Privacy Policy

The controller responsible for processing personal data on this website is:

Inspirit Center of Burgenland, Römerstrasse 27A / Friedrichshof, 2424 Zurndorf, Austria hello@weareinspirit.com [PENDING REVIEW: registered legal name, company form and confirmed address (see Imprint).]

[PENDING REVIEW: a Data Protection Officer is generally not mandatory for an organisation of this size, but confirm this assessment. If one is appointed, list their contact details here.]

This policy explains what personal data we process when you visit weareinspirit.com or contact us, why we process it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

Contact form. When you use our contact form we process the information you provide: your name, your role and company, your email address, what brings you to us, how you found us or who referred you, your preferred way to be contacted, and the content of your message.

Direct contact. If you email or call us, we process the contact details and message content you choose to share.

Server and access data. When you load the site, our hosting provider automatically processes technical data such as your IP address, browser type, and the time of the request, for the purpose of delivering the site securely. [PENDING REVIEW: confirm the host's logging and retention with the provider.]

We process contact-form and direct-contact data to respond to your enquiry and to take steps at your request prior to entering into a possible engagement (Art. 6(1)(b) GDPR), and on the basis of our legitimate interest in answering enquiries addressed to us (Art. 6(1)(f) GDPR).

We process server/access data on the basis of our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR).

Hosting. The website is hosted by Vercel Inc. (USA), which processes the technical access data described above on our behalf as a processor. Data may be transferred to the United States; such transfers are covered by appropriate safeguards (e.g. EU Standard Contractual Clauses / the EU-US Data Privacy Framework). [PENDING REVIEW: confirm the current hosting provider and its data-processing agreement and transfer mechanism.]

Enquiry handling. Messages sent through the contact form are delivered to our hello@weareinspirit.com inbox and processed by our email provider. [PENDING REVIEW: name the email/inbox provider and confirm a data-processing agreement is in place. If submissions are also stored in a database or CRM, disclose that provider here.]

Some pages embed video hosted by Vimeo (Vimeo.com, Inc.). When a video loads or plays, Vimeo may receive technical data such as your IP address and may set cookies. We have no control over this collection. See Vimeo's privacy policy at https://vimeo.com/privacy. [PENDING REVIEW: confirm whether videos load automatically or only on interaction, and whether a consent step is required.]

Strictly necessary storage. The site may store small technical values in your browser (for example, your language preference) that are needed for it to work. These do not track you across other websites and do not require consent.

Consent for analytics. Beyond those necessary values, we set analytics cookies only after you agree through our cookie banner. If you decline, no analytics cookies are set and the analytics script is never loaded. You can change or withdraw your choice at any time using the Cookie settings link in the footer, with effect for the future.

Google Analytics 4. With your consent we use Google Analytics, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It uses cookies (for example _ga and _ga_*) to help us understand how visitors use the site, such as pages viewed, approximate location, device and browser type, and interactions. Measurement ID: G-1FPKWJRSBF.

Legal basis. Analytics processing is based on your consent (Art. 6(1)(a) GDPR), and the storing of and access to information on your device is based on § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).

Transfer to the USA. Google may process data in the United States. Google relies on the EU-US Data Privacy Framework and on EU Standard Contractual Clauses for such transfers. [PENDING REVIEW: confirm the current Google Analytics data-processing terms, the configured data-retention period (for example 14 months), and whether to disable Google Signals and advertising features.]

How to opt out. You can decline in our cookie banner, withdraw consent later via Cookie settings, or install Google's browser opt-out add-on at https://tools.google.com/dlpage/gaoptout.

We keep enquiry data for as long as needed to handle your request and for any follow-up, and thereafter only as long as statutory retention obligations require, after which it is deleted. [PENDING REVIEW: set concrete retention periods with legal advice, e.g. accounting records under Austrian law.]

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

To exercise these rights, contact us at hello@weareinspirit.com.

You also have the right to lodge a complaint with a supervisory authority. The competent authority in Austria is the Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at.

Where service providers process data outside the EU/EEA (for example, in the United States), we rely on the safeguards permitted by the GDPR, such as EU Standard Contractual Clauses or an adequacy framework. [PENDING REVIEW: confirm per provider.]

We may update this policy to reflect changes to the site or to legal requirements. The current version is always available on this page.