General Terms and Conditions for “Nova Rock Shop and Cashless”





The website and its subdomains (hereinafter referred to as „the website“) are operated by Nova Music Entertainment GmbH, Hintergasse 20, 7210 Mattersburg, as the service provider, media owner and data protection officer and publisher (hereinafter referred to as „nova music entertainment „) operated.

The protection and security of your personal data is important to us. Nova Music Entertainment therefore stores and processes data exclusively in accordance with the Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data, on the free movement of data and on the repeal of Directive 95/ 46/EG („General Data Protection Regulation“, GDPR) as well as in accordance with the Austrian Data Protection Act (DSG).



 Nova Music Entertainment stores and processes personal data for the following purposes:



Data processing in connection with establishing contact


If you contact us (e.g. by e-mail or telephone), we only process the data you provide when contacting us to process the request if the data is required. Your data is processed to carry out pre-contractual measures or to fulfill a contractual relationship or is based on our legitimate interest, namely for organizing the response to enquiries.

If you purchase a Nova Rock ticket through one of our third-party providers (such as a ticketing platform), these third-party providers may provide your contact information (name, email address) to Nova Music Entertainment. This processing of your contact data enables Nova Music Entertainment to inform you about any changes to the planned course of the event or about a necessary cancellation of the event, as well as send you other relevant information in connection with the event. According to Article 6 Paragraph 1 lit f GDPR, this processing is based on the legitimate interest of Nova Music Entertainment in sending you all important information about the planned visit to the event as directly as possible.


Data processing in the context of the customer account:

If you want to use our services on the platform, you need a customer account. When opening the customer account, you will be asked to enter your data. Mandatory information is marked with an asterisk (*) or otherwise as mandatory data. All other details are optional. After you have agreed to the General Terms and Conditions (GTC) and taken note of the data protection information, your customer account can be created. We need the data you provide in the registration process for the support of the customer relationship. Your data will be processed in relation to the mandatory fields in accordance with Art 6 Para 1 lit b GDPR to carry out pre-contractual measures or to fulfill a contractual relationship. Regarding all other information, the processing takes place on the basis of our legitimate interest in accordance with Art 6 Para 1 lit f DSGVO, in improving our offer and our services. We store the data you provide during the registration process for as long as it is necessary to fulfill the contractual relationship.


Data processing in the context of a customer order

If you purchase products or services (like e.g. the Nova Rock cashless data carrier and the associated services) as part of your customer account on the website, or personalize your ticket and in this connection transmit your data (name, address, account data) to us, we process this data to carry out pre-contractual measures or to fulfill the contract in accordance with Art 6 Para 1 lit b GDPR and to fulfill legal obligations in the context of a business relationship (or to process this) in accordance with Art 6 Para 1 lit c GDPR. If a transfer of your data is necessary for the fulfillment of the contractual relationship, it will be sent to the following categories of recipients: chartered accountants, auditors and tax consultants, contractual and business partners

As long as your customer account is activated, you can track all your orders in the customer account. In addition, we store your personal data in connection with the sale of goods and services for seven years because we are legally obliged to keep our business books for 7 years (legal basis: Art 6 Para 1 lit c GDPR).


Data processing in the context of the newsletter

If you have actively registered for our newsletter, you will receive regular information from us by e-mail or SMS about us and our range of services. In order to register for the Nova Music Entertainment newsletter service, we need at least your e-mail address to which the newsletter should be sent. Further information will be used to address you personally in the newsletter or to enable queries. By checking the box, you register for our newsletter.

If we have received your contact details in connection with the sale or a service, we also process this data to send you (advertising) information by post, e-mail (also newsletter) or SMS about your own similar products and services.

You can unsubscribe from a newsletter you have subscribed to at any time. You can either send us an email or cancel via a link at the end of the newsletter. The personal data will be stored and used for sending the newsletter until you unsubscribe.

Nova Music Entertainment uses “MailChimp”, an e-mail marketing platform from the US provider The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA, to send newsletters. This company works for us as a processor and may only use your data to process specific orders and is contractually obliged to us to comply with the statutory data protection regulations. The appropriate level of protection for the transmission of data to the USA results from standard contractual clauses in accordance with Article 46 GDPR.

Statistical data is collected on the use of our newsletter in order to optimize these services. The subscribed newsletters and the use of the same are assigned to the customer within the newsletter engine.

This processing is based on your express consent in accordance with Article 6 (1) (a) GDPR.



We may share your information with the third parties identified in this Privacy Policy for the purposes identified in this Privacy Policy.

We only pass on your personal data to third parties if:

  • you have given your consent within the meaning of Article 6 Paragraph 1 lit a GDPR (you can always revoke your consent);
  • this is necessary according to Article 6 Paragraph 1 lit b GDPR for the processing of contractual relationships with you;
  • in the event that there is a legal obligation to pass it on under Article 6 Paragraph 1 lit c GDPR or in order to comply with an enforceable official order; or
  • disclosure according to Article 6 Paragraph 1 lit f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data.


Passing on the data for cashless processing of payments at the festival

Cash and other payment methods (debit and credit cards etc.) will not be accepted throughout the festival (except: garbage deposit, shuttle bus & early camping/caravan). All payments are to be processed via a cashless system. In order to be able to pay for food trucks, beer tents, etc. at the festival, you need a personalized cashless account, which you can create in advance and top up accordingly before the festival. In this context, your payment data (first name, last name, e-mail address, depending on voluntary information, also date of birth, street and house number, postal code, city/town, country, gender) will be sent to our contractual partner PlayPass NV (a Weezevent company), Lange Gasthuisstraat 29-31, 2000 Antwerp Belgium, VAT number BE0501728738.

In some cases, our contractual partner collects the data required for topping up the cashless account, processing the payments via your cashless account and repaying the remaining credit from the cashless account to you, e.g. on their own website or via a technical integration in the necessary handling process. You can find more information about the data processing of our contractual partner under the following link:


Passing on the data to newsletter service providers

See above.


Contact option

If you have further questions about the transfer of your data to our business partners, you can contact us at any time by email (




Server Logs

Server logs: The IP address of the requesting computer, together with the date, time, the request, which file is requested (name and URL), what amount of data is transferred to you, a message as to whether the request was successful, identification data of the used browser and the operating system used, as well as the website from which access was made (if access is via a link). We save the server logs in order to be able to check the system security and to administer the website technically. Therefore, the processing is based on the legitimate interest of Nova Music Entertainment in accordance with Art 6 Para 1 lit f GDPR. If there has been a hacker attack, this data will be passed on to the law enforcement authorities. Any further transfer to third parties does not take place. The server logs are stored for a maximum of 3 months.



 Cookies are small text files that the website saves on your computer in order to recognize it, they can contain information about the use of the website. The information contained in the cookies is used to determine whether you are logged in or what data you have already entered. Most web browsers automatically accept cookies. You can avoid this by changing your browser settings. You can remove cookies stored on your PC at any time by deleting the temporary internet files.

Specifically, the cookies mentioned below are stored beyond the respective session.

– Nova Music Entertainment uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called „cookies“, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the USA and stored there. The appropriate level of protection for the transmission results from standard contractual clauses in accordance with Article 46 GDPR. For more information on the Standard Contractual Clauses and appropriate or reasonable warranties, visit Google works for us as a processor and may only use the transmitted data to process specific orders and is contractually obliged to us to comply with the statutory provisions on data protection. Nova Music Entertainment uses IP anonymization, so your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the website operator, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can also prevent the data generated by the cookie and related to your use of the website (including your anonymized IP address) from being sent to Google and the processing of this data by Google by clicking on the following link (http: // download and install the available browser plugin.

Google Analytics uses the following cookies: __utma (storage period 2 years), __utmt (storage period 10 minutes), __utmb (storage period 30 minutes), __utmc (for the duration of the session), __utmz (storage period 6 months), __utmv (storage period 2 years)

Your data will be processed on the basis of your consent.


Links on other websites

The website contains links to other websites over which Nova Music Entertainment has no control. Nova Music Entertainment assumes no liability for this content. The respective provider of the linked website is solely responsible for the content and correctness of the information provided there. Regarding the personal data processed on the other websites, reference is expressly made to the corresponding data protection declarations („Privacy Statements“) of the respective websites.



You have the right to information about the stored data in accordance with Article 15 GDPR, to correct inaccurate data in accordance with Article 16 GDPR, to delete data in accordance with Article 17 GDPR, to restrict the processing of data in accordance with Article 18 GDPR, to object to unreasonable data processing according to Art. 21 GDPR and to data portability according to Art. 20 GDPR.

If the processing takes place on the basis of a declaration of consent, you have the option of revoking this at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation.

You have the right to complain to the supervisory authority – in Austria the data protection authority is responsible. The address is:

Österreichische Datenschutzbehörde

Barichgasse 40-42

1030 Vienna

Telephone: +43 1 52 152-0


As part of the collection of the data, Nova Music Entertainment will announce if the provision of the personal data for you is required by law or contract or is necessary for the conclusion of a contract. At the same time, we will announce whether you are obliged to provide the personal data and what the possible consequences of non-provision would be.

There is no automated decision-making including profiling. If personal data is processed for a purpose other than that for which the personal data was collected, we will inform you and – if necessary – obtain separate consent.



Our privacy policy may change from time to time. All changes to the data protection declaration will be published by us on this page


By continuing to use the site, you agree to the use of cookies. more information

The cookie settings on this website are set to "allow cookies" to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click "Accept" below then you are consenting to this.