Last updated: June 2026 · Version 1.0
This privacy policy explains how Select/Reject collects, uses, and protects personal data when you visit selectreject.nicholasshore.eu. It is written in accordance with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (Datenschutzgesetz, DSG 2018, as amended BGBl I 2024/70), and the Austrian Telecommunications Act (Telekommunikationsgesetz, TKG 2021) governing cookies and electronic communications.
1. Data Controller
The data controller responsible for this website is:
Select/Reject
Nicholas Shore
Seidlgasse 21/1/EG
1030 Vienna, Austria
E-Mail: admin@nicholasshore.eu
No Data Protection Officer (Datenschutzbeauftragter) is required under Art. 37 GDPR for this website, as processing is neither large-scale nor involves special categories of data.
2. What Personal Data We Process
2.1 Server Log Files
Each time you visit this website, our hosting provider’s server automatically records the following data in log files:
- Your IP address (truncated or anonymised after 7 days)
- Date and time of your request
- The URL you requested
- The referring URL (the page you came from, if applicable)
- Your browser type and version
- Your operating system
- HTTP status code and data volume transferred
This data is processed by our hosting provider on our behalf and is necessary for technical operation and security of the website. We do not combine log data with other data sources.
| Legal basis | Art. 6(1)(f) GDPR — legitimate interest in operating and securing the website |
|---|---|
| Retention | Log files are deleted or anonymised after 30 days at the latest |
| Processor | [Your hosting provider name and country — e.g. “XYZ Hosting GmbH, Austria”] |
2.2 Cookies and Consent Management
This website uses cookies in accordance with the TKG 2021. A cookie is a small text file placed on your device. We use the following categories:
| Category | Purpose | Consent required? |
|---|---|---|
| Necessary | WordPress session functionality; storage of your cookie consent choice (set by Complianz) | No — exempt under TKG 2021 §165(3) |
| Functional | Cookies set by third-party embeds: Google Maps, YouTube, Spotify, SoundCloud — only loaded after you consent | Yes — via the cookie banner |
Your consent is recorded by Complianz (see section 3.6 below) and stored on your device. You can withdraw or change your consent at any time by clicking the cookie settings link in the footer of this website.
| Legal basis (necessary cookies) | Art. 6(1)(f) GDPR — legitimate interest |
|---|---|
| Legal basis (functional cookies) | Art. 6(1)(a) GDPR — your consent |
| Withdrawal | Via cookie settings link in the page footer, at any time |
2.3 Contact and Booking Enquiries
When you contact us via email or through our social media channels (Facebook, Instagram) for booking enquiries, press matters, or general correspondence, we process the personal data you provide — typically your name, email address or social media handle, and message content — solely in order to respond to your enquiry.
| Legal basis | Art. 6(1)(b) GDPR (where the enquiry relates to a potential booking or contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to communications) |
|---|---|
| Retention | Correspondence is retained for as long as required to handle the matter, and deleted no later than 3 years after the last contact, unless statutory retention obligations apply |
We do not operate a contact form on this website. We do not collect data through automated means beyond the server log files described above.
3. Third-Party Services
3.1 Web Hosting
This website is hosted by menkiSys Networks e. U.,
Nittnerstraße 12, A – 4614 Marchtrenk. As our hosting provider, they process server log data and store the website database on our behalf as a data processor. A Data Processing Agreement (Auftragsverarbeitungsvertrag, AVV) is in place.
3.2 Web Fonts
This website uses the following typefaces: Bowlby One, Eczar, Space Mono, and Special Elite. All font files are self-hosted on this website’s server. No requests are made to Google Fonts, fonts.googleapis.com, or any other external font service when you visit this website. No data is transmitted to third parties for font delivery.
3.3 Google Maps
On our Events page, we use Google Maps to display event venues. Google Maps is a service of Google LLC (see above). When a Google Maps element loads, it transmits your IP address and information about your interaction to Google’s servers in the USA.
Google Maps is only loaded after you explicitly consent via the cookie banner. Until consent is given, a placeholder is shown instead. You may withdraw consent at any time via the cookie settings.
| Legal basis | Art. 6(1)(a) GDPR — your consent |
|---|---|
| Transfer to third country | USA — Google Standard Contractual Clauses |
| Google’s privacy policy | policies.google.com/privacy |
3.4 YouTube
This website embeds video content via YouTube, a platform operated by Google LLC (see above). When a YouTube player loads, cookies are set and your IP address and viewing behaviour may be transmitted to Google’s US servers.
YouTube embeds are only loaded after you consent. A placeholder is shown until consent is given.
| Legal basis | Art. 6(1)(a) GDPR — your consent |
|---|---|
| Transfer to third country | USA — Google Standard Contractual Clauses |
| Google’s privacy policy | policies.google.com/privacy |
3.5 Spotify
This website may embed music players via Spotify, operated by Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. When a Spotify player loads, it may set cookies and process usage data. As Spotify AB is based in Sweden, data transfers within the EEA are governed by the GDPR directly and do not constitute a third-country transfer.
Spotify embeds are only loaded after you consent.
| Legal basis | Art. 6(1)(a) GDPR — your consent |
|---|---|
| Transfer | Sweden (EEA) — no third-country transfer |
| Spotify’s privacy policy | spotify.com/legal/privacy-policy |
3.6 SoundCloud
This website may link to or embed content from SoundCloud, operated by SoundCloud Ltd (registered in England and Wales) with servers also operated in Germany. Embeds may transfer data to SoundCloud’s servers when loaded.
SoundCloud embeds are only loaded after you consent.
| Legal basis | Art. 6(1)(a) GDPR — your consent |
|---|---|
| SoundCloud’s privacy policy | soundcloud.com/pages/privacy |
3.7 Complianz (Cookie Consent Management)
This website uses Complianz to manage cookie consent. Complianz is a plugin developed by Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands. Complianz stores your consent preferences locally on your device (in a cookie) and does not transmit personal data to external servers for the free plan used on this website.
| Legal basis | Art. 6(1)(c) GDPR — legal obligation to record consent; Art. 6(1)(f) GDPR — legitimate interest in demonstrating compliance |
|---|---|
| Complianz privacy policy | complianz.io/privacy-statement |
3.8 Social Media Links
This website contains links to the band’s profiles on Facebook (Meta Platforms Ireland Ltd), Instagram (Meta Platforms Ireland Ltd), and YouTube (Google LLC). These are outbound links — clicking them takes you to the respective platform’s website. No data is shared with these platforms as a result of loading this website; data is only processed when you actively follow a link. Their respective privacy policies apply from that point.
4. No Analytics, No Advertising
This website does not use any web analytics tools (such as Google Analytics, Matomo, or similar). No advertising networks, remarketing pixels, or tracking technologies for commercial advertising purposes are deployed. The only cookies set are those described in section 2.2 above.
5. Your Rights Under GDPR and DSG
Under the GDPR (Arts. 15–22) and the Austrian DSG 2018, you have the following rights with respect to your personal data:
| Right | Description |
|---|---|
| Access (Art. 15) | You may request confirmation of whether we process data about you and, if so, a copy of that data. |
| Rectification (Art. 16) | You may request correction of inaccurate data. |
| Erasure (Art. 17) | You may request deletion of your data where there is no overriding reason for us to keep it. |
| Restriction (Art. 18) | You may request that we restrict processing of your data in certain circumstances. |
| Data portability (Art. 20) | Where processing is based on consent or contract, you may request your data in a structured, machine-readable format. |
| Object (Art. 21) | Where we rely on legitimate interest as a legal basis, you may object to that processing at any time. |
| Withdraw consent (Art. 7(3)) | Where processing is based on your consent, you may withdraw it at any time via the cookie settings on this website. Withdrawal does not affect the lawfulness of processing prior to withdrawal. |
To exercise any of the above rights, please contact us at: [your email address]
We will respond within one month. In complex cases this may be extended by a further two months, in which case we will notify you within the first month.
6. Right to Lodge a Complaint
If you believe that the processing of your personal data violates the GDPR or § 1 or §§ 7–13 of the Austrian DSG, you have the right under Art. 77 GDPR and § 24 DSG to lodge a complaint with the competent supervisory authority:
Österreichische Datenschutzbehörde (DSB)
Barichgasse 40-42
1030 Wien, Österreich
Tel.: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at
Web: data-protection-authority.gv.at
You may also have the right to an effective judicial remedy under Art. 79 GDPR. This right exists in addition to, not instead of, the right to complain to the DSB.
7. Data Security
This website is served exclusively over HTTPS (TLS encryption). Our hosting provider maintains appropriate technical and organisational security measures in accordance with Art. 32 GDPR. Access to the website’s administrative backend is restricted to authorised personnel.
8. Links to External Websites
This website contains links to external platforms including Facebook, Instagram, YouTube, Spotify, and SoundCloud. Once you leave this website via such a link, this privacy policy no longer applies. We are not responsible for the data protection practices of third-party websites.
9. Changes to This Privacy Policy
We may update this privacy policy to reflect changes in law, in the services we use, or in our data practices. The current version is always accessible at this page. Where changes are material, we will note the update date at the top of this document.