Privacy Policy

Data controller

The controller within the meaning of the GDPR is:

What data we process

When you visit this website and use the contact form, we process the following personal data:

• Contact form: name and email address (required) and, optionally, organisation, preferred date, occasion and your message.
• Server log data generated technically when the website is accessed (e.g. IP address, timestamp, requested resource) by the hosting provider.
• When you submit the contact form, your IP address is briefly evaluated in the server’s memory to prevent abuse through mass submissions. It is not stored permanently and is not filed together with your inquiry.
• Your theme preference (light/dark/sepia) is stored locally in your browser under the key “il_theme”. This value never leaves your device and is not read by us.

Purpose and legal basis

• Contact form: to process and respond to your booking inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and/or (f) (legitimate interest in responding to inquiries).
• Operation and security of the website, including abuse prevention on the contact form: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation).
• Embedded music content: Art. 6(1)(a) GDPR (consent), which you give by actively loading the player.

Recipients / processors

To provide the service we use the following processors:

• Resend (email delivery service) — processes the data submitted through the contact form to deliver the inquiry to us by email.
• Railway (hosting provider) — operates the server infrastructure of this website.

Cookies

This website sets no cookies — neither its own nor any from third parties.

The selected language is part of the address (e.g. /en for English) and is not stored. Your theme preference is held under the key “il_theme” locally in your browser only, and is written only when you actively switch; it is never transmitted to us.

No analysis of your usage behaviour takes place. No tracking, analytics or advertising services are embedded. For that reason this website does not require cookie consent either.

Embedded third-party content

This website embeds music albums from Spotify. They are not loaded automatically: at first you only see a local preview, with no connection to Spotify.

Only when you actively click the player is a connection established to Spotify AB (Regeringsgatan 19, 111 53 Stockholm, Sweden). Your IP address and information about the page you are on are transmitted; Spotify may set cookies and analyse your usage — if you are logged in, in a personally identifiable way. This click constitutes your consent within the meaning of Art. 6(1)(a) GDPR and § 165(3) of the Austrian Telecommunications Act 2021, which you can withdraw at any time for the future by reloading the page and not activating the player again.

Our videos are not embedded: the preview images are served from our own server, and a click opens the video in a new tab on youtube.com. Only there — outside this website — does Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) process your data, under its own privacy policy. As long as you do not click, Google learns nothing about your visit.

We have no influence over the further processing by Spotify and Google.

Retention period

We store your inquiry only for as long as necessary to process it or as required by statutory retention periods.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing.

To exercise these rights, simply send a message to info@lingrid.live.

Right to lodge a complaint

You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority (dsb.gv.at).