f) GDPR. Making an enquiry does not constitute consent to advertising.

Please do not include sensitive personal information about guests, such as health information linked to named individuals, in the general message field. Special catering requirements can initially be provided without identifying individuals.

4. Browser autofill

The forms support your browser's autofill function for name, company, email address and postal address. Your browser settings and your choices determine whether information is suggested or filled in. We do not research visitors or access your complete address book or stored browser profiles. Filled-in details remain editable before sending. The website does not itself store your contact details in the browser for future visits.

5. Cookies, analytics and local functions

Our website code does not use analytics or marketing services, advertising pixels or tracking cookies. Form data is not stored in Local Storage or Session Storage. Technical hosting logs are described above under “Visiting the website and hosting”. Fonts and images are delivered with the website; Google Fonts is not contacted.

If you choose a language using DE | EN, the website stores only your language preference in your browser's Local Storage under “hdi-language”. This allows your choice to be used when you return to the homepage. No contact or form data is stored with it. You can change the preference using the language switch or remove it by clearing this website's browser data.

“Print directions” opens your browser's print dialogue. Our website application does not transmit your printer selection or any PDF you create to us.

6. External links

Google Maps for route planning, Matterport tours, the Bösendorfer programme and other external services are provided as links. The website application does not load embedded maps or tours. You contact the relevant provider only when you open a link; their privacy notice then applies. This also applies to the linked main website anyact.at.

7. Recipients and retention

Enquiries are accessible to the people responsible for handling them and to necessary IT and email service providers. Information is shared with event or catering partners only where necessary to handle your specific order and where a legal basis exists.

Enquiries are retained only for as long as necessary to process them, fulfil a resulting order or protect legal claims. Statutory retention duties apply only to the documents concerned. Under section 132 of the Austrian Federal Fiscal Code (BAO), tax-relevant books, records and supporting documents generally have to be retained for seven years from the end of the relevant calendar year; ongoing proceedings may require longer retention. This period does not automatically apply to every enquiry from the date of the last contact.

8. Your rights

Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You may object to direct marketing at any time.

You may lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, email: dsb@dsb.gv.at, website: dsb.gv.at.

Our website application does not make solely automated decisions with legal or similarly significant effects and does not create visitor profiles.