Privacy Policy

buzz.city is a map for discovering events in Vienna. We only process personal data where it is genuinely needed – this page explains what, why, and for how long.

1. Controller

Responsible for data processing on buzz.city:
Reinhard Steinbauer
[Postal address – to be added before publication]
Email: contact@city.buzz or via the contact page.

2. The short version

• No user accounts, no advertising, no tracking cookies.
• Your email address is only stored if you actively subscribe to notifications – with double opt-in and one-click unsubscribe.
• Our audience measurement works without cookies and without IP addresses.
• Favorites and language preference stay in your browser and are never sent to us.

3. Hosting & server logs (Netlify)

buzz.city is hosted by Netlify, Inc. (San Francisco, USA). When you visit the site, Netlify automatically processes technical connection data (IP address, browser type, time of access) in server logs to deliver the site securely and reliably. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

Netlify acts as our processor under a data processing agreement. Transfers to the USA are safeguarded by the EU-U.S. Data Privacy Framework and standard contractual clauses.

4. Database (Supabase, Frankfurt)

Our event data and all data described below (subscriptions, statistics) are stored with Supabase, Inc. in the AWS region Frankfurt (Germany, EU). Supabase acts as our processor under a data processing agreement.

5. Map (MapTiler)

The interactive map loads map tiles from MapTiler AG (Switzerland). When the map loads, your IP address is technically transmitted to MapTiler's servers – this is required to deliver the map images. Legal basis: our legitimate interest in providing the map (Art. 6(1)(f) GDPR). Switzerland has an EU adequacy decision.

6. Email notifications for event series

For some events you can subscribe to be notified by email when new dates of the same series are announced. For this we store:

• your email address,
• your language (German/English) for the emails,
• the subscribed event series,
• time of subscription, confirmation and (if applicable) unsubscription,
• whether you additionally opted in to the newsletter (see section 7).

Legal basis is your consent (Art. 6(1)(a) GDPR). We use double opt-in: emails are only sent after you confirm your subscription via the link in the confirmation email. Unconfirmed subscriptions are never used for notifications.

You can withdraw your consent at any time – with one click via the unsubscribe link in every email or informally at contact@city.buzz. We store the data until you withdraw; after unsubscribing we keep only what is needed to document your consent and to honour the unsubscription (Art. 7(1) GDPR).

7. Newsletter (optional)

When subscribing you can additionally and separately consent to receiving buzz.city news. This consent is optional, is never assumed by default, and can be withdrawn at any time in the same way as in section 6.

8. Email delivery (n8n)

Confirmation and notification emails are sent via our automation platform n8n (n8n Cloud, operated by n8n GmbH, Berlin) from the address contact@city.buzz. n8n processes your email address on our behalf as a processor.

9. Contact form

If you contact us via the contact form, your details (name, email address, message) are processed by Netlify Forms and used solely to answer your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual communication) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete the messages once the enquiry is resolved, unless legal retention obligations apply.

10. Bot detection

To understand how search engines and AI crawlers access buzz.city, we log requests from known bots (recognised by their user agent): bot name, user agent, requested page and language. No IP addresses are stored, and requests from normal visitors are not logged this way. Legal basis: our legitimate interest in the technical and SEO analysis of the site (Art. 6(1)(f) GDPR).

11. Cookie-free audience measurement

We measure how buzz.city is used with our own, cookie-free system: a random session ID (stored only in your browser's sessionStorage and deleted when the browser session ends), device type, screen width, referrer page, browser user agent and interaction events (e.g. which filters are used). No IP addresses are stored and no cross-session or cross-device profile is created. Legal basis: our legitimate interest in improving the site (Art. 6(1)(f) GDPR).

12. Local storage in your browser

Your favorites and your language preference are stored exclusively in your browser (localStorage) and are not transmitted to us. You can delete this data at any time via your browser settings.

13. AI route suggestions

If you actively use the route suggestion feature, your selected preferences, your approximate location (if you shared it) and an anonymous profile of your favorites are transmitted to Anthropic (Claude API, USA) to generate suggestions. This only happens when you use the feature. Legal basis: performance of the requested service (Art. 6(1)(b) GDPR). Transfers to the USA are safeguarded by the EU-U.S. Data Privacy Framework.

14. Your rights

Regarding your personal data you have the right to:

• access (Art. 15 GDPR),
• rectification (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• objection to processing based on legitimate interest (Art. 21 GDPR) and withdrawal of any consent with effect for the future (Art. 7(3) GDPR).

To exercise these rights, an informal email to contact@city.buzz is sufficient. You also have the right to lodge a complaint with a supervisory authority – in Austria the Datenschutzbehörde (dsb.gv.at).

15. Changes

We will update this privacy policy when the site's features change. Version: 16 August 2026.