This Privacy Policy explains how KrampusCostume.com handles personal data when you visit this website, contact us, or interact with our content.
KrampusCostume.com is an independent editorial website about Krampus costumes, masks, Krampusrun, and Alpine winter traditions. We aim to collect as little personal data as reasonably necessary to operate the website, respond to messages, maintain security, and improve the site over time.
What data may be processed?
Depending on how you use this website, the following categories of data may be processed:
- Technical access data: IP address, browser type, device information, operating system, referrer URL, requested pages, access time, and server log information.
- Contact data: name, email address, message content, and any other information you choose to send when contacting us.
- Cookie or preference data: cookie preferences, consent status, and related technical identifiers where a consent or preference tool is used.
Why we process data
Personal data may be processed for the following purposes:
- to provide and display the website correctly;
- to maintain website security and prevent misuse;
- to respond to messages, corrections, image concerns, or source suggestions;
- to review technical errors and improve the website;
- to comply with legal obligations where required.
Legal bases for processing
Where the General Data Protection Regulation (GDPR) applies, personal data may be processed on the following legal bases:
- Legitimate interests where processing is necessary to operate, secure, improve, and protect the website.
- Consent where optional cookies, embedded content, or similar services require consent.
- Contractual or pre-contractual communication where you contact us with a request that requires a response.
- Legal obligation where processing or retention is required by applicable law.
Server logs and hosting
When you visit the website, technical access data may be processed automatically by the hosting provider and server infrastructure. This can include IP address, browser and device information, requested URLs, access time, referrer information, and error logs.
This information is used to deliver the website, maintain technical stability, investigate errors, prevent misuse, and improve security. Server logs are generally retained only as long as necessary for operational and security purposes, unless longer retention is required to investigate abuse or comply with legal obligations.
Cookies and similar technologies
This website may use cookies or similar technologies. Some cookies may be technically necessary for the website to function, for example for security, preferences, or basic WordPress functionality.
At the moment, this website does not use advertising cookies, affiliate tracking, or Google Analytics. If this changes in the future, this Privacy Policy should be updated before such tools are activated.
You can usually adjust cookie settings through your browser. If a cookie consent banner or preference tool is available on this site, you can use it to manage optional cookie settings.
Analytics, advertising, and affiliate tracking
KrampusCostume.com currently does not use Google Analytics, advertising tracking, or affiliate links. The site is currently operated as an editorial information project.
If analytics, advertising, affiliate links, sponsored placements, or similar tools are added in the future, this Privacy Policy should be updated to explain what tools are used, what data is processed, and what choices visitors have.
Contact by email or contact form
If you contact us by email or through a contact form, we process the information you provide in order to respond to your message. This may include your name, email address, message content, attachments, and technical metadata related to the communication.
Contact messages may be retained for as long as necessary to handle the request, document the communication, or protect legitimate interests. Messages that are no longer needed may be deleted, unless legal retention obligations apply.
Image, source, and correction submissions
If you submit an image concern, correction, source suggestion, regional note, or contribution proposal, we may process the information you provide in order to review the matter. This may include your contact details, message content, source references, image details, and contextual information about an event, group, region, or visual material.
Please do not send sensitive personal data unless it is necessary for your request. If your message concerns another person, a child, a private event, or an identifiable local group, please provide only the information needed to understand and review the concern.
Embedded content and external links
Articles on this website may include links to external websites, sources, museums, academic pages, event organisers, video platforms, maps, or other third-party services. External websites operate under their own privacy policies and are outside our control.
If embedded content is used, such as videos, maps, social media posts, or other third-party media, the external provider may process technical data and set cookies. Where required, such content should be blocked until consent is given.
Data sharing
Personal data may be shared with service providers where necessary to operate the website, such as hosting providers, email providers, security tools, consent management tools, or technical support services. These providers process data only for the relevant operational purpose and subject to applicable contractual or legal safeguards.
We do not sell personal data.
International data transfers
Some service providers may process data outside your country or outside the European Economic Area. Where this occurs, appropriate safeguards should be used as required by applicable data protection law, such as adequacy decisions, standard contractual clauses, or equivalent mechanisms.
How long data is kept
Personal data is retained only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods may differ depending on the type of data, the reason for processing, technical requirements, and legal obligations.
Your rights
Depending on applicable law, you may have rights regarding your personal data. Under the GDPR, these may include the right to request access, rectification, erasure, restriction of processing, data portability, objection to processing, and withdrawal of consent where processing is based on consent.
To exercise your rights, contact us using the contact details listed above. You may also have the right to lodge a complaint with a data protection authority.
Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. No website or online transmission can be guaranteed to be completely secure.
Changes to this Privacy Policy
This Privacy Policy may be updated when the website changes, when new tools are added, or when legal requirements change. The latest version published on this page applies.
Last updated: 10.07.2026