Privacy information for guests

Permanent Mission of Austria to the United Nations is the controller for your data: it decides which events exist, who is invited, and what happens with your registration.

The registration, ticket and check-in system is provided by Mission Support (Arnonym OÜ, Sepapaja 6, 15551 Tallinn, Estonia), which processes your data only on the organiser’s instructions as its processor under Art. 28 GDPR.

• Name, email address, phone (optional) — to register you, send your confirmation and ticket, and identify you at the door. Legal basis: taking steps at your request before and during the event (Art. 6(1)(b)), or, for a public body, the performance of its official tasks (Art. 6(1)(e)).
• Ticket category and reference code — to manage capacity and admit you at the entrance (QR code).
• Dietary preference and free-text notes — only if you provide them, to accommodate you at the event. A dietary choice such as halal or kosher can indicate a religious belief; you provide it voluntarily and with your explicit consent (Art. 9(2)(a)) by ticking the box on the form. You can leave these fields empty.
• Answers to follow-up forms (for example a dinner choice) — only if the organiser sends you one and you answer.
• Check-in time — recorded when your ticket is scanned at the entrance.
• Mail delivery log — which confirmation, ticket or reminder emails were sent to you and whether they were accepted by the mail provider, so a missing mail can be resent.

No analytics, no advertising, no tracking cookies. The ticket page and this site set no cookies for guests at all. Links in the emails pass through the mail provider’s redirect (a technical requirement on Brevo’s side that cannot be switched off); opens and clicks are counted only in anonymised, aggregate form and are not linked to you.

Only the organiser’s own team (event managers and door staff, limited to the events they work on) and the following service providers, all bound by data processing agreements and all operating in the EU:

• Supabase (database and login system) — servers in Frankfurt, Germany
• Vercel (runs the website) — functions in Frankfurt, Germany
• Brevo (sends the emails) — Paris, France
• Cloudflare (domain name resolution only; sees no page content)

Your data is not sold, not used for advertising, and not shared with anyone else.

For the duration of the event and the organiser’s follow-up (thank-you notes, next invitation), after which the organiser deletes or anonymises the guest list. The organiser can delete your record completely at any time; this removes your registration, ticket, form answers and mail log in one step.

You may ask the organiser for access to your data, its correction or deletion, restriction of processing, data portability, and you may withdraw consent for the optional information at any time — none of this affects your registration itself. Use the contact details on the invitation you received.

If you cannot reach the organiser, Mission Support will forward your request: ich@arnonym.at. You also have the right to lodge a complaint with a data protection authority — the one in your country of residence, or the one responsible for the organiser.