Privacy Policy

The REDpreneur Programme and the Austrian Red Cross consider the protection of your personal data to be very important and, in accordance with the legal requirements for electronic communications and data protection, have taken the prescribed organisational, contractual and technical measures to ensure that accidental or deliberate manipulation, loss, destruction or access by unauthorised persons is prevented.

As the responsible party within the meaning of the EU General Data Protection Regulation (GDPR), the

Austrian Red Cross

General Secretariat

Wiedner Hauptstrasse 32

[email protected]

ensures that processing activities of your personal data are only carried out for legitimate purposes, on the basis of a legal basis, to the extent and for the duration required.

If you are of the opinion that the processing of your data violates data protection law or your rights have otherwise been violated in any way, you can contact our data protection officer or file a complaint with the data protection authority.

1. GENERAL INFORMATION ON DATA PROCESSING

1.1 The scope of processing of personal data

As a matter of principle, we process your personal data only to the extent necessary to provide the services and content you have requested and to provide a functional website.

1.2 Legal grounds for the processing of personal data

Insofar as we obtain your consent for the processing of personal data, Art. 6 (1) lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis. If personal data is processed on the basis of your consent, you have the right to revoke this consent at any time with effect for the future.

1.3 Data deletion and storage duration

Your personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.

1.4 Your personal rights

You have the right of access to personal data concerning you (Art. 15 GDPR), a right of rectification (Art. 16 GDPR), deletion (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR), a right to object to processing (Art. 21 GDPR) and the right to data transferability (Art. 20 GDPR), insofar as these rights exist under the above provisions in the individual case in question. You can assert these rights with us at any time or you have the right to complain to the responsible supervisory authority

Austrian Data Protection Authority

Barichgasse 40-42

A-1030 Vienna

Phone: +43 1 52 152-0

E-mail: [email protected]

Web: https://www.dsb.gv.at

2. CONTACTING REDpreneur

When contacting us (e.g. via e-mail), the information provided by the inquirer (name, contact data, other details) will be processed for documentation, processing and answering the enquiry.

The basis for this is our legitimate interest in the proper documentation, processing and answering of the enquiry (Art 6 (1) lit f GDPR); in the case of contact in an upright customer relationship or the initiation of a business relationship, we rely on the fulfilment of the contract or the implementation of pre-contractual measures (Art 6 (1) lit. b GDPR).

In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation.

3. COLLECTION OF ACCESS DATA AND LOG FILES

On the basis of our legitimate interests within the meaning of Art. 6 (1) lit. f. GDPR, we collect data on every access to the website (so-called server log files). This data collection is crucial for ensuring the security, stability, and functionality of the website.

This website is hosted and operated on the Kajabi platform (Kajabi, LLC, USA); log file information (such as IP address, timestamp, type of request, and browser/device information) is processed by Kajabi as part of providing the Platform, in accordance with Kajabi's security practices and Data Processing Addendum (see section 3.2 below). For security reasons (e.g., to clarify misuse or fraud), this information is retained only as long as necessary for that purpose. Data whose further storage is required for evidential purposes is excluded from deletion until the final clarification of the respective incident.

Personal data that is collected during the operation of the website will only be transmitted by us to third parties (such as experts or security authorities) in the event of a (suspected) data security incident or a criminal act (e.g., an attack), for the purposes of clarification, prosecution, and assertion of legal claims.

3.1 Data Processing and Use of Cookies

Our website uses cookies to improve functionality and provide a personalized user experience. This can include enhancing website performance, analyzing page views and user interactions, as well as supporting necessary website functions like login sessions and shopping carts. Cookies are used in compliance with GDPR, and no personal data is collected without the explicit consent of the visitor. Visitors are informed about cookie usage through a notification banner, and can adjust their preferences accordingly. Further information about cookie usage can be found in our Cookie Policy.

3.2 Data Processing through Kajabi

This website is built and hosted on the Kajabi platform, operated by Kajabi, LLC, 880 Newport Center Dr, Suite 100, Newport Beach, CA 92660, USA ("Kajabi").

We use Kajabi to run this website and to provide two specific features: our newsletter and our alumni community area. If you subscribe to our newsletter or request access to the alumni community, we collect your full name and email address for that purpose, on the basis of your consent (Art. 6 (1) lit. a GDPR).

Within the alumni community platform, members can additionally create a profile and post content (e.g. posts, comments) that is visible to other members. Any information you choose to include there - beyond your name and email address - is provided voluntarily by you and is your own responsibility. Please do not post special categories of personal data (Art. 9 GDPR, e.g. health information, political opinions, religious beliefs, ethnic origin) or other sensitive information about yourself or others in these areas.

For this data, Kajabi acts as our processor (Art. 28 GDPR) under Kajabi's Data Processing Addendum, available at: https://www.kajabi.com/policies/dpa.

In addition, Kajabi automatically collects certain technical and account-related data as part of operating the Platform for all its customers (e.g. IP address, device and browser information, cookies, and other log data — see section 3 above). For this data, Kajabi itself acts as an independent data controller under its own Privacy Notice: https://www.kajabi.com/policies/privacy.

Kajabi processes data in part in the United States. Where we transfer your name and email address to Kajabi as our processor, this is based on the EU Standard Contractual Clauses included in Kajabi's Data Processing Addendum. Where Kajabi processes technical/account data as its own controller, this is additionally covered by Kajabi, LLC's self-certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions).

Kajabi also uses a number of subprocessors (mostly located in the USA) to provide the Platform. This list is referenced in Section 7(b) of Kajabi's Data Processing Addendum linked above.

You have the right to access, modify, or delete your personal data at any time by contacting us.

3.3 Contact Form (Typeform)

The contact form linked from this website ("Contact") is provided by Typeform S.L., a Spanish company (Via Augusta 29-31, 08006 Barcelona, Spain), and is not part of the Kajabi platform. When you use this form, the information you submit (name, email address, message) is processed by Typeform on our behalf to receive and respond to your enquiry.

Typeform stores this data using Amazon Web Services infrastructure, located in the United States. Certain customer-support functions may also be handled by Typeform's US, UK, and EU affiliates. These transfers outside the EEA are based on the EU Standard Contractual Clauses.

3.4 Leaving This Website Through Links

We check links leaving our website with great editorial care. Nevertheless, we assume no responsibility or liability whatsoever for the content of pages linked to from this site.

4. TO WHOM DO WE TRANSMIT PERSONAL DATA?

We only transfer your personal data as far as this is necessary and only in the following cases:

with your consent;
insofar as we are legally obliged to do so;
insofar as this is necessary to protect our legitimate interests (e.g. to assert, exercise or defend legal claims) or those of a third party and there is no reason to assume that you have an overriding interest worthy of protection in not passing on your data.

5. CONTACT US

You have the possibility to contact the REDpreneur team directly through [email protected]

Alternatively, you can directly contact the data protection officer of the Austrian Red Cross.

Contact details of the data protection officer:

Data Protection Officer

c/o Austrian Red Cross