Legal
Privacy policy
How we handle personal data when you visit this website.
1. Controller
- Organisation
- Primera - Zentrum für pädagogische Fortbildung Wien
PRIMERA | Zentrum für pädagogische Fortbildung Wien - Address
- Hochsatzengasse 18/6, 1140 Wien, Österreich
- Authorised representative
- Chairwoman Dr. Blanka Tacer
- office@primera-bildung.at
- Contact for privacy requests
- office@primera-bildung.at
2. Overview
You can use this website without registering or creating an account. There is no login, online shop or newsletter form. We only process data that is technically necessary to operate the website, or that you send to us yourself.
3. Hosting and server log files
When you visit the website, your browser technically transmits data to the server that runs the website. This typically includes your IP address, date and time of access, the page requested, referrer URL, browser type and operating system. This data is needed to deliver the website and to ensure its security and stability.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website).
- Hosting provider
- [Hosting provider and location – pending]
- Log retention
- [To be confirmed with hosting provider – pending]
4. Cookies and local storage
This website currently does not set any tracking cookies. It only stores two technically necessary entries in your browser's local storage (localStorage):
primera-consent– your cookie choice (selected categories, version number and time). Legal basis: § 165(3) Austrian Telecommunications Act 2021 and Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (proof of consent).primera-lang– your selected language (DE/EN). Legal basis: § 165(3) Telecommunications Act 2021 (a function you explicitly requested).
These entries remain in your browser until you delete them or change your choice. They are not transmitted to us.
Statistics and marketing: No analytics, statistics or marketing services are currently integrated on this website. Should such services be used in future, this will only happen with your explicit consent (Art. 6(1)(a) GDPR) and after this policy has been updated.
5. Fonts
The fonts Montserrat and Source Sans 3 are served locally from our own server. Visiting the website does not create a connection to servers of Google or any other font provider.
6. Contact by email
When you submit the contact form, your details are transmitted encrypted to the website server and sent from there via Google (Gmail) to the association’s inbox. We process your name, email address, organisation (if provided), subject and message to handle your enquiry. Your email address is used as the reply address. The form does not create a database record. A hidden form field and a minimum completion time help protect against automated abuse. You can also contact us directly by email.
Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps (e.g. registering for a course), otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). The data is deleted once it is no longer needed for handling your enquiry and no statutory retention obligations apply.
- Email provider (contact form)
- Google (Gmail)
- Contracting entity, processing terms and third-country transfers
- [To be checked and added by the association – pending]
7. Membership application
When you submit the application form on the “Membership” page, your details are transmitted encrypted to the website server and written from there to a non-public spreadsheet (Google Sheets) in the association's Google account, together with a timestamp, application reference and the status “pending review”. Nothing is stored in your browser. We then send a one-time automatic acknowledgement of receipt (with no statement about admission) to the email address you provided; it is sent via the association's Gmail account (Google) and contains your name and application reference. We do not send advertising or newsletters. Alternatively you can send the application by email; section 6 then applies.
Data processed: full name, email address, postal address, optionally phone number and optionally a short note on motivation or educational background. We do not collect special categories of personal data, date of birth or identity documents. The purpose is the board's review of your application (under the statutes only natural persons can become members, and the board decides on admission) and, if admitted, member administration.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps at your request, or the membership relationship). Where statutory obligations to keep member records or retain data apply, Art. 6(1)(c) GDPR. Consent is not required for this processing and is not requested. The data is not used for advertising or newsletters.
- Recipients
- The association's board; Google (Google Sheets as storage service, Gmail for the acknowledgement); for applications by email, the association's email service provider
- Google: contracting entity, data processing terms, third-country transfer
- [To be checked and added by the association – pending]
- Email provider (acknowledgement)
- Google (Gmail)
- Retention if declined
- [Retention of declined applications – pending]
- Retention for members
- [Retention after membership ends – pending]
8. Links to external websites
This website contains links to external services, e.g. erasmuspluscourses.com. Data is only transmitted to the respective provider when you click such a link. The respective provider is responsible for data processing on those websites. No external media (e.g. videos or maps) are embedded.
9. Recipients and transfers to third countries
Within the operation of the website, the hosting provider receives personal data as a processor. Whether data is transferred outside the European Economic Area, and on what basis (e.g. adequacy decision or standard contractual clauses), depends on the hosting provider and will be added here once confirmed.
[Third-country transfer details – pending]
10. Retention
We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. After that, it is deleted.
11. Your rights
Under the GDPR you have the following rights:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on legitimate interests (Art. 21 GDPR)
- Withdrawal of consent at any time with effect for the future (Art. 7(3) GDPR), e.g. via the cookie settings
Please send requests to the privacy contact named above.
12. Right to lodge a complaint
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
13. Changes to this policy
We update this privacy policy when the website or legal requirements change. The version published here applies.
Last updated: 31/10/2026
