Privacy policy

The protection of the personal data of our website visitors is important to EMOTiC. We are committed to safeguarding such data in accordance with the applicable laws, as set out in this declaration.

This declaration does not extend to third-party websites that may be accessed through links on this website. EMOTiC is not legally responsible for the privacy practices of those websites.

Our website sets cookies only if you agree to statistics with Google Analytics (see below). Without your consent, no cookies are set. Our digital mailings do not use cookies.

What is personal data?

Personal data refers to any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by their name, an identification number, location data or an online identifier, or on the basis of physical, physiological, genetic, mental, economic, cultural or social identity.

How does EMOTiC collect and process personal data?

EMOTiC collects and processes the personal data of data subjects in accordance with the applicable data protection laws, as described in this declaration.

Apart from the technical log data described below and, only with your consent, usage statistics with Google Analytics, EMOTiC does not collect any data automatically. Data is only collected when visitors send us a contact form, subscribe to a newsletter, apply for a training, request a document from our Library or send us an email. We add people to our newsletter only with their consent, and they can unsubscribe at any time.

EMOTiC processes personal data related to its website only to facilitate the use of this website and the contact preferences of data subjects. Personal data obtained through this website is not used for any individual evaluations.

EMOTiC reserves the right to evaluate pseudonymised or anonymised datasets for system security and for statistics (such as the number of users and page views) to improve the functioning of this website.

EMOTiC takes reasonable technical and organisational precautions to prevent the loss, misuse or alteration of personal information and stores all personal data on secure servers.

What kind of personal data does EMOTiC collect and process?

When you open a page of our website, your browser automatically sends technical information to the server that hosts it ("log data"): your IP address, the date and time of the request, the page or file requested, the amount of data transferred, the referring page, and your browser type and version.

We need log data to deliver the website and to keep it secure, for example to detect and block attacks. It is stored by our hosting provider for a limited period and then deleted automatically. We do not combine it with other data and we do not use analytics, tracking, advertising or social media plug-ins. If data subjects provide identifying information on forms on this website (for example their name or address), it is used only to answer the request or process the application and is not published.

When you request a document from our Library, we ask for your name, email, organisation and country, with your consent, so that we can provide the document. We keep these details for two years after your last download, or delete them earlier if you ask us to.

Hosting, forms and email

Our website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, which processes data on our behalf as a processor.

When you send a form on this website (contact, newsletter, school request or the Library form), your entries are sent by email to our mailbox emotic.org(@)gmail.com. This mailbox is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google may also process data in the United States, and Google LLC is certified under the EU–US Data Privacy Framework. We keep messages only for as long as we need them to answer you and to meet legal retention duties.

To protect our forms against spam and abuse, our server keeps a scrambled (hashed) form of your IP address together with the time of sending for at most one hour.

Our fonts and all other files are stored on our own server, so your browser does not contact Google Fonts or any other third party when you open our pages. Without your consent to statistics, this website sets no cookies.

Some pages link to other services, for example YouTube, Google Maps, Google Forms (used for some applications), Instagram, Facebook, LinkedIn and WhatsApp. These services are only contacted when you click such a link, and their own privacy policies then apply. If you apply through a Google Form, your answers are stored by Google.

We process personal data on these legal bases of the GDPR: your consent (Art. 6(1)(a)) for the Library, the newsletter and statistics with Google Analytics; steps you ask for before an agreement (Art. 6(1)(b)) for applications; and our legitimate interest (Art. 6(1)(f)) in answering enquiries and in running a secure website (log data and spam protection).

Statistics with Google Analytics (only with your consent)

If you agree in our cookie notice, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us how our website is used, for example which pages are visited, how visitors find us and which contact options (email, WhatsApp, Instagram, forms) and downloads are used. This helps us improve our programmes and our website.

For this, Google Analytics stores cookies on your device (_ga and _ga_SX7LT4GHK7, for up to two years) and processes usage data such as pages viewed, clicks, device and browser type, approximate location (country, city) and the website you came from. Google Analytics 4 does not store full IP addresses. We do not send names, email addresses or form contents to Google. Google signals and advertising features are switched off, and the data is deleted after 14 months.

Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission recognises an adequate level of protection (Art. 45 GDPR).

The legal basis is your consent (Art. 6(1)(a) GDPR and § 165(3) of the Austrian Telecommunications Act 2021). Without consent, Google Analytics is not loaded. You can change or withdraw your choice at any time with “Cookie settings” at the bottom of every page; the Google Analytics cookies are then deleted.

Disclosures

EMOTiC reserves the right to disclose information received directly from and about data subjects, as well as information obtained through website analytics, to its staff members, employees, officers, agents, suppliers or subcontractors, insofar as reasonably necessary for the purposes set out in this declaration.

EMOTiC may also disclose such personal information to the extent required by law, in connection with any legal proceedings or prospective legal proceedings, and to any person who we reasonably believe may apply to a court or other competent authority for disclosure, where in our reasonable opinion that court or authority would be reasonably likely to order disclosure.

Except as provided in this declaration, EMOTiC will not provide personal information about data subjects to third parties.

Rights of data subjects

In accordance with the General Data Protection Regulation (GDPR) and EMOTiC policy, data subjects have the following rights:

1. The right of access: to obtain confirmation from EMOTiC as to whether personal data concerning them is being processed and, where that is the case, access to that data and information such as the purpose of processing, the categories of data processed and the recipients.
2. The right to rectification: to have inaccurate personal data corrected, including having incomplete personal data completed, for example by providing a supplementary statement.
3. The right to erasure ("right to be forgotten"): to have personal data erased where it is no longer necessary for the purposes for which it was collected.
4. The right to data portability: to receive the personal data they have provided to EMOTiC in a structured, commonly used and machine-readable format, and to transmit it to another controller without hindrance.
5. The right to restriction of processing: to have the use of their personal data restricted, for example while its accuracy is being checked.
6. The right to object: to object to processing based on legitimate interest, and to direct marketing at any time.
7. The right to withdraw consent: at any time, without affecting processing carried out before the withdrawal.
8. The right to lodge a complaint: with the Austrian Data Protection Authority (Datenschutzbehörde) in Vienna.

To make a request, write to emotic.org(@)gmail.com with the subject "Data protection". We respond within one month, and requests are free of charge.

Updates to this declaration

EMOTiC may update this declaration where required by applicable law. We therefore advise you to consult this page from time to time.

Contact

The controller responsible for this website is EMOTiC for Training and Consulting, Rauhensteingasse 7/18, 1010 Vienna, Austria (ZVR 1026550097); see also our Impressum. If you have any questions about this declaration or how EMOTiC treats your personal information, please contact us or write to emotic.org(@)gmail.com.