PRIVACY POLICY

As of: June 2026

The protection of your personal data is of particular concern to us. We process your data exclusively on the basis of the legal provisions (GDPR, Austrian Data Protection Act [DSG], TKG 2021). In this data protection declaration we inform you about the most important aspects of data processing within this website.

1. Responsible person
Responsible for data processing within the meaning of the GDPR is: Thomas Seifert c/o Impact Hub, Lindengasse 56 1070 Vienna, Austria Telephone: 43 1 522 7143 Email: thomas.seifert@storyinstitut.eu If you have any questions about data protection or exercising your rights, you can contact the contact details above at any time.

2. Principles of data processing
We only process personal data if there is a legal basis for doing so. The legal bases relevant to this declaration in accordance with Art. 6 Para. 1 GDPR are in particular:

Consent (lit. a): You have given us your consent to process it for a specific purpose. Fulfillment of contract or.
Pre-contractual measures (lit. b): Processing is necessary to fulfill a contract or to respond to a pre-contractual request.
Legitimate interest (lit. f): Processing is necessary to protect our legitimate interests, unless your interests override them.

We only keep personal data for as long as it is necessary for the respective purpose or as long as legal retention periods or limitation periods require this.

3. Calling up the website/server log files
When you access this website, the provider automatically collects information and stores it in so-called server log files, which your browser automatically transmits. These are in particular:

IP address and hostname
Date and time of the request
Browser type and version
operating system used
Referrer URL (the previously visited page)

Purpose: Technically error-free provision of the website, ensuring IT security, evaluating server logs for error analysis.

Legal basis: legitimate interest in the stable and secure operation of the website (Art. 6 Para. 1 lit. f GDPR).  Storage period: This data is automatically deleted after 14 days. This data will not be merged with other data sources.

4. Hosting
This website is hosted by the following service provider, who processes the data mentioned under point 3 on our behalf (processor within the meaning of Art. 28 GDPR):

World4You Internet Services GmbH Wolfgang-Pauli-Straße 2, BT3 4020 Linz, Austria

There is a corresponding order processing agreement with the hosting provider. The data is processed on servers within the EU.

5. Cookies
This website uses cookies. Cookies are small text files that are stored on your device.

Technically necessary cookies are necessary for the website to function fundamentally (e.g. storing your cookie settings). These are set on the basis of Section 165 Paragraph 3 TKG 2021 or our legitimate interest (Article 6 Paragraph 1 Letter f GDPR) and do not require consent.

Non-technically necessary cookies (e.g. for analysis or marketing purposes) we only use this if you have previously given your active consent via the cookie banner (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent at any time with future effect. In particular, the embedded media content mentioned under point 8 (YouTube, SoundCloud, Spotify) will only be loaded after your consent.

You can delete cookies that have already been set in your browser at any time and restrict the setting of new cookies via the browser settings. Please note that in this case the website may not be fully usable.

6. Contact us
If you contact us using the contact form or email, your information (in particular your name, email address and your message) will be processed for the purpose of processing your request and in the event of follow-up questions.

Legal basis: Fulfillment of the contract or answering pre-contractual inquiries (Art. 6 Para. 1 lit. b GDPR) as well as our legitimate interest in answering your request (Art. 6 Para. 1 lit. f GDPR).

Storage period: This data will be stored for six months and then deleted unless there are statutory retention periods to the contrary. We will not pass on this data without your consent.

7. Web analytics
No web analysis or tracking services are used on this website. There is no evaluation of your usage behavior that goes beyond the server log files mentioned under point 3.

8. Embedded Third Party Content and Social Media

8.1 Links
The references to Facebook, LinkedIn, YouTube, Instagram and TikTok in the header and footer area of this website are pure links. No personal data will be transmitted to these platforms as long as you do not click on the respective link. Only after one click will you be taken to the external platform for whose data processing the respective platform is responsible.

8.2 Embedded media content (YouTube, SoundCloud, Spotify)
On this website we include audio and video content from third parties (YouTube videos, SoundCloud players and Spotify players). When you play or load this embedded content, personal data - in particular your IP address and information about your browser and device - is transmitted to the respective provider. This means that the provider may be able to assign your visit to this website to your user account there, provided you are logged in at the time.

This embedded content will be only loaded after you have consented (e.g. via the cookie/consent banner or by actively clicking on the respective content). No data will be transmitted to the providers before your consent.

Legal basis: Your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent at any time with future effect. The providers used are:

YouTube – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When used, data may be transferred to Google LLC in the USA. The transfer is based on the EU-US Data Privacy Framework or standard contractual clauses. Further information: https://policies.google.com/privacy
SoundCloud – SoundCloud Global Limited
Spotify – Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. Further information: https://www.spotify.com/legal/privacy-policy/

9. Recipient and third country transfer
Your data will only be transferred to third parties if this is necessary to provide our services (e.g. to the hosting provider mentioned under point 4 as a processor) or if there is a legal obligation. A transfer to countries outside the EU/EEA will only take place if this is expressly stated in this declaration and only on the basis of suitable guarantees (adequacy decision, standard contractual clauses).

10. Your Rights
You generally have the following rights with regard to your data stored by us:

Information (Art. 15 GDPR) about the data processed about you
Correction incorrect or incomplete data (Art. 16 GDPR)
deletion Your data (Article 17 GDPR)
Restriction of processing (Article 18 GDPR)
Data portability (Article 20 GDPR)
contradiction against processing based on a legitimate interest (Art. 21 GDPR)
Revocation of consent given with effect for the future (Art. 7 Para. 3 GDPR); the lawfulness of the processing carried out until the revocation remains unaffected.

To exercise your rights, simply send an informal message to the contact details listed under point 1.

11. Right to complain
If you believe that the processing of your data violates data protection law or your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority. In

In Austria, this is the data protection authority: Austrian Data Protection Authority Barichgasse 40–42, 1030 Vienna Telephone: 43 1 52 152-0 Email: dsb@dsb.gv.at Web: www.dsb.gv.at

12. No automated decision making An automated one Decision-making including profiling within the meaning of Art. 22 GDPR does not take place.

13. Changes to this Privacy Policy We reserve the right to adapt this data protection declaration in order to adapt it to changed legal requirements or changes to our services. The current version applies to your next visit.