As of: 26.02.2025

According to Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation; "GDPR"), the controller must inform the data subject about the processing of personal data. With this document, we inform you about the personal data being processed.

To improve the clarity of this privacy policy, you will find below a brief explanation of the terms used.

Personal data (“data”) refers to all information relating to an identified or identifiable natural person, such as name, address, email address, telephone number, date of birth, age, gender, social security number, video recordings, photos, etc. Data relating to legal entities is not subject to the provisions of the GDPR.

Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.

If you have any further questions, we as the controller responsible for the data processing described herein are happy to assist you at the following contact details:

Organisationsschmiede Uggowitzer e.U

Kreuznerstraße 42, 9710 Feistritz an der Drau, Austria

Tel.: +43 676 4455906

Email: office@organisationsschmiede.at

Data may only be processed for a specific purpose and only if the processing is based on an appropriate legal basis. The processing may be justified for the following reasons:

We process your data for the following purposes based on the following legal grounds:

Recipients support us in complying with legal obligations, initiating and fulfilling contracts, providing services that require your consent, or carrying out processing based on our legitimate interests. We may disclose or transfer data, in particular, to the following recipients (processors or controllers):

We will only transfer your data to other recipients if you have given your explicit consent pursuant to Article 6(1)(a) GDPR, if such transfer is legally permissible and necessary for the performance of a contract with you under Article 6(1)(b) GDPR, if we are legally obliged to do so under Article 6(1)(c) GDPR, or if the disclosure is required under Article 6(1)(f) GDPR to safeguard our legitimate interests or for the establishment, exercise, or defense of legal claims and there is no reason to assume that you have an overriding interest in the non-disclosure of your data.

We intend to transfer data to the following third countries: United States of America.

For the United States of America, an adequacy decision by the European Commission is in place. In its decision C(2023) 4745 final of July 10, 2023, the Commission concluded that the United States ensures an adequate level of data protection under Article 45 GDPR, provided our contracting partner is listed in the EU/US Data Privacy Framework. Information about a provider’s registration in this list can be found in the relevant section of this privacy policy.

If no adequacy decision exists, we may transfer data only on the basis of appropriate safeguards such as standard contractual clauses, binding corporate rules, approved codes of conduct, approved certification mechanisms, etc. Under the conditions of Article 49 GDPR, a transfer may still be permitted.

You may request a copy of these safeguards from us in relation to your specific case.

We do not intend to transfer data to an international organization.

Data is generally stored only for as long as required by statutory retention obligations. In addition, data may be stored if necessary for the assertion or defense of third-party claims. Important retention periods can be found below:

We use the web hosting provider World4You for our website. The service provider is the Austrian company World4You Internet Services GmbH, Hafenstraße 35, 4020 Linz, Austria.

You can find more information about the data processed through the use of World4You in their privacy policy at https://www.world4you.com/de/unternehmen/datenschutzerklaerung.html.

The provider of the following services is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland. You can find Google’s privacy policy here.

However, some services (such as Google Search or Google Maps) are provided by or data is transferred to the following company: Google LLC, 1600 Amphitheatre Pkwy, Mountain View, California 94043-1351, USA.

Google LLC is based in a third country and is listed as certified, so the data transfer to the USA complies with data protection under Article 45 GDPR. Further information about the certification of Google LLC can be found here.

Some Google services use cookies. An overview of the cookies used, their purpose, and storage duration can be found in the cookie section of this privacy policy.

We obtain your consent before processing any data or setting cookies in connection with Google services in accordance with Art. 6(1)(a) GDPR and § 165(3) TKG. Your consent can be freely revoked at any time.

Consent is not required in advance only if the sole purpose of the cookie is to transmit a message, or if it is strictly necessary to provide a service that you have explicitly requested.

We use Google Ads (formerly Google AdWords) as an online marketing tool to promote our products and services.

Google Ads is used to better analyze user actions. If you click on one of our Google Ads, a “conversion” cookie from a Google domain is stored on your device.

We also use Google Ad Remarketing on our website.

The most important cookies used in this context include:

We use Google Tag Manager as an organizational tool that allows us to manage website tags centrally via a user interface. Tags track activities on our website and typically originate from Google products such as Google Ads or Google Analytics.

Google Tag Manager does not set any cookies or store any data itself. It serves as a container for managing tags. The actual data is collected by the tags of the analytics tools and is passed through, not stored by Google Tag Manager itself.

Within our online offering, we use Meta Business Tools provided and operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta").

The following data processing activities take place solely on the basis of your explicit consent in accordance with Article 6(1)(a) GDPR.

Meta Pixel is a code that loads a set of functions allowing Meta to track user actions on our website. The Meta Pixel can store your actions on our website in one or more cookies. You can find more information about Meta Pixel here. We also use Custom Audiences. More information on that can be found here.

The Pixel collects information such as your IP address and user ID and matches it with data from your Facebook account.

Meta uses different cookies depending on interaction and user behavior. The following are examples of such cookies:

Cookies are text files stored on your device to recognize it upon return. Cookies may contain information about the use of our services and offerings. According to the ruling of the European Court of Justice in the Planet49 GmbH case, consent must be obtained for cookies—even if they are not personal data.

Some of the cookies we use are only stored until you close our service again (session cookies), while certain cookies are stored for longer and allow you to be recognized upon return (persistent cookies). Some cookies are essential for the operation of the website (essential cookies), others collect information about visits and traffic sources without linking the data to you personally (performance cookies). Certain cookies are used for marketing purposes (marketing cookies).

If any of the cookies we use process personal data, the processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of a contract, in accordance with Article 6(1)(a) GDPR if consent has been given, or in accordance with Article 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a user-friendly, effective user experience.

When you visit the website for the first time, a cookie notice allows you to select which cookies you want to allow. Consent is required for marketing cookies. If you wish to withdraw your consent or change your cookie settings, you can do so directly in your browser.

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed. If this is the case, you have the right to access this personal data and the following information: the purposes of the processing; the categories of personal data; the recipients or categories of recipients; if possible, the intended duration of storage or, if not possible, the criteria used to determine that duration; the existence of a right to rectification or erasure of personal data or restriction of processing by the controller or to object to such processing; the right to lodge a complaint with a supervisory authority; any available information about the source of the data; the existence of automated decision-making including profiling.

You have the right to obtain from the controller the rectification of inaccurate personal data and the completion of incomplete personal data.

You have the right to request the erasure of personal data without undue delay if one of the following grounds applies: the personal data is no longer necessary for the purposes for which it was collected; you withdraw your consent and there is no other legal basis for the processing; you object to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds, or you object pursuant to Article 21(2); the personal data has been unlawfully processed; erasure is necessary to comply with a legal obligation; the data was collected in relation to services offered to a child under Article 8(1).

The right to erasure does not apply if the processing is necessary for exercising the right of freedom of expression and information; to comply with a legal obligation or perform a task carried out in the public interest; for reasons of public interest in the area of public health; for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes; or for the establishment, exercise, or defense of legal claims.

You have the right to request restriction of processing if one of the following applies: the accuracy of the personal data is contested for a period enabling the controller to verify it; the processing is unlawful and you oppose erasure and request restriction instead; the controller no longer needs the data, but you require it for legal claims; or you have objected to processing pursuant to Article 21(1) pending verification of whether the legitimate grounds of the controller override yours.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent, or for legal claims, or to protect the rights of another natural or legal person, or for important public interest reasons.

You have the right to receive the personal data you have provided to a controller in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller without hindrance, where the processing is based on consent or contract and carried out by automated means.

You also have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data based on Article 6(1)(e) or (f), including profiling based on those provisions. The controller shall no longer process the personal data unless compelling legitimate grounds override your interests, rights, and freedoms or the processing is for the establishment, exercise, or defense of legal claims.

If personal data is processed for direct marketing, you have the right to object at any time to such processing, including profiling related to direct marketing.

You have the right to withdraw your consent at any time where processing is based on Article 6(1)(a) or Article 9(2)(a), without affecting the lawfulness of processing based on consent before its withdrawal.

You have the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, T: +43 1 52 152 2569, E: dsb@gsb.gv.at, if you believe that the processing of your data violates applicable data protection law.

The provision of personal data is partly required by law or necessary for the conclusion of a contract. In general, you are not obliged to provide the data. However, if you do not provide the data, it will not be possible to conclude a contract.

There is no automated decision-making, including profiling, pursuant to Article 22 paragraphs 1 and 4.