DE | EN
Menu
Hide menu

Privacy Policy

Privacy Policy Statement

It is important to us to ensure that your personal data is protected to the best of our ability when using our web services. To the extent that we process personal data, this is done exclusively based on the applicable legal provisions, in particular the GDPR and the TKG 2003. Below, we would like to provide you with an overview of the key points of our data processing policy regarding the use of our website.

1. General

The Privacy Policy Statement provides information on the processing of personal data connected with the website of the non-profit association CLAW - initiative for climate justice
 (https://www.climatelaw.at) as well as associated websites, content, and other features. The Privacy Policy Statement applies regardless of the type of device (e.g. smartphone, tablet or PC) on which our website is accessed.

The controller is the association CLAW - initiative for climate justice. CLAW can be contacted at any time via email (office@climatelaw.at). However, we would like to point out that responses to incoming messages can only be provided during office hours. For further information, please consult our imprint.

2. Data processing

If personal data is processed through our website, this is done exclusively in compliance with applicable data protection laws, including the principles of data avoidance and data minimization. The processing of personal data is carried out in accordance with art 6 GDPR and can typically, but not exclusively, be based upon the user's consent, a legal obligation, a legitimate interest, and/or the fulfilment of contractual obligations.

The (contractual, technical and organizational) security measures we have taken in connection with the processing of personal data correspond to the state of the art and comply with the requirements of the GDPR and the Austrian Data Protection Law. In particular, the personal data is protected against loss, damage, manipulation and unauthorized access by third parties.

If third-party content or services are used, it must generally be assumed that the corresponding controllers are based in countries outside the European Union (EU) or the European Economic Area (EEA) and that data is transmitted to these countries. If personal data is transferred to third countries with a lower level of data protection standards than the EU or EEA, the data transfer is carried out based on a legal permission, the consent of the user or specific contractual provisions which ensure compliance with the legally required level of data security.

3. Processing of personal data

In addition to the purposes explicitly mentioned above we may process personal data for the following reasons (each data processing activity is based either on a specific legal permission or the consent of the data subjects):

4. Access data

Each time our website is accessed via the server on which it is operated we collect so-called “server log files”. Such access data particularly includes information such as the name of the accessed website, data about the specific website access (date, time, and file), the amount of transmitted data, information about the successful website access, the type of browser used as well as its software version, the user’s operating system, the referrer URL of the previously visited website, the IP address, as well as information about the requesting provider. We collect this access data without assigning it to a specific person and use it exclusively for statistical purposes with a view to ensuring the security and optimization of the website. However, in the event of a justified suspicion of unlawful use, we reserve the right to subsequently check the access data in detail.

5. Contact

If you contact us via email, the data you provide or transmit to us will be stored for the purpose of answering your inquiry as well as possible follow-up questions. Your personal data will subsequently be deleted within a reasonable period of time, once it has fulfilled its respective purpose and there are no legal retention obligations that oppose the (immediate) deletion of the data. Your personal data will only be disclosed based on your consent.

6. Cookies

On our website we are using 'cookies'. Cookies are pieces of information (data) that are transmitted from our web server or third-party web servers to your respective internet browser, where they are subsequently stored. Among other things, cookies are used for pseudonymized range measurement, which is explained in detail below. You can also access our website without the storage of cookies if you have previously declined this. If you refuse to create and store cookies, we kindly ask you to disable the storage of cookies in your respective browser settings and to reject the creation or transmission of cookies through the information banner that appears when you access our website. If cookies have already been stored by your browser, they can be deleted via the browser settings. However, we would like to point out that you may experience functional restrictions on our website if you refuse the creation and/or transfer of cookies.

7. Web analytics

On our website we use the functions and services of “Google Analytics”, a web analytics service provided by Google Inc. (“Google”). Google uses cookies that contain information about the website usage. This information is transmitted to and stored on servers operated by Google, which may also be located abroad (e.g., in the United States).

The generated information is used by Google on our behalf to create reports on the activities of users on our website. In addition, Google may provide us with further services related to the website usage. Also, based on the stored data, pseudonymous user profiles may be created.

Google Analytics is applied exclusively with activated IP anonymization, which means that the IP addresses of users of our website are shortened within the EU or the EEA before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in a third country and only then be shortened and thus anonymised. User data is stored for a period of 14 months whereafter it is deleted or anonymized. The IP address transmitted by your browser will not be merged with other data that Google might otherwise collect.

You can exclude the storage of cookies by adjusting your browser settings accordingly. In addition, the collection of cookies generated when using our website as well as their transmission to or processing of such data by Google can be prevented by installing certain browser add-ons to disable Google Analytics, which are available, for example, here: http://tools.google.com/dlpage/gaoptout?hl=en

Furthermore, you can find additional information on the use of data by Google for advertising purposes, as well as the settings and opt-out options available to you, on following websites:

The processing of personal data is carried out based on § 96 para. 3 TKG and Art. 6 para. 1 lit. a (consent of the data subject) and/or lit. f (legitimate interests of the controller) GDPR. Our legitimate interest particularly consists in the continuous improvement, further development and secure design of our online offer and/or web presence.

8. Facebook

Facebook collects and processes personal data of users of our Facebook page (partly by using “cookies”) especially, but not necessarily only, for the purpose of creating visitor statistics. This also applies to users who are not registered with Facebook. Users who are registered with Facebook give their consent to the processing of their personal data by Facebook (Art. 6 para. 1 lit. a GDPR; Facebook's terms of use and data protection/cookie policies). By accessing a subpage on our Facebook page, users who are not registered with Facebook give their consent to the processing and evaluation of their personal data, as well as the transmission of anonymized statistics to us by Facebook. Cookies set or updated by Facebook will be deleted after two years at the latest. However, users can delete stored cookies at any time or block their storage from the outset. Please be informed that we do not have access to the cookies stored by your browser, so we do not have the possibility to pass on the connected personal data to third parties. For further information, please refer to Facebook's privacy policy under: https://www.facebook.com/policy.php

9. Facebook Remarketing

"Facebook Pixel", offered and used by the social media platform Facebook, is part of our web presence. The platform Facebook is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. If the user is located outside the European Union, the operator is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Facebook Pixels ensure that our advertisements on Facebook are primarily shown to platform users who have previously shown interest in our website. This ensures that people who are not interested in our website do not see our Facebook ads. For market research purposes, Facebook Pixels are evaluated, especially to create statistics about the effectiveness of Facebook ads and posts. This allows us to determine if interested parties accessed our website by clicking on a Facebook ad.

When our website is accessed by clicking on a Facebook ad, a Facebook pixel is created. This generates a small file (“cookie”) which is stored on your device. If you subsequently access Facebook with the same device, it will be noted in your Facebook profile that you have visited our website. Facebook's data usage policy applies to this data processing and storage. The data collected by Facebook remains anonymous to us. Thus, we do not learn anything about the identity of the user(s). All information on the processing and handling of Facebook pixels as well as on the functionality and presentation of Facebook ads can be found at: https://www.facebook.com/policy.php

You can object to the use of Facebook Pixel at any time by visiting the following link:https://www.facebook.com/settings?tab=ads. Additionally, you can also declare your objection via the following websites: http://www.youronlinechoices.com/ (EU) or http://www.aboutads.info/choices/ (USA). The settings made on these websites generally apply to all your devices and they are independent of the used platform.

10. Instagram Button

We use buttons offered by Instagram Inc., 181 South Park Street, Suite 2, San Francisco, CA 94107, USA, recognizable by terms such as “Instagram”, “Follow” or the stylized camera icon. Using these buttons, it is possible to share a post/webpage of our online service on Instagram. When Instagram is accessed via such a button, your browser establishes a direct connection with the servers of Instagram. Instagram then directly transmits its content to your browser. For this reason, we cannot influence the amount of data collected by Instagram via this plugin. To our knowledge, the IP addresses of all users as well as the respective webpages URL are solely used for displaying the button. Other data should not be transmitted to Instagram when the button is activated. Further information on this topic can be found in the privacy policy of Instagram.

11. LinkedIn

When you visit our LinkedIn profile, LinkedIn collects your personal data, partly with the help of cookies, and stores it, among other things, to compile visitor statistics. Further information on this topic can be found under: https://www.linkedin.com/legal/privacy-policy

12. Twitter

When accessing our Twitter profile, Twitter collects and stores your personal data, partly with the help of cookies, for example, to create visitor statistics. Further information on this can be found under: https://twitter.com/en/privacy

13. Contents and services provided by third-party providers

We would like to inform you that our website may occasionally include content and/or services from third-party providers. Such embedded content and services may include, for example, maps or fonts from third-party websites. To display embedded content, it is necessary for the IP address of the user to be visible to the third-party providers whose content is being used. In addition, it is also possible for third-party providers to manage the storage of their own cookies, process user data for their own purposes, and create profiles about users. For this reason, we strive to use the integration of third-party content and services in a data-minimizing and data-saving way as much as possible, and to select only reliable third-party providers.

The following third-party content and services are integrated into our website (the links provided lead to their respective privacy policies):

14. Processing activities related to donations

To fulfil our association's purpose, we collect donations. You can transfer your donation to our donation account via payment slip, bank transfer, or using the online donation form on our website. Depending on the donation method you choose, we process and store data in accordance with Art. 6 (1) lit. b GDPR (execution of a contract) and Art. 6 (1) lit. c GDPR in conjunction with § 18 (1) no. 7 EStG (Austrian Income Tax Act) and Special Expense Data Transfer Regulation (fulfilment of tax obligations).

If you donate to us, fill out a form on our website, or contact us, we process your personal data (core data, contact data, data about your donation) as well as the respective correspondence with you. A donation via our website is only possible if you provide your name and email address.

The data we receive in relation to donations may be processed for fundraising purposes on the basis of the overriding legitimate interest of the organisation (fulfilment of the organisation's objectives). According to recital § 47 GDPR, the processing of personal data for the purpose of donation advertising constitutes a legitimate interest, provided that the processing is necessary for the fulfilment of the controller’s legitimate interests and meets the reasonable expectations of the data subject. According to § 4a EStG or §§ 34 ff BAO (Austrian Federal Fiscal Code), the organization pursues objectives that are in the public interest. The fulfilment of the organizational objectives constitutes a legitimate interest because they are recognized by the public. The fulfilment of these objectives is not possible without donations. Therefore, the processing of data we receive in connection with donations is necessary. You can revoke your consent to this at any time without specific reasons.

Your data will only be received by those employees within the organization who need them to fulfil contractual and legal obligations or legitimate interests of the organization. Data that must be kept for tax reasons (for ten years or longer if they are of significance to the tax authorities in a pending procedure in accordance with Art. 6 (1) lit. c GDPR in conjunction with §§ 131, 132 BAO) are stored to fulfil our accounting and retention obligations as well as other legal obligations.

Donations via our online donation form are processed by the service “Donorbox” of the provider Rebel Idealist Inc. (601 King Street, Suite 200, Alexandria, VA 22314, USA / Aadijk 35A, 7602 PP, Almelo, Netherlands).

The data necessary to process donations (name, address, email, bank or credit card details, date of birth) are requested in a form provided by Donorbox.org / Rebel Idealist Inc. on our website, timestamped with the donation date and time, encrypted, and transmitted directly to Donorbox.org. For payment-related data, relevant information is also transmitted to our payment service provider Stripe. Your data is then stored on Rebel Idealist Inc.’s servers in the USA / Netherlands until deletion. The data is exported to our donation database for further processing and, if necessary, for contacting purposes.

15. User rights

In accordance with the GDPR, users of our website have various rights as data subjects. To exercise these rights, users can contact us vie the following email address: office@climatelaw.at. As data subjects under the GDPR, users have the right to obtain information about the personal data concerning them that we store or process free of charge. The right to access the data includes, for example, information such as the category of data, the purpose of processing, or the (planned) storage period. In addition, users have the right to have inaccurate personal data concerning them rectified or incomplete data completed. Data subjects may also withdraw their previously given consent to the processing of personal data at any time. Furthermore, data subjects have the right to have their personal data deleted to the extent that the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, or for the establishment, exercise or defence of legal claims. The aforementioned rights are further complemented by the right of users to receive the personal data concerning them in a commonly used, structured, and machine-readable format and to transmit this data to themselves or (directly) to another controller, where this is technically feasible. If data subjects believe that their rights have been violated, they also have the right to lodge a complaint with the competent supervisory authority.

16. Modifications of the data privacy policy

We reserve the right to modify our privacy policy, especially to adapt it to changes in the legal framework or to respond to changes in services or the nature of the data processing. If the data processing is based on the consent of users or if planned changes might affect existing contractual relationships, they may only be carried out with the prior consent of the affected users. In this sense, we kindly ask all users to regularly familiarize themselves with the content of this privacy policy statement to stay informed about any changes that may have been made.