Tickets

PRIVACY POLICY

Last updated: 14 October 2026

This Privacy Policy explains how Vienna in Touch e.U. processes personal data in connection with Founders Fest 2026 (13 November 2026, Vienna), including ticket sales, the event itself and the afterparty. It applies under the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

1. Controller and contact
The controller responsible for processing your personal data is:
Vienna in Touch e.U. Kaiserstrasse 68/42, 1070 Vienna, Austria Commercial Court Vienna (Handelsgericht Wien), FN 663055 g VAT ID: ATU78991316 Phone: +43 670 554 66 45 Email: hello@foundersfest.eu

For all questions about your personal data or to exercise your rights, contact us at hello@foundersfest.eu. We have not appointed a data protection officer, as we are not legally required to do so.

Category

Data

Source

Registration and ticket data

First and last name, email address, company, job title, ticket type, order and ticket number

You, via the ticketing platform Luma

Payment data

Payment status, amount, invoice details. Card or account data is processed by the payment provider; we do not see full card numbers

Luma and its payment provider (Stripe)

Ticket transfer data

Name and email of the new ticket holder

You or the person transferring the ticket

Communication data

Content of emails and messages you send us

You

Event check-in data

Name, ticket number, time of check-in, age verification for the 18+ event (we look at your ID but do not store a copy)

On site

Photos and video

Images and recordings in which you may appear

Taken at the event (see section 5)

Website and usage data

IP address, browser, device and pages visited

Our website foundersfest.eu and the Luma event page

You are not obliged to provide your data. Without your name and email, however, we cannot issue a ticket or let you into the event.

Purpose

Legal basis (GDPR)

Selling tickets, issuing and transferring named tickets, admission and check-in

Performance of a contract, Art. 6(1)(b)

Age check for the 18+ event

Legal obligation and legitimate interest in complying with youth protection rules, Art. 6(1)(c) and (f)

Invoicing, accounting and tax records

Legal obligation, Art. 6(1)(c) (Austrian tax law, BAO and UGB)

Event organisation, safety and handling of incidents

Legitimate interest in running a safe event, Art. 6(1)(f)

Sending you practical event information (schedule, changes, access details)

Performance of a contract, Art. 6(1)(b)

Information about future Founders Fest editions and similar events, sent to ticket buyers

Legitimate interest, Art. 6(1)(f), in line with § 174(4) TKG 2021; you can object at any time

Newsletters and marketing to anyone who is not a ticket buyer

Your consent, Art. 6(1)(a)

Photos and video for event documentation and promotion

Legitimate interest, Art. 6(1)(f) (see section 5)

Website analytics and non-essential cookies

Your consent, Art. 6(1)(a) and § 165(3) TKG 2021

Establishing, exercising or defending legal claims

Legitimate interest, Art. 6(1)(f)

We do not use your data for automated decision-making or profiling with legal effects.

4. Who receives your data
We share your data only where needed for the purposes above:
  • Luma (Luma AI, Inc., USA) runs ticket sales, registration and check-in. If you create or use a Luma account, Luma also processes your data under its own privacy policy as an independent controller.
  • Payment providers (Stripe, via Luma) process your payment.
  • IT and service providers, including Brevo (Sendinblue SAS, Paris, France) for newsletters and event emails, and providers we use for file storage, website hosting and communication, bound by data processing agreements.
  • Event venue, security and staff receive only what they need for admission and safety.
  • Photographers and videographers working on our behalf.
  • Tax advisers, auditors, lawyers and authorities where required by law.
Sponsors and partners: we do not sell your data and do not pass your name, email, company or job title to sponsors or partners without your separate, explicit consent.
Transfers outside the EU: some providers, including Luma and Stripe, are based in the USA. Transfers take place on the basis of the EU-US Data Privacy Framework where the recipient is certified, or on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR).

5. Photos and video at the event
Founders Fest is photographed and filmed. Signs at the entrance inform guests about this. We use the material to document the event and to promote Founders Fest, Vienna INTOUCH and our future events on our website, social media channels, in press work and in advertising.
We rely on our legitimate interest (Art. 6(1)(f) GDPR) for general crowd and atmosphere shots. Where you are clearly the focus of a picture used for advertising, we will ask for your consent where the law requires it, and we respect your rights under § 78 of the Austrian Copyright Act (UrhG).
If you do not want to be photographed, tell our photographer or staff on site. If you find a picture of yourself that you want removed, email hello@foundersfest.eu and we will remove it from our own channels.

6. Marketing, cookies and retention
Emails. As a ticket buyer you may receive information about future Founders Fest editions and similar events from us. Every email contains an unsubscribe link, and you can object at any time at hello@foundersfest.eu at no cost. Other newsletters are sent only with your consent, which you confirm via a link in a confirmation email (double opt-in). When you unsubscribe, we delete your newsletter data without delay. Our emails are sent via Brevo, an EU-based provider acting as our processor. Brevo records whether an email was opened and which links were clicked, so we can improve our mailings.

Cookies. When you visit our website, our hosting provider automatically records your IP address, browser type and the time of access in server log files. This is technically necessary to deliver and secure the website (legitimate interest, Art. 6(1)(f) GDPR). Log files are deleted after 30 days. Our website also uses technically necessary cookies. Analytics or marketing tools (for example Google Analytics or Meta Pixel) are used only after you consent via the cookie banner, and you can withdraw that consent at any time. The Luma event page is governed by Luma's own cookie policy.

How long we keep data.

Data

Retention

Ticket, registration and check-in data

Until 12 months after the event, then deleted, unless needed for legal claims

Invoices and accounting records

7 years (Austrian tax law, § 132 BAO)

Marketing contact data

Until you unsubscribe or object

Emails and enquiries

Up to 3 years after the matter is closed

Photos and videos

As long as used for documentation and promotion, or until a justified removal request

7. Your rights
Under the GDPR you have the right to:
  • access the data we hold about you (Art. 15)
  • have incorrect data corrected (Art. 16)
  • have your data deleted (Art. 17)
  • restrict processing (Art. 18)
  • receive your data in a portable format (Art. 20)
  • object to processing based on legitimate interest, including direct marketing (Art. 21)
  • withdraw any consent at any time, without affecting earlier processing (Art. 7(3))
To exercise these rights, email hello@foundersfest.eu. We may ask you to confirm your identity.
If you believe we process your data unlawfully, you can complain to the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

8. Changes
We may update this Privacy Policy when our processing or the law changes. The current version is always available on our website.