Cookie preferences

Cookies and Third-Party Services

We assign the cookies and services used on our website to the following categories:

  • Essential: Cookies and technically necessary services that are strictly required for the operation, security and display of our website and for managing your consent preferences (Cloudflare, Contentful and Usercentrics). These services cannot be disabled.

  • Functional: Cookies and services that provide additional functionality, in particular the playback of embedded videos (YouTube and Vimeo).

  • Statistics: Cookies and services that allow us to analyse how our website is used for statistical purposes and to improve it (Google Analytics 4).

  • Marketing: Cookies and services that enable us to measure the effectiveness of our online communications and deliver targeted advertisements (Google Ads).

We use essential cookies and services on the basis of Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021), as the storage of information on, or access to information stored in, your terminal equipment is strictly necessary to provide the service explicitly requested by you. Unless otherwise stated below, the associated processing of personal data is based on our legitimate interest in ensuring the secure, stable and proper functioning of our website, pursuant to Article 6(1)(f) GDPR.

We only use functional, statistics and marketing cookies with your prior consent, which you provide via our cookie banner. The legal basis for this is your consent pursuant to Article 6(1)(a) and Article 7 GDPR, in conjunction with Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). Your consent is voluntary. You may withdraw or amend it at any time with effect for the future by accessing the “Privacy Settings” link in the footer of our website. There you will also find a detailed overview of the individual cookies, including their purposes and storage periods.

You can also delete cookies at any time or generally prevent their storage, or block cookies for specific websites, through your browser settings. Please note that our website may not function fully if you do so.

Essential Services and Cookies

Cloudflare

Through Cloudflare, Inc.’s content delivery network described in Section B.2, technically necessary security cookies may be set to protect our website against attacks and abusive automated access (e.g. by bots). These cookies are used exclusively for security purposes (Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021); Article 6(1)(f) GDPR). Information about their storage periods is available in our Privacy Settings. For information about data processing by Cloudflare, the applicable legal bases and transfers to third countries, please refer to Section B.2.

Contentful

We use the content management system provided by Contentful GmbH, Max-Urich-Straße 3, 13355 Berlin, Germany (“Contentful”), to manage the content of our website (e.g. text, images and other media files). When you visit our website, content, in particular images and media files, is retrieved from servers operated by Contentful or from content delivery networks used by Contentful. For technical reasons, your IP address, browser information, and the date and time of the request are transmitted to these servers.

The legal basis for this processing is our legitimate interest in efficiently managing and providing our website content quickly and reliably, pursuant to Article 6(1)(f) GDPR. Contentful acts as our processor in accordance with Article 28 GDPR. Where personal data are transferred to third countries, in particular to Contentful Inc. in the USA, such transfers take place on the basis of the EU-U.S. Data Privacy Framework pursuant to Article 45 GDPR or the European Commission’s Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR.

Further information is available in Contentful’s Privacy Policy at https://www.contentful.com/legal/privacy.

Usercentrics Consent Management Platform

We use the Consent Management Platform provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany (“Usercentrics”), to obtain, manage and document your consent. When you visit our website, Usercentrics displays the cookie banner, which allows you to give, refuse or adjust your consent. The following data in particular are processed:

  • The date and time of your visit or consent decision;

  • Your consent decisions (opt-in or opt-out) for the individual categories and services;

  • A randomly generated identifier (Consent ID), as well as the version and language of the cookie banner;

  • Browser and device information (user agent);

  • The URL of the page on which the consent decision was made;

  • Your IP address in truncated form.

Your consent decisions are stored in your browser’s local storage so that they can be taken into account on subsequent visits to our website. This storage is strictly necessary within the meaning of Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) in order to implement your decision technically.

The processing of consent data serves to fulfil our legal obligation to demonstrate that consent has been given and is based on Article 6(1)(c) in conjunction with Article 7(1) GDPR. Usercentrics acts as our processor in accordance with Article 28 GDPR.

The consent data are stored for one year and then erased.

Further information is available in Usercentrics’ Privacy Policy at https://usercentrics.com/de/datenschutzerklaerung.

Functional Cookies

We only use functional cookies and embed external videos with your consent. This includes videos embedded on our website from the YouTube and Vimeo platforms. Videos are only loaded, and the associated cookies are only set, after you have consented to the “Functional” category or to the respective service.

YouTube Videos

We embed YouTube videos on our website. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC / Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

We embed our YouTube videos using YouTube’s “Privacy-Enhanced Mode” and an additional consent mechanism. This ensures that no data relating to you as a user are transmitted to YouTube before you have given your consent. Only after you have given your consent and the video has been loaded or started are personal data (in particular, your IP address, device information and the page accessed) transmitted to YouTube or Google, and cookies and similar technologies stored on or accessed from your terminal equipment.

This processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) and Article 7 GDPR, in conjunction with Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). You may withdraw your consent at any time with effect for the future via the Privacy Settings on our website.

Google LLC is certified under the EU-U.S. Data Privacy Framework. To the extent that transfers to Google in the USA are covered by this certification, they take place on the basis of the relevant European Commission adequacy decision pursuant to Article 45 GDPR. In addition, the Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR apply.

Further information about how Google handles user data is available in Google’s Privacy Policy at https://policies.google.com/privacy?hl=de.

Vimeo Videos

We embed videos from the Vimeo platform on our website. Vimeo is operated by Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA.

When you access or play a Vimeo video on our website, Vimeo content is loaded, subject to your prior consent. In this process, personal data may be transmitted to Vimeo, and cookies and similar technologies may be stored on or accessed from your terminal equipment. This may include, in particular, information about your usage behaviour, your IP address, technical information about your device and browser, and other interaction data.

This processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) and Article 7 GDPR, in conjunction with Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). You may withdraw your consent at any time with effect for the future via the Privacy Settings on our website.

Please note that Vimeo may also process the data collected for its own purposes. We have no control over the processing of personal data carried out independently by Vimeo.

Vimeo is certified under the EU-U.S. Data Privacy Framework. To the extent that transfers to Vimeo in the USA are covered by this certification, they take place on the basis of the relevant European Commission adequacy decision pursuant to Article 45 GDPR. For transfers to third countries not covered by an adequacy decision, Vimeo provides for the use of the European Commission’s Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR.

Further information is available in Vimeo’s Privacy Policy at https://vimeo.com/privacy.

Statistics Cookies: Google Analytics 4

With your consent, which you may withdraw at any time with effect for the future, we use Google Analytics 4 for the statistical analysis and optimisation of our website. The legal basis for this processing is Article 6(1)(a) and Article 7 GDPR, in conjunction with Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).

Google Analytics 4 is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

According to Google, data from devices located in the EU are collected via servers in the EU. Your IP address is used there solely to determine your approximate location and is discarded immediately afterwards. Google Analytics 4 does not log or store full IP addresses.

With your consent, the following data in particular may be processed when you visit our website:

  • IP address (used only briefly to determine your approximate location and not stored);

  • Approximate location (country, region and city);

  • Technical information such as browser, operating system, device type, screen resolution and language settings;

  • Your behaviour on the website (pages visited, clicks and scrolling behaviour);

  • The source of your visit (the website or advertising medium through which you accessed our website);

  • Session duration and whether you left the website without interacting with it;

  • Links clicked to other websites;

  • Interactions such as file downloads, searches on our website, form interactions and video plays;

  • Completion of specific goals (conversions).

Where additional tracking events have been configured on our website, further interactions may also be recorded.

Google uses this information on our behalf to analyse how our website is used, compile reports on website activity and provide us with other services relating to website usage. Google Analytics 4 also uses machine learning techniques to model and analyse usage data statistically (e.g. to identify trends). This does not involve automated decision-making producing legal effects concerning individual users within the meaning of Article 22 GDPR.

Google Analytics 4 uses, in particular, the cookies “_ga” and “ga<Property-ID>”. These contain a randomly generated identifier (Client ID) and have a storage period of up to two years.

We have concluded a data processing agreement with Google Ireland Limited in accordance with Article 28 GDPR.

We use Google Consent Mode in what is known as Basic Mode. Google Analytics 4 is only loaded after you have consented to the “Statistics” category. Before you give your consent, no analytics cookies are set and no usage data are transmitted to Google.

It cannot be ruled out that personal data may be transferred to Google LLC in the USA in the course of providing the service. Google LLC is certified under the EU-U.S. Data Privacy Framework. Transfers to the USA therefore take place on the basis of the European Commission’s adequacy decision pursuant to Article 45 GDPR, supplemented by the Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR.

User-level and event-level data recorded by Google are stored together with the randomly generated Client ID and automatically deleted after 14 months. This does not apply to aggregated statistics in standard reports that do not contain personal data.

We have implemented the following privacy-friendly settings in Google Analytics 4:

  • Collection of granular location and device data disabled;

  • Collection of data for advertising personalisation disabled (Analytics data are not used for personalised advertising or remarketing);

  • Google Signals disabled (no cross-device analysis and no collection of demographic or interest data).

Further information about Google Analytics 4 is available in Google's Privacy Policy at https://policies.google.com/privacy?hl=de, its Terms of Service at https://marketingplatform.google.com/about/analytics/terms/de/, and the following support pages:

Marketing-Cookies: Google Ads

With your consent, we use Google Ads on our website, an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) (“Google”). We use Google Ads to display advertisements in Google Search and on third-party websites to raise awareness of our Foundation, our educational initiatives and our programmes.

As part of conversion tracking, a cookie is stored on your device, provided that you have given your consent and have reached our website by clicking on a Google advertisement. This enables Google and us to recognise that you have clicked on an advertisement and been redirected to our website, and whether you have completed certain actions defined by us (so-called conversions, e.g. submitting an enquiry). We receive statistical evaluations only (e.g. the total number of users who clicked on an advertisement and completed a conversion), which do not enable us to identify individual users.

The following data in particular may be processed: IP address; online identifiers (e.g. cookie IDs and click IDs); browser and device information; pages visited and interactions on our website; information about the advertisement through which you accessed our website; and the date and time of your visit. Some of the cookies are set via Google's doubleclick.net domain and are listed as “DoubleClick Ad” in our Privacy Settings. Information about the storage periods of individual cookies is available in our Privacy Settings.

The legal basis for this processing is your consent pursuant to Article 6(1)(a) and Article 7 GDPR, in conjunction with Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). You may withdraw your consent at any time with effect for the future via the Privacy Settings.

Google processes the data collected through Google Ads as an independent controller. The applicable terms are set out in Google's Ads Controller-Controller Data Protection Terms (https://business.safety.google/adscontrollerterms). We have no influence over any further processing of data carried out by Google.

It cannot be ruled out that personal data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework. Where personal data are transferred to the USA, such transfers take place on the basis of the European Commission's adequacy decision pursuant to Article 45 GDPR.

Further information is available in Google's Privacy Policy at https://policies.google.com/privacy?hl=de and its information about advertising technologies at https://policies.google.com/technologies/ads?hl=de. You can also disable personalised advertising in your Google settings at https://myadcenter.google.com.