Data Privacy Policy
We are pleased that you are visiting the KONTEXT website. The protection of your personal data is very important to us. With this privacy policy, we would like to inform you about how we handle your personal data and about your rights.
Who are we and how can you contact us?
We, KONTEXT Institut, Liechtensteinstraße 55/8, 1090 Vienna, are responsible, within the meaning of the General Data Protection Regulation ("GDPR"), for protecting your personal data. If you have any questions regarding data processing, your rights, or this privacy policy, please contact us at: datenschutz@kontext-institut.at
1. What data is processed when you visit our website?
Below we inform you about which personal data is collected during your visit to https://kontext-institut.at, for what purposes, on what legal basis, how you can control the processing, and when the data is deleted.
A. General information on data collection
Collected data: IP address of the accessing device, date and time of access, name of the requested file and data volume transferred, transmission status, referring website, and browser/operating system/interface used.
Purpose: Temporary storage is necessary to deliver the website and ensure functionality, generate usage statistics, and prevent or trace unauthorized access or misuse.
Legal basis: Legitimate interests (Art. 6(1)(f) GDPR).
Storage duration: Deleted once no longer necessary. Log files are deleted after 14 months.
B. General information on cookies and tracking technologies
Collected data: Cookies (small text files with a cookie ID) and tags to measure user behavior and advertising effectiveness. We use both first-party and third-party cookies (see C).
Purpose: Essential cookies ensure technical functionality; functional cookies improve usability; analytics cookies and tags generate usage statistics.
Legal basis: Essential cookies: legitimate interests (Art. 6(1)(f) GDPR). Functional, analytics, and marketing cookies: consent via cookie banner (Art. 6(1)(a) GDPR).
Storage and control: Session cookies are deleted after closing the browser; persistent cookies remain stored. You can manage or delete cookies via your browser settings, which may limit website functionality.
C. Third-party cookie and tracking technologies
Essential Cookies
Google Tag Manager manages website tags and does not itself process personal data; see the respective services for details.
Google Fonts are hosted locally on our server – no connection to Google servers and no data transmission.
Klaro! (KIProtect GmbH, Germany) is our cookie consent manager. No personal data is collected; settings are stored locally on your device. More details in the Klaro! Privacy Policy.
Functional Cookies
YouTube (YouTube LLC, USA): Embedding videos may transmit data such as IP address, browser/device info, and interaction data, regardless of a YouTube account. Legal basis: consent (Art. 6(1)(a) GDPR). Data remains with YouTube until no longer needed.
Spotify (Spotify AB, Sweden): Similar data as with YouTube is processed when embedding content. Legal basis: consent (Art. 6(1)(a) GDPR). Data remains with Spotify until no longer needed.
Analytics & Statistics Cookies
Google Analytics (Google Ireland Ltd.): Cookies allow analysis of usage behavior. IP anonymization is enabled; data may be transferred to Google servers in the USA under EU standard contractual clauses. Legal basis: consent (Art. 6(1)(a) GDPR). You can prevent tracking via browser settings or the Google opt-out add-on. More details in the Google Privacy Policy.
2. What data is processed when you contact us or interact with us?
Below we inform you about which personal data is collected and processed when you contact us, order a newsletter, make a donation, or register for an event, along with the purposes, legal basis, and retention period.
A. General contact
Collected data: Contact details, name, and request via form, email, LinkedIn, or offline business cards. Stored in our CRM system Salesforce (Salesforce EMEA Limited, Company No. 05094083, registered in England; Floor 26 Salesforce Tower, 110 Bishopsgate, EC2N 4AY London, UK).
Purpose: Processing your inquiry.
Legal basis: Pre-contractual/contractual measures (Art. 6(1)(b) GDPR).
Storage: As long as necessary or legally required.
B. Newsletter & marketing campaigns
Collected data: Email address (double opt-in). Stored in our CRM system Salesforce (contracting party: Salesforce EMEA Limited, Company No. 05094083, registered in England; Floor 26 Salesforce Tower, 110 Bishopsgate, EC2N 4AY London, UK). Data processing and storage takes place on servers within the EU (instance SWE76, Sweden). Sent via our service provider Brevo (formerly Sendinblue GmbH), Köpenicker Str. 126, 10179 Berlin, where the data is also stored.
Purpose: Sending newsletters and marketing communications.
Legal basis: Consent (Art. 6(1)(a) GDPR).
Storage: Until consent is withdrawn (unsubscribe link available).
C. Donations and payment processing
Collected data: Contact data, name, and payment details via donation forms. Payment providers: Fundraisingbox, PayPal, Stripe, Google Pay, Apple Pay. Data is stored with Fundraisingbox (Wikando GmbH, Augsburg, Germany) and in our CRM system Salesforce (Salesforce EMEA Limited, Company No. 05094083, registered in England; Floor 26 Salesforce Tower, 110 Bishopsgate, EC2N 4AY London, UK).
Purpose: Processing donations.
Legal basis: Contract performance (Art. 6(1)(b) GDPR).
Storage: As long as necessary or legally required.
D. Event registrations
Collected data: Name and contact details provided when registering for an event via a form on our website. The forms are technically provided via our content management system Craft CMS with the Formie plugin, hosted and administered by our website service provider dotsandlines. Data is transferred to and stored in our CRM system Salesforce.
Purpose: Organizing and conducting the event, and communicating with you regarding your registration.
Legal basis: Pre-contractual/contractual measures (Art. 6(1)(b) GDPR).
Storage: As long as necessary or legally required.
3. Data transfers to third countries
Processing generally occurs within the EU/EEA. In some cases (e.g. maintenance), data may be transferred to the USA. We ensure appropriate safeguards under Art. 44 ff. GDPR.
4. Your rights
A. Withdrawal of consent
You may withdraw consent at any time with future effect.
B. Additional rights (Art. 15–21, 77 GDPR)
Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17, with exceptions for legal retention obligations), Restriction of processing (Art. 18), Objection to direct marketing or legitimate-interest processing (Art. 21), and Data portability (Art. 20).
C. Contact
KONTEXT Institut, Liechtensteinstraße 55/8, 1090 Vienna, Email: datenschutz@kontext-institut.at. You can manage cookie consent via browser settings and unsubscribe from newsletters via the link in each email.
D. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority if you believe your data is processed unlawfully.