Privacy Policy

1 · Controller

The controller under the GDPR is Degeler Consulting e.U., Bruno-Marek-Allee 5/10/6, 1020 Vienna, Austria. It operates the website, ticketing, newsletter and accounting.

Privacy contact: privacy@degeler.consulting.

Daylight Agency e.U. (Julia Prochazka) acts as co-organiser and receives access to attendee data as well as to the aggregated reach and registration statistics (via a shared, access-protected analytics dashboard) to the extent required, acting as a processor under Art. 28 GDPR on the basis of a data processing agreement with Degeler Consulting e.U.

2 · Registration & ticket purchase

When you register we process name, email, LinkedIn profile and, where applicable, payment data (legal basis: Art. 6(1)(b) GDPR). Payments are handled by Stripe; data is stored on servers of Hetzner Online GmbH (Germany). Retention follows statutory periods (e.g. 7 years for accounting records). Login and notification emails (magic link) are sent via Brevo (Sendinblue GmbH; servers in the EU). Confirmed registrations are additionally mirrored to an internal overview in Notion (Notion Labs, Inc., USA); this third-country transfer relies on appropriate safeguards under Art. 44 et seq. GDPR (EU standard contractual clauses / EU-US Data Privacy Framework).

3 · Attendee directory (LinkedIn)

On request we add your name and LinkedIn profile to an attendee directory so participants of an event can connect in advance (legal basis: your consent, Art. 6(1)(a) GDPR). The directory is not public — it is visible only to confirmed attendees of the same event via a personal access link. You may withdraw consent at any time.

4 · Newsletter

We use Brevo (Sendinblue GmbH, Germany; servers in the EU) as processor and a double opt-in procedure: after signing up you receive a confirmation email and are only subscribed once you click the link in it. Legal basis: your explicit consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time.

5 · Cookieless analytics

We measure usage anonymously and without cookies via our own 1×1 pixel on a Hetzner server (Germany). The IP address is discarded immediately after processing; a daily-rotating cryptographic hash prevents cross-day tracking. No third-party trackers are used. Legal basis: Art. 6(1)(f) GDPR. The aggregated results are also accessible to the co-organiser Daylight Agency e.U. via an access-protected dashboard.

6 · Server logs

Technically necessary access data (IP, timestamp, requested resource, browser/OS) is processed in server logs to ensure operation and security (Art. 6(1)(f) GDPR), typically retained for 90 days.

7 · Event photography

At our events, photos and videos are taken and used for documentation and marketing of the Vienna Business series as well as for the corporate communications of the organisers (Degeler Consulting e.U. and co-organiser Daylight Agency e.U.) — overview shots based on Art. 6(1)(f) GDPR; close-ups of individuals only with their consent, Art. 6(1)(a) GDPR. You may object at any time (Art. 21 GDPR).

8 · Cookies

This website sets no cookies of its own for tracking or marketing. Embedded third-party content (e.g. a Brevo form) may set cookies within its iframe, under the respective provider's responsibility.

9 · Recipients & processors

• Daylight Agency e.U. — co-organiser, processor (Art. 28 GDPR)
• Stripe — payment processing
• Brevo (Sendinblue GmbH) — newsletter delivery plus login/notification and ticket emails, servers in the EU
• Notion (Notion Labs, Inc., USA) — internal registration overview; third-country transfer with safeguards under Art. 44 et seq. GDPR
• Hetzner Online GmbH — hosting/database (Germany)
• Authorities and courts where legally required; tax/audit advisors

10 · Data security

We apply appropriate technical and organisational measures pursuant to Art. 32 GDPR to protect your data.

11 · Your rights

You have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), withdrawal of consent (Art. 7(3)) and objection (Art. 21 GDPR). Contact privacy@degeler.consulting. You may also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.