DEEN

Legal

Privacy policy

Last updated: November 2026

1. Controller

MAGMAG Events GmbH
Leystraße 43
1200 Vienna, Austria
Email: support@lichtergarten.at

We take the protection of your data seriously and process personal data solely on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). We only use advertising and measurement tools (marketing pixels) if you explicitly agree in the cookie notice.

2. Hosting and server logs

This website is hosted by Hostinger International, Ltd, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Hostinger processes data on our behalf (Art. 28 GDPR).

When you visit the website, the server stores technically necessary access data in log files: IP address, date and time, page requested, amount of data transferred, the previously visited page (referrer) as well as browser and operating system. This data is used to run the website securely and reliably and to fend off attacks. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The logs are deleted automatically once they are no longer needed for these purposes.

3. Cookies and storage in your browser

Without your consent we do not use tracking or advertising cookies. In your browser's storage (local storage or session storage) we only keep what the website needs to work:

  • your choice in the cookie notice (external content such as Google Maps, marketing),
  • whether you have closed the notice bar at the top of the page,
  • the chat assistant's conversation for the duration of your visit (deleted when you close the browser tab).

The legal basis is Section 165(3) TKG 2021 (technically necessary) and Art. 6(1)(f) GDPR. You can delete this data at any time in your browser settings.

4. Visitor statistics (without cookies)

To understand how our website is used, we compile anonymous visitor statistics on our own server. When a page is opened, the following is transmitted for this purpose: the page viewed, the referring website (its name only, without the exact address), the campaign tag from the address (UTM parameters), screen width, time zone and language of the browser, the time the page was visible, as well as clicks on ticket links and use of the chat assistant (without the content of questions).

We do not use cookies for this and store nothing in your browser. We do not store your IP address: from the IP address and browser identifier, combined with a random value generated anew every day, we create an encrypted identifier with which we count the page views of one day. The random value is deleted daily, so you can neither be identified personally nor recognised on another day. From the time zone we only derive the country. Individual data is deleted after 31 days; after that only aggregated daily figures remain. The statistics are not passed on to third parties.

The legal basis is our legitimate interest in designing and improving our website according to demand (Art. 6(1)(f) GDPR). You can object at any time: if “Do Not Track” or “Global Privacy Control” is switched on in your browser, your visit is not counted.

5. Google Maps (only with your consent)

To show how to get there, we display maps from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). A map is only loaded once you agree. Your IP address and information about your browser are then transmitted to Google; a transfer to the USA is possible. Google is certified under the EU-U.S. Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it by deleting the website data stored in your browser. Google's privacy policy: policies.google.com/privacy.

6. Marketing pixels (only with your consent)

If you select “Marketing” in the cookie notice or click “Accept all”, we embed pixels from the following advertising providers. They measure whether ads for the light gardens lead to visits and ticket purchases and help show ads to suitable people. The pixels belong to the advertising accounts of our ticketing partner, which runs ads for the light gardens.

  • Google Ads (conversion measurement and Conversion Linker), where applicable Google Analytics: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  • Meta Pixel (Facebook, Instagram): Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
  • TikTok Pixel: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland
  • X Pixel (Twitter): Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland

In particular, your IP address, information about your browser and device, the pages you view, clicks on ticket links and identifiers in cookies (e.g. _gcl_au, _fbp, _ttp) are processed. If you are logged in to one of these services, the provider can link the visit to your account. So that a later ticket purchase can be attributed to the ad, an identifier is passed to the ticket shop in the address when you click a ticket link. Depending on the provider, the cookies are stored for up to 13 months.

The providers also process data outside the EU, in particular in the USA. If a provider is certified under the EU-U.S. Data Privacy Framework, the transfer is based on it; otherwise it is based on standard contractual clauses.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 165(3) TKG 2021). You can withdraw it at any time via “Cookie settings” in the footer; the pixels are then no longer loaded and their cookies on this website are deleted. Privacy policies of the providers: Google, Meta, TikTok, X.

7. Fonts, images and videos

All fonts, images and videos are stored on our own server. Visiting the website does not create connections to other providers for them.

8. Chat assistant

The chat assistant answers questions based on the content of this website. Finding the right answer happens directly in your browser.

If AI answers are switched on, your question is sent together with matching content from this website to the AI provider we have chosen (Anthropic, OpenAI or xAI, each based in the USA) to phrase the answer. We do not pass on your IP address or any other identifier. The transfer to the USA is based on the EU-U.S. Data Privacy Framework or standard contractual clauses. To prevent misuse, we derive a daily changing, encrypted identifier from your IP address; we do not store the IP address itself, and the identifier is deleted after two days at the latest. The legal basis is our legitimate interest in providing helpful information (Art. 6(1)(f) GDPR). Please do not enter any personal data in the chat.

If this feature is switched on, we store questions the assistant could not answer anonymously and without IP address to improve our information. Email addresses and phone numbers are removed automatically. We keep no more than the 2,000 most recent entries.

9. Buying tickets

Tickets are not sold on this website. The ticket buttons take you to the online shop of our ticketing partner, which is itself responsible for processing your data when you buy tickets; its privacy policy, available in the ticket shop, applies.

If you arrive via an ad or a campaign link, we pass the campaign tag from the address (UTM parameters, e.g. source and campaign name) to the ticket shop when you click a ticket link. It contains no information about you; we do not store it.

10. Contacting us by email

If you write to us, we process your details to answer your request (Art. 6(1)(b) or (f) GDPR). We delete them as soon as they are no longer needed for this purpose and no statutory retention obligations apply.

11. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing. You can withdraw any consent you have given at any time with effect for the future. Just write to support@lichtergarten.at.

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, dsb.gv.at.