Last updated: November 11, 2025

1. Introduction

The protection of your personal data is of great importance to us. This Privacy Policy explains how we collect, process, and protect your personal information when you use our website www.thegrandpearlvienna.com and our related services. This policy complies with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

2. Data Controller

JMD Event-Ticketing GmbH
Maysedergasse 2
1010 Vienna, Austria
VAT ID: ATU77608723
Email: reservation@thegrandpearlvienna.com

Data Protection Officer

Marco A. Wallner
Email: datenschutz@thegrandpearlvienna.com

3. Collection and Processing of Personal Data

We process personal data only when necessary for fulfilling a contract, responding to an inquiry, meeting legal obligations, or based on your explicit consent. The following data categories may be processed in connection with our website and services:

a) Website Visits and Analytics

When you visit our website, certain data are automatically collected for technical reasons, including your IP address, browser type and version, date and time of access, and pages viewed. We use Google Analytics to analyze website usage and improve user experience. Google Analytics uses cookies to collect anonymous usage data. Processing is based on your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time through our cookie banner.
Retention period: up to 12 months.

b) Contact Form

When you contact us via our contact form, we collect your name, email address, and the content of your message to respond to your inquiry. Processing is based on Art. 6(1)(b) GDPR (necessary for pre-contractual or contractual communication).
Retention period: until your request is fully processed or up to 6 months thereafter.

c) Reservation Requests via Aleno

Online table and event reservations are managed through the external booking system Aleno. When you submit a reservation, Aleno processes your personal data (name, contact details, booking information) on our behalf in accordance with GDPR requirements. The legal basis for processing is Art. 6(1)(b) GDPR (contract performance).
For more details, please review Aleno’s privacy policy: https://aleno.me/en/privacy.

d) Event Photography and Video Recording

During our events, we may take photos and videos for marketing and documentation purposes (e.g., website, social media, or press). We take care to respect your personal rights and privacy. If you do not wish to appear in such recordings, please inform our staff on site.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in marketing and public relations).
Retention period: up to 10 years, or until the material is no longer used for promotional purposes.

e) Email Communication

If you contact us by email, your message, name, and contact information are processed for communication purposes. Legal basis: Art. 6(1)(b) or (f) GDPR (contract performance or legitimate interest in responding to inquiries).
Retention period: up to 6 months after correspondence ends, unless legal obligations require longer storage.

4. Recipients of Personal Data

Your personal data may be shared with the following categories of recipients when necessary:

• IT service providers and hosting companies (for website operation and maintenance)
• External service providers such as Aleno (reservation system)
• Google (for Analytics)
• Tax advisors and public authorities where legally required

All external partners process data under Data Processing Agreements in accordance with Art. 28 GDPR.

5. Data Transfers to Third Countries

If personal data are transferred outside the European Union (for example, through Google Analytics), we ensure appropriate safeguards such as EU Standard Contractual Clauses (SCCs) are in place to protect your information.

6. Your Rights under GDPR

You have the following rights regarding your personal data:

• Right of access – to know what data we process and for what purpose.
• Right to rectification – to correct inaccurate or incomplete data.
• Right to erasure – to request deletion where no legal reason for retention exists.
• Right to restriction of processing – to limit how we use your data.
• Right to data portability – to receive your data in a machine-readable format.
• Right to object – to object to processing based on legitimate interest.
• Right to withdraw consent – where processing is based on your consent.

You can exercise your rights by contacting us at:
datenschutz@thegrandpearlvienna.com

7. Data Security

We take extensive technical and organizational measures to protect your data against unauthorized access, alteration, or loss, including:

• Secure (SSL/TLS) encryption for website data transmission
• Restricted access to personal data for authorized personnel only
• Regular backups and security monitoring

Despite these precautions, complete protection of data transmitted online cannot be guaranteed.

8. Retention Periods

We store personal data only for as long as necessary to fulfill the purposes described above or as required by law (e.g., accounting or tax regulations).

9. Complaints

If you believe your rights under the GDPR have been violated, you may file a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):
https://www.dsb.gv.at

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes. The current version is always available on our website.

JMD Event-Ticketing GmbH
Maysedergasse 2, 1010 Vienna
Email: reservation@thegrandpearlvienna.com