Privacy Policy

Data Protection Notice

General Information

This privacy policy explains how we use, share, and otherwise process the personal data we collect from you. We handle all personal data in accordance with the provisions of European and Austrian data protection law.

1. Controller

Vereinsplaner GmbH
Gruberstraße 1
A-4020 Linz

Contact
Email: Inquiry form
‍
Data Protection Email: datenschutz@vereinsplaner.at

2. Personal Data

We collect, process, and use your personal data only in accordance with Art. 6(1) GDPR or, where applicable, Art. 9 GDPR. In doing so, we generally only process your personal data if:

  1. you have given your express consent thereto in accordance with Art. 6(1)(a) GDPR, or
  2. this is necessary for the performance of contractual relationships with you (Art. 6(1)(b) GDPR), or
  3. processing is necessary for compliance with a legal obligation to which we are subject (Art. 6(1)(c) GDPR).

The specific legal basis applicable to each processing purpose can be found in the subsequent sections regarding the individual processing purposes. In the context of the GDPR, personal data refers to all data relating to natural persons whose identity is determined or at least determinable, and which contain individual details about personal or factual circumstances, e.g., name, address, email address, telephone number, date of birth, age, gender, social security number, proof of income, video recordings, photos.

3. Data Subject Rights

As our contractual partner or generally as a data subject, you have the right to access your stored personal data, as well as the right to correction, data portability, objection, restriction of processing, and blocking/anonymization or deletion of data, provided that no exception (e.g., statutory retention obligations) applies and subject to legal provisions.

Please notify us of any changes to your personal data. You have the right to withdraw your consent to the use of your personal data at any time. Your request for information, deletion, correction, restriction, objection, and/or data portability can be sent to the email address provided above.

If you believe that our processing of your personal data violates applicable data protection law or that your data protection rights have been infringed in any other way, you have the option to lodge a complaint with the competent supervisory authority. In Austria, this is the Data Protection Authority www.dsb.gv.at.

4. Data Security

Your personal data is protected by appropriate organizational and technical measures. These measures specifically address protection against unauthorized, unlawful, or accidental access, processing, loss, use, and manipulation. Despite our efforts to maintain a consistently high standard of due diligence, it cannot be ruled out that information you provide to us via the internet may be viewed and used by others. Please note that we therefore accept no liability of any kind for the disclosure of information due to errors in data transmission not caused by us and/or unauthorized access by third parties (e.g., hacking of an email account, interception of faxes, etc.).

5. Transfer of data to third parties

To fulfill our contractual or legal obligations, the purpose of data processing, or if there is a legitimate interest on the part of (third) parties involved in the business transaction, it may also be necessary to transfer your data to third parties. Potential recipients may include: private and public bodies that disclose or require information in connection with the contractual relationship (e.g., subcontractors), insurance companies (e.g., in connection with claims), tax advisors, management consultants or lawyers, authorities, IT, software and telecommunications service providers, the tax office, and municipal authorities. This transfer of your data is carried out exclusively on the basis of the GDPR.

If data is transferred to third parties for specific processing purposes where further information is required, you will find this under the respective purpose.

As a rule, your data is processed within the EEA. We only transfer your personal data outside the EEA to countries for which the EU Commission has decided that they provide an adequate level of data protection, or we implement measures to ensure that all recipients maintain an adequate level of data protection, for which we conclude standard contractual clauses (2010/87/EC and/or 2004/915/EC).

6. Data Retention

In accordance with applicable data protection requirements, we are obligated under Art. 5 para. 1 lit. e GDPR to delete personal data immediately as soon as the purpose for processing has been fulfilled. In this context, we would like to point out that statutory retention obligations and periods constitute a legitimate purpose for the processing of personal data.

In any case, we store and keep data in a personally identifiable form until the end of the business relationship or beyond, as far as relevant under tax law, for the statutory retention periods of 7 years under the Austrian Federal Fiscal Code (BAO). If there are deviations for individual processing purposes, this will be explained for the respective purpose.

Processing activities

1. Server log files

To optimize our websites in terms of system performance, user-friendliness, and the provision of useful information about our services, the operator of the respective website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes your Internet Protocol address (IP address), browser and language settings, operating system, referrer URL, your internet service provider, error logs, and date/time.

We reserve the right to check this data subsequently if we become aware of concrete indications of unlawful use. These log files are processed for 6 months.

The legal basis is, on the one hand, the fulfillment of the contract, specifically the free provision of our website (Art. 6 para. 1 lit. b GDPR), and our overriding interest in the security and functionality of our website (Art. 6 para. 1 lit. f GDPR).

2. Cookies

What are cookies? Cookies are small text files that are saved on the device you are using (mobile/desktop) for a certain period of time when you visit a website. Cookies cannot execute programs or damage the device being used. After a certain period of time, cookies are also automatically removed.

  • We at Vereinsplaner store cookies that contain only a unique number and have no meaning outside of our website/application. We use this number exclusively to identify you during your next visit to our website/application for functions that require registration and login. This means that the use of cookies increases the user-friendliness and security of our website. You have the right and the option to reject our cookies by changing your browser settings. However, in this case, our application cannot be used to its full extent.

What types of cookies are there? To better understand why cookies are so important, we provide a brief overview of the types of cookies that exist:

  • Strictly necessary cookies help with basic website navigation and the display of certain features. Without these types of cookies, the core functionality and security of a website cannot be guaranteed. No consent is required for these types of cookies.
  • Functional and analytical cookies are primarily used for learning and analysis purposes in order to improve comfort and the website experience. This may also involve the additional use of third-party cookies, such as Google Analytics.
  • Advertising and social media cookies help use information collected on the website to provide the best possible user experience and for additional marketing purposes. For this reason, this type of cookie is also called a "targeting cookie." The second type of cookie that falls into this category is used for performance purposes, as these make general usage more pleasant and improve marketing messages. Finally, there are options to share content with a community, e.g., blog posts, or to interact between a website and a social media channel. These cookies are referred to as "interaction cookies."

Which cookies does Vereinsplaner use? We categorize our cookies into the following four areas. We store cookies for a maximum duration of 36 months.

  • Setting: Some Vereinsplaner features require cookies for user-specific settings, such as for logging in. Examples: PHPSESSID, COOKIEINFORMATION,
  • Security: We use cookies to maintain a high level of security on our website. These cookies help prevent unauthorized access, for example. Example: auth
  • Statistics: We use cookies to make Vereinsplaner even more user-friendly and to learn from our users' website behavior. This includes, for example, Google Analytics and Hotjar. Examples: _ga, _gac, _gcl_au, gid, _hjid
  • Marketing: We use cookies to target our advertising effectively and provide you with relevant ads that are truly of interest to you regarding Vereinsplaner. Example: _fbp

How can I disable cookies? You can easily decide which cookies are stored using our "Cookie Manager," which is linked in the footer. Alternatively, you can configure your browser settings to delete or block cookies on your computer or mobile device. Please note, however, that this may limit your use of Vereinsplaner.

You can find information on how to manage your cookie settings in the "Help" section of your browser. Information on settings for each browser:

Further detailed information on individual cookies can be found in the cookie manager in the footer of the website https://vereinsplaner.at.

3. Web Analysis Services | Google Analytics

We use web analysis services such as Google Analytics (a web analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (https://google.at/intl/de/analytics/). These web analysis services also use cookies. The information generated by the cookie about your use of our website and application (including your IP address) is also transmitted to and stored on servers outside the EU, such as in the USA. The web analysis services will use this information to compile evaluations and reports on website activity for website operators and to provide other services related to website and internet usage. This information may be transferred to third parties if required by law or if third parties process this data on behalf of the web analysis services. Web analysis services with servers in the USA comply with the data protection regulations of the "US-Safe-Harbor" agreement and are registered with the US Department of Commerce's "Safe Harbor" program. By using our website/application, the user agrees to the processing of data collected about them by web analysis services such as Google Analytics in the manner and for the purpose described above.

We use Google Analytics with the "anonymizeIP()" extension so that IP addresses are only processed in truncated form to exclude direct personal identification.

4. Support Suite & Helpcenter | Zendesk

We use Zendesk, a customer service platform from Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102, to process customer inquiries. For this purpose, necessary data such as first name, last name, postal address, telephone number, and email address are collected via our website. Zendesk is a certified participant in the "Privacy Shield Framework" and thus meets the minimum requirements for legally compliant data processing.

More information on data processing by Zendesk can be found in Zendesk's privacy policy at https://www.zendesk.com/company/privacy. If you have any questions, you can also contact Zendesk's data protection officer directly: privacy@zendesk.com

If you contact us via email or the form on the website, we use the personal data you provide only to process your specific inquiry. The data provided will be treated confidentially. The provided data and the message history with our service desk will be stored for follow-up questions and future contact. The processing of the data entered into the contact form is based on your consent (Art. 6 (1) (a) GDPR).

5. Live Chat | Zendesk

The live chat tool from Zendesk (for company information, see section Support Suite & Helpcenter) is a plugin that allows website visitors to contact us as the Vereinsplaner team anonymously and ask questions. This helps us understand our visitors, provide them with even greater convenience, and address their questions in a targeted manner (https://www.zendesk.com/).

6. Payment Provider | Stripe

You have the option to initiate booking processes via our services. To the extent necessary for the fulfillment of the contract, data will also be transferred to our payment service providers or the financial institution commissioned with payment processing. The scope of the data is limited to the minimum required for the purpose of contract execution.

When paying by credit card, instant bank transfer, or direct debit, payment processing is handled via Stripe by the payment service provider Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland. You can find more information on Stripe's data protection at https://stripe.com/de/privacy#translation.

7. Content Delivery Network & Security Service | Cloudflare

We use the services of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, to ensure the security and performance of our website. Cloudflare provides a Content Delivery Network (CDN) as well as protection mechanisms against attacks (e.g., DDoS protection).

When you visit our website, requests are routed through Cloudflare's servers. In the process, Cloudflare specifically processes technical connection data such as IP address, date and time of access, requested content, browser type, and operating system. This processing is necessary to deliver content correctly, ensure website stability, and defend against unauthorized access.

Cloudflare is used on the basis of Art. 6 (1) (f) GDPR (legitimate interest). Our legitimate interest lies in the secure, fast, and reliable provision of our online services, as well as protection against abusive access. You can find more information on Cloudflare's data protection at https://www.cloudflare.com/de-de/privacypolicy/.

8. Turnstile (CAPTCHA) | Cloudflare

To protect our login areas and prevent abuse (e.g., through automated access or brute-force attacks), we use the security service Cloudflare Turnstile, a CAPTCHA service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

When accessing the login area, Cloudflare processes information necessary to determine whether the access is being made by a human user. In particular, technical data such as IP address, browser and device characteristics, and interaction data may be processed. This processing is carried out exclusively for security purposes.

The use of Cloudflare Turnstile is based on Article 6(1)(f) of the GDPR (legitimate interest), as we have an overriding interest in protecting our online services from abuse. Further information on data processing by Cloudflare can be found at https://www.cloudflare.com/de-de/privacypolicy/.

9. Facebook | Meta

The social network facebook.com is operated by Meta Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, and is used for user interaction. The Facebook button links to our Facebook profile. Facebook's privacy policy applies on their website.

The purpose and scope of data collection and processing, as well as how the data is used by Facebook, can be found in the privacy notices published by Facebook itself; see: http://www.facebook.com/policy.php. For the sake of maximum transparency, we have summarized the key points for the user:

The data collected in this way is used to analyze user behavior and to provide, select, evaluate, and understand the advertisements that Facebook displays on and off Facebook (this also includes advertisements provided by or on behalf of Facebook's subsidiaries), as well as to create user statistics. Facebook also uses the data available to it to improve its advertising and measurement systems so that it can show relevant ads to users on and off Facebook services and measure the effectiveness and reach of advertisements and services. If a user is registered with Facebook, Facebook can use the collected data to provide services to the user, personalize content, and offer links and suggestions that may be of interest to them. Finally, the collected data is used to send marketing communications to the user, communicate with them about their services, and inform the user about Facebook's policies and terms.

If a user has a Facebook account and uses the Facebook button, they have consented to their information being collected, transferred, stored, disclosed, and used in accordance with Facebook's privacy policy (https://www.facebook.com/about/privacy). Users can change their privacy settings in their Facebook account settings. Further information on Facebook and the GDPR can be found at: https://www.facebook.com/business/gdpr#Facebook-als-Datenverantwortlicher-vs.-Auftragsverarbeiter.

10. Instagram | Meta

Instagram is part of the Meta group. The data controller is therefore Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The Instagram social media button links to our Instagram profile. Instagram's privacy policy applies on their website (see also the section on Facebook).

The purpose and scope of data collection and processing, as well as how the data is used by Instagram or Facebook, can be found in the privacy notices published by Instagram itself; see: https://help.instagram.com/519522125107875. The information provided above regarding Facebook also applies analogously to Instagram.

If a user follows the social media link to Instagram (i.e., clicks the Instagram social media button), data is processed, collected, transferred, stored, disclosed, and used in accordance with Instagram's privacy policy. Furthermore, cookies may be stored on the user's device when visiting the Instagram website. Facebook's cookie policy applies here: https://www.facebook.com/policies/cookies. If the user is logged into an Instagram account, the transmitted information may be linked to that account by Instagram or Facebook.

11. YouTube | Alphabet

YouTube is part of the Alphabet group, based in Mountain View in California's Silicon Valley. YouTube is a video platform where companies and individuals can upload videos for others to watch online. We use the YouTube platform to provide instructional videos about Vereinsplaner features to our clubs. The YouTube social media button and the YouTube videos embedded via iFrame on our website and in our tool link to our Vereinsplaner YouTube channel. YouTube's privacy policy (https://policies.google.com/privacy?hl=de) and that of the Alphabet group apply on the YouTube website.

If a user follows the link to YouTube (i.e., clicks the YouTube social media button or an embedded YouTube video), data is processed, collected, transferred, stored, disclosed, and used in accordance with YouTube's privacy policy. Furthermore, cookies (https://www.youtube.com/static?gl=DE&template=terms&hl=de) may be stored on the user's device when visiting the YouTube website. If the user is logged into a YouTube account, the transmitted information may be linked to that account by YouTube or Google/Alphabet.

12. Error Analysis | Sentry

To improve the stability and error analysis of our web applications, we use the service Sentry, operated by Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA.

Sentry helps us detect and resolve technical errors in real time, allowing us to continuously improve the usability of our platform. Error reports containing technical details (e.g., information about the browser, operating system, and time of the error) are collected. These data do not contain personal information, unless such information is submitted due to the circumstances of the error itself (e.g., input into a form field).

Data processing is carried out in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest in optimizing and securing our services.

Sentry is certified under the Data Privacy Framework, which ensures an adequate level of data protection when transferring data to the USA. For more information, please refer to Sentry's privacy policy: https://sentry.io/privacy/