Privacy Policy

Scope, Website Responsibilities, and Joint Controllership

This privacy policy applies to the data processing activities of The Innovation in Politics Institute GmbH as well as its affiliated organisations and initiatives, including:The Innovation in Politics Germany GmbHECoD gemeinnützige GmbHHub for Education Innovation Vienna (HEIV) gemeinnützige GmbH

These entities act as joint controllers under Article 26 of the General Data Protection Regulation (GDPR) for data collected and processed through their respective websites and communication channels.

This policy governs data processing activities across the following domains:
– innovationinpolitics.eu
– capitalofdemocracy.eu
– heiv.eu

This privacy policy also applies to campaign domains and microsites operated under their respective responsibilities as both data controller and processor within the meaning of the General Data Protection Regulation (GDPR), including but not limited to:

– https://safe-democracy.at/
– https://h2convention.eu/
– https://reuselinz.at/
Controller and Processor: The Innovation in Politics Institute GmbH (Lead Controller)

– https://www.bildungsfestival.at/
Controller and Processor: Hub for Education Innovation Vienna (HEIV) gemeinnützige GmbH

– https://actnow.capitalofdemocracy.eu/
– https://awards.innovationinpolitics.eu
– https://artofdemocracy.eu
– https://capitalofdemocracy.eu/truth-lies-democracy
Controller and Processor: ECoD gemeinnützige GmbH

Each organisation is fully responsible for the collection and processing of personal data on the respective domains listed above. This privacy policy provides information relevant to the data processing practices on all these websites.

A joint controllership agreement as defined in Article 26 GDPR is in place between the above-named entities to ensure full GDPR compliance and transparency. The Innovation in Politics GmbH is the main processor, defining the corporate guidelines, standards and infrastructure and ensuring the general GDPR and data protection compliance. All parties jointly determine the purposes and means of data processing. Each organisation is equally responsible for the protection of your data, and any data subject can assert their rights against any of the joint controllers.

General

The website http://innovationinpolitics.eu (hereinafter “website”) is operated by The Innovation in Politics Institute GmbH, Ungargasse 59–61, 1030 Vienna, Austria, as a service provider (hereinafter “service provider”).

Controllers for the purposes of the General Data Protection Regulation (GDPR) and Austrian data protection law are:The Innovation in Politics Institute GmbH (Lead Controller)The Innovation in Politics Germany GmbHEuropean Capital of Democracy gemeinnützige GmbHHub for Education Innovation Vienna (HEIV) gemeinnützige GmbH

Each controller may be contacted via:

Ungargasse 59–61, 1030 Vienna, Austria
Phone: +43 (0)660 654 30 27

You have the right at any time to receive information about your personal data and to request its correction or deletion. For any such requests, please contact us using the contact details provided above. If you wish to object to the collection, processing, or use of your data in accordance with this privacy policy – either wholly or in part – you may also send your objection via email, fax, or letter.

We take data protection seriously and comply with applicable Austrian and European data protection regulations. By using this website, you consent to the processing of your data in accordance with this privacy policy.

Stored Data

Server Logs

When you visit our website, the following information is automatically stored: the IP address of the requesting computer, date and time of access, request details (file name and URL), the amount of data transferred, a success confirmation message, browser and operating system identification data, and the referring website (if accessed via a link). These server logs are used for system security checks, technical website administration, and optimization of our services. Data will only be shared with law enforcement authorities in the event of a hacking attack. There is no further disclosure to third parties. Server logs are stored for a maximum of 3 months.

Cookies

Cookies are small text files stored on your device to facilitate recognition and improve usability. Most browsers automatically accept cookies, but you can configure your browser to decline them or delete stored cookies at any time. Please note that disabling cookies may affect the functionality of the site.

We use Google Analytics, a web analytics service provided by Google Inc., which also places cookies on your device. These cookies help us analyze usage patterns on our site. Google Analytics operates with IP anonymization, meaning your IP address is shortened before transmission. Only in exceptional cases is the full IP address transferred to a Google server in the US and anonymized there.

The information generated by these cookies is used to analyze site activity and create reports. Google will not merge your IP address with other data. You can prevent Google Analytics tracking by installing a browser add-on via this link: http://tools.google.com/dlpage/gaoptout

Google Analytics cookies:__utma (2 years)
– __utmt (10 minutes)
– __utmb (30 minutes)
– __utmc (until end of session)
– __utmz (6 months)

No further personal data is stored automatically beyond the aforementioned information.

Social Plugins (Meta, Twitter/X, Google, LinkedIn, Bluesky)

This website uses social media plugins that enable interaction with external services. These plugins may transmit personal data (e.g., your IP address) to their respective operators, some of which are located outside the EU. This may involve tracking even without active interaction.

The platforms we currently link to or integrate are:
– Meta Platforms, Inc. (Facebook, Instagram, Threads), 1601 Willow Road, Menlo Park, CA 94025, USA
– X Corp. (formerly Twitter), 1355 Market St #900, San Francisco, CA 94103, USA (not actively maintained since 1.1.2025)
– Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
– LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
– Bluesky Public Benefit LLC, 548 Market St, San Francisco, CA 94104, USA

For details on how these services process your data, please refer to their respective privacy policies.

Data that users actively submit

When you provide your name, email address, or other personal data via forms on our website (e.g., newsletter subscriptions, event registrations, or contact forms), that data is used solely for the intended purpose.

We currently use ZOHO CRM, ZOHO Campaigns, and ZOHO Backstage for stakeholder communication, event management, and email marketing. Data entered via our forms may be processed through these platforms, which are EU-GDPR-compliant and ensure secure handling of your personal data. Your name and email address may be stored for purposes such as responding to inquiries, sending invitations, or event-related communications.

Additionally, we continue to use Mailchimp for selected email campaigns. These services may process your data on servers outside the EU but offer contractual safeguards to ensure adequate protection.

We do not pass your personal data to any third parties beyond what is described here. If you wish to revoke your consent for this usage, please contact: office@innovationinpolitics.eu

Security of Your Information

We take appropriate technical and organizational security measures to protect your personal data from unauthorized access, misuse, loss, or destruction. Your data is stored on secure servers in controlled environments.

Right to Object and Withdraw Consent

You have the right to object to the processing of your personal data at any time. Unless there is a legal or contractual obligation to retain your data, it will be deleted upon objection. You can revoke your consent to receive communications or for data processing by contacting us directly.

Data Processing & Storage

We store and process personal data exclusively as outlined in this policy. All data is handled in accordance with the GDPR and the Austrian Data Protection Act (DSG). Upon request or once the data is no longer needed, it will be deleted unless a legal retention obligation exists.

Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights under GDPR, please contact:

The Innovation in Politics Institute GmbH
Ungargasse 59–61, 1030 Vienna
E-mail: office@innovationinpolitics.eu
Phone: +43 (0) 660 654 30 27

We will respond to your inquiry as soon as possible.

Last updated: 27 May 2025