Privacy Policy

1. Data Controller

The party responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Mag. Thomas Müller

Hernalser Hauptstraße 164/29

A-1170 Vienna Austria

Email: booking@muellertom.com

2. General Information on Data Processing

We process personal data of website users only to the extent necessary to provide a functioning website along with our content and services. Processing takes place either with the user’s consent or on the basis of a legal permission (Art. 6(1) GDPR).

3. Hosting

This website is hosted by an external service provider. The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website visits, and other data generated through a website.

The hosting provider is used for the purpose of fulfilling contracts with our (potential) customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

4. Server Log Files

The provider of this website automatically collects and stores information in server log files, which your browser automatically transmits. These include:

  • browser type and version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of the server request
  • IP address

This data is not merged with other data sources. Collection is based on Art. 6(1)(f) GDPR, in order to ensure a technically error-free operation of the website.

5. Cookies and Consent Management

This website uses cookies. On your first visit you will be asked, via a cookie consent banner, for your consent to the use of non-essential cookies. Strictly necessary cookies (e.g. for storing your cookie preference) are set on the basis of Art. 6(1)(f) GDPR.

You may withdraw or change your consent at any time with future effect via the cookie settings.

6. Contact Form

If you send us inquiries via the contact form, the information provided in the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

Processing of this data is based on Art. 6(1)(b) GDPR where your inquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where such consent has been requested.

The contact form is technically provided via WPForms and protected against spam submissions by Cloudflare Turnstile (Invisible). Additionally, the spam protection plugin Akismet is used.

Cloudflare Turnstile Cloudflare Turnstile is a service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, used to distinguish human input from automated (bot) access. This involves the processing of technical data (including IP address and browser/device information). The legal basis is our legitimate interest in protecting our website against misuse and automated spam (Art. 6(1)(f) GDPR).

Akismet Akismet is a service provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA, used to detect spam submissions. This may involve transmitting the IP address, name, email address, and submitted content to Automattic. The legal basis is our legitimate interest in spam-free communication (Art. 6(1)(f) GDPR).

7. Sending of Contact Inquiries and Newsletter via Brevo

For sending emails from the contact form as well as for our newsletter, we use the service Brevo. “Brevo” is a brand of Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France; for the German-speaking market, Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, also operates under this brand. Brevo acts as a data processor within the meaning of Art. 28 GDPR; a corresponding data processing agreement has been concluded. Further information: https://www.brevo.com/legal/privacypolicy/

8. Newsletter

If you wish to receive the newsletter offered on this website, we require an email address as well as information that allows us to verify that you are the owner of the provided email address and that you agree to receive the newsletter.

We use the so-called double opt-in procedure: after your registration, you will receive an email asking you to confirm your registration. This confirmation is necessary to ensure that no one can register using someone else’s email address. Newsletter registrations are logged in order to be able to prove the registration process in accordance with legal requirements.

The legal basis for processing this data is your consent (Art. 6(1)(a) GDPR). You may withdraw your consent to the storage of your data, your email address, and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter.

The registration process is protected against automated registrations (bots) by Google reCAPTCHA (version 2, “Invisible”).

Google reCAPTCHA Google reCAPTCHA is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It is used to verify whether input on our website is made by a human or through abusive automated processing. This involves transmitting, among other things, the IP address and further technical data to Google. The legal basis is our legitimate interest in protecting our website against abusive automated access and spam (Art. 6(1)(f) GDPR). Further information on Google reCAPTCHA and Google’s privacy policy is available at: https://policies.google.com/privacy

9. Embedded Content (Bandcamp[, YouTube])

On individual pages of this website, we embed content from external platforms, including music players from Bandcamp[ and, where applicable, videos from YouTube]. When you visit a page containing such embedded content, a connection is established to the servers of the respective provider, which may result in the transmission of your IP address and possibly other technical data to that provider.

This content is only loaded after your consent via our cookie consent tool (consent-based script blocking). The legal basis is therefore your consent (Art. 6(1)(a) GDPR).

Bandcamp Provider: Bandcamp, Inc., USA. Further information: https://bandcamp.com/privacy

[YouTube Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information: https://policies.google.com/privacy]

10. Your Rights as a Data Subject

You have the following rights with regard to the personal data concerning you:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent given (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent supervisory authority in Austria is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

11. Retention Period

Personal data is stored only for as long as necessary to fulfil the respective purpose of processing, unless statutory retention obligations require otherwise.

12. Changes to this Privacy Policy

We reserve the right to amend this privacy policy in order to ensure it always complies with current legal requirements or to reflect changes to our services.

Last updated: 13 August 2026