Privacy Policy – HumanRightsConsulting Vienna OG

 

1. Controller

The controller responsible for data processing on this website is:

HumanRightsConsulting Vienna OG Mag. Anton Lorenz, Mag.a Gudrun Rabussay-Schwald, Mag. Walter Suntinger Neuwaldegger Strasse 4A/2/5, 1170 Vienna, Austria Phone: +43 (664) 43 45 933 Email: office@hrcv.at Web: humanrightsconsulting.com

VAT ID: ATU 1418910 Company Registration Number: 278970a Commercial Court: Vienna Commercial Court

2. General Information on Data Processing

Protecting your personal data is a central concern for us. We process your personal data exclusively on the basis of legal provisions, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

In this privacy policy, we inform you about the type, scope, and purpose of the processing of personal data in connection with our online services and related offerings.

3. TLS Encryption with HTTPS

We use TLS encryption (Transport Layer Security) in combination with the highest encryption level supported by your browser to transmit data via our website. You can recognize an encrypted connection by the lock symbol in your browser’s address bar and the prefix "https://" in the URL.

This encryption protects confidential transmissions—such as contact requests or registrations—from unauthorized access by third parties. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure data transmission).

4. Cookies

Our website uses cookies, which are small text files stored on your device via your browser. Cookies do not cause any harm and do not contain viruses.

We distinguish between the following cookie categories:

  • Technically Necessary Cookies: Required for the proper functioning of the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
  • Functional and Analytical Cookies: Improve user experience and enable reach analysis. These cookies are only set with your explicit consent in accordance with Art. 6(1)(a) GDPR, which you can grant via our cookie banner.
  • Marketing Cookies: Allow recognition across different websites. These are also only used with your explicit consent under Art. 6(1)(a) GDPR.

You can configure your browser to:

  • Inform you about the setting of cookies,
  • Allow cookies only in individual cases,
  • Generally refuse cookies, or
  • Automatically delete cookies when closing the browser.

Disabling cookies may limit the functionality of this website. You can revoke your consent at any time via the cookie settings on our website.

5. Business-Related Processing

5.1 Contact Requests

If you contact us via the contact form, email, or phone, your details (name, contact information, content of the request) will be stored for the purpose of processing your request and for follow-up questions.

Legal basis:

  • Art. 6(1)(b) GDPR (pre-contractual inquiries or within an existing business relationship),
  • Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries) for other concerns.

We will not disclose this data without your consent. The data will be deleted once the request has been fully processed, unless legal retention obligations apply.

5.2 Client and Order Processing

In the course of our consulting activities, we process personal data of our clients, contact persons, and, if applicable, other involved parties for the initiation, execution, and completion of consulting contracts. This includes, for example, master data, communication data, contract data, and billing data.

Legal basis:

  • Art. 6(1)(b) GDPR (performance of a contract),
  • Art. 6(1)(c) GDPR (legal obligations, e.g., under the Austrian Commercial Code or the Federal Fiscal Code).

The storage period is determined by legal retention periods, particularly the seven-year retention obligations under § 132 BAO (Federal Fiscal Code) and § 212 UGB (Austrian Commercial Code).

5.3 Newsletter

With your consent, you can subscribe to our newsletter. We use the double opt-in procedure for registration. Legal basis: Art. 6(1)(a) GDPR. You can revoke your consent at any time, for example via the unsubscribe link in each newsletter.

6. Server Log Files

When you visit our website, certain information is automatically stored in server log files, which your browser transmits to us. This includes:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address (in anonymized form)

This data is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).

7. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), if you have given your consent.

Google Analytics uses cookies and similar technologies to analyze website usage. The information generated by cookies about your use of this website is usually transmitted to and stored on a Google server in the USA.

We have enabled IP anonymization, which means Google will truncate your IP address within member states of the European Union or other states party to the Agreement on the European Economic Area before transmitting it to the USA.

Legal basis: Use is based on your consent under Art. 6(1)(a) GDPR and § 165(3) TKG 2021. You can revoke your consent at any time via the cookie settings.

Data transfer to the USA: Google is certified under the EU-US Data Privacy Framework, ensuring that data transfers to the USA are based on an adequacy decision by the European Commission.

Storage period: User data stored by Google Analytics is automatically deleted after [14/26/38/50] months.

Browser add-on: You can also prevent Google Analytics from collecting data by installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout.

For more information on how Google Analytics handles user data, see Google’s privacy policy: https://policies.google.com/privacy.

8. YouTube

We embed videos from YouTube, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website.

We use YouTube in enhanced privacy mode. According to YouTube, this mode ensures that YouTube does notinitially store information about visitors to this website before they watch a video. Data is only transmitted to YouTube when a video is played.

When a YouTube video is played, the following data, in particular, is transmitted to YouTube:

  • Your IP address
  • The URL accessed and the date/time of access
  • Browser type and settings
  • Cookie information (if you are logged into YouTube or Google)

We have no influence on how YouTube processes this data.

Legal basis: Embedding is based on your consent under Art. 6(1)(a) GDPR. You can revoke your consent at any time via the cookie settings.

Data transfer to the USA: Google/YouTube is certified under the EU-US Data Privacy Framework.

For more information, see YouTube’s privacy policy: https://policies.google.com/privacy.

9. Google Fonts

Our website uses "Google Fonts", a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to ensure a uniform display of fonts.

Local Integration: We integrate Google Fonts locally on our server. This means the fonts are loaded directly from our server, and no connection is established to Google’s servers. Therefore, no transmission of your IP address or other personal data to Google takes place.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a uniform and appealing presentation of our website).

10. Your Rights Under the GDPR

You have the following rights:

  • Right to Information (Art. 15 GDPR): You have the right to request confirmation as to whether we process personal data concerning you and to receive information about this data.
  • Right to Rectification (Art. 16 GDPR): You can request the immediate correction of inaccurate data or the completion of incomplete data.
  • Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, provided the legal requirements are met and no legal retention obligations apply.
  • Right to Restriction of Processing (Art. 18 GDPR): Under certain conditions, you can request the restriction of the processing of your data.
  • Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format or to have it transmitted to another controller.
  • Right to Object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, to the processing of your data at any time, if the processing is based on Art. 6(1)(e) or (f) GDPR.
  • Right to Withdraw Consent (Art. 7(3) GDPR): You can revoke any consent you have given at any time with effect for the future.
  • Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority. In Austria, this is:

    Austrian Data Protection Authority Barichgasse 40-42, 1030 Vienna, Austria Phone: +43 1 52 152-0 Email: dsb@dsb.gv.at Web: www.dsb.gv.at

To exercise your rights, you can contact us at any time using the contact details provided in Section 1.

11. Hosting

This website is hosted by an external service provider (hoster). Personal data collected on this website is stored on the hoster’s servers. This may include, among other things:

  • IP addresses,
  • Contact requests,
  • Meta and communication data,
  • Contract data,
  • Contact details,
  • Names,
  • Website access, and
  • Other data generated via a website.

11.1 Our Hosting Provider:

easyname GmbH Canettistraße 5/10, 1100 Vienna, Austria Phone: +43 1 3850150 Email: office@easyname.com Web: www.easyname.com

The use of the hoster is for the purpose of fulfilling contracts with our potential and existing clients (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

Our hoster will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions regarding this data.

11.2 Data Processing Agreement:

We have concluded a data processing agreement with easyname in accordance with Art. 28 GDPR. This is a legally required contract that ensures easyname processes the personal data of visitors to our website only according to our instructions and in compliance with the GDPR.

11.3 Server Location:

easyname’s servers are located in Austria or within the European Union. No data is transferred to third countries as part of hosting.

For more information on data protection at easyname, see their privacy policy:https://www.easyname.com/de/datenschutzerklaerung

12. Currency and Amendments to This Privacy Policy

This privacy policy is currently valid and was last updated on April 27, 2026.

Due to the further development of our website and services or changes in legal or regulatory requirements, it may be necessary to amend this privacy policy. The current version is always available on this website.

Change Privacy Settings