We take the protection of your personal data seriously and treat it confidentially and in accordance with the GDPR and this privacy policy.
1. Controller
HEAST! Audio-Produktion e.U., Pascal Obermayer
Thaliastraße 20, 1160 Vienna, Austria
Phone: +43 1 962 19 19 · E-mail: moc.oidua-tsaeh@ofni
2. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection at any time. You may withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.
3. Hosting
This website is hosted by easyname GmbH (Vienna, Austria; EU server location). When the site is accessed, data automatically transmitted by your browser (IP address, date/time, file requested, referrer, browser/OS) is processed in server log files. Purpose: secure, stable operation. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). A data processing agreement is in place.
4. Contact & contact form
When you use the contact form or contact us by e-mail, we process the data you provide (name, e-mail address, message) to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual) or (f) (legitimate interest in responding). The data is stored until your enquiry has been dealt with and no statutory retention obligations apply.
5. Cookies & consent
Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR. All non-essential services (maps, embedded media) are only loaded after your explicit consent (Art. 6(1)(a) GDPR in conjunction with § 165(3) of the Austrian Telecommunications Act 2021). You may withdraw your consent at any time with effect for the future.
6. Google Maps (contact page)
To display our location we embed a Google Maps map (Google Ireland Limited, Dublin, Ireland). The map is only loaded after your consent; your IP address is transmitted to Google, possibly also to the USA (EU-US Data Privacy Framework / standard contractual clauses). Legal basis: Art. 6(1)(a) GDPR.
7. Spotify (embedded players)
On individual pages we embed content from Spotify (Spotify AB, Stockholm, Sweden). The content is only loaded after your consent; data may be transmitted to Spotify. Legal basis: Art. 6(1)(a) GDPR.
8. Google Search Console
We use the Google Search Console (Google Ireland Limited) to evaluate how our website is found in Google Search. Generally aggregated, not directly personal search data is processed. Legal basis: Art. 6(1)(f) GDPR.
9. Web analytics with Matomo
We use Matomo, a self-hosted open-source web analytics tool running on the same server (easyname, Austria/EU). No data is transferred to third parties or third countries. Matomo is operated cookieless with IP anonymisation and respect for “Do Not Track”; only pseudonymous, aggregated usage data (pages visited, traffic source, approximate region, device/browser) is processed for reach measurement. Legal basis: Art. 6(1)(f) GDPR.
10. SSL/TLS encryption
For security reasons this website uses SSL/TLS encryption (recognisable by “https://”).
Last updated: June 2026.