Legal
Privacy policy
In short: this website does not use tracking, analytics or advertising, and it sets no cookies for visitors. Fonts and images are served from our own server. We only receive personal data when you send us a message, and YouTube only receives data if you choose to play our video.
1. Who is responsible
The controller responsible for this website under the EU General Data Protection Regulation (GDPR) is:
Regional Centre of Expertise (RCE) Vienna
Competence Center for Sustainability Transformation and Responsibility (STaR)
Wirtschaftsuniversität Wien (WU)
Welthandelsplatz 1
A-1020 Wien
s-challenge@wu.ac.at
+43 1 31336 6101
2. Hosting and server log files
This website is hosted by Scaleway SAS (France, EU), which processes data on our behalf as our processor.
Whenever you visit the site, the server automatically records technical information that your browser sends: your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system. We need this to deliver the website and to keep it secure and stable. The legal basis is our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). Log files are kept only as long as needed for these purposes and are then deleted.
3. Cookies and browser storage
We do not set cookies for visitors. WordPress only sets cookies when an editor logs in to the site’s admin area; these are technically necessary for logging in.
To display emoji correctly, WordPress briefly notes in your browser’s session storage whether your browser supports them. This contains no personal data and is deleted when you close the tab.
4. Contact form and email
If you use the contact form, we process the name, email address and message you enter. If you email us, we process your email address and the content of your email. We use this data only to answer your enquiry.
Messages sent through the form are delivered to us by email and are also stored in our website’s database. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to taking part in or partnering with the Sustainability Challenge, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete your message once your enquiry has been dealt with, unless we are required by law to keep it longer.
5. Fonts
The fonts used on this website are hosted on our own server. No connection is made to Google or any other font provider.
6. YouTube video
We show a video from YouTube in privacy-enhanced mode (youtube-nocookie.com). No data is sent to YouTube while you browse the page. Only when you click play does your browser connect to YouTube’s servers; YouTube then receives your IP address and may store information on your device.
YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the USA. By clicking play you choose to load the video from YouTube. For details, see Google’s privacy policy.
7. Links to other websites
Our website links to the websites of our partners and funders. These open in a new tab. We have no influence over how those websites process data; their own privacy policies apply.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15)
- have incorrect data corrected (Art. 16)
- have your data deleted (Art. 17)
- restrict how we process your data (Art. 18)
- receive your data in a portable format (Art. 20)
- object to processing based on legitimate interests (Art. 21)
- withdraw any consent you have given, with effect for the future
To exercise these rights, please contact us at [CONTACT EMAIL].
If you believe we are processing your data unlawfully, you can lodge a complaint with a data protection authority. In Austria this is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.
9. Changes to this policy
We will update this policy if our website or the law changes. The current version is always available on this page.