Rights & Law
Controller subject to Austrian and European law; please refer to the Imprint.
You have the right to access, rectification, erasure and restriction of processing of your data, to data portability, and to object to processing based on Art. 6(1)(f) GDPR. You can withdraw consent at any time with effect for the future. To exercise these rights, write to office@mmvi-music.com. You also have the right to lodge a complaint with a supervisory authority; in Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

Infrastructure
This service runs on servers of Infomaniak Network SA in Switzerland, which the European Commission recognises as providing an adequate level of data protection.
Every time a page is accessed, the server stores your IP address, the time, the page requested, the referring page and your browser type in log files. This is necessary to run the website and keep it secure. The log files are deleted after 7 days. The legal basis is Art. 6(1)(f) GDPR.

Spam protection (Captcha)
To protect our forms (such as the contact form and login) against spam and automated attacks, we use the OH MY WEB Captcha. Powered by ALTCHA.

The captcha works without picture puzzles as long as no unusual activity is known. While you fill in a form, your browser solves a small computational task in the background. To do this, your browser loads a script from api.oh-my-web.com, fetches a task from there and sends the solution to us together with the form. We then have the solution checked by the provider.

The following data is processed:

• Your IP address and technical connection data (such as browser type). These are technically necessary for the transmission.
• The address of the website on which the form is filled in.
• The computed solution to the task.

No cookies are set and no data is stored in your browser. Mouse movements, keystrokes and form contents are not analysed, and no profiles are created. Your IP address is not written to log files. It is held in memory for at most one minute to prevent abuse through excessive requests. Solved tasks are recorded without any personal reference until they expire (30 minutes), so that each solution can only be used once.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is protecting our website and forms against spam and abuse.

Login protection
Login is only for personnel. Failed logins are logged for 30 days with a hashed code instead of the IP address to stop attacks. After logging in, a cookie remembers the device (Art. 6(1)(f) GDPR).

Apple Music
Music is embedded with the Apple Music player (Apple Distribution International Ltd., Ireland; Apple Inc., USA), only after your consent (Art. 6(1)(a) GDPR). Apple receives the IP address and usage data and may set cookies, also in the USA.
The USA does not offer a level of data protection equivalent to the EU; the transfer is based on your consent (Art. 49(1)(a) GDPR).

Bandsintown
Tour dates are shown with the Bandsintown widget (Bandsintown LLC, USA), only after your consent (Art. 6(1)(a) GDPR). The IP address and usage data are sent to Bandsintown in the USA.
The USA does not offer a level of data protection equivalent to the EU; the transfer is based on your consent (Art. 49(1)(a) GDPR).

Visitor statistics
This website counts page views with its own statistics. Only the page and, where present, the referring website are stored as daily totals. No cookies are set, no IP addresses are stored and no data is sent to third parties (Art. 6(1)(f) GDPR).

Consent
Your choice in the cookie notice is kept in a cookie (omw_consent) for 6 months. To be able to demonstrate consent (Art. 7 (1) GDPR) we also keep a random consent ID, the time, the choice and the version of the notice for 2 years, without IP address (Art. 6 (1) (c) GDPR). You see the ID under “Cookie settings”, where you can change or withdraw your choice at any time.

Contact Forms
If you contact us using a form, we process the information you enter (such as name, e-mail address and message) to answer your request. The form is sent to us by e-mail via the mail servers of Infomaniak Network SA in Switzerland; and can also be stored on our website, together with the time and, where enabled, your IP address and browser type. We keep your message as long as needed to handle your request, and then delete it after the statutory retention periods have passed. The legal basis is Art. 6(1)(b) GDPR, or Art. 6(1)(f) GDPR for general enquiries.