Privacy Policy
We take the protection of your personal data seriously. This policy explains which personal data is processed when you visit this website, for what purpose and on which legal basis, and which rights you have. “Personal data” means any information relating to an identified or identifiable person, such as your IP address.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Filmaur Multimedia Klostermann KG
Danziger Str. 1
82131 Gauting, Germany
Phone: +49 (0)89 850 8555
E-mail: info@spiritofwoodstockfest.com
2. Summary
- This website does not use cookies and no analytics or tracking tools.
- Fonts, scripts and images are served from our own server. No connection to Google or other font or CDN providers is made.
- Videos (Vimeo) and the interactive map (OpenStreetMap) are only loaded after you click the respective button (“two-click solution”). Before that, no data is transmitted to these providers.
3. Hosting and server log files
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Further information: Hetzner privacy policy.
Each time you access this website, your browser automatically transmits information that is stored in so-called server log files:
- IP address of the requesting device
- date and time of the request
- requested page or file and amount of data transferred
- HTTP status code
- referrer URL (the previously visited page)
- browser type and version, operating system
This data is required to deliver the website and to ensure its stability and security (e.g. to detect attacks). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. The log files are not merged with other data sources and are deleted after a short period (usually no later than 14 days), unless longer storage is required to investigate a specific security incident.
4. Contact by e-mail or phone
If you contact us by e-mail or phone, we process the data you provide (e.g. name, e-mail address, phone number, content of your message) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual measures, and Art. 6(1)(f) GDPR otherwise; our legitimate interest is answering enquiries addressed to us. We delete the data once your enquiry has been dealt with, unless statutory retention obligations apply.
5. Vimeo videos
This website contains videos hosted by Vimeo. The provider is Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA.
The videos are embedded using a two-click solution: initially, only a locally stored preview image is displayed and no connection to Vimeo is established. Only when you click “Load video” is the Vimeo player loaded. Vimeo then receives at least your IP address, the page you are visiting and technical information about your browser, and may set cookies or similar technologies on your device. We embed the player with the “do not track” parameter (dnt=1), which, according to Vimeo, deactivates the tracking of viewing behaviour.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG, which you give by clicking the button. Your consent applies only to the respective video during the current page view; it is not stored. You can withdraw it at any time by leaving or reloading the page.
Data may be transferred to the USA. Such transfers are based on the EU–US Data Privacy Framework, where the recipient is certified under it, or on the EU standard contractual clauses. Further information: Vimeo privacy policy.
6. OpenStreetMap
To show directions to the festival, we offer an interactive map based on OpenStreetMap. The map tiles are provided by the OpenStreetMap Foundation (OSMF), St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.
The map is also embedded using a two-click solution: until you click “Load map”, only a static preview image stored on our server is displayed. After the click, the map tiles are loaded directly from OSMF servers, which receive your IP address, the requested map section and technical information about your browser. The map software itself (Leaflet) is served from our own server.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG, which you give by clicking the button. Your consent is not stored and applies only to the current page view. The United Kingdom has been recognised by the European Commission as providing an adequate level of data protection. Further information: OSMF privacy policy.
7. Locally hosted fonts and scripts
This website uses the fonts “Oxygen” and “PT Serif” as well as the map library Leaflet. All of these files are stored on our own server. When you visit the website, no connection to external servers (e.g. Google Fonts or CDNs) is established for these resources.
8. External links
This website contains links to other websites (e.g. of the participating artists). Data is only transmitted to the operator of the linked website when you follow a link. We have no influence on the data processing there; please refer to the privacy policy of the respective website.
9. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar and the lock symbol.
10. Your rights
Under the GDPR, you have the following rights regarding your personal data:
- right of access (Art. 15 GDPR)
- right to rectification (Art. 16 GDPR)
- right to erasure (Art. 17 GDPR)
- right to restriction of processing (Art. 18 GDPR)
- right to data portability (Art. 20 GDPR)
- right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)
Right to object (Art. 21 GDPR): Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
To exercise your rights, simply contact us using the details given in section 1.
11. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or the place of the alleged infringement. The supervisory authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de
12. Changes to this privacy policy
We may update this privacy policy if the website or the legal situation changes. The version published on this page applies.
Last updated: October 2026