Privacy

Who is responsible

International Academic Club Hagenberg, ZVR 1215188448
IT-Center, lounge, second floor, Softwarepark 35, 4232 Hagenberg im Mühlkreis, Austria
hello@hagenberg.international

The association has not appointed a data protection officer, as it is not required to.

Visiting this site

Our web host records standard server log data when a page is requested: IP address, date and time, the page requested, the referring page, and your browser and operating system. This is technically necessary to deliver the site and to keep it secure, and it is our legitimate interest under Art. 6(1)(f) GDPR. We do not combine these logs with anything else and we do not use them to identify anyone.

The forms on this site (Google)

The membership and contact forms are Google Forms, provided by Google Ireland Limited. Google sets its own cookies and receives your IP address as soon as a form is loaded.

Because of that, we do not load them automatically. You see a placeholder, and the form is only fetched from Google after you click to load it - that click is your consent under Art. 6(1)(a) GDPR. If you would rather not involve Google at all, write to hello@hagenberg.international instead; it reaches exactly the same people.

What you enter in a form (typically your name, email address, membership category and whatever you write to us) is stored in our Google Workspace account and used to answer you and to administer your membership. Legal basis: Art. 6(1)(b) GDPR for membership matters, Art. 6(1)(f) for general enquiries. Google's own privacy policy is at policies.google.com/privacy.

Paying a membership fee (Stripe)

Membership payments are handled by Stripe (Stripe Payments Europe, Ltd.). The payment links on the join page are ordinary links: nothing from Stripe runs on this site, and you only reach Stripe if you click one.

Once there, Stripe processes your name, email address, and bank or card details in order to take the payment; we receive confirmation and the information we need for the club's accounts, but never your full bank or card number. Legal basis: Art. 6(1)(b) GDPR (performance of the membership agreement). Stripe's privacy policy is at stripe.com/privacy.

The Android app (IACH Hagenberg)

We publish a small Android app, IACH Hagenberg(package name international.hagenberg.app), that shows what is on at the club and a few lines about us. The association named above is its developer and the responsible party.

The app has no accounts, no analytics, no advertising and no tracking of any kind. It asks for one permission, internet access, and uses it for one thing: fetching the public event list from this website (hagenberg.international). That request reaches our web host exactly like a page visit does, so the server log paragraph above applies to it, and nothing else about you or your device is sent anywhere - not to us, not to anyone.

The app keeps a copy of the last event list it downloaded on your device so that it still opens without a connection. That copy contains only public event titles, dates and places, never anything about you. It stays on your phone and goes when you clear the app's storage or uninstall it.

Buttons in the app that lead to this website, to Discord or to your email app simply hand the address to your phone, which opens it in the app you normally use. From that point the privacy notice of that service applies - Discord's is at discord.com/privacy. Installing the app through Google Play is a matter between you and Google, governed by Google's privacy policy; we receive no information about who installs it.

Legal basis for the one request the app makes: Art. 6(1)(f) GDPR, our legitimate interest in delivering the event list you asked the app to show. Questions about the app go to the same address as everything else: hello@hagenberg.international.

Membership records

If you become a member we keep your name, contact details, membership category and payment history for as long as you are a member. Afterwards we keep what Austrian bookkeeping law requires us to keep - generally seven years for anything touching the accounts - and delete the rest.

We do not sell or rent member data. We share it with a third party only where we have said so here, or where the law requires it.

One exception worth naming: we cooperate closely with Verein SKILL in Linz, and the two associations intend to give each other access to their member addresses so that a membership of one covers the events of the other. We will ask you for explicit consent before your details are passed on, and you can refuse without losing anything else.

Photographs at events

We sometimes take photographs at events to show what the club does. If you would rather not appear in them, tell whoever is holding the camera, or write to us afterwards and we will take the picture down. We will not make a fuss about it.

Your rights

You have the right to access the data we hold about you, to have it corrected or deleted, to have its processing restricted, to object to processing, and to receive it in a portable form. Write to hello@hagenberg.international and we will deal with it.

If you think we have handled your data wrongly, you can complain to the Austrian data protection authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb.gv.at.