PRIVACY POLICY

for eu.sbam.rocks

A. CONTROLLER & RESPONSIBILITIES

This Privacy Policy explains how personal data is processed in connection with the website and online shop at eu.sbam.rocks.

Two operators are involved, depending on the service used.

SHOP OPERATION (ONLINE SHOP / MERCHANDISE / ORDERS)

The online shop at eu.sbam.rocks is operated by:

SBAM Records
Marktstraße 25
4090 Engelhartszell
Austria
Email: shop@sbam.rocks

SBAM Records is responsible for personal data processed in connection with online shop orders, merchandise sales, customer accounts, product inquiries, shop-related newsletters, customer service and shop marketing.

EVENT OPERATION (SBAM FEST)

Ticketing and event-related services concerning SBAM Fest are handled by:

Longstocking Productions GmbH
Hauptstraße 54
4092 Esternberg
Austria
Email: bigi@sbam.rocks

Longstocking Productions GmbH is responsible for personal data processed in connection with SBAM Fest ticket sales, event registration, admission, event-related communication, refunds or rescheduling, and related legal obligations.

Where personal data is shared between SBAM Records and Longstocking Productions GmbH, this takes place only where necessary and legally permitted.

B. PURPOSES AND LEGAL BASES

We process personal data to operate the website and shop, respond to inquiries, fulfil orders and event contracts, arrange shipping and payments, meet legal obligations, protect the security of our services and, where consent has been given, send marketing communications.

Depending on the purpose, processing is based on consent (Art. 6(1)(a) GDPR), performance of a contract or steps taken before entering into a contract (Art. 6(1)(b) GDPR), compliance with a legal obligation (Art. 6(1)(c) GDPR), or legitimate interests such as website security, fraud prevention and the establishment or defence of legal claims (Art. 6(1)(f) GDPR).

C. DATA RECIPIENTS

Where necessary, personal data may be shared with service providers involved in operating the website and fulfilling orders or events. These may include shop and hosting providers, payment providers, shipping companies, ticketing systems, IT support, newsletter services and accounting providers.

Service providers processing personal data on our behalf are engaged under data processing agreements where required by Art. 28 GDPR.

D. DATA RETENTION

We retain personal data for as long as necessary for the relevant purpose and for any applicable legal retention period. Order, invoice and event billing records may need to be retained for up to 10 years. Inquiries are generally retained only as long as needed to respond and handle any related claims. Newsletter consent records are retained for as long as necessary to document consent.

Data may be retained longer where required by law or necessary for the establishment, exercise or defence of legal claims.

E. WEBSITE ACCESS AND SERVER LOGS

When you visit the website, technical information such as your IP address, date and time of access, pages visited, browser, operating system and referring page may be processed. This helps us provide a functioning and secure website and investigate technical errors or misuse. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR.

F. COOKIES AND CONSENT

The shop uses cookies and similar technologies that are necessary for its operation. Analytics and marketing technologies are used only where the applicable law permits their use or you have given the required consent. You can manage your choices through the cookie settings offered on the website and through your browser settings.

G. SHOP ORDERS

When you place an order, SBAM Records processes the information needed to fulfil it. This may include your name, contact details, delivery and billing addresses, ordered products, payment confirmation and correspondence about the order.

Processing is based on Art. 6(1)(b) GDPR for fulfilment of the order and Art. 6(1)(c) GDPR for legal obligations such as accounting.

H. SBAM FEST TICKETS

For SBAM Fest tickets and related event services, Longstocking Productions GmbH processes information needed to sell tickets, manage admission, communicate about the event and fulfil legal obligations. This may include purchaser details, ticket details, payment confirmations and admission data.

Processing is based on Art. 6(1)(b) and, where applicable, Art. 6(1)(c) GDPR.

I. NEWSLETTER

If you subscribe to a newsletter, the responsible operator processes your email address and consent information to send you the newsletter. You can unsubscribe at any time using the link in the newsletter or by contacting the responsible operator. The legal basis for sending the newsletter is your consent under Art. 6(1)(a) GDPR.

J. SECURITY

We use appropriate technical and organisational measures to protect personal data. These include access controls, encrypted connections and measures to limit access to people who need the data for their work.

K. YOUR RIGHTS

Subject to the applicable legal requirements, you have the right to request access to your personal data, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and withdraw consent at any time with effect for the future.

To exercise your rights, contact the operator responsible for the relevant service using the details in Section A. You also have the right to lodge a complaint with a data protection authority, including the Austrian Data Protection Authority.

L. CHANGES TO THIS POLICY

We may update this Privacy Policy when our processing activities or legal requirements change. The current version will be published on this website.