As the operator of this website and as the “controller” within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations, we take the protection of your personal data very seriously. We hereby inform you about the processing of your personal data and about the data protection claims and rights to which you are entitled. The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is: ignato – Caritas' Social Innovation Agency in Europe Address: Absberggasse 27, Kulturhaus Brotfabrik, Stiege 3, 2. Stock, 1100 Vienna E-Mail: office@ignato.eu

We process your personal data only for the purposes stated in this Privacy Policy. These are:

- Processing your inquiries - Providing our services - Maintaining and improving our website

Your personal data will not be transferred to third parties for purposes other than those stated above. We only disclose your personal data to third parties, such as real estate agencies, if:

- you have given your explicit consent, - the processing is necessary for the performance of a contract with you, - the processing is necessary to comply with a legal obligation, - the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed.

If you are an interested party or a potential future client, we will process your contact details for the purpose of direct marketing by sending electronic mail or contacting you by telephone only with your consent pursuant to Art. 6 para. 1 lit. a of the General Data Protection Regulation (“GDPR”).

If you are our client, we process your personal data because this is necessary to perform the contract concluded with you pursuant to Art. 6 para. 1 lit. b GDPR.

In all other cases, we process your personal data on the basis of our overriding legitimate interest in achieving the purposes stated under point 1 pursuant to Art. 6 para. 1 lit. f GDPR and on the legal basis of the WTBG 2017 pursuant to Art. 9 para. 2 lit. g GDPR.

Processors commissioned by us, such as IT service providers, receive your data insofar as they require the data to perform their respective contractually agreed services. All processors and partners are contractually obliged to treat your data confidentially and to process it only within the scope of providing their services.

Where there is a legal or regulatory obligation, public authorities and institutions may be recipients of your personal data.

The following categories of processors exist: hosting providers, IT service providers, advertising and graphic design agencies, real estate agencies, and other social media and internet service providers.

Some of the recipients mentioned above may be located outside your country or may process your personal data there. The level of data protection in other countries may not correspond to that of your country. However, we transfer your personal data only to countries for which the European Commission has decided that they have an adequate level of data protection, or we take measures to ensure that all recipients provide an adequate level of data protection.

As a general rule, we store your personal data until the end of the business relationship in the context of which we collected your data, or until the expiry of the applicable statutory limitation and retention periods. Beyond this, we store your data until the conclusion of any legal disputes in which the data is required as evidence.

If you are a client, former client, interested party, potential future client, or a contact person of one of the aforementioned persons, we store your personal data for marketing purposes until you object or withdraw your consent, insofar as the marketing measure is based on your consent.

We process the following categories of personal data:

- Name - Contact details - IP address - Other data voluntarily provided by you

This website is hosted and delivered by Onepage.

This website is hosted and delivered by Onepage GmbH, Hanauer Landstraße 172, 60314 Frankfurt am Main, Germany. When you visit this website, Onepage automatically collects technical access data that is necessary for the operation and security of the website. This includes, in particular, the IP address, date and time of access, information about the browser and operating system used, and the pages accessed. This data is stored in so-called server log files.

The processing of this access data is carried out for the technical delivery of the website, to ensure stability and security, and to prevent misuse. The data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the secure, stable, and efficient operation of this website.

Further information on data processing by Onepage can be found in Onepage’s Privacy Policy.

This website uses a cookie banner provided by Onepage in order to obtain and manage visitors’ consent to the use of cookies and external services. When you first visit the website, you have the option to actively consent to or reject the use of technically non-essential cookies and external content via the cookie banner. Without your consent, no cookies requiring consent will be set and no external content will be loaded.

The processing of personal data in connection with cookies and services requiring consent is based on Art. 6 para. 1 lit. a GDPR. Technically necessary cookies are used on the basis of Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in the secure and functional operation of this website. You may change or withdraw any consent you have given at any time with effect for the future via the cookie banner on the website.

The technical provision of the cookie banner is carried out by Onepage. The operator of this website is responsible for the selection of the cookies and services used as well as for the content of this Privacy Policy.

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are transferred from a website server to your hard drive. Through this, we automatically receive certain data, such as your IP address, browser used, operating system, and your connection to the internet. Cookies cannot be used to launch programs or transfer viruses to a computer. Based on the information contained in cookies, we can make navigation easier for you and enable the correct display of our web pages. Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent. Of course, you can generally view our website without cookies. To enable precise control of cookie usage on our website, we use the CCM19 cookie banner provided by Papoo Software & Media GmbH. With the help of this tool, you can give or withdraw your consent to various types of cookies. You can adjust your cookie preference settings at any time. Alternatively, you can disable the use of cookies at any time via your browser settings. Please use your internet browser’s help functions to find out how to change these settings. Please note that individual functions of our website may not work if you have disabled the use of cookies.

This website uses Google Tag Manager. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a management tool that allows website tags to be integrated and managed centrally.

Google Tag Manager itself does not process any personal data of website visitors and does not set any cookies. It is used exclusively for the technical triggering of other services which may themselves process personal data under certain circumstances.

The use of Google Tag Manager is based on our legitimate interest in the efficient, secure, and clear management of services and technologies on our website pursuant to Art. 6 para. 1 lit. f GDPR. Where services that require consent are integrated via Google Tag Manager, these services are activated only after you have given the corresponding consent.

This website uses functions of the web analytics service Google Analytics. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies that enable an analysis of how the website is used. IP anonymisation is used on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted. This excludes direct personal identification.

The information generated by the cookies about your use of this website is used on behalf of the operator of this website to evaluate website usage, to compile reports on website activity, and to provide other services related to website usage. The IP address transmitted by your browser is not merged with other data by Google.

The use of Google Analytics is based exclusively on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw this consent at any time via the cookie settings. Further information can be found in Google’s Privacy Policy.

This website uses Brevo to manage contact details and to send project-related information by email. The provider for users in the European Economic Area is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Brevo is used to store the contact details of persons who register via the contact form as part of a pre-registration or inquiry, and to provide these persons with information about the respective project.

Your personal data is processed exclusively on the basis of your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. Consent to data storage and contact is given by means of a corresponding confirmation in the contact form. After registering, you will receive an email in which you must confirm your registration as part of a double opt-in procedure. Only after this confirmation will your data be used for sending information.

You can unsubscribe from further mailings at any time via an unsubscribe link at the end of each email. Unsubscribing does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Further information on the processing of personal data can be found in Brevo’s Privacy Policy.

Maps from the map service OpenStreetMap may be embedded on this website. OpenStreetMap is operated by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom. When using OpenStreetMap, personal data may be processed, in particular the IP address and technical information about the browser and device, as these are required to provide the map content.

OpenStreetMap is embedded only after your explicit consent. The map content is loaded only after you have actively consented. The processing of personal data is carried out on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Further information on data processing by OpenStreetMap can be found in the Privacy Policy of the OpenStreetMap Foundation.

We reserve the right to amend this Privacy Policy so that it always complies with current legal requirements or to reflect changes to our services in the Privacy Policy, for example when introducing new services. The new Privacy Policy will then apply to your next visit.

When you access our website, general information is automatically collected by means of a cookie. This information, known as server log files, includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, and similar information. This is exclusively information that does not allow any conclusions to be drawn about you personally.

This information is technically necessary in order to correctly deliver website content requested by you and is inevitably generated when using the internet. It is processed in particular for the following purposes:

- ensuring a problem-free connection to the website, - ensuring smooth use of our website, - evaluating system security and stability, and - for other administrative purposes.

The processing of your personal data is based on our legitimate interest arising from the aforementioned purposes for data collection. We do not use your data to draw conclusions about you personally. The recipients of the data are only the controller and, where applicable, processors. Anonymous information of this kind may be statistically evaluated by us in order to optimise our online presence and the technology behind it.

To protect the security of your data during transmission, we use encryption methods corresponding to the current state of technology, such as SSL, via HTTPS.

If you contact us by email or contact form regarding questions of any kind, you give us your voluntary consent for the purpose of contacting you. For this purpose, it is necessary to provide a valid email address. This is used to assign the inquiry and subsequently respond to it. Providing further data is optional. By providing your telephone number, you expressly agree to also be contacted by telephone.

The information you provide will be stored for the purpose of processing the inquiry and for possible follow-up questions. After your inquiry has been completed, personal data will be automatically deleted no later than after 3 months.

You have the right to withdraw your explicit consent, in whole or in part, at any time with effect for the future by sending us an email to the email address stated above. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Using the contact details provided above, you may exercise the following rights at any time, among others:

- information about your data stored by us and its processing, - correction of inaccurate personal data, - deletion of your data stored by us, - restriction of data processing if we are not yet permitted to delete your data due to legal obligations, - objection to the processing of your data by us, and - data portability, provided that you have consented to data processing or have concluded a contract with us.

If you have given us consent, you may withdraw it at any time with effect for the future. You may lodge a complaint with the supervisory authority responsible for you at any time. For Austria, this is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at.