Privacy Policy

1. Privacy at a GlanceGeneral Information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in the privacy policy below.

Data processing on this website is carried out by the website operator:

rockit GmbH
Lindengasse 56/18-19
A-1070 Vienna
Austria

Managing Director: Dr. Wolfgang Rock
Email: [email protected]

Your data is collected when you provide it to us, e.g. by filling in the feedback form or registering as an organizer. Other data is automatically collected by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour in order to improve the website.

You have the right to receive free information about the origin, recipients and purpose of your stored personal data at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data, as well as the right to data portability. You also have the right to lodge a complaint with the competent supervisory authority.

2. Hosting

This website is hosted by an external service provider (hoster):

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany
www.hetzner.com

The hoster operates data centres in Germany and Finland. All data on this website is processed exclusively on servers within the European Union.

The use of the hoster is in the interest of a secure, fast and efficient provision of our online services (Art. 6(1)(f) GDPR). We have concluded a data processing agreement (DPA) with the hoster, which ensures the protection of your data in accordance with GDPR requirements.

3. General Information and Mandatory DisclosuresData Protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Please note that data transmission over the Internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

The responsible party for data processing on this website is:

rockit GmbH
Lindengasse 56/18-19
A-1070 Vienna
Austria

Managing Director: Dr. Wolfgang Rock
Email: [email protected]

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, deletion will take place after these reasons cease to apply.

Your data is not transferred to third countries (countries outside the EU/EEA).

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

If data processing is carried out on the basis of Art. 6(1)(f) GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation. We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for us is:

Austrian Data Protection Authority
Barichgasse 40-42
A-1030 Vienna
Phone: +43 1 521 52-2569
Email: [email protected]
Web: www.dsb.gv.at

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format.

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of data processing, and, if applicable, a right to correction or deletion of this data. For this purpose and for further questions on the subject of personal data, you can contact us at any time: [email protected]

You have the right to request the restriction of the processing of your personal data. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request the restriction of processing.

• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.

• If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of processing instead of deletion.

• If you have lodged an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of processing.

4. Data Collection on This WebsiteCookies

This website uses so-called "cookies". Cookies are small data packets that your browser automatically creates and stores on your device when you visit the website.

We use exclusively technically necessary cookies that are required for the operation of the website:

• XSRF-TOKEN: Protection against cross-site request forgery attacks (security cookie). Set on each page visit and deleted when the browser is closed.

• laravel_session: Session cookie for identifying your browser session. Deleted after 2 hours of inactivity or when the browser is closed.

These cookies are strictly necessary for the technical operation of the website and are set on the basis of Art. 6(1)(f) GDPR (legitimate interest in secure website operation). Consent is not required for this (Section 165(3) TKG 2021).

You can configure your browser to inform you about the setting of cookies and only allow cookies on a case-by-case basis. Disabling cookies may limit the functionality of this website.

The hoster of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version

• Operating system used

• Referrer URL (previously visited page)

• Host name of the accessing computer

• IP address

• Time of the server request

This data is not merged with other data sources.

This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and security of its website – server log files must be collected for this purpose. Server log files are automatically deleted after 14 days.

If you send us enquiries via the feedback form, the following data is collected:

• Name (optional)

• Email address (required)

• Message

• Feedback type (e.g. bug report, question)

• URL of the page from which the feedback was sent

• Technical data (browser/user agent)

Your email address is verified using a double opt-in procedure. Only after confirmation via the link sent to you will your feedback be activated.

The processing of this data is based on Art. 6(1)(b) GDPR (processing of your enquiry) and Art. 6(1)(f) GDPR (legitimate interest in improving our service). Your feedback data will be deleted after your enquiry has been fully processed, unless statutory retention obligations prevent this.

If you contact us by email, your enquiry including all resulting personal data (name, email address, content of the enquiry) will be stored and processed by us for the purpose of processing your enquiry.

The processing of this data is based on Art. 6(1)(b) GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively processing enquiries addressed to us (Art. 6(1)(f) GDPR).

The data you send to us by email will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory statutory provisions – in particular tax law retention periods – remain unaffected.

5. Registration and User AccountsRegistration as Organizer

You can register on this website as an organizer to manage and publish your own tango events. The following data is collected during registration:

• Name

• Email address

• Password (stored encrypted)

• Associated city

As part of your organizer activities, the event and organisation data you enter (organisation name, description, venues, event details) will also be processed and publicly displayed on the website.

Processing is based on Art. 6(1)(b) GDPR (contract fulfilment – provision of the platform) and Art. 6(1)(a) GDPR (consent upon registration).

The data collected during registration will be stored by us for as long as your user account exists. Statutory retention periods remain unaffected. You can request the deletion of your account at any time by email to [email protected].

6. Web Analytics — Matomo (self-hosted, cookieless)

This website uses the open-source web analytics service Matomo for reach measurement. Matomo is operated exclusively on our own servers. No data is transmitted to third parties or to third countries.

Anonymous click counting on contact links: We additionally count aggregate daily click totals on contact links (email, phone, website) on event, organizer, venue, and person pages. Only anonymous daily counts per target and contact channel are stored — no IP addresses, no browser identifiers, no cookies, no session IDs. This processing does not produce personal data under Art. 4(1) GDPR.

Cookieless configuration: We operate Matomo explicitly without cookies. No _pk_* or comparable cookies are set on your device. Visit recognition is performed solely via a daily-rotating, salted hash of IP address, user-agent, and language preference. There is no cross-site or cross-day tracking.

The following data is collected:

• Anonymised IP address (the last two bytes are server-side masked before storage)

• Pages visited and time of visit

• Time spent on the website

• Referring page (referrer)

• Browser and operating system used

• Approximate location (based on the anonymised IP, city level maximum)

Legal basis: Art. 6(1)(f) GDPR (legitimate interest) in conjunction with § 165(3) TKG (Austria) / § 25(2) No. 2 TTDSG (Germany). No consent is required since tracking is exclusively anonymous, first-party, and strictly necessary for reach measurement.

Right to object (Art. 21 GDPR): You may object to this processing at any time via our tracking opt-out page.

7. External ServicesGoogle Fonts (Local Hosting)

This website uses so-called Google Fonts for the uniform display of fonts. The Google Fonts are installed locally on our servers. No connection to Google servers is established, and no data is transmitted to Google.

8. Currency and Changes to This Privacy Policy

This privacy policy is currently valid as of February 2026.

Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version of the privacy policy can be accessed on this page at any time.