Privacy
Information on Data Protection
The following information informs you in accordance with the provisions of the EU General Data Protection Regulation (GDPR) about the following aspects:
- Collected information
- Legal basis for data processing
- Use and storage of data
- Your rights and choices
The following sections inform you about the processing of your personal data.
Your Rights
You fundamentally have the right to information, correction, deletion, restriction, data portability, revocation and objection regarding your personal data. If you believe that the processing of your data is unlawful or that your data protection rights have been violated, you can complain to the supervisory authority.
In Austria, this is the Data Protection Authority: https://www.dsb.gv.at
Data Protection Officers for this website:
Wolfgang Hiermann and Karl Schott
Managing Directors
Ungargasse 64 – 66 / Stiege 3 / Top 205
1030 Wien
+43 1 714 00 20
Data Sharing & Profiling
Fundamentally, we do not share your data with third parties and do not engage in profiling.
Automatic Data Storage
When you access our website, the web server automatically stores certain data in log files. This serves to trace and defend against unauthorized access (e.g., hacker attacks). The following data may be stored, for example:
- Requested element
- Accessed URL
- Operating system
- Date and time
- Browser type and version
- IP address
- Protocol used
We use this data pursuant to Art. 6 Para. 1 lit. f GDPR to ensure the technical operation of our website, to fix errors and to prevent misuse. The log files are deleted after 90 days; a longer storage only takes place if and for as long as it is necessary to defend against or prosecute concrete attacks, or if statutory retention obligations require it.
Technical Security Measures – Encryption
For secure transmission of data between your computer and our web server, we use https. By using the TLS (Transport Layer Security) encryption protocol, we ensure the protection of your data during transmission. The active certificate is usually displayed with a key symbol in your Internet browser.
Cookies
Our website uses cookies to store certain states (e.g., a language selection you make). A cookie is a small file generated by the web server, sent to your browser and then stored in your browser's cache. When you visit the website again, the cookie is read and the information it contains is used to display the website.
You can configure your browser to not allow cookies, or to delete or deactivate cookies on your computer at any time. We fundamentally only use technically necessary cookies for our website – and process the data pursuant to Art. 6 Para. 1 lit. f GDPR to ensure the technical operation of our website. If you reject all cookies, our website may not display correctly or may not function.
Contact Forms
For certain services for contacting us or booking trainings, we provide contact forms. These serve the following purposes:
- Contact form: contacting you according to your specified data, sending information brochures and letters
- Online booking of trainings: contacting you according to your specified data, sending information brochures and letters, training organization, preparation and follow-up as well as billing
- Application form: recording and processing your application, contacting you according to your specified data
We store and process the following data for the above purposes – the following data relates to information about natural persons:
- Full name
- Salutation (title and gender)
- Assigned company
- Position in the company
- Phone (business)
- Mobile phone (business)
- Fax (business)
- Email address (business)
- Email address (private, if provided)
- Address (delivery address)
- Desired and undesired contact methods (email, phone, mail, electronic communications)
- Booked and attended trainings from Spirit in Projects
- Exam vouchers from external examiners booked through us
- In-house exams from external examiners booked through us
- Personal areas of interest in specialist topics and trainings from Spirit in Projects
By submitting your data, you consent to its processing for the stated purposes. We process your data on the basis of consent pursuant to Art. 6 Para. 1 lit. a GDPR as well as for the fulfillment of (pre-)contractual obligations pursuant to Art. 6 Para. 1 lit. b GDPR. The data is stored until you revoke your consent, or for as long as statutory retention obligations require it, and is not shared with third parties.
Matomo
We use the web analytics service Matomo to analyze the use of our website and to continuously improve it. The legal basis for using Matomo is Art. 6 Para. 1 lit. f GDPR (legitimate interest in reach analysis).
Matomo is configured so that no tracking via cookies takes place. The IP address is shortened by 2 bytes immediately after capture (e.g., 192.168.xxx.xxx). As a result, it is only processed in pseudonymized form; direct identification of individual visitors is excluded.
Data processing takes place via the Matomo Cloud, a service of InnoCraft Ltd. (Matomo), with server locations within the European Union. Data is not shared with any other third parties.
Data is deleted after 14 months (426 days). Further information on data protection at Matomo can be found at https://matomo.org/privacy/
Google Maps
Our website contains links to Google Maps by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Maps is not embedded on our website; a connection to Google is only established when you actively click on such a link. No data is transmitted to Google until then. Information on the data processed by Google and its use can be found at https://www.google.com/intl/en/policies/privacy/
Data Transfer to Third Countries
As a matter of principle, we do not transfer your personal data to third countries outside the European Union or the European Economic Area. Our hosting provider and the web analytics service Matomo are located within the EU. The only exception applies when you actively click on a link to Google Maps (USA); in that case Google processes data in the USA on the basis of your own action. We do not use embedded Google Maps content that would transmit data to Google automatically.