Privacy Policy – HumanRightsConsulting Vienna OG

 

1. Controller

The controller responsible for data processing on this website is:

HumanRightsConsulting Vienna OG Mag. Anton Lorenz, Mag.a Gudrun Rabussay-Schwald, Mag. Walter Suntinger Neuwaldegger Strasse 4A/2/5, 1170 Vienna, Austria Phone: +43 (664) 43 45 933 Email: office@hrcv.at Web: www.hrcv.at

VAT ID: ATU 62657002 Company Registration Number: 278970a Commercial Court: Vienna Commercial Court

2. General Information on Data Processing

Protecting your personal data is a central concern for us. We process your personal data exclusively on the basis of legal provisions, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

In this privacy policy, we inform you about the type, scope, and purpose of the processing of personal data in connection with our online services and related offerings.

3. TLS Encryption with HTTPS

We use TLS encryption (Transport Layer Security) in combination with the highest encryption level supported by your browser to transmit data via our website. You can recognise an encrypted connection by the lock symbol in your browser’s address bar and the prefix "https://" in the URL.

This encryption protects confidential transmissions—such as contact requests or registrations—from unauthorized access by third parties. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure data transmission).

4. Cookies

Our website uses cookies, which are small text files stored on your device via your browser. Cookies do not cause any harm and do not contain viruses.

Where we use cookies, these are exclusively technically necessary cookies required for the website to function properly. Legal basis: Art. 6(1)(f) GDPR (legitimate interest); no consent is required for this under § 165(3) TKG 2021.

We do not use analytics or marketing cookies. Our audience measurement with Plausible Analytics works without cookies (see section 7).

You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, generally refuse cookies, or automatically delete cookies when closing the browser. Disabling cookies may limit the functionality of this website.

5. Business-Related Processing

5.1 Contact Requests

If you contact us via the contact form, email, or phone, your details (name, contact information, content of the request) will be stored for the purpose of processing your request and for follow-up questions.

Legal basis:

  • Art. 6(1)(b) GDPR (pre-contractual inquiries or within an existing business relationship),
  • Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries) for other concerns.

We will not disclose this data without your consent. The data will be deleted once the request has been fully processed, unless legal retention obligations apply.

5.2 Client and Order Processing

In the course of our consulting activities, we process personal data of our clients, contact persons, and, if applicable, other involved parties for the initiation, execution, and completion of consulting contracts. This includes, for example, master data, communication data, contract data, and billing data.

Legal basis:

  • Art. 6(1)(b) GDPR (performance of a contract),
  • Art. 6(1)(c) GDPR (legal obligations, e.g., under the Austrian Commercial Code or the Federal Fiscal Code).

The storage period is determined by legal retention periods, particularly the seven-year retention obligations under § 132 BAO (Federal Fiscal Code) and § 212 UGB (Austrian Commercial Code).

6. Server Log Files

When you visit our website, certain information is automatically stored in server log files, which your browser transmits to us. This includes:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address (in anonymised form)

This data is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).

7. Web Analytics with Plausible Analytics

This website uses Plausible Analytics, a web analytics service provided by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible helps us understand how our website is used (for example, which pages are visited) so that we can improve it.

Plausible does not use cookies and does not store any information on your device. No user profiles are created, and you are not tracked across websites or devices. Only aggregated data is collected, such as pages visited, referrer URL, browser, operating system, device type and country.

Your IP address is not stored. To distinguish between visits, a hash is generated from your IP address and browser identifier, combined with a randomly generated value that changes daily, and deleted after 24 hours. It is therefore not possible to identify you personally.

The data is sent to Plausible via our own server and processed exclusively on servers within the European Union. No data is transferred to third countries.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly audience measurement and in improving our website). As no information is stored on or read from your device, consent under § 165(3) TKG 2021 is not required.

For more information, see Plausible’s data policy: https://plausible.io/data-policy.

8. Google Fonts

Our website uses "Google Fonts", a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to ensure a uniform display of fonts.

Local Integration: We integrate Google Fonts locally on our server. This means the fonts are loaded directly from our server, and no connection is established to Google’s servers. Therefore, no transmission of your IP address or other personal data to Google takes place.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a uniform and appealing presentation of our website).

9. Your Rights Under the GDPR

You have the following rights:

  • Right to Information (Art. 15 GDPR): You have the right to request confirmation as to whether we process personal data concerning you and to receive information about this data.
  • Right to Rectification (Art. 16 GDPR): You can request the immediate correction of inaccurate data or the completion of incomplete data.
  • Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, provided the legal requirements are met and no legal retention obligations apply.
  • Right to Restriction of Processing (Art. 18 GDPR): Under certain conditions, you can request the restriction of the processing of your data.
  • Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format or to have it transmitted to another controller.
  • Right to Object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, to the processing of your data at any time, if the processing is based on Art. 6(1)(e) or (f) GDPR.
  • Right to Withdraw Consent (Art. 7(3) GDPR): You can withdraw any consent you have given at any time with effect for the future.
  • Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority. In Austria, this is:

    Austrian Data Protection Authority Barichgasse 40-42, 1030 Vienna, Austria Phone: +43 1 52 152-0 Email: dsb@dsb.gv.at Web: www.dsb.gv.at

To exercise your rights, you can contact us at any time using the contact details provided in Section 1.

10. Hosting

This website is hosted by an external service provider (hoster). Personal data collected on this website is stored on the hoster’s servers. This may include, among other things:

  • IP addresses,
  • Contact requests,
  • Meta and communication data,
  • Contract data,
  • Contact details,
  • Names,
  • Website access, and
  • Other data generated via a website.

10.1 Our Hosting Provider:

easyname GmbH Canettistraße 5/10, 1100 Vienna, Austria Phone: +43 1 3850150 Email: office@easyname.com Web: www.easyname.com

The use of the hoster is for the purpose of fulfilling contracts with our potential and existing clients (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

Our hoster will only process your data to the extent necessary to fulfil its performance obligations and will follow our instructions regarding this data.

10.2 Data Processing Agreement:

We have concluded a data processing agreement with easyname in accordance with Art. 28 GDPR. This is a legally required contract that ensures easyname processes the personal data of visitors to our website only according to our instructions and in compliance with the GDPR.

10.3 Server Location:

easyname’s servers are located in Austria or within the European Union. No data is transferred to third countries as part of hosting.

For more information on data protection at easyname, see their privacy policy:https://www.easyname.com/de/datenschutzerklaerung

11. Validity and Amendments to This Privacy Policy

This privacy policy is currently valid and was last updated on April 27, 2026.

Due to the further development of our website and services or changes in legal or regulatory requirements, it may be necessary to amend this privacy policy. The current version is always available on this website.