The Mantra Spirit Association (hereinafter referred to as „we“ or „us“) takes the protection of your personal data very seriously. We process your data exclusively within the framework of the statutory provisions (GDPR, DSG 2018 and other applicable law). In the following we inform you about the most important aspects of data processing on our website and in the context of the Mantra Spirit Festival.

1st person responsible

Mantra Spirit Association
ZVR number: 1481832489
Association headquarters: Kautzener Straße 4, 3861 Eggern, Austria
Represented by: Jochen Petz (President of the Association)
E-mail: festival@highest-potential.jetzt

2 Which data we process and for what purpose

2.1 Website visit (server log files)

Each time our website (www.mantra-spirit-festival.at) is accessed, the following data is automatically stored in so-called server log files:
IP address (anonymized as far as technically possible)
Date and time of access
Requested page / file
Browser type and version
Operating system
Referrer URL (previously visited page)
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the technical provision and security of the website)
Storage period: maximum 6 months

2.2 Membership in the association & festival registration / ticket order

Membership of the association is required to participate in the Mantra Spirit Festival. When registering for membership and/or ordering tickets, we generally collect the following data:
First and last name
E-mail address
Address
Phone number
Payment information (for bank transfer only IBAN + name of remitter)
Purpose: Processing of association membership, administration of festival participation, communication before/after the event, creation of participation lists (e.g. for security and organizational purposes)
Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment / pre-contractual measures) + Art. 9 para. 2 lit. d GDPR (for special categories in the association context)
Storage period: For the duration of membership + 3 years after withdrawal (tax retention obligation); participation data will be deleted after the end of the festival after 12 months at the latest, provided there are no statutory retention obligations.

2.3 Contact by e-mail / form

If you contact us by e-mail (festival@highest-potential.jetzt), we store the data transmitted (name, e-mail, message text) exclusively for processing your request.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest) or lit. b (pre-contractual measure)
Storage period: Until the request has been fully processed + max. 6 months archiving

2.4 Newsletter / Announcements

For the newsletter, we process your e-mail address and optionally your first name to send you information about association activities and the festival.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent)
Storage period: Until you withdraw your consent
Each mailing contains an unsubscribe link.

2.5 Photos / video recordings during the festival

During the Mantra Spirit Festival, photos and videos will be taken for the purposes of public relations, documentation and follow-up (publication on the association's website, social media channels, festival reviews). This is accepted with the registration for the association event.

Subsequent opt-out / de-identification:
Every person has the right to withdraw their consent at any time or to subsequently request that they be made unrecognizable in the published images (e.g. by pixelating their face).
Please send an e-mail to festival@highest-potential.jetzt with a brief description of the image/video (e.g. date, approximate time, location/scene or direct link to the published article). We will process such requests within 14 days and remove or edit the material accordingly. Flyers or similar that have already been printed cannot be changed retroactively.

3. disclosure of data

Your data will not be sold to third parties. Your data will only be passed on:
to payment service provider / bank (exclusively for payment processing)
to authorities within the legally prescribed framework
to external service providers (e.g. web hosts, email providers) who have concluded data processing agreements with us

4.your rights

You always have the right to
Information (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
If you have any questions, please contact: festival@highest-potential.jetzt

5.cookies & external services

Our website does not currently use any tracking cookies or analysis tools (as of January 2026). If external services (e.g. YouTube videos, Google Maps, social media plugins) are integrated in the future, we will inform you separately and - if necessary - obtain your consent.

6. data security

We take technical and organizational measures to protect your data from unauthorized access (e.g. SSL encryption of the website).

7 Important note on payments and refunds:

Paid membership fees and festival tickets are non-refundable. No refunds will be made in the event of non-participation, cancellation, illness, force majeure or other reasons. The association bears fixed costs for the organization and planning - therefore we ask for your understanding that once paid membership fees and tickets cannot be refunded.