Privacy Policy

Effective Date: 26 August 2026

At ROCK for Mental Health 🩵, accessible via ROCKforMentalHealth.at, protecting your personal data and respecting your privacy are important to us.

This Privacy Policy explains what personal data may be collected when you use our website, why we process it, and what rights you have under applicable data protection law, particularly the EU General Data Protection Regulation (GDPR/DSGVO) and Austrian law.

1. Who We Are

ROCK for Mental Health 🩵 is an Austrian non-profit association (Verein) using music, community and advocacy to strengthen Mental Health awareness, encourage open conversation and connect people.

The data controller responsible for this website is:

ROCK for Mental Health 🩵
Austria

Email: info@rockformentalhealth.at

Website: ROCKforMentalHealth.at

Further legal and organisational information can be found in our Imprint (Impressum).

2. Personal Data We Collect

Depending on how you use our website, we may process personal data that you provide voluntarily or that is technically generated when you visit the website.

This may include:

  • Name
  • Email address
  • Information submitted through contact or registration forms
  • Messages and enquiries you send to us
  • IP address
  • Browser and device information
  • Technical server and access data
  • Newsletter subscription information
  • Cookie and consent preferences
  • Information required when making a donation, becoming a member or registering for an event, where applicable

We only collect information that is reasonably necessary for the relevant purpose.

3. How and Why We Use Your Data

We may process personal data in order to:

  • Respond to enquiries and messages
  • Provide information about ROCK for Mental Health activities and events
  • Manage newsletter subscriptions and communications
  • Process membership enquiries or applications
  • Facilitate donations and supporter activities
  • Manage event registrations where applicable
  • Maintain the security and technical operation of our website
  • Improve our website and understand how it is used, where you have consented to relevant analytics
  • Meet our legal and administrative obligations as an Austrian association

Depending on the processing activity, the legal basis may include your consent, performance of a contract or steps requested before entering into a contract, compliance with a legal obligation, or our legitimate interests in operating and securing our website and association activities.

Where processing is based on consent, you may withdraw that consent at any time.

4. Newsletter and Communications

If you voluntarily subscribe to our newsletter or other updates, we may send you information about:

  • ROCK for Mental Health events
  • Music and community activities
  • Mental Health awareness initiatives
  • News and developments from the association
  •  Opportunities to participate, support or volunteer

You can unsubscribe at any time using the unsubscribe option included in our communications or by contacting us at info@rockformentalhealth.at.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Contact Forms

When you contact us through a form on this website, we process the information you provide in order to respond to your enquiry and, where necessary, manage any subsequent communication.

We retain this information only for as long as reasonably necessary for the purpose of the communication or for any applicable legal requirements.

6. Donations and Payments

Where our website enables donations or other payments, payment processing may be provided by an external payment service provider.

Payment providers may process information necessary to complete the transaction, such as your name, payment details, transaction information and technical information.

ROCK for Mental Health does not normally receive or store complete credit-card information when payments are handled directly by an external payment provider.

Information about the relevant payment provider and its data processing practices will be provided where the payment service is offered.

7. Embedded Content and External Services

Our website may include or link to content and services provided by third parties, such as video, music, social-media or ticketing platforms.

When third-party content is activated or accessed, the relevant provider may receive information such as your IP address and information about your interaction with its service.

Where legally required, third-party content that involves non-essential tracking or similar technologies will only be activated after you have given the appropriate consent.

The privacy practices of these third-party services are governed by their respective privacy policies.

8. Cookies and Consent

Our website may use cookies and similar technologies.

Some cookies are technically necessary for the website to function correctly and may be used without your consent where permitted by law.

Non-essential cookies and technologies — for example, certain analytics, marketing, social-media or third-party tracking technologies — will only be used where you have given your consent.

Where a consent-management tool is provided, you can use it to accept, reject or adjust non-essential cookies and to change your preferences later.

Further details about the cookies and services currently used by this website, including their purposes and duration, may be provided through our cookie settings or consent-management system.

9. Website Analytics

If we use website analytics services, these services may process information about how visitors use our website.

Where consent is legally required, analytics will only be activated after you have provided that consent.

The specific analytics provider, purpose of processing, relevant data transfers and retention periods should be identified in this Privacy Policy or the website’s cookie-management system.

10. Data Sharing and Service Providers

We do not sell your personal data.

We may share personal data with trusted service providers where this is necessary to operate the website or provide a service you have requested. These may include website hosting, email, newsletter, payment, ticketing, analytics or technical service providers.

Where required, appropriate data-processing agreements and safeguards are used.

If personal data is transferred outside the European Economic Area, we take appropriate measures as required by applicable data protection law.

11. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by applicable legal, accounting or administrative obligations.

Retention periods may vary depending on the type of information and the purpose for which it is processed.

12. Your Data Protection Rights

Under the GDPR, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate personal data
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to certain processing
  • Request data portability where applicable
  • Withdraw consent at any time where processing is based on consent

To exercise these rights, contact:

Email: info@rockformentalhealth.at

You also have the right to lodge a complaint with the competent data protection authority.

In Austria, the competent supervisory authority is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).

13. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.

No online system can provide absolute security, but we take reasonable measures appropriate to the nature of the data we process.

14. Children and Young People

Our website is intended to provide information about our activities to the general public.

We do not intentionally use the website to collect personal data from children for marketing purposes.

Where activities specifically involving children or young people require the collection of personal information, appropriate information, consent and safeguarding measures will be used as required by law.

15. External Links

Our website may contain links to external websites.

Once you leave ROCKforMentalHealth.at, the privacy practices of the external website apply. We are not responsible for the content or privacy practices of third-party websites.

16. Changes to This Privacy Policy

We may update this Privacy Policy when our website, services, legal requirements or data-processing practices change.

The current version will always be published on this page together with its effective date.

17. Contact

For questions about this Privacy Policy or the way we process personal data, please contact:

ROCK for Mental Health 🩵

Email: info@rockformentalhealth.at

Website: ROCKforMentalHealth.at

Music that Inspires, Heals and Connects.