top of page

Privacy Policy

in accordance with Art. 13 GDPR and § 165 TKG 2021
Highpoints Events GmbH – The Grand Table, Schönbrunn Palace

 

1. Data Controller

Highpoints Events GmbH
Annagasse 3–3A/8
A-1010 Vienna, Austria
Email: office@highpoints.at
Phone: +43 (0)1 512 57 90

 

2. Data Protection Officer

Our external Data Protection Officer can be reached at:
datenschutz@shi-group.at

 

3. Purpose of Data Processing

We process personal data for the following purposes:

  • Organization and management of "The Grand Table" event

  • Handling of ticket sales

  • Responding to inquiries

  • Sending newsletters (only with prior consent)

  • Website analysis and optimization

  • Compliance with legal obligations

 

4. Data Collected

  • Contact data: name, email address, phone number

  • Payment data: when purchasing tickets via oeticket/CTS Eventim

  • Usage data: IP address, browser type, access time, page views

  • Communication content: messages via contact form or email

 

5. Ticket Sales via oeticket.at

Ticket sales are handled via a widget from CTS Eventim Austria GmbH (oeticket.at).
All data processing related to ticket purchases is carried out independently by oeticket.
You can find their privacy policy at:
https://www.oeticket.com/help/data-protection

 

6. Legal Basis for Processing

  • Art. 6(1)(b) GDPR – for contract performance (e.g., event participation)

  • Art. 6(1)(a) GDPR – based on consent (e.g., newsletters, cookies)

  • Art. 6(1)(f) GDPR – legitimate interest (e.g., IT security, web analytics)

 

7. Use of Cookies

Our website uses cookies – small text files stored on your device. We distinguish between:

  • Essential cookies (required for website functionality)

  • Analytics cookies (e.g., Google Analytics)

  • Marketing cookies (e.g., Facebook Pixel)

When you first visit our site, you will be asked for your consent via a cookie banner.
You may change or withdraw your selection at any time through your browser settings.

 

8. Tools and Services Used

Google Analytics

  • Provider: Google Ireland Ltd.

  • Purpose: Usage and traffic analysis

  • Data may be transferred to the U.S. under Standard Contractual Clauses (Art. 46 GDPR)

  • Legal Basis: Consent (Art. 6(1)(a) GDPR)

Facebook Pixel

  • Provider: Meta Platforms Ireland Ltd.

  • Purpose: Analytics and targeted advertising

  • Data transfer to the U.S. may occur

  • Legal Basis: Consent (Art. 6(1)(a) GDPR)

Eventim Widget

  • Provider: CTS Eventim Austria GmbH

  • Purpose: Ticket sales

  • Collects technical usage data for processing purchases

  • Legal Basis: Contract performance (Art. 6(1)(b) GDPR)

 

9. Hosting & Website Services via Wix.com

Our website is hosted by Wix.com Ltd., Nemal St. 40, 6350671 Tel Aviv, Israel.
Wix provides the infrastructure for hosting, email services, and analytics tools.

Wix processes personal data as part of a data processing agreement, including:

  • IP address and usage data during website visits

  • Contents of contact forms and newsletter sign-ups

  • Order and payment data (when booking tools are integrated)

Data processing is based on our legitimate interest in a secure and professional online presence (Art. 6(1)(f) GDPR).
Wix may use subcontractors in third countries (e.g., USA).
Israel is recognized by the EU as offering an adequate level of data protection (Art. 45 GDPR).

More information: https://de.wix.com/about/privacy

 

10. Data Recipients & Data Processors

We engage data processors (e.g., IT service providers, newsletter tools) that act on our behalf and comply with GDPR obligations.
Data is only shared with third parties where legally required or contractually necessary.

 

11. Data Retention

We retain your data only as long as necessary for the stated purposes or as required by law.
Data provided based on consent (e.g., newsletters) will be stored until that consent is withdrawn.

 

12. Your Rights Under GDPR

You have the right to:

  • Access your stored data

  • Correct inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict data processing

  • Data portability

  • Object to processing under Art. 6(1)(f) GDPR

  • Withdraw consent at any time

For all requests, please contact: datenschutz@shi-group.at

 

13. Right to Lodge a Complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority:
www.dsb.gv.at
Barichgasse 40–42, 1030 Vienna, Austria

 

14. Data Security

We implement technical and organizational security measures to protect your data against loss, misuse, and unauthorized access.

 

Last updated: July 2025

bottom of page