Privacy Policy
(This is an automated translation. Only the original German version is authoritative.)
Information pursuant to Articles 13 and 14 of the General Data Protection Regulation
When you visit or use our website, we take the protection of your personal data very seriously. We process your data only on the basis of legal provisions (in particular the General Data Protection Regulation) and would like to inform you below about important aspects of our data processing. We, LebensGroß GmbH, with its registered office at Conrad von Hötzendorf-Straße 37a, 8010 Graz, are the operator of this website.
Our Website
Service providers and risks associated with third-country transfers
In order to make our website user-friendly, we use cookies and similar technologies (e.g. external integrations), which may also originate from third-party providers.
When using cookies and similar technologies that originate from US service providers (e.g. Google, Microsoft), information about you (e.g. IP address, usage behaviour, technical data) is transferred to the USA as a third country. As there is no adequate level of data protection in the USA, we also obtain your express consent for this third-country transfer via the cookie banner.
Please note that in the case of third-country transfers without an adequacy decision by the European Commission or the existence of suitable safeguards, there is no adequate legal protection for European data subjects. Specifically, government surveillance programmes in the USA (such as Section 702 of the FISA and E.O. 12333 in conjunction with PPD-28) require providers of electronic communication services in the USA, such as Google, to make personal data available to US authorities without the data subjects having any legal right to object. This means that European data subjects in the USA in particular have no right to information, in particular no right to access, rectification or erasure, and no right to object, in particular no right to data portability. Google, to provide personal data to US authorities without the data subjects having any legal means of defending themselves against this. This means that European data subjects in the USA in particular have no rights to information, erasure or complaint.
Other data transfers
Apart from data transfers that occur in the course of using cookies and similar technologies, the personal data collected from you will be transferred in particular when we engage external service providers (e.g. for hosting or maintaining the website).
We have concluded a contract with such external service providers for order processing in accordance with Article 28 of the General Data Protection Regulation. In this contract, we oblige external service providers to maintain confidentiality regarding your personal data and to take appropriate data security measures.
Server log files
We automatically collect and store information in so-called server log files, which your browser automatically transmits to us when you visit our website. These are:
- Browser type and browser version
- Operating system
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data processing is based on our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation), as we would otherwise be unable to make our website available to you. This data is not merged with other data sources. However, we reserve the right to check this data retrospectively if we become aware of specific indications of illegal use.
Our cookies and similar services
Cookies are small text files that are stored on your device with the help of your browser. Among other things, they enable us to recognise your browser when you visit our website again, to carry out statistical analyses and to make our website more user-friendly.
In doing so, information (e.g. IP address, usage behaviour, technical data such as browser information) may also be collected from you and, in some cases, transmitted to third-party providers. In addition, we may use similar services that do not set cookies but offer the same functions. Many browsers are set to automatically accept cookies or similar services. However, you can also deactivate the storage of cookies or the use of similar services or set your browser to notify you when cookies are stored or similar services are to be used. In the event of notification, you can reject our cookies or similar services. You can make the appropriate data protection settings in your browser. Please note that the functionality of our website may be limited if you reject or deactivate our cookies or similar services.
When you visit our website, you will be informed about the use of cookies or similar services via our cookie banner and, with your consent (Article 6 (1) (a) of the General Data Protection Regulation), you can decide whether technically unnecessary cookies or services are permitted. Technically unnecessary cookies or services enable us, in particular, to personalise our website and collect statistics.
When using technically necessary cookies or services, we rely on our overriding legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation), as we need them to ensure the functionality of our website. Without the use of technically necessary cookies or services, we cannot provide you with our website and its functions.
Right of withdrawal
You can revoke your consent to the use of cookies at any time by deleting them from the corresponding folder (web storage) or using your browser’s delete function or the following function.
The cookies we use:
You can find a list of our cookies here.
Services used:
Google Analytics: We use the web analytics service ‘Google Analytics 4’ provided by Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland. For the purpose of analysing your interactions on our website, Google Analytics evaluates information (e.g. IP address, usage behaviour, technical data such as device and browser information). The data is first sent to a local data centre, where it is encrypted again and then transferred to servers in the USA in order to compile reports on website activity for us and, if necessary, to provide other services related to the use of websites. Your IP address is not stored, but is used to determine location information (country, city, latitude and longitude of the city). Your IP address is then deleted immediately. You can find more information about data processing within the scope of Google Analytics here.
Our online marketing
In order to carry out our online marketing (display of advertising content on other websites), we use services that create user profiles (e.g. using cookies or similar methods) to enable targeted advertising. This may involve the collection of information about you, such as content viewed, websites visited, social networks used and technical information (e.g. browser used). Clear data such as your name and email address are not assigned, but a connection may be made if you are a member of a social network, for example.
We do not have access to the aggregated information. We are only provided with statistical information about the success of our advertisements. We rely on your consent for this processing.
Integrated marketing services
Google Tag Manager: Google Tag Manager from Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland, is used to manage website tags on our website, which allow us to integrate other services. This does not mean that any personal data is stored in user profiles. Only your IP address is transmitted to Google so that this service can be provided. You can find more information about data processing within Google here.
Meta Pixel: We use the marketing tool ‘Meta Pixel’ from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, on our website. This technology stores cookies in your browser. This enables Meta to analyse your visitor behaviour (e.g. if you are redirected to our website via an advertisement from Meta), to display targeted advertising messages and to check their effectiveness (conversions). The data collected in this way is also linked to your Meta profile (e.g. Facebook, Instagram) if you are logged in. We cannot access the information collected and it can only be used in statistical form to optimise our advertisements. You can deactivate this function here and, as a logged-in Facebook user, here. Further information on data processing by Meta can be found here and on how the marketing tool works here.
External integrations
External integrations are small programmes that we use to incorporate additional functions from third-party providers into our website. In order for such integrations from third-party providers to be displayed, the IP address and other technical information must be transmitted to the third-party provider on a regular basis. Sometimes other information (e.g. usage behaviour, meta/communication data) is also collected for statistical and marketing purposes. Unless another legal basis is specified, we rely on your consent for this data processing.
Right of withdrawal
You can withdraw your consent to the use of our external integrations at any time by updating or leaving our website or by deleting the corresponding cookies in your browser settings.
Our external links
YouTube: We have embedded videos from YouTube, which is owned by Google Inc., on our website. When you play videos, a direct connection is established between your browser and YouTube. We therefore have no influence on what data is collected by the plug-in and transmitted to YouTube, nor on the subsequent processing of this data by YouTube. When you use the plug-in, YouTube also stores cookies on your computer. You can find more information about data processing by YouTube here.
Our presence on social media
Meta (e.g. Facebook, Instagram)
When you visit our social media presence on Meta (e.g. Facebook, Instagram), personal data (documentation of usage behaviour) is processed by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, using cookies. This information is used to create anonymised statistical data about page activity, which is automatically made available to us (Insights). We are jointly responsible for this data processing with Meta in accordance with Article 26 of the General Data Protection Regulation. In doing so, we rely on our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation). Without the processing of this data, we would not be able to maintain and optimise our presence on Meta’s social media platforms.
We have entered into an agreement with Meta on joint responsibility in accordance with Article 26 of the General Data Protection Regulation (addendum for controllers). Further information can also be found in Meta’s privacy policy.
Youtube
When you visit our YouTube page, which is operated by Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland, personal data is collected by Google and processed in accordance with Google’s privacy policy.
When you visit our LinkedIn presence, which is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza Wilton Place, Dublin 2, Ireland, personal data is collected by LinkedIn and processed in accordance with LinkedIn’s privacy policy.
Establishing contact
If you contact us via our contact details (e.g. email address, telephone number), we will use the personal data you provide exclusively for the purpose of processing and responding to your enquiry. In doing so, we rely on our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation). If, when contacting us, you already make specific enquiries about our services or request advice from us in this regard, we also rely on the fulfilment of pre-contractual obligations (Article 6(1)(b) of the General Data Protection Regulation). Without processing your personal data, we would not be able to respond to your enquiry.
The personal data you provide will not be passed on to third parties or disclosed to them. Exceptions to this only apply if we engage external service providers, are obliged to transfer or disclose data due to legal provisions, or if you have given us your prior consent. We have concluded a contract with external service providers for order processing in accordance with Article 28 of the General Data Protection Regulation. In this contract, we oblige external service providers to maintain confidentiality regarding your personal data and to take appropriate data security measures.
In the event of misuse of our website, we reserve the right to forward disclosed personal data to the competent authorities.
Our photo and video recordings
Purposes and legal basis
When we hold events (e.g. parties, conferences, open days), we reserve the right to take photos and videos and publish them on our website (www.lebensgross.at), on our social media channels (Facebook, Instagram, LinkedIn, YouTube) and in our print media (annual report, LebensGroß magazine, project folder). Furthermore, we reserve the right to transmit photos and videos to media companies in press releases for the purpose of reporting on our events.
In doing so, we rely on our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation). In individual cases, we may also rely on your implied consent (e.g. for group photos). Without this processing, we would not be able to effectively document and report on our charitable and benevolent corporate purposes and thus carry out appropriate public relations work.
Data transfer and risks associated with transfers to third countries
Apart from the above-mentioned publications and transfers, your photos and videos will not be passed on to third parties or disclosed to them. Exceptions to this only apply if we engage an external service provider (e.g. a printing company) or if you have given us your consent in advance.
Objection to the use of photos and videos
As a participant in our events, you may be recognisable in photos and videos. If you do not wish this, please inform our photographers. We will take your request into account. If photos or videos of you are published nonetheless, please notify us at the email address datenschutz@lebensgross.at.
Photo display
As part of the application and registration process for our events, we will fulfil our information obligation under Article 13 of the General Data Protection Regulation separately by means of our own ‘photo notices’. Such ‘photo notices’ will also be displayed on site in the entrance areas of our events.
Registration for events and courses
When you register for an event or course via our registration platform, we will process the personal data you provide for the purpose of processing your registration and preparing and/or conducting the event. In doing so, we rely on our legitimate interests and the fulfilment of contractual obligations (Article 6 (1) (b) and (f) of the General Data Protection Regulation). Without processing your data, we would not be able to implement the event properly.
The personal data you provide will not be passed on to third parties or disclosed to them. Exceptions to this only apply if we engage external service providers, are obliged to transfer or disclose data due to legal provisions, or if you have given us your consent in advance. We have concluded a contract with external service providers for order processing in accordance with Article 28 of the General Data Protection Regulation. In this contract, we oblige external service providers to maintain confidentiality regarding your personal data and to take appropriate data security measures.
Projects, surveys and competitions
If you register for our projects via our website or by telephone, or if you take part in our competitions or surveys, we will process the personal data you provide for the purpose of administering and carrying out the respective project, survey or competition, based on your voluntary consent (Article 6 (1) (a) GDPR). You can withdraw your consent at any time by emailing datenschutz@lebensgross.at. In the event of withdrawal, your personal data will no longer be processed for these purposes and will be deleted.
The personal data you provide will not be passed on to third parties or disclosed to them. Exceptions to this only apply if we engage external service providers, are obliged to transfer or disclose data due to legal provisions, or if you have given us your prior consent.
We have concluded a contract with external service providers for order processing in accordance with Article 28 of the General Data Protection Regulation. In this contract, we oblige external service providers to maintain confidentiality regarding your personal data and to take appropriate data security measures.
Your donations
If you make a donation via our website, we will use the personal data you provide exclusively for the purpose of processing and handling your donation. In doing so, we rely on our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation). Without processing your personal data, we would not be able to process and handle your donation.
The personal data you provide will only be transferred if we use external service providers to process the donation transactions. We have concluded a contract with such external service providers for order processing in accordance with Article 28 of the General Data Protection Regulation. In this contract, we oblige external service providers to maintain confidentiality regarding your personal data and to take appropriate data security measures. Furthermore, the transfer of personal data to the competent tax authority is required by law if you wish to claim the donation as a special expense (Section 18 (1) (7) of the Income Tax Act). Finally, the disclosure of personal data to auditing bodies (e.g. auditors, chartered accountants) may be necessary in accordance with legal requirements.
Your application
When you apply to us, we will process the personal data you provide and the documents you submit exclusively for the purpose of reviewing your application and conducting the application process. In doing so, we rely on the fulfilment of pre-contractual obligations and our legitimate interests (Article 6(1)(b) and (f) of the General Data Protection Regulation). This also applies to your application for voluntary work. Without processing your personal data, we would not be able to review your application and carry out the application process.
Without your prior consent, your application will not be kept on file or forwarded to third parties. Data may be transferred if we engage external service providers. We have concluded a contract with external service providers for order processing in accordance with Article 28 of the General Data Protection Regulation. In this contract, we oblige external service providers to maintain confidentiality regarding your personal data and to take appropriate data security measures.
Registration for volunteer work is done via the Microsoft 365 tool ‘MS Forms’. Microsoft acts as a processor for LebensGroß GmbH and has concluded a contract for order processing in accordance with Article 28 of the General Data Protection Regulation. In this contract, we oblige our external service provider to keep your personal data confidential and to take appropriate data security measures. As the service is provided by a US provider, a third-country transfer to the USA takes place. An adequate level of data protection is guaranteed by the conclusion of EU standard contractual clauses.
Our data storage
Personal data provided by you will only be stored by us for as long as is necessary for the above-mentioned purposes for which we process the data.
- Server log files are deleted thirty days after the end of your visit to our website.
- Data processed on the basis of voluntary consent will be deleted after your revocation or after the period specified in the consent.
- Data required for billing our services will be deleted in accordance with Section 132 of the German Federal Tax Code (Bundesabgabenordnung) seven years after the end of the year in which it was incurred (e.g. donations).
- Data from an application will be deleted 8 months after the end of the application process or after rejection.
Due to legal documentation and retention obligations, a longer storage period may apply. After expiry of the relevant periods, your personal data will be deleted unless there is another legal basis for longer storage in accordance with the General Data Protection Regulation.
Your rights
You have the right to information
- whether we process personal data about you,
- for what purposes personal data about you is processed,
- what categories of personal data about you are processed,
- to whom personal data about you is transferred, and
- how long your personal data will be stored by us (Article 15 of the General Data Protection Regulation).
You have the right to rectification if your personal data is processed incorrectly. This also includes completion if your personal data is processed incompletely (Article 16 of the General Data Protection Regulation).
You have the right to erasure (‘right to be forgotten’) if there is no longer a valid legal basis for the processing of your personal data in accordance with the General Data Protection Regulation (Article 17 of the General Data Protection Regulation).
Under certain conditions, you have the right to request the restriction of the processing of your personal data (Article 18 of the General Data Protection Regulation).
You have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format and to transmit it to a third party of your choice (data portability), provided that the specific requirements for this are met (Article 20 of the General Data Protection Regulation).
If we base the processing of your personal data on our legitimate interests, you have the right to object on grounds relating to your particular situation (Article 21 of the General Data Protection Regulation).
If you have consented to the processing of your personal data, you have the right to withdraw your consent at any time (Article 7(3) of the General Data Protection Regulation).
Detailed information about your rights can be found in the » English version of the General Data Protection Regulation.
If you believe that the processing of your personal data violates the General Data Protection Regulation or any other data protection regulation, you are free to lodge a complaint with the Austrian Data Protection Authority ( » https://www.dsb.gv.at/).
Links to other websites
This website contains links to other websites. LebensGroß GmbH is not responsible for the content of these websites.
Our contact details
LebensGroß GmbH
Conrad-von-Hötzendorf-Straße 37a, 8010 Graz
Email address: datenschutz@lebensgross.at
Our internal data protection officer, Ms Gabriela Grandtner, is available to you at the email address datenschutz@lebensgross.at.
Our external data protection officer is available to you at the email address datenschutz@pilgermair.at.
