Privacy Policy
of CONCORDIA Sozialprojekte Gemeinnützige Privatstiftung and CONCORDIA Verein für Sozialprojekte
It is important to us at Concordia to handle the data entrusted to us (as well as all donations) responsibly. If you have any questions about our handling of your data, please feel free to contact us directly.
In principle, the following applies in accordance with the EU General Data Protection Regulation (GDPR):
Personal data (hereinafter mostly referred to as "data") are processed by us only as necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.
According to Article 4(2) of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, alignment or combination, restriction, erasure or destruction.
With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of the processing. In addition, we inform you below about the third-party components we use for optimisation purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.
Our privacy policy is structured as follows:
I. Informations about us as the responsible party
II. Rights of the user and the data subjects
III. Information on data processing
I. Informations about us as the responsible party
The responsible provider of this website in terms of data protection law is:
CONCORDIA Sozialprojekte Gemeinnützige respectively CONCORDIA Verein für Sozialprojekte
Hochstettergasse 6
A-1020 Wien
+43 1 212 81 49
office@concordia.or.at
Data Protection Officer: DI Benjamin Heiligenbrunner
datenschutz(at)concordia.or.at
II. Rights of the users and the data subjects
With regard to the data processing described in more detail below, users and data subjects have the right to
- confirmation as to whether data concerning them are being processed, information about the data being processed, further information about the data processing and copies of the data (cf. also Art. 15 of the GDPR);
- correct or complete incorrect or incomplete data (cf. also Art. 16 of the GDPR);
- the immediate erasure of the data concerning them (cf. also Art. 17 GDPR), or, alternatively, insofar as further processing is necessary pursuant to Art. 17 (3) GDPR, to restriction of processing in accordance with Art. 18 GDPR;
- receive the data concerning them and provided by them and to transfer this data to other providers/controllers (cf. also Art. 20 GDPR);
- lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in breach of data protection provisions (cf. also Art. 77 of the GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider about any correction or deletion of data or restriction of processing that takes place on the basis of Articles 16, 17 (1), 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.
Likewise, according to Art. 21 GDPR, users and data subjects have the right to object to the future processing of data concerning them, insofar as the data is processed by the provider in accordance with Art. 6 para. 1 lit. f) GDPR. In particular, an objection to the processing of data for the purpose of direct marketing is admissible.
III. Information on data processing
Internet presence
Your data processed during the use of our website will be deleted or blocked as soon as the purpose of the storage no longer applies, the deletion of the data does not conflict with any statutory retention obligations and no other information is provided below on individual processing procedures.
Cookies
a) Session cookies
We use so-called cookies with our website. Cookies are small text files or other storage technologies that are placed and stored on your end device by the internet browser you use. These cookies are used to process certain information about you on an individual basis, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages.
The legal basis for this processing is Art. 6 para. 1 lit b) GDPR, insofar as these cookies data are processed for the purpose of initiating or executing a contract.
If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is Art. 6 para. 1 lit. f) GDPR.
b) Third party cookies
Where applicable, cookies from partner companies with which we cooperate for the purpose of advertising, analysis or the functionalities of our website are also used with our website. The details of this, in particular the purposes and the legal basis for the processing of such third-party cookies, can be found in the following information.
c) Posibility of elmination
You can prevent or restrict the installation of cookies by setting your internet browser. You can also delete cookies that have already been stored at any time. However, the steps and measures required for this depend on the specific internet browser you use. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support.
You can also prevent third-party cookies directly when visiting the website by clicking on "Reject" or "Edit settings" in the cookie window.
However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be fully used.
Transmission of Data
Standard Contractual Clauses have been signed between all CONCORDIA social organisations in order to enable us to safely exchange data also with organisations in third countries. This especially affects the Swiss Confederation, the Republic of Moldova, and the Republic of Kosovo. Such an exchange can be necessary e.g. in order to ensure the correct dedication of donations.
Furthermore, all CONCORDIA social organisations are required to follow the CONCORDIA Data Protection Policy. This document defines our minimal standards regarding data protection.
We can subcontract external organisations (e.g. printing shops) for processing data. They need to sign an up-to-date data protection agreement (“processing agreement”) before data can be transferred. In those cases, we remain controllers as defined by Art. 24 GDPR.
For obtaining new donors, we cooperate with address companies. Addresses obtained in this way are used only once. Only if a donation is received or an interest in further communication is documented, we continue to use them according to our regular processing activities. All data from persons not having answered the initial letter are deleted after the activity has ended.
Contact requests / Contact possibility
If you contact us via the contact form or e-mail, the data you provide will be used to process your enquiry. The provision of the data is necessary for the processing and answering of your enquiry - without their provision we cannot answer your enquiry or at best only to a limited extent.
The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR.
Google Analytics
Our website uses functions of the web analysis service Google Analytics (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA - hereinafter referred to as "Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site.The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Your IP address will be truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can find more information on terms of use and data protection at www.google.com/analytics/terms/gb.html and policies.google.com/privacy.
You may refuse the use of cookies by selecting the appropriate settings on your browser or selection in the cookie window, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) by Google as well as the processing of this data by Google by clicking on the link below, download and install the browser plugin: tools.google.com/dlpage/gaoptout
The legal basis for using Google Analytics is Art. 6 para. 1 lit. f) GDPR.
YouTube
We use YouTube on our website. This is a video portal of YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as "YouTube".
YouTube is a subsidiary of Google.
We use YouTube in connection with the "Enhanced Privacy Mode" function in order to be able to show you videos. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the "enhanced data protection mode" function means that the data described in more detail below is only transmitted to the YouTube server when you actually start a video.
Without this "extended data protection", a connection to the YouTube server in the USA is established as soon as you call up one of our Internet pages on which a YouTube video is embedded.
This connection is necessary in order to be able to display the respective video on our website via your internet browser. In the course of this, YouTube will at least record and process your IP address, the date and time as well as the website you visited. In addition, a connection to Google's "DoubleClick" advertising network is established.
If you are logged into YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
For the purpose of functionality and to analyse user behaviour, YouTube permanently stores cookies on your end device via your internet browser. If you do not agree to this processing, you have the option of preventing the storage of cookies by making a setting in your internet browser. You can find more information on this above under "Cookies".
Google provides further information on the collection and use of data as well as your rights and protection options in this regard in the privacy policy described under "Privacy policy": policies.google.com
The legal basis for using YouTube is Art. 6 para. 1 lit. f) GDPR.
Content from LinkedIn is integrated on this website. This is a professional networking platform. When this website is called up, if this is not objected to, information about the registration in LinkedIn (if logged in), logging and location, including the IP address, is transmitted. You can find the details in LinkedIn's data protection information.
The legal basis for using LinkedIn is Art. 6 para. 1 lit. f) GDPR.
Google Fonts
This website uses "Google Fonts" from Google (Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA). This is a font service offered by Google that contains a selection of usable fonts. Visitors can use the fonts on their websites to display their content. Each time this website is called up, files are then loaded from a Google server to display the respective texts in a specific font. In the process, your IP address may be transmitted to a Google server and stored as part of the usual weblog. Further processing of this information is carried out by Google. The corresponding conditions and setting options can be found in Google's data protection information.
The legal basis for using Google Fonts is Art. 6 para. 1 lit. f) GDPR.
Google Tag Manager
This website uses the Google Tag Manager. This service allows website tags to be managed via an interface. The Google Tool Manager only implements tags, does not set cookies and does not collect any personal data. The Google Tag Manager triggers other tags that may collect personal data. However, the Google Tag Manager does not access this data.
If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.
The legal basis for using Google Tag Manager is Art. 6 para. 1 lit. f) GDPR.
Newsletter
You can sign up for our newsletter on the donation site. You can unsubscribe from the newsletter by using the unsubscribe link in the footer of the newsletter.
When you subscribe to our newsletter, we process the data that you yourself have provided to us via the corresponding form. The purpose of the data collection is to communicate with our donors (including information and advertising materials). This processing is based on the legal basis of Art. 6 Para. 1 Sentence. 1 a GDPR. With regard to this data, you have the rights mentioned under point II.
Our newsletter uses technologies from MailerLite. This is a tool that can be used to integrate forms of all kinds as well as pop-up forms and a quiz function into the website and our newsletter. For details, please refer to MailerLite's privacy policy. MailerLite also uses functions of the Google Tag Manager (see above).
Use of Photos
The privacy of the people entrusted to us is an important concern. Therefore, we only use modified names for all mailings and on the website. Photos in which individuals are recognisable are only published with the explicit permission of the persons depicted (or their legal guardians). You can find more information in our Visual Storytelling Guideline.
Donations
If you make a one-off or regular donation to us, we process the data provided in the relevant form for the purpose of processing the donation that you yourself have communicated to us via the form. The purpose of the data collection is to process and use the donation in accordance with the donor's instructions and to communicate with our donors (including information and promotional materials). This processing is based on the legal basis of Art. 6 para. 1 sentence. 1 b GDPR. With regard to this data, you have the rights mentioned under point II.
If you tell us your birthday (during a donation or separately), we will transfer the donations received by you in that and the succeeding calendar years (until January 31st: and the donations of the previous calendar year) to the local tax office, so that they can be deducted from your taxes automatically. The legal basis for this transfer is Art. 6 Para. 1 Sentence. 1 c GDPR. If you do not wish this any more or have noticed an erroneous transfer, please tell us about it.
Please note the statutory storage period of 7 years for all payment data.
Prize Competition Form
In order to manage our prize competition, we process the data entered by you on the basis of a quasi-contractual relationship according to Art. 6 para. 1 lit. b) GDPR until the completion of the prize competition. There is no legal or contractual obligation to transmit those data, however they are required for participation on the prize competition. Not transmitting those data has the only effect that you cannot participate on the prize competition.
Information Regarding Events
Here you can find the information according to Art. 13 GDPR for participating in an event organised by CONCORDIA. The contact data of the controller and the data protection officer can be found above. In order to exercise your rights regarding access, rectification, erasure, restriction of processing, objection, and data portability, please use the contact data of our data processing officer.
The data processing activities (sending invitations, managing confirmations and rejections, audio and video recordings, subscriptions for information material, donation agreements) are based on our legitimate interest (Art. 6 para. 1 lit. f) , as long as nothing else is defined in the individual data processing activities and no objection has been made. We store your data up to three years after the last communication; afterwards they are anonymised by us.
Please contact our data processing officer for any complaints. In addition, you always have the right to lodge a complaint with the supervisory agency (Österreichische Datenschutzbehörde).
For information on legal violations or questionable practices in connection with CONCORDIA Social Projects, please use the form for reporting violations (whistleblowing).
VWO
We use the VWO product from Wingify on our website in order to better customise its content to the needs of our users. This is a tool for tracking the behaviour of users on different versions of our website.
The purpose is to improve the website by determining the best version for our users. The legal basis for this is Art. 6 para. 1 lit. f GDPR.
Your consent to the use of VWO is requested when you first visit the site and is granted, for example, by clicking the ‘Accept’ button. Further details on the use of your data by Wingify can be found at vwo.com/compliance/privacy-principles/.
Hotjar
We use HeatMaps from Hotjar on our website in order to better customise its content to the needs of our users. This is a tool for anonymised tracking of the behaviour of website users.
The purpose is to improve the website and correct errors on it. The legal basis for this is Art. 6 para. 1 lit. f GDPR.
Your consent to the use of Hotjar is requested when you first visit the site and is granted, for example, by clicking the ‘Accept’ button. Further details on the use of your data by Hotjar can be found at www.hotjar.com/legal/policies/privacy/.