Privacy Policy

This privacy policy establishes how we process and
protect your personal information.

1. Controller and contact details

The controller within the meaning of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG) is:

tightstorm
Fendigasse 18
1050 Wien, Österreich
mail [at] tightstorm [dot] com

2. General information on data processing

The protection of your personal data is of great importance to us. We process your data exclusively on the basis of statutory provisions (GDPR, Austrian DSG, TKG 2021).

Personal data is any information relating to an identified or identifiable natural person. This includes in particular name, email address, telephone number and other contact details.

3. type and scope of data processing

3.1 Website Hosting

3.1.1 Hosting Provider

Our website is hosted on webspace provided by easyname GmbH:

easyname GmbH
Canettistraße 5/10
1100 Vienna, Austria
www.easyname.at/de/unternehmen/kontakt#impressum

The servers are located in Austria.

3.1.2 Scope of Processing

When you access our website, the following data is automatically recorded in server log files:
- IP address
- Date and time of access
- Page accessed/name of file retrieved
- Volume of data transferred
- Notification of successful retrieval
- Browser type and version
- Operating system
- Referrer URL (previously visited page)

3.1.3 Purpose of Processing

The processing is carried out to ensure smooth operation of the website, to optimise the website and to ensure the security of our IT systems.

3.1.4 Legal Basis

The processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the technical operation and security of the website.

3.1.5 Storage Period

The server log files are anonymised after 24 hours and deleted after three months. For more detailed information, we refer to easyname's privacy policy.

3.2 Newsletter Service

3.2.1 Scope of Processing

For the dispatch of our newsletter, we process the following data:
- Email address (required)
- IP address for verification purposes (required)
- Date and time of registration for verification purposes (required)
- Nickname (optional)
- First name (optional)
- Pronouns (optional)
- Date of birth (optional)
- Home country (optional)
- Favourite style (optional)

3.2.2 Purpose of Processing

The data processing is carried out exclusively for the purpose of sending our newsletter with information about tightstorm and related events.

We use certain information (e.g. favourite style, language) as well as interaction data (e.g. open and click rates) to form segments and adapt our newsletter content to your interests. This processing constitutes profiling within the meaning of Article 4(4) GDPR. The legal basis for this is your consent pursuant to Article 6(1)(a) GDPR. You can object to this processing at any time by unsubscribing from the newsletter or sending us a message.

There is no automated decision-making including profiling within the meaning of Article 22 GDPR that produces legal effects or similarly significantly affects you.

3.2.3 Legal Basis

The processing is based on your express consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 107(2) TKG 2021 (Austrian Telecommunications Act). You can revoke your consent at any time with effect for the future - most easily via the unsubscribe link in each newsletter.

In addition, we store your IP address as well as the date and time of registration on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in proving proper registration (double opt-in) and preventing misuse.

3.2.4 Double Opt-In Procedure

Registration for our newsletter is carried out using a so-called double opt-in procedure. This means that after you register, you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register with someone else's email address. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements.

3.2.5. Dispatch Service Provider Brevo

For the dispatch of our newsletter, we use the service Brevo (Sendinblue GmbH). Brevo is a dispatch service provider based in the EU that acts as a processor on our behalf.

Controller for Brevo:
Sendinblue GmbH
Köpenicker Str. 126
10179 Berlin, Germany

Brevo's privacy policy can be found at:
www.brevo.com/de/legal/privacypolicy/

Processing by Brevo:
Brevo processes the following data on our behalf:
- Storage of your email address and other data you provide
- Dispatch of newsletter emails
- Statistical analysis of newsletter campaigns (e.g. open rates, click rates)

We have concluded a data processing agreement with Brevo in accordance with Article 28 GDPR. Brevo processes your data exclusively on our instructions and only for the purposes stated in this privacy policy.

For all other processing activities by Brevo that go beyond data processing (e.g. when using additional Brevo services or when processing data for Brevo's own purposes) or technical details regarding data processing, we refer
to Brevo's privacy policy.

Other Recipients: Apart from Brevo, no other external service providers have access to your data. No disclosure to third parties takes place.

Data Transfer to Third Countries by Brevo:
Brevo may transfer data to third countries outside the European Economic Area (e.g. USA, India). Brevo ensures an adequate level of data protection through appropriate safeguards (e.g. EU Standard Contractual Clauses). A transfer is made exclusively by Brevo within the framework of data processing. Further information can be found in Brevo's privacy policy.

3.2.6 Tracking

Our newsletters contain so-called tracking pixels that are loaded when the email is opened. This allows us to track whether and when an email was opened and which links were clicked. This analysis serves to optimise our newsletter and is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR. You can object to tracking at any time by unsubscribing from the newsletter.

3.2.7 Storage Period

Your newsletter data will be stored for as long as you are subscribed to the newsletter. After unsubscribing, your data will be retained for a period of up to 3 years exclusively for the purpose of proving consent granted on the basis of Article 6(1)(f) GDPR and will then be deleted.

3.3 Newsletter Registration Form

The newsletter registration form on our website is embedded via an iframe from our newsletter service provider Brevo (see section 3.2.5).

Already when loading the registration form (i.e. BEFORE you enter data), the following data is processed:
- Your IP address is transmitted to Brevo servers (technically necessary for loading the iframe)
- Brevo sets a cookie in your browser
- The form uses Google reCAPTCHA to protect against spam. In doing so, Google also sets a cookie and transmits data (IP address, browser information, user behaviour) to Google servers, including in the USA

Purpose: The cookies serve the functionality and security of the registration form (spam protection, prevention of misuse).

Legal Basis: Article 6(1)(f) GDPR (legitimate interest in providing a functional and secure registration form).

Data Transfer: The data is transmitted to Brevo servers in the EU and to Google servers (including USA). There is no adequacy decision for the USA; the transfer is based on EU Standard Contractual Clauses.

Further Information:
Brevo Privacy: www.brevo.com/de/legal/privacypolicy/
Google Privacy: policies.google.com/privacy

3.4 Cookie Banner

We use a cookie banner on our website to obtain your consent to the use of cookies that are not technically essential.

For this purpose, we use the open-source software Klaro!, which we host locally on our server. No data is transmitted to third parties.

The cookie banner stores your cookie settings in a cookie called "klaro" on your device so that we can take your decision into account during future visits.

3.4.2 Stored Data

- Your cookie settings (which categories you have accepted/rejected)
- Timestamp of consent
- Version of consent

3.4.3 Legal Basis

The storage of the "klaro" cookie is based on Article 6(1)(f) GDPR (legitimate interest in storing your cookie settings). The obtaining of consent for other, non-essential cookies is carried out in accordance with Section 165(3) TKG 2021.

3.4.4 Storage Period

The "klaro" cookie is stored for 365 days. You can change your settings at any time here or delete the cookie in your browser.

3.4.5 Revocation

You can revoke your consent at any time with effect for the future by changing your cookie settings or deleting the cookie in your browser.

4. Links und external content

4.1 Membership Application for Event Participation (LMC Vienna)

To participate in tightstorm, membership with LMC Vienna (Leather and Motorbike Community Vienna - Verein zur Pflege der Leder-, Fetisch und Motorradkultur) is required, as the event takes place at the club location "HARD ON Vienna".

Membership applications are processed directly through the LMC Vienna website (www.lmc-vienna.com). LMC Vienna is the official event host and acts as an independent data controller for the processing of your membership data.

Important Notice:
- tightstorm has no influence over the membership application process at LMC Vienna
- tightstorm has no access to your membership data held by LMC Vienna
- tightstorm does not receive any data from the membership registration

For information regarding data processing by LMC Vienna, please refer to the LMC Vienna website. Further information about membership and participation can also be found in our FAQs.

4.2 Links to Social Media

Our website contains links to our social media profiles on Instagram and Facebook. These links are displayed as icons.
When you click on these links, you will be redirected to the respective platforms. In doing so, your IP address and the information that you are coming from our website are transmitted to the platform operators.

We maintain a presence on the following social media platforms:
- Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)
- Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)

If you communicate with us via these platforms (e.g. send messages), your data will be processed by the platform operator. We only process your messages to respond to your enquiries.

Data Transfer to Third Countries: Meta also processes data in the USA. There is no adequacy decision for the USA. The transfer is based on EU Standard Contractual Clauses.

Further Information:
- Facebook/Meta Privacy: https://www.facebook.com/privacy/policy/
- Instagram Privacy: https://privacycenter.instagram.com/policy/

4.3 Links to other websites

Our website contains links to websites of other providers. We have no influence on the content and data processing of these external websites. The respective operators are solely responsible for their contents and data protection practices. When you click on external links, you leave our website and the privacy policy of the linked website applies.

5. Your rights as a data subject

You have the following rights under the GDPR:

Right of Access (Article 15 GDPR):
You have the right to obtain information about the personal data we process concerning you.

Right to Rectification (Article 16 GDPR):
You have the right to request the correction of inaccurate data or the completion of incomplete data.

Right to Erasure (Article 17 GDPR):
You have the right to request the deletion of your personal data, provided the statutory requirements are met.

Right to Restriction of Processing (Article 18 GDPR):
You have the right to request the restriction of the processing of your data.

Right to Data Portability (Article 20 GDPR):
You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

Right to Object (Article 21 GDPR):
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.

Right to Withdraw Consent (Article 7(3) GDPR):
Insofar as the processing is based on your consent, you have the right to withdraw this consent at any time with effect for the future.

To exercise your rights, you can contact us at any time using the contact details provided above. Exercising your rights is generally free of charge.

6. Right to lodge a complaint with a supervisory authority

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal
data.

Competent Supervisory Authority in Austria:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
+43 1 52 152-0
www.dsb.gv.at

7. Data security

We employ technical and organisational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons. Our security measures are continuously improved in line with technological developments.

8. Chances to this privacy policy

We reserve the right to amend this privacy policy to ensure that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your next visit.

9. Contact regarding data protection matters

If you have any questions about data protection or the processing of your personal data, you can contact us at any time: mail [at] tightstorm [dot] com.

Last update: November 22, 2025