Privacy Policy

This notice provides you with information on how Salzburg Festival Fund (“we“) will process your personal data.

Basic principles:

The protection of your privacy and your personal data has always been a central concern of ours. With the entry into force of the General Data Protection Regulation (DSGVO) this protection is now formalized.
We are always aware of the importance of the data entrusted to us and continue to process your data with the utmost care and responsibility.
Your data will be processed for your specific purpose in connection with your visit to the Salzburg Festival. We use recognized security measures to prevent misuse of your information.
You have the right to access your data! Below is explained how you can enforce your rights and contact us with any questions.
The following paragraphs outline in detail the purpose and duration of processing.

Purposes of data processing

We will process your personal data set out in Point 2 below exclusively for the purposes of your visit of our website, to process your ticket order and your visit of Salzburg Festival. Furthermore, to identify, prevent, investigate attacks on our website as well as to create user statistics.

By using any of our websites, you consent to the use of your information in accordance with this Privacy Policy. You can revoke your consent to processing of your data at any time. Point 5 describes how this can be done.

The provision of your personal data as part of ordering a ticket, purchasing a card or registering is voluntary. However, we cannot process your card order, or you may not use all features of the website if you do not provide your personal information.

Categories of the data processed and legal basis of the processing

As part of your visit to our website, we will collect the following information: the date and time of accessing a page on our website, your IP address, name and version of your web browser, the website (URL) you visited before the visit of this website, certain cookies (see below) and the information that you provide yourself as part of the registration and ticket order. The legal basis for the processing of data of a simple website visit consists in our predominant legitimate interest (according to article 6 paragraph 1 letter f of the GDPR), which is to achieve the purposes mentioned under 1.


Our website uses so-called cookies. These are small text files that are stored on your device using the browser. They do no harm. We use cookies to make our offer user-friendly. Some cookies remain stored on your device after you leave our website until you delete them. They allow us to recognize your browser on your next visit.

If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you allow this only in certain cases. The necessary settings differ depending on the browser and the terminal, you can usually find the corresponding instructions in the “Help feature” of the device or browser.
Disabling cookies may limit the functionality of our website

Google Analytics

In order to regularly improve our website and our offer for you and to correct errors, we use the web analysis tool Google Analytics.

On our website, general information about visitor usage patterns is collected using analysis tools. These include, for example, accessed pages, length of stay, referring pages and general information about your computer system, such as operating system, screen resolution, browser used, etc. All data collected is stored anonymously and does not allow any assignment to you. The IP address provided by Google Analytics will not be merged with other Google data. If you do not agree with this anonymized recording of your usage behaviour, you can prevent it by deactivating cookies in your browser.

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, in the event that IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union, or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.

You can object to the anonymized data processing by the aforementioned web analysis tools at any time, so that your visits to our website will no longer be recorded in the future.
This requires the activation of so-called “opt-out cookies”. Please use the following links if you want to object to the pseudonymous data processing: opt-out for Google Analytics:
Alternatively, the use of third-party cookies may be disabled by accessing the opt-out page of the Network Advertising Initiative:
For more information about Terms of Use and Privacy, please see or under

Google Ads

Our website uses Google Ads, an online advertising service of Google Inc. (“Google”). Google Ads uses so-called “cookies”, text files which are stored on the user’s computer, allowing an analysis of the way in which the website is used; it also imports these data from Google Analytics (see item “Google Analytics”). Google Ads also uses so-called web beacons (invisible graphics). These web beacons enable us to analyse information such as visitor flow on the pages we offer.

The information generated through cookies and web beacons on the use of this website (including the IP addresses of users) and delivery of advertising formats are transferred to a Google server in the USA and stored there. In case IP anonymization is active on this website, your IP address will be abbreviated by Google within member states of the European Union or in other signatory states of the Treaty on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to the Google server in the USA and abbreviated there. Google will not, however, merge your IP address with other data sets it has collected from you.

Users may prevent the installation of Google Ads cookies in different ways:

a) by setting their browser software accordingly;

  1. b) by deactivating targeted advertising on the Google website;
  2. c) by deactivating targeted advertising from promoters participating in the self-regulatory campaign “About Ads”;
  3. d) by permanent deactivation via a browser plug-in.

Settings b) and c) are deleted when cookies are deleted in the browser settings.

Further information on data protection and cookies for advertising purposes by Google Ads can be found in Google’s Data Protection Statement, specifically via the following links:


In the following, we specify the services we use as part of Google Ads:

Google Remarketing

As a Google Ads customer, we use the remarketing function, which means that our website uses the remarketing function of Google Inc. (“Google”). This function enables us to present targeted advertising to website users as part of the Google advertising network. The browser of the website visitor stores so-called “cookies”, text files which are stored on your computer and make it possible to recognize visitors when they visit websites which are part of the Google advertising network. On these pages, the user may be presented with advertising referring to content the user has previously opened on websites using Google’s remarketing function. Google claims that it does not capture personal data during this process. Should you wish to deactivate Google’s remarketing function anyway, you can do so in general by changing your settings at Alternatively, you may activate the use of cookies for targeted advertising via the Network Advertising initiative by following the instructions at


Further information on Google Remarketing and Google’s Data Protection Statement can be found at:


Google Conversion Tracking

As a Google Ads customer, we use Google Conversion Tracking, an analytical service of Google Inc. (“Google”). This means that Google stores a conversion cookie on your computer if you have accessed our website via an advertisement of the Google advertising networks Ads and AdSense, or conversions are analysed via the linking of our Google Ads account with our Google Analytics account. As an Ads customer, we use an individual conversion cookie. This cookie can be tracked only by us and not by other Ads customers. The cookie and/or the link with Google Analytics enable us to receive information on how many users who have viewed one of our ads on the Google advertising network have clicked on it, how many and which of our sub-pages have been visited, and which purchases (product categories, articles and revenue) users have made on our sites. Actions such as the subscription to a newsletter or purchase of a ticket may also be registered. You may deactivate cookies for conversion tracking by setting your browser so that cookies from the domain “” are blocked.

Facebook Pixel

This website uses the Facebook pixel by Facebook, a social media network of the company Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.

The code implemented on this website can analyse the behaviour of visitors who have accessed this website via an ad on Facebook. This can be used to improve Facebook ads, and this data is collected and stored by Facebook. We cannot see the collected data, and it can only be used in the context of ad placement. Using the Facebook Pixel code also involves cookies.

Using Facebook Pixel means that Facebook is notified of visits to this website, so that visitors to Facebook receive appropriate ads. If you have a Facebook account and are logged in to it, your visit to this website will be associated with your Facebook user account.

To find out how Facebook Pixel is used for advertising campaigns visit

If you are logged in to Facebook, you can change your ad settings by going to

Visit to manage your preferences for usage-based online advertising. The website allows you to disable or enable multiple providers at once or to set preferences for individual providers.

Visit for more information on Facebook’s data protection guidelines.


On our website you have the possibility to subscribe to our newsletter. For this purpose we collect and use your name and e-mail address and your specific interests. Other data will not be collected in connection with the newsletter. Your e-mail address cannot be viewed by other recipients of the newsletter.

The dispatch of the newsletter, as well as the data handling connected with it, takes place only on the basis of your consent. You can revoke this at any time. For this purpose, the newsletter provides you with an unsubscribe link or you write us an e-mail:

We use the MailChimp service to send our newsletter. This service is provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318. When you register for our newsletter, the data provided during registration is transferred to MailChimp and stored there. The data is also transferred to our customer database, where it is compared with existing data records and, if they match, merged with existing data records.

MailChimp offers us various analysis tools, in particular the possibility of tracking the clicked links in a newsletter and the creation of segments based on the click behaviour. However, these analyses are only group-related and are not used by us for individual evaluation. MailChimp also uses the analysis tool Google Analytics from Google Inc. (“Google”) and may include it in its newsletters. Further details about Google Analytics can be found in this privacy statement under “Google Analytics”.
For more information about MailChimp’s privacy practices, please see our Privacy Policy:

Ticket orders

We process the following of your personal data only with your consent in accordance with Article 6 paragraph 1 letter a of the General Data Protection Regulation (“GDPR”).


In the course of an order or a purchase, the visitor must register with his personal data (name, address, telephone number, e-mail address, year of birth, user name) on the website. By registering on the Sites, you consent to the storage of personal information as a user profile for subsequent visits and the use of the data required to fulfil the contract.
On our website with registration function, we save the personal data you provided during registration with your consent as your personal profile, so that you can log in with your email address and password during future visits. This has the advantage that you do not have to re-enter your address data every time you use the website. You can contradict the storage of the data at any time. In this case, however, a renewed full registration is required for each use.
Your customer-related data will be stored and processed for customer care and will only be passed on to third parties if this is necessary for the fulfilment of the contract (see the section “Submitting your data to third parties”).
Having a personally chosen username and password during the registration process will ensure that only you have access to your user account. Your password cannot be viewed by us.
You always have access to your data stored with us. The data in your profile, such as the addresses you provide, can be viewed and updated during the ordering process, but also in the protected area under “My Account”.

Data storage for orders in the web-shop

Your orders and purchases made in the webshop will be stored by us and can be accessed by you at any time for the current season under “My Account – Order History”.
Storage of credit card information
In the webshop you have the possibility to save your credit card information in your profile for later purchases. In order to offer you the highest possible security here, the storage happens in the so-called “tokenization” procedure. For this purpose, a sequence of numbers generated by our external payment service provider is stored as an identifier in the webshop. The actual payment data is stored encrypted on the servers of WireCard GmbH, without transmission of personal data from your personal user profile of our website.
WireCard credit card information is stored in compliance with the strict PCI DSS guidelines. Further information on the storage of credit card information and the tokenization procedure can be found on the WireCard GmbH website: (

Transfer of personal data

We do not share personally identifiable information with third parties except for the following purposes:

  • IT service providers we use for support activities,
  • the Post AG as well as other shipping companies used by us for the dispatch of postal dispatch, as e.g. the annual program,
  • the respective credit card company, the payment service provider to pay for your order; The payment processing and storage of the credit card information is handled exclusively by our payment service provider WireCard GmbH. The Salzburg Festival Fund does not process credit card information,
  • For the execution and execution of joint events, your data will only be sent to the respective co-organizers. We only pass on the data of the guests of the respective event

These recipient groups may not use these for other purposes and are also obliged to comply with the privacy policy.

Storage time

Your personal data will only be stored by us for as long as permitted by applicable law and reasonably considered necessary by us for the purposes set out in point 1 above. In any case, we store your personal data as long as there are statutory retention requirements or if limitation periods for potential legal claims have not yet expired.

Your rights in connection with personal data

Under current law, you are entitled (among other things, if the legal requirements are met):

  • to check whether and which personal data we have stored about you and to obtain copies of this data (right to confirmation and information),
  • to demand the correction, addition, or deletion of your personal data that is incorrect or improperly processed (right to rectification and cancellation),
  • to require us to limit the processing of your personal data (right to restriction of processing),
  • in certain circumstances, to object to the processing of your personal data or to revoke the prior consent given for processing (right to object to processing),
  • to require data portability (right to data portability),
  • to know and identify the identity of third parties to whom your personal data is transmitted
  • to lodge a complaint with the competent authority.

Our contact details

You can exercise all rights by sending an email to, by personal contact via telephone or by post. For this, it may be necessary for you to identify or contribute to your identification.

BOX OFFICE of Salzburg Festival
Herbert-von-Karajan-Platz 11
Tel. +43 662 8045 500

Salzburg Festival Fund
Hofstallgasse 1, 5020 Salzburg

If you have any further questions, please contact the Data Protection Officer of the Salzburg Festival Fund at or at our mailing address.

Last updated October 2019