The Association of Icelanders in Austria

Privacy Policy

Privacy Policy

This English translation was produced with AI assistance and is provided for convenience only. It has no legal effect. The German version (at /de/datenschutz) is the legally binding privacy and cookie policy. In case of any discrepancy between the versions, the German text prevails.

Privacy Policy of islendingar.at

Welcome to the privacy policy of islendingar.at. This policy is meant to help you understand what data we collect, why we collect it, and what rights you have regarding it.

Last updated: July 4, 2026

Summary

Data we collect automatically: We automatically collect data from you, for example when you visit islendingar.at — usage data and trackers. Trusted third parties help us process it: SendinBlue SAS, Vercel Inc. How we use it: hosting and backend infrastructure; managing contacts and sending messages.

Data you provide us: We collect the data you provide us, for example when you sign up for our newsletter — email address. Trusted third parties help us process it: SendinBlue SAS, Vercel Inc. How we use it: managing contacts and sending messages; contacting the user; registration and authentication directly through this application.

Owner and Data Controller

Isländerverein, Stammgasse 15/8, 1030 Vienna. Owner contact email: stjorn@islendingar.at

Types of data collected

Among the personal data collected by this application, either directly or through third parties, are: usage data, trackers, email address.

Complete details on each type of personal data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the data collection. Personal data may be freely provided by the user or, in the case of usage data, collected automatically when using this application. Unless specified otherwise, all data requested by this application is mandatory. If the user refuses to provide it, it may be impossible for this application to provide its services. Where this application states that some data is not mandatory, users are free not to communicate this data without consequences to the availability or the functioning of the service. Users who are uncertain about which personal data is mandatory are welcome to contact the owner.

Any use of cookies — or of other tracking tools — by this application or by the owners of third-party services used by this application, unless stated otherwise, serves to provide the service required by the user, in addition to any other purposes described in this document.

Users are responsible for any third-party personal data obtained, published, or shared through this application.

Mode and place of processing the data

Methods of processing: The owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the data. Data processing is carried out using computers and/or IT-enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the owner, in some cases, the data may be accessible to other parties involved with the organization of this application (administrative, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as data processors by the owner. An updated list of these parties may be requested from the owner at any time.

Place: The data is processed at the owner's operating offices and in any other places where the parties involved in the processing are located. Depending on the user's location, data transfers may involve transferring the user's data to a country other than their own. Users may find out more about the place of processing by checking the section containing details about the processing of personal data.

Retention time: Unless specified otherwise in this document, personal data is processed and stored for as long as required by the purpose it has been collected for, and may be retained for longer due to applicable legal obligations or based on the user's consent.

The purposes of processing

The user's data is collected to allow the owner to provide its service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its users or third parties), detect any malicious or fraudulent activity, as well as the following: hosting and backend infrastructure; managing contacts and sending messages; contacting the user; registration and authentication directly through this application.

Detailed information on the processing of personal data

Hosting and backend infrastructure: This type of service has the purpose of hosting data and files that enable this application to run and be distributed, as well as to provide a ready-made infrastructure to run specific features or parts of this application. Some services among those listed below, if any, may work through geographically distributed servers, making it difficult to determine the actual location where the personal data is stored.

Vercel Inc. — Vercel. Company: Vercel Inc. Place of processing: United States. Personal data processed: Usage data +1.

Contacting the user — Contact form. Personal data processed: Email address.

Registration and authentication directly through this application: By registering or authenticating, users allow this application to identify them and give them access to dedicated services. Personal data is collected and stored for registration or identification purposes only. The data collected is only the data necessary for the provision of the service requested by the users. Direct registration — Personal data processed: Email address.

Managing contacts and sending messages: This type of service makes it possible to manage a database of email contacts, phone contacts, or any other contact information to communicate with the user. These services may also collect data concerning the date and time when the message was viewed by the user, as well as when the user interacted with it, such as by clicking on links included in the message.

SendinBlue SAS — Brevo email. Company: SendinBlue SAS. Place of processing: France. Personal data processed: Email address +2.

The right to object to interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, users may follow the instructions provided by YourOnlineChoices (EU), the Network Advertising Initiative (US), the Digital Advertising Alliance (US), DAAC (Canada), or DDAI (Japan), or other similar services. Such initiatives allow users to select their tracking preferences for most of the advertising tools. The owner thus recommends that users make use of these resources in addition to the information provided in this document.

The Digital Advertising Alliance provides an application called AppChoices to help control interest-based advertising within mobile apps.

Users may also object to certain advertising features through the relevant device settings, such as the device advertising settings for mobile phones or ad settings in general.

Additional information for users in the European Union

Legal basis of processing: The owner may process personal data relating to users if one of the following applies: users have given their consent for one or more specific purposes; provision of data is necessary for the performance of an agreement with the user and/or for any pre-contractual obligations thereof; processing is necessary for compliance with a legal obligation to which the owner is subject; processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the owner; processing is necessary for the purposes of the legitimate interests pursued by the owner or by a third party.

Further information on the period of processing: Personal data collected for purposes related to the performance of a contract between the owner and the user shall be retained until such contract has been fully performed. Personal data collected for the purposes of the owner's legitimate interests shall be retained as long as needed to fulfill such purposes. Once the retention period expires, personal data shall be deleted; consequently, the right to access, the right to erasure, the right to rectification, and the right to data portability cannot be enforced after expiration of the retention period.

The rights of users under the GDPR

Users also have the right to be informed about the legal basis for data transfers abroad, including to any international organization governed by international law or set up by two or more countries, such as the UN, and about the security measures taken by the owner to safeguard their data.

Details about the right to object: Where personal data is processed for a public interest, in the exercise of an official authority vested in the owner, or for the purposes of the legitimate interests pursued by the owner, users may object to such processing by providing a ground related to their particular situation. Users must know that they may object to the processing of their personal data for direct marketing purposes at any time, free of charge, without providing any justification.

How to exercise these rights: Any requests to exercise user rights can be directed to the owner through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the owner as early as possible, always within one month.

Additional information about data collection and processing

Legal action: The user's personal data may be used for legal purposes by the owner in court or in proceedings leading to possible legal action arising from improper use of this application or the related services. The user declares to be aware that the owner may be required to reveal personal data upon request by public authorities.

System logs and maintenance: For operation and maintenance purposes, this application and any third-party services may collect files that record interaction with this application (system logs) or use other personal data (such as the IP address) for this purpose.

Changes to this privacy policy: The owner reserves the right to make changes to this privacy policy at any time. Users are therefore advised to check this page regularly, referring to the date of the last modification listed at the bottom.

Definitions and legal references

Personal data: any information that directly, indirectly, or in connection with other information, allows for the identification of a natural person. Usage data: information automatically collected by this application, such as IP addresses or domain names of the computers used by users, URI addresses, request time, method used to submit the request to the server, file size received, the numerical code indicating the status of the server's response, country of origin, browser and operating system features, visit duration, and information about the paths followed within the application. User: the individual using this application. Data subject: the natural person to whom the personal data refers. Data processor: the natural or legal person processing personal data on behalf of the controller. Data controller (or owner): the natural or legal person who decides the purposes and means of the processing of personal data. This application: the hardware or software tool by which personal data is collected and processed. Service: the service provided by this application. European Union (or EU): unless otherwise specified, all references made within this document to the European Union include all current member states and the European Economic Area (EEA). Cookie: cookies are trackers consisting of small sets of data stored in the user's browser. Tracker: any technology enabling the tracking of users, such as cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting.