LEGAL NOTICE & PRIVACY POLICY

General information on data processing

The protection of your personal data is very important to us. We process your personal data confidentially and in accordance with legal data protection regulations (General Data Protection Regulation – GDPR and Austrian Data Protection Act – DSG).In this privacy policy, we inform you about the type, scope and purpose of data processing on our website.We process personal data only insofar as this is necessary to provide a functional website and our services. In doing so, we observe the principles of data minimisation and purpose limitation.We do not use newsletter services, analytics tools (such as Google Analytics) and no social media plug-ins.No tracking or marketing data is collected.Your data is treated confidentially and protected through technical and organisational security measures (e.g. SSL encryption – recognisable by “https://” and the lock symbol in the browser).

Visiting the website

When visiting our website for informational purposes only (without actively providing information), certain information is automatically collected by our hosting provider and temporarily stored in so-called server log files:IP address of the requesting deviceDate and time of accessRequested resource (page/file)Amount of data transferredNotification of successful retrievalBrowser type and versionOperating system of the deviceReferrer URL (previously visited page)This data is not merged with other data sources and does not allow any direct conclusions to be drawn about your person.This data is technically necessary to display the website correctly and to ensure stability and security.Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest).Server log data is stored only for the duration of use and is subsequently automatically deleted, unless there are security-relevant reasons (e.g. clarification of misuse or fraud).

Contact via email

If you contact us via email, the personal data you provide (e.g. email address, name and content of the message) will be processed for the purpose of handling your request.This data is used exclusively for communication and processing your inquiry.Without your explicit consent, this data will not be shared with third parties.Legal basis:Art. 6 para. 1 lit. b GDPR (contractual measures)Art. 6 para. 1 lit. f GDPR (legitimate interest)The data will be stored for as long as necessary to process your request and will then be deleted, provided no legal retention obligations apply.As a rule, storage takes place for a maximum of 7 months after completion of the inquiry.

Use of cookies

Our website uses cookies.Cookies are small text files that are stored on your device. They do not cause any damage.Cookies serve to ensure the technical functionality and security of our website.The cookies used are necessary so that Squarespace can provide the website properly (e.g. display, navigation and basic functions).We do not use cookies for analytics, tracking or marketing purposes.You can set your browser so that you are informed about the setting of cookies, allow cookies only in individual cases or exclude them completely.Please note that deactivating cookies may limit the functionality of this website.

Hosting by Squarespace

Our website is hosted by:Squarespace Ireland Limited
Squarespace House, Ship Street Great
Dublin 8, IrelandSquarespace operates the infrastructure together with its parent company in the USA.Squarespace uses servers in part in data centres in the USA and also delivers static content via global networks.When visiting our website, Squarespace processes certain personal data on our behalf, including:Technical information about your browser, network and deviceInformation about which pages of our website are accessedYour IP addressSquarespace requires this data in order to operate the website technically and to ensure the security and optimisation of its service.Processing is carried out in pseudonymised or anonymised form.Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure and efficient website)Further information can be found in the Squarespace Privacy Policy. Retention period: Log data is generally deleted or anonymised after 30 days, unless longer storage is necessary for security or verification purposes.

Use of Google Fonts and Adobe Fonts

Our website integrates fonts via external services to ensure a consistent and appealing design.Specifically, we use Google Fonts and Adobe Fonts (Typekit).When visiting our website, fonts are loaded from external servers. This may result in these providers receiving certain personal data, in particular: Information about your browserInformation about your deviceYour IP address This processing is necessary so that the fonts can be displayed correctly.Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a consistent design)Further information can be found in the privacy policies of :Google and Adobe

Applications via the online form

We offer you the opportunity to apply via an online application form.This form is provided via the service Squarespace.When using the application form, the personal data you provide (application data) will be processed for the purpose of handling your application.This includes in particular:Contact and personal data: name, address, contact details (e.g. email, telephone), date of birth (if requested)Application documents: CV, certificates, qualifications and other supporting documentsAdditional information: e.g. motivation letter, desired start date, salary expectationsThe provision of this data is voluntary, but necessary for the implementation of the application process.Applications without sufficient information cannot be considered.Applications are used exclusively for the purpose of carrying out the application process and making a decision on the establishment of an employment relationship.Legal basis:Art. 6 para. 1 lit. b GDPR (implementation of pre-contractual measures)Art. 6 para. 1 lit. f GDPR (legitimate interest in conducting the application process)Your data will be treated confidentially and will not be passed on to third parties without your consent, unless this is necessary for the application process or required by law.If an employment relationship is established, the data will be further processed within the framework of employment.If the application is rejected, the data will be stored for a maximum of 7 months after completion of the application process and then deleted, unless longer storage is required by law or justified for evidence purposes.

Recipients of data and processors

Your data will only be passed on if this is necessary for the fulfilment of contractual or legal obligations.Recipients may include in particular:Squarespace Inc. (USA) – as hosting provider of our websiteEmail providers – for communicationAuthorities and courts – if there is a legal obligationThere is no transfer of personal data for marketing purposes.Our processors are contractually obliged to process personal data only in accordance with our instructions and to maintain confidentiality.

Transfer to third countries

As described above, data may be transferred to service providers outside the European Union (e.g. USA).In such cases, we ensure that an adequate level of data protection is guaranteed.This is done, for example, through:Participation in the EU-US Data Privacy FrameworkUse of standard contractual clauses of the European Commission

Rights of data subjects

As a data subject, you have the following rights under the GDPR:Right of access (Art. 15 GDPR)Right to rectification (Art. 16 GDPR)Right to erasure (Art. 17 GDPR)Right to restriction of processing (Art. 18 GDPR)Right to data portability (Art. 20 GDPR)Right to object (Art. 21 GDPR)Right to withdraw consent (Art. 7 para. 3 GDPR)

Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority.In Austria, this is:Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Telephone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at

No automated decision-making

We do not carry out automated decision-making within the meaning of Art. 22 GDPR.This means that no decisions are made that have legal effects or significantly affect you solely on the basis of automated processing.

Status of the privacy policy

(Status of the privacy policy: 06.2025)We reserve the right to adapt the content of this privacy policy if necessary, in particular in the event of changes in legal requirements or technical developments.