modell.vipach.at

Privacy Notice

Effective: 13 July 2026.

This document is a carefully prepared operational template for the project. Mandatory consumer and data-protection rights remain unaffected. Individual Austrian legal advice should be obtained for unusual cases or disputes.

1. Controller

Zentralverband Ungarischer Vereine und Organisationen in Österreich
Schwedenplatz 2, Top 8–9, 1010 Vienna, Austria
ZVR: 079797621
Email: office@vipach.at

VIPACH — Vienna Photo Art & Creative Hub is the controller’s arts and education project.

2. Data processed

Application data: full name, email address, city of residence, optional telephone number and optional message; page language, notice/terms version and submission time. Hosting and infrastructure providers may briefly process technical logs such as IP address, browser type and timestamp for security and delivery.

3. Purposes and legal bases

receiving and assessing applications and contacting applicants: Art. 6(1)(b) GDPR, steps before entering into a contract;
performing the contract and organising photography/exhibition: Art. 6(1)(b);
accounting and legal duties: Art. 6(1)(c);
IT security, abuse prevention and legal claims: Art. 6(1)(f), legitimate interests;
separate marketing or publicity use: only on separate consent or another appropriate legal basis.

Acknowledging this notice is not marketing consent.

4. Recipients and processors

Applications are sent through language-specific Google Apps Script endpoints to Google Sheets, and confirmations are delivered using Google email services. A processor is in particular Google Ireland Limited. The static site may be hosted by GitHub, Inc./GitHub B.V. Access is limited to people who need the data to organise the project.

5. International transfers

Cloud providers may process data outside the EEA. Where applicable, transfers rely on an adequacy decision, the EU–US Data Privacy Framework, European Commission standard contractual clauses and supplementary safeguards.

6. Retention

Data of applicants who are not selected is deleted no later than 90 days after selection closes or the application deadline, unless a dispute or an explicit request for continued contact justifies longer storage. Selected participants’ contractual data is retained as required for performance and legal claims; accounting records are retained for the applicable Austrian period, generally seven years.

7. Cookies and statistics

The site does not use marketing or profiling cookies. Reaching the footer produces a daily aggregate counter signal without a personal identifier. If non-essential cookies or external analytics are introduced later, they will be activated only after appropriate notice and, where required, consent.

8. Your rights

You may request access, rectification, erasure, restriction and portability and object to processing based on legitimate interests. Consent can be withdrawn at any time without affecting prior lawful processing. Send requests to office@vipach.at.

9. Complaint

You may complain to the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

10. Automated decisions

No solely automated decision with legal or similarly significant effects and no profiling is used. Participant selection is made by people.