Privacy Policy
Last updated: November 2026
1. Data Controller
The data controller responsible for the processing of personal data on this website is:
Story of a Stranger
Responsible person: Patrick Janzer
Place of residence: Gössendorf, Austria
E-mail: info@storyofastranger.net
Website: https://storyofastranger.net
2. General Information
We take the protection of your personal data seriously. This Privacy Policy explains what personal data may be collected when you visit our website, how it is used and what rights you have under the General Data Protection Regulation (GDPR).
We only process personal data where there is a lawful basis for doing so.
3. Website Hosting and Server Log Files
Our website consists of self-created HTML, CSS and JavaScript files.
The website is hosted using GitHub Pages and may use Cloudflare services for domain management, DNS, security or content delivery, depending on the technical configuration.
When you visit our website, technical information may be processed automatically, including:
- IP address
- Date and time of access
- Browser type and version
- Operating system
- Referring URL
- Accessed pages and files
This information may be processed for technical operation, security, troubleshooting and protection against misuse.
The legal basis for this processing is our legitimate interest pursuant to Article 6(1)(f) GDPR.
4. Contact by E-mail
If you contact us by e-mail, the personal data you provide will be processed in order to respond to your enquiry.
This may include your name, e-mail address and the content of your message.
We use this information exclusively to handle your enquiry and any related communication.
The legal basis is Article 6(1)(b) GDPR where your enquiry relates to a potential booking or contractual relationship, or Article 6(1)(f) GDPR for general enquiries.
5. Contact Form
Our website provides a contact form for booking enquiries, press requests and general messages.
The form may collect the following information:
- Name
- E-mail address
- Type of enquiry
- Event name and date (optional)
- Venue and city (optional)
- Message
When submitting the form, your default e-mail application may open with the information you entered. You then send the message yourself.
The information is transmitted to us by e-mail only when you send the message.
We use the information exclusively to respond to your enquiry.
The legal basis is Article 6(1)(b) GDPR for booking-related enquiries and Article 6(1)(f) GDPR for other legitimate enquiries.
6. YouTube
Our website may contain embedded YouTube videos.
Where available, we use YouTube's privacy-enhanced mode. The video is loaded only after you actively choose to play it or agree to external content in the cookie notice.
When you activate an embedded video, YouTube may process personal data, including your IP address and technical information about your device and browser.
YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Further information can be found in Google's Privacy Policy:
https://policies.google.com/privacy
7. Spotify
Our website may contain an embedded Spotify player.
When you interact with the embedded player, Spotify may collect technical information and personal data, such as your IP address and information about your device.
Spotify is operated by Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden.
Further information can be found in Spotify's Privacy Policy:
https://www.spotify.com/legal/privacy-policy/
Consent for embedded content (cookie notice)
On your first visit we ask whether external content from YouTube and Spotify may be shown automatically. If you agree, the players are loaded when you open the pages, and the data described above is transmitted to the providers. If you decline, they are loaded only after you click the respective player.
We store your decision only in your browser (local storage). It is not transmitted to us. You can change it at any time using the “Cookie settings” link at the bottom of every page.
The legal basis is your consent under Article 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).
8. External Links and Social Media
Our website contains links to external platforms and services, including:
- TikTok
- Threads
- YouTube
- Spotify
- Amazon Music
- X (Twitter)
- Apple Music
- Bandcamp
- Tidal
- Deezer
- Bandsintown
- Google Maps
- Big Cartel (merchandise shop)
These are standard external links. No data is intentionally transmitted to these platforms merely by displaying the links on our website.
When you click an external link, you leave our website and the privacy policies of the respective providers apply.
We have no control over how these external providers process personal data.
9. Downloads
Our website provides downloadable press photos, logos and other media files.
When you download these files, technical access information may be processed by the hosting provider, as described in Section 3.
The files themselves do not require you to provide personal information.
10. Cookies and Tracking
Our website is designed to operate without advertising or analytics tracking.
We do not intentionally use tracking cookies or profiling technologies.
However, technical cookies or similar technologies may be used by hosting or security services where necessary for the operation and protection of the website.
Embedded third-party content may also involve additional data processing when activated.
11. Data Retention
We retain personal data only for as long as necessary to handle enquiries and fulfil the purposes described in this Privacy Policy.
Where statutory retention obligations apply, the relevant data may be stored for the legally required period.
12. Your Rights under the GDPR
Under the GDPR, you have the following rights, subject to the applicable legal requirements:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object to certain processing activities
- Right to withdraw consent where processing is based on consent
To exercise your rights, please contact us at:
You also have the right to lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna, Austria
Website: https://www.dsb.gv.at/
13. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy if our website, services or applicable legal requirements change.
The current version will always be available on this website.