Privacy Policy

Last updated: December 19, 2024

1. Data Controller

2. Types of Data We Collect

2.1 Information You Provide to Us

We only collect personal data when you voluntarily contact us. This includes:

• Contact information (name and email address)
• Content of your inquiry or message
• Any additional information you choose to provide in your communication

Note: We do not collect personal data on a regular basis or through automated processes.

2.2 Technical Information

When you visit our website, minimal technical information may be processed by your browser:

• Basic website usage data (for website functionality)
• Technical information (IP address, browser type) - processed by your browser

Note: We do not actively track users or use cookies for analytics or advertising purposes.

3. How We Use Your Data

We process your personal data only for the following limited purposes:

• To respond to your inquiries about our research project
• To provide information about the OPEN-MIND research when requested
• To comply with legal obligations

Note: We do not use your data for marketing, analytics, or any automated processing.

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Consent: When you voluntarily provide information
• Legitimate interests: For research communication and website improvement
• Legal obligation: When required by law

5. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal data to third parties except:

• With your explicit consent
• When required by law or legal obligations

Note: We do not share your personal data with service providers, marketing companies, or research partners without your explicit consent.

6. Data Retention

We retain personal data only for as long as necessary to respond to your inquiry and fulfill any follow-up communication needs, typically no longer than 2 years after your last contact with us, unless a longer retention period is required by law.

Note: You can request deletion of your data at any time by contacting us.

7. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Request transfer of your data
• Right to object: Object to data processing
• Right to withdraw consent: Withdraw consent at any time

8. Cookies and Tracking Technologies

Our website uses minimal cookies only for essential website functionality. We do not use tracking cookies, analytics cookies, or advertising cookies. You can control cookie preferences through your browser settings if needed.

Note: We do not track user behavior or use cookies for data collection purposes.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

10. International Data Transfers

Your personal data is processed within the European Economic Area (EEA). We do not transfer personal data outside the EEA.

Note: All data processing occurs within Austria and the EU.

11. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware of such collection, we will take steps to delete the information.

12. Changes to This Privacy Policy

We may update this privacy policy periodically. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.

13. Contact Information

14. Supervisory Authority

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at