Transparency and the protection of your data protection rights are important to us!
The following notice describes how we, Fulbright Austria, process your personal data.
1. Our contact details
Controller of all processing activities is:
Austrian-American Educational Commission (Fulbright Austria)
(hereinafter referred to as "Fulbright" or "the Organization")
For all inquiries concerning the protection of your personal data please, contact firstname.lastname@example.org or the Austrian-American Educational Commission (Fulbright Austria), quartier21/mq, Museumsplatz 1, 1070 Vienna, Austria. You can reach our data protection officer under the same contact details; please include the note "to the data protection officer" for inquiries.
2. Purposes of processing and its legal bases
We process the personal data provided to us for the following purposes:
a) We process data that you send to us concerning your experiences/reports regarding Fulbright Austria's support for the purpose of publicizing Fulbright Austria's activities (public relations) on the basis of your consent pursuant to Art. 6 para. 1 point (a) of the GDPR.
b) We process the data you provide in the course of an online donation in order to process and administrate the donation pursuant to Art. 6 para. 1 point (b) of the GDPR (fulfillment of a contract). If you provide us with your contact details, we will use said details to keep you informed about our activities in the future. We process these data pursuant to Art. 6 para. 1 point (f) of the GDPR (legitimate interest). If you also inform us of your date of birth, we will use it for the purpose of automatically transmitting your donation in encrypted form to the relevant tax office pursuant to § 18 para. 8 of the Austrian Income Tax Act (Einkommensteuergesetz).
c) We process the data you provide when registering for the newsletter in order to provide you with information about our current activities. We process said data pursuant to Art. 6 para. 1 point (f) of the GDPR (legitimate interest) and § 107 of the Austrian Telecommunications Act (Telekommunikationsgesetz).
d) We process data that you provide to us for other purposes (e.g., as an alumnus/a or an otherwise interested party for the purpose of contacting you or sending you information), including updates to information you have already provided us, based on Art. 6 para. 1 point (b) of the GDPR (contract performance) or Art. 6 para. 1point (f) of the GDPR (legitimate interest).
Providing your name and bank details is required for the conclusion of donation contracts and due to tax and money laundering regulations. Donations cannot be accepted if said information is not provided.
Moreover, due to automated employee tax assessment, your name and date of birth are required if you want your donation to be taken into consideration in said tax assessment. If you do not provide your name and date of birth, your donations cannot be considered special tax-deductible expenses.
3. Processing on the basis of a legitimate interest
Personal data will be processed for fundraising purposes and for general promotional activities to achieve the objectives of the Organization on the basis of the legitimate interests of the Organization.
The processing of personal data for the purpose of fundraising constitutes a legitimate interest if said processing is necessary for the fulfillment of the legitimate interest and meets the reasonable expectations of the data subject. The organization pursues objectives in the public interest in accordance with § 4a of the Austrian Income Tax Act (Einkommensteuergesetz) and § 34 ff of the Austrian Federal Tax Code (Bundesabgabenordnung). The fulfillment of organizational objectives recognized by the public is therefore a legitimate interest. It is not possible to achieve these publicly recognized organizational goals without donations.
In this context, we process personal data in particular to enable optimal advertising, so that targeted actions can be taken to achieve our organizational goals. This is also intended in order to address the interests of donors and sponsors and avoid tax losses in the best way. This should also ensure that the financial resources raised can be used as cost-effectively as possible in the interest of all persons supporting the organization. This also includes the sending of newsletters.
The following personal data will be processed on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit (f) of the GDPR:
- Master data
- Contact details
- Communication history
- Demand-related behavior
- Pseudonymized profiles
- Email addresses
4. Transmission of your personal data
For the purposes mentioned above, we will transfer your personal data to the following recipients:
- IT service providers we employ
- Service providers/agencies from the fundraising sector we employ
5. Processing of data related to the use of our website
These data are processed on the basis of our legitimate interest (Art. 6 para. 1 point (f) of the GDPR) in improving the performance of our website and our legitimate interest in offering a state-of-the-art website.
The information about your use of our website (including your IP address) generated by the cookie will be transferred to a Google server in the USA and stored on said server. Google is registered with the US Department of Commerce’s “EU-US Privacy Shield” program. Google will use the information to analyze how you use our website, to generate reports on the activities on our website for us, and to provide us with other services related to the use of our website and the use of the internet. Third-party service providers, including Google, place advertisements on websites. Third-party service providers, including Google, use stored cookies in order to place advertisements based on a user’s prior visits to our website. Google will also transfer this information to third parties if Google is legally obligated to do so or if said third parties process these personal data on Google’s behalf. Under no circumstances will Google associate your IP address with other data owned by Google.
Our website uses Google Analytics with the "_anonymizeIP" extension. All IP addresses are anonymized.
These data are processed on the basis of our legitimate interest (Art. 6 para. 1 point (f) of the GDPR) in improving our website.
We use a "Facebook pixel" provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") on our website. This allows us to track users' behavior after they have been redirected to a provider's website by clicking on a Facebook ad. This practice is designed to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future advertising efforts.
In this context, we soley collect anonymous data that does not allow any identification of the user.. However, Facebook stores and processes the data so that a connection to the respective user profile can be established and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Policy (https://www.facebook.com/about/privacy/). You can authorize Facebook and its partners to display ads on and off Facebook. A cookie may also be stored on your computer for these purposes.
You can object to the use of the Facebook pixel here: www.aboutads.info/choices/
This data is processed on the basis of our legitimate interest (Art. 6 para. 1 point (f) of the GDPR) in providing personalized advertising.
6. Retention time
We will store your personal data for as long as is necessary to achieve the purposes stated in § 2 and as permitted by applicable law. We also store your personal data for the duration of statutory retention periods and/or until statutes of limitations for potential legal claims have expired.
7. Your rights in connection with personal data
Right to information
As long as we process your personal data, you have the right to information regarding the purposes of processing, the categories of processed personal data, the recipients of said personal data, the duration of retention, your rights, and the origin of personal data. However, your right to information might be subject to our professional duty of confidentiality.
Rectification and erasure of data
You have the right to request the rectification of inaccurate or incomplete personal data that pertain to you. You have the right to request the erasure of personal data that pertain to you to the extent that said data were not lawfully processed and there are no legal obligations to which we are subject that argue against deletion.
Limitation of processing
You have the right in specific cases to request a limitation to the processing of your data.
You have the right to request the transmission of the personal data you have provided to us in a structured, commonly used and machine-readable format. You have the right to request that we transmit said data directly to a party of your choice to the extent that this is technically feasible.
Right to object
You have the right to object, on grounds relating to your particular situation, to the processing of personal data that pertain to you at any time. If you object to the processing of personal data that pertains to you, we shall cease to process said data if we cannot prove that our reasons for processing supersede your interests. You have the right to object to your personal data being used for marketing purposes at any time; in this case, we will immediately cease processing your personal data for marketing purposes.
If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Wickenburggasse 8, 1080 Vienna, Austria, +43 1 531 15-202525, Email: email@example.com.