Privacy Policy

Last updated: 9 July 2026

1. Who is responsible (Controller)

The controller responsible for data processing on this website within the meaning of the GDPR is the site operator:

2. What data we process

This site has no user accounts and no login. You can browse and discover events without registering or identifying yourself.

• Saved events (privacy-friendly): Events you save are stored only in your browser's localStorage on your own device. This data never leaves your browser and is never sent to or seen by our servers.
• Event submission & contact forms: When you submit an event or contact us, we process the name, email address and message you choose to enter. This is stored so we can review submissions, respond to you, and add or correct event listings.
• Technical server logs: Like most websites, our hosting infrastructure may temporarily process technical connection data (such as IP address, browser type and time of access) to deliver the site securely and reliably.

3. Analytics

This site uses Google Analytics 4 (gtag) to understand how the site is used — but ONLY after you actively choose "Accept all" in our cookie banner. If you choose "Essential only", or before you choose at all, no Google Analytics script and no analytics cookie is loaded whatsoever (it is consent-gated, and additionally environment-gated by the operator).

Once you accept, Google Analytics sets cookies and processes usage data (IP addresses are handled under Google's EU-specific data terms). You can withdraw consent at any time by clearing this site's cookies (which brings the banner back), enabling your browser's "Do Not Track" (DNT) setting, or using an analytics-blocking extension. Your banner choice applies across all of our sites — see Cookies below.

4. Third-party services & embedded content

Some content is loaded from third-party servers. When such content loads, your IP address is necessarily transmitted to that provider so the content can be delivered to your browser:

• Map tiles (OpenStreetMap / CARTO via Leaflet): Our map view loads map tiles from OpenStreetMap and CARTO servers, which receive your IP address to serve the tiles.
• Event images (hotlinked): Some event images are loaded directly from the source sites (for example kultursommer.wien, ra.co, or TMDB), which receive your IP address when the image loads.
• External booking & organiser links: Links to venues, ticketing and organiser websites take you to third-party sites governed by their own privacy policies.
• Web fonts: If web fonts (e.g. Google Fonts) are used, the relevant font provider may receive your IP address when fonts are loaded.

5. Legal basis (GDPR Art. 6)

• Processing of form data to respond to you and review submissions: our legitimate interest and, where applicable, steps taken at your request (Art. 6(1)(b) and (f) GDPR).
• Secure, reliable delivery of the site (server logs): our legitimate interest (Art. 6(1)(f) GDPR).
• Analytics and non-essential third-party content, where required: your consent (Art. 6(1)(a) GDPR).

6. Data retention

We keep form submissions only as long as needed to handle your request and to maintain accurate event listings, after which they are deleted or anonymised. localStorage "saved events" remain on your device until you clear them via the site or your browser. Server logs are kept only for a short period for security and operational purposes.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, objection, and data portability regarding your personal data. To exercise any of these, contact us using the details above.

You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Data Protection Authority (Österreichische Datenschutzbehörde, DSB), Barichgasse 40–42, 1030 Vienna — dsb.gv.at.

8. Cookies — summary

We keep cookies to a minimum. Essential ones only: a small cookie remembering your cookie choice (so we don't ask again) and your language preference. "Saved events" use your browser's localStorage, not cookies. Non-essential Google Analytics cookies are set ONLY if you choose "Accept all" in the banner — never before, and never if you choose "Essential only".

One choice for everything: your consent is stored once per device and applies across all of our sites together — showtimes.at, zeiten.at and the kids portals (kids.showtimes.at / kinder.zeiten.at), which are operated by the same operator — so you are not asked again on each site or language. You can change or withdraw your choice at any time by clearing this site's cookies, which brings the banner back.

9. Changes to this policy

We may update this privacy policy to reflect changes to the site or legal requirements. The current version always applies, dated at the top of this page.