Privacy Policy
Cultural and educational center «Open Door Academy»
PRIVACY POLICY according to GDPR (Austria)
Status: 2025
Controller
Association: Cultural and Educational Center „Open Door Academy“
Address: Spallartgasse 23/3, 1140 Vienna, Austria
Additional Course Locations: Weintraubengasse 22, 1020 Vienna, Austria
Telephone: +43 665 65818777
E-Mail: info@open-door.academy
Website: https://open-door.academy
ZVR Number: 1466119777
Processing of Personal Data
We process personal data exclusively on the basis of the GDPR, the Austrian Data Protection Act (DSG), and the Telecommunications Act (TKG 2021).
Legal basis according to Art. 6 GDPR:
- Art. 6 (1) lit. a – Consent
- Art. 6 (1) lit. b – Contract fulfillment or pre-contractual measures
- Art. 6 (1) lit. f – Legitimate interests (Website operation, IT security)
a) Data Processing during Website Visit
When you access our website, the following data is processed automatically:
- IP address
- Date and time of access
- Page/file accessed
- Browser type and operating system
Purpose: Technical provision of the website, system security
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest)
Storage period: Maximum 30 days (server logs)
b) Contact (E-Mail, Telephone, Form)
Processed data:
- Name
- Contact information
- Content of the inquiry
Purpose: Processing the inquiry
Legal basis: Art. 6 (1) lit. b GDPR
Storage period: 6 months or longer if legal obligations exist
c) Course Registrations and Association Administration
Processed data:
- Name, date of birth
- Address, contact details
- Payment information (if relevant)
- Participation documents
Purpose: Conducting courses and association activities
Legal basis: Art. 6 (1) lit. b GDPR
Storage period: 7 years according to Austrian Commercial Code (UGB) and Federal Fiscal Code (BAO)
d) Data of Minors (Children)
Processed data:
- Name, date of birth
- Contact details of the legal guardians
- If necessary, health-related information (only when required)
- Photos/videos exclusively with written consent
Legal basis: Consent pursuant to Art. 6 (1) lit. a GDPR in conjunction with Art. 8 GDPR
Consents can be withdrawn at any time.
e) Photos & Videos
Photos/videos may be taken at events – exclusively with prior written consent.
Storage period: Until withdrawal of consent
Data Transfer
Data will only be transferred to:
- Processors (e.g., hosting providers, IT service providers)
- Authorities, if legally obliged
- Emergency or rescue services in case of imminent danger
GDPR-compliant contracts are in place with all processors.
Cookies & Web Analysis
Our website only uses technically necessary cookies.
Should analysis or marketing tools (e.g., Google Analytics, Meta Pixel) be used, this will only take place after explicit consent via the cookie banner.
Details are explained in a separate cookie notice.
Use of External Services
If third-party services (e.g., Google Maps, YouTube, Webfonts) are integrated into our website, data transmission to third countries may occur.
Legal basis: Consent (Art. 6 (1) lit. a GDPR)
Transfers are carried out in accordance with the EU-US Data Privacy Framework or Standard Contractual Clauses.
Storage Period
We store personal data only as long as necessary for the respective purposes or as long as statutory retention periods exist:
- Contact inquiries: 6 months
- Course documents & invoice data: 7 years
- Consents for photos: until withdrawal
- Server logs: max. 30 days
Rights of the Data Subjects
You have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to withdraw given consents (Art. 7 GDPR)
- Right to object (Art. 21 GDPR)
Please address inquiries to: info@open-door.academy.
Right to Lodge a Complaint
Austrian Data Protection Authority
Barichgasse 40–42
1030 Wien
Data Security
We implement technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, and alteration.
Changes to the Privacy Policy
This Privacy Policy may be updated as necessary. The current version will be published on the website.
