Skip to content
Innere Stadt • Mon-Fri 10-7, Sat 10-2
0316 80 77 35 • By appointment only

Data Processing Agreement (DPA)

The legally binding version is the German version available at AVV.

Updated 12 October 2026

Key Summary:

  • This agreement applies to business clients (B2B) who entrust us with instruments for maintenance or construction.
  • We process personal data exclusively to execute the specific service order.
  • We implement technical and organizational security measures to protect your data.
  • Data is deleted or returned upon completion of the order and expiration of legal retention periods.

1. Subject and Parties

This agreement governs the processing of personal data within the framework of cooperation between the Client (Controller) and Batsmanluno GmbH (Processor), located at Jakominiplatz 14, 8010 Graz, represented by Managing Director Johanna Bauer (Share Capital: 10,000 €).

The objective is to ensure full compliance with the General Data Protection Regulation (GDPR/DSGVO) and the Austrian Data Protection Act (DSG) during the handling of musical instruments and related administrative tasks.

2. Nature and Purpose of Processing

The Processor handles data solely to fulfill the maintenance, repair, or build order. This includes:

  • Categories of Data Subjects: Employees of the Client, owners of the instruments.
  • Categories of Data: Names, contact details, instrument specifications, and specific technical requirements for adjustment.

Processing is carried out based on the service descriptions defined in our Terms and Conditions.

3. Obligations of the Processor

Batsmanluno GmbH undertakes to process personal data only on the documented instructions of the Controller. We guarantee that all personnel authorized to process the data have committed themselves to confidentiality.

4. Sub-processors

To provide the services, the following sub-processors are utilized:

  • World4You Internet Services GmbH (Wolfgang-Pauli-Straße 2, BT3, 4020 Linz) for the provision of IT infrastructure and hosting.
  • FormSubmit (USA) for the transmission of contact requests (refer to our Privacy Policy for details on international transfers).

5. Data Security and Notification

We implement appropriate technical and organizational measures (TOM) to protect data against unauthorized access, loss, or alteration. In the event of a data breach, the Controller will be notified without undue delay.

The competent supervisory authority is the Österreichische Datenschutzbehörde (DSB), Barichgasse 40-42, 1030 Wien, www.dsb.gv.at.

6. Deletion and Return

Upon termination of the contractual relationship, data will be deleted or returned, unless statutory retention obligations apply. According to our business rules, the maximum storage period for instruments and associated data is 14 days after completion, unless otherwise agreed in writing.

7. Audit and Final Provisions

The Controller has the right to verify compliance with this agreement through audits. Any amendments must be made in writing.

This agreement is governed by the laws of the Republic of Austria. The place of jurisdiction for all disputes is Graz.

Contact for data protection inquiries: [email protected] | Tel: 0316 80 77 35.