Data protection
The protection of your personal data is of particular importance to us. We therefore process your data exclusively on the basis of the applicable legal regulations (EU General Data Protection Regulation (GDPR), TKG 2021). In these data protection information, we inform you about the most important aspects of data processing in the context of our activities.
The use of our website is generally possible without providing personal data. If you enter personal data, e.g. for the purpose of contacting us or subscribing to a newsletter, we will pass on the necessary information to companies that process data on our behalf. We only use companies that comply with the General Data Protection Regulation.
Data Controller
The data controller for data processing on this website is:
iks.haus, FlexCo
Mariahilfer Straße 49/1/15
1060 Vienna, Austria
iks@iks.haus
ATU82838814
666684v
Encrypted Transmission
This website uses SSL encryption for security and data protection reasons, which prevents third parties from intercepting and reading the data you enter during transmission. You can recognize the active encryption by the padlock or similar symbols in the address bar of your browser.
Contact Us
If you contact us via the website form, by email, or in another way, the data you provide (name, email address, and optionally the phone number) will be stored by us for one year for the purpose of processing your request and for any follow-up questions. If a contract arises from the request, the statutory retention periods apply. We will not pass on this data without your consent. The processing of data is based on Article 6(1)(b) (contract performance) and Article 6(1)(a) (consent) of the GDPR.
Newsletter
You have the option to subscribe to our newsletter via our website. For this, we require your email address and your declaration that you agree to receive the newsletter.
Once you have subscribed to the newsletter, we will send you a confirmation email with a link to confirm your registration. The processing of data is therefore based on the legal provisions of § 96 para. 3 of the TKG, as well as Article 6 para. 1 lit. a (consent) of the GDPR.
You can cancel the newsletter at any time. Please send your cancellation to the following email address: iks@iks.haus or use the corresponding link at the end of the newsletter. We will then immediately delete your data related to the newsletter.
Website hosting by easyname
This website is hosted by easyname GmbH, Fernkorngasse 10/3/501, 1100 Vienna, Austria. When you visit our website, easyname collects the following data for the purpose of providing the website, troubleshooting, and statistically recording visitors:
- IP address
- Date and time of access
- The browser and operating system used (User Agent String)
- The page accessed (URL)
- The website from which you came to us (Referrer)
The data is stored exclusively on servers in Austria. The processing of data is based on Article 6 para. 1 lit. f (legitimate interests) of the GDPR. The legitimate interest within the meaning of the GDPR is the technically flawless presentation and provision of the website.
We have concluded a data processing agreement with easyname, in which easyname undertakes to comply with the GDPR. You can find more information in the easyname privacy statement at https://www.easyname.at/download/data-protection-policy-de-v4.pdf.
Server logs
The server from which this website is provided stores information that your browser automatically transmits to us in so-called log files. These include:
- Browser type and browser version
- Operating system used
- The page (URL) from which you came to us
- The IP address of the accessing computer
- Time of the request
This data is used exclusively for the technical monitoring of the web server (utilization, optimization, error detection, security) and is absolutely necessary for this purpose. It is not combined with other data sources, so that it cannot be assigned to individual persons. It is deleted after three months.
Data processing is carried out based on Article 6(1)(f) of the GDPR (legitimate interests). In this case, the legitimate interest, according to the GDPR, is the proper and secure functioning of the website.
Content Management System: WordPress
This website is based on the open-source content management system WordPress. WordPress uses technically necessary cookies to operate the website, which are required for the website's functionality (e.g., session cookies for logged-in users). In addition, WordPress plugins set additional cookies, about which we will inform you in the "Cookies" section.
Language Switching (TranslatePress / GTranslate)
Our website offers content in multiple languages (German, English, BKS/Croatian). We use the TranslatePress and GTranslate plugins for language switching. A cookie is set that stores your selected language, so that when you visit the website again, it is displayed in your preferred language.
GTranslate uses the Google Translate service, and text content from the website may be transmitted to servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA for translation. Your IP address and other technical data may also be transmitted.
Data processing is carried out in accordance with Article 6(1)(f) of the GDPR (legitimate interests). The legitimate interest is the provision of our content in an accessible and multilingual format for our diverse target audience.
Fonts
We use fonts (Google Fonts) on our website that are hosted locally on our own server. When you visit our website, the fonts are loaded directly from our server. No connection is made to servers of Google or other third parties. No data is transmitted to Google, and no cookies are set in connection with the use of the fonts.
Embedded Spotify Content
On our website, we embed audio content from the Spotify platform, a service of Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. When you visit a page with an embedded Spotify player, a connection is made to the servers of Spotify. The following data is transmitted to Spotify:
- Your IP address
- Information about the browser you are using.
- The page you are visiting on our website.
If you are logged into Spotify, Spotify may associate your visit with your account. You can find more information in the Spotify privacy policy at https://www.spotify.com/at/legal/privacy-policy/
The processing of data is based on Article 6(1)(f) of the GDPR (legitimate interests). The legitimate interest is the provision of audio content in an accessible format as an accessibility feature of our platform, iks.haus.
Embedded YouTube Videos
On our website, we embed videos from the YouTube platform, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in extended privacy mode. According to YouTube, no information about the visitors to our website is stored before they watch the video.
When you play an embedded YouTube video, YouTube sets at least one cookie. Your IP address and other data are transmitted to YouTube servers, which may also be located in the USA. If you are logged into YouTube or Google, this data may be associated with your account.
You can find more information in the Google privacy policy at https://policies.google.com/privacy
The processing of data is based on Article 6(1)(a) of the GDPR (consent).
Social Media Presences and Embedded Content
Our website may contain embedded content (e.g., videos, images, posts) from the following social media platforms:
- Instagram (Meta Platforms Ireland Limited, Dublin, Ireland)
- Facebook (Meta Platforms Ireland Limited, Dublin, Ireland)
- TikTok (TikTok Technology Limited, Dublin, Ireland)
- YouTube (Google Ireland Limited, Dublin, Ireland)
When these embedded content items are loaded, a connection is established to the servers of the respective provider. This informs the provider which page of our website you have visited. In addition, other data, such as your IP address, is transmitted. If you are logged into the respective provider, your activities may be associated with your account there.
The embedding takes place on the basis of Article 6(1)(f) of the GDPR (legitimate interests). Our legitimate interest is the appealing presentation and distribution of our content.
Cookies
Our website uses so-called cookies. These are small text files that are stored on your device by your browser. They do not cause any harm.
We use cookies to make our website more user-friendly. Some cookies remain on your device until you delete them. They allow us to recognize your browser when you visit us again.
Some of these cookies are necessary for the operation of the website and store your consent to non-essential cookies, the language you have selected, and are used for logging in. If you do not want the necessary cookies to be stored, you can configure your browser so that it informs you about the setting of cookies and you only allow them in individual cases.
The legal basis for the use of necessary cookies is Article 6(1)(f) (legitimate interests) of the GDPR. Legitimate interests, within the meaning of the GDPR, are the proper and secure functioning of the website and the optimization of our services.
In addition, further cookies that are not absolutely necessary for the operation of the website may be stored, but only with your consent. Details about this are provided in the preceding and following sections.
Google Analytics
Our website uses features of the web analytics service Google Analytics of Google Ireland Limited, located at Gordon House, Barrow Street, Dublin 4, Ireland, with your consent. Cookies are used for this purpose, which enable the analysis of website usage by your visitors. The information generated thereby is transmitted to the server of the provider and stored there.
If you have consented to the use of Google Analytics, cookies will be set in your browser that identify you when you visit our website again and allow us to distinguish between visitors. Because the privacy of our users is important to us, this data is pseudonymized, meaning that we cannot assign it to specific individuals.
We have activated the "IP anonymization" feature on this website. This shortens your IP address before it is transmitted to the USA and can no longer be assigned to a specific person.
We have entered into a data processing agreement with Google, in which Google undertakes to comply with the standard contractual clauses defined by the European Commission.
Data processing is carried out on the basis of the legal provisions of § 96 para. 3 of the TKG (Telecommunications Act) and Article 6 para. 1 letter a (consent) of the GDPR.
You can find Google's terms of service and further information on data protection at the following links: https://www.google.com/analytics/terms/de.html and https://policies.google.com/privacy
Comments
If you comment on a contribution on this website, your comment, your name, your email address, and your IP address will be stored.
Before your comment is published, we check it for legal violations such as insults or racist or incitement to hatred. The stored data is necessary in order to be able to take action against such authors if necessary. The data is deleted as soon as the corresponding contribution is removed from the website.
Data processing is carried out on the basis of Article 6 para. 1 letter a (consent) of the GDPR.
Information about our Facebook page
We operate a Facebook page, which can be accessed at https://www.facebook.com/allandequal. This is a service of the company Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
We would like to point out that, with the help of the Facebook Insights function, which Meta provides to us free of charge as an indispensable part of the user agreement, anonymized statistical data relating to the users of these pages is transmitted to us. This data is collected using cookies, each of which contains a unique user code that is valid for two years.
Meta agrees, in this context, to assume primary responsibility in accordance with the GDPR for the processing of the Insights data and to fulfill all obligations under the GDPR with respect to this data.
The data transmitted to us by Meta is anonymized, so that it is not possible for us to draw conclusions about the identity of individual users. We only use this data to evaluate the reach of our Facebook page. The legal basis for this processing is Article 6 para. 1 letter f (legitimate interests) of the GDPR. Further information on Facebook Insights: https://de-de.facebook.com/help/pages/insights
Information about our Instagram page
We operate an Instagram page, which can be accessed at https://www.instagram.com/allandequal. This is a service provided by the company Meta Platforms Ireland Limited, located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
We would like to point out that, through the Instagram Insights feature, which Meta provides to us free of charge as an integral part of the user agreement, anonymized statistical data regarding the users of these pages is transmitted to us. This data is collected using cookies, each of which contains a unique user code that is active for two years.
Meta agrees, in this context, to assume primary responsibility under the GDPR for the processing of the Insights data and to fulfill all obligations under the GDPR with respect to this data.
The legal basis for this processing is Article 6(1)(f) (legitimate interests) of the GDPR. The legitimate interest is the identification of target groups that are interested in the content on our page. More information: https://help.instagram.com/1533933820244654
Information about our TikTok presence
We operate a TikTok profile, a service provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. When you visit our TikTok profile, TikTok collects personal data in accordance with the TikTok Privacy Policy: https://www.tiktok.com/legal/privacy-policy-eea
The legal basis for this processing is Article 6(1)(f) (legitimate interests) of the GDPR. The legitimate interest is the dissemination of our content and communication with our target audience.
Data Storage
For accounting purposes, we store the following data from our customers: name, address, telephone number, email address, and VAT ID. This data is not shared, except for transmission to our tax advisor for accounting purposes and to fulfill our tax obligations.
The data you provide is required for the performance of the contract or for the execution of pre-contractual measures. Without this data, we cannot enter into and fulfill the contract with you.
All data from a contractual relationship is stored until the end of the statutory retention period (7 years).
The aforementioned data is stored on encrypted local computer systems protected by passwords and physical access controls, as well as on encrypted cloud solutions from Google (Google Workspace, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) that are also protected by passwords. The data is stored within the EU. We have a data processing agreement in place with Google.
Data processing is based on Article 6(1)(c) (legal regulations) and Article 6(1)(b) (necessary for contract performance) of the GDPR.
Your Rights
You generally have the rights to access, rectification, erasure, restriction of processing, data portability, withdrawal of consent, and objection. Corresponding requests can be sent to the email address iks@iks.haus.
If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can file a complaint with the supervisory authority. In Austria, this is the Data Protection Authority (https://www.dsb.gv.at).
You can reach us at the following contact details:
iks.haus, FlexCo
Mariahilfer Straße 49/1/15
1060 Vienna, Austria
iks@iks.haus
Data Processing in the iks.haus APP
Usage Statistics (PostHog)
In the iks.haus APP, we use the PostHog analytics tool from the provider PostHog Inc. The hosting is exclusively on servers in the European Union (EU region). A data processing agreement has been concluded with the provider in accordance with Article 28 of the GDPR.
The collection of usage statistics only takes place if you activate it via the switch: „Anonymous Usage Statistics“ in the settings of the APP. The legal basis is your consent according to Article 6(1)(a) of the GDPR. Without your consent, no analysis data is collected, and no identifiers are stored on your device for analysis purposes.
When statistics are enabled, we process: a randomly generated, anonymous device identifier, the app version, the selected language, the device type and operating system version, as well as usage events such as articles opened, time spent, and features used. No names, email addresses, or other directly personal data are transmitted. You can revoke your consent at any time in the app settings. The data collection will end immediately upon revocation.
Push Notifications
You will only receive push notifications if you explicitly enable them in the app settings (opt-in). The legal basis for this is your consent according to Article 6(1)(a) of the GDPR. When enabled, a technical device token is generated and processed via the Expo services (Expo, Inc., USA), Google Firebase Cloud Messaging (Android), or the Apple Push Notification Service (iOS). This may involve data transfer to the USA, which is based on the EU-US Data Privacy Framework or standard contractual clauses according to Article 46 of the GDPR.
You can disable push notifications at any time in the app settings or in the system settings of your device. In this case, the device token will be deactivated.
Embedded Content from Third-Party Providers (Spotify)
Articles in the app and on the website may contain embedded players from the Spotify service (Spotify AB, Sweden). When viewing an article with an embedded player, a connection is established to Spotify's servers. In this process, Spotify receives your IP address and technical device data. The legal basis for this is our legitimate interest in displaying our audio and podcast content according to Article 6(1)(f) of the GDPR. You can find more information in Spotify's privacy policy at www.spotify.com/at/legal/privacy-policy.
Local Storage on Your Device
Saved articles (bookmarks), reading status, search history, language settings, and consent status are stored exclusively locally on your device and are not transmitted to us. You can delete this data in the app settings or completely remove it by uninstalling the app.
iks.haus App for iOS and Android
This privacy policy also applies to the mobile application "iks.haus" (available on the Apple App Store and Google Play). The responsible party is the iks.haus FlexCo mentioned above. The app can be used without an account and without registration.
Retrieval of content
When loading articles, the app connects to our server (iks.haus). Your IP address is processed for technical reasons; the sections "Web hosting with easyname" and "Server Logs" of this privacy statement apply. The legal basis for this is our legitimate interest in providing the content (Article 6(1)(f) GDPR).
Push notifications (only with consent)
Push notifications are disabled by default and remain so. Only when you enable them in the app settings will a device token (Expo Push Token) be stored on our server, along with the platform (iOS/Android), the selected app language, and the app version—solely for the purpose of delivering notifications to you. Legal basis: Your consent (Article 6(1)(a) GDPR). You can revoke your consent at any time in the app settings; the token will then be immediately deleted from our server. For delivery, the services Expo (Expo, Inc., USA; EU Standard Contractual Clauses) as well as Apple Push Notification Service and Google Firebase Cloud Messaging are used.
Usage statistics (only with consent, enabled by default)
The app includes an optional, default disabled anonymous usage statistics feature (PostHog, EU-based hosting). Unless you actively enable the statistics in the settings, no statistical data will be collected, and no identifiers will be stored. When enabled, anonymous events (e.g., button clicks, screen views) will be recorded. B. "Article opened") without processing any names, email addresses, or profile information. Legal basis: consent (Article 6(1)(a) GDPR), which can be withdrawn at any time.
Local Storage on the Device
The checklist (including articles saved offline), language selection, reading status, and settings are stored exclusively locally on your device and are not transmitted to us. These data are deleted when the app is uninstalled.
Embedded Spotify content within the app
Individual articles contain embedded Spotify players. When opening such an article, a connection is established with Spotify AB (Sweden); the section "Embedded Spotify Content" of this statement, as well as Spotify's privacy policy, apply.
External Links and Sponsor Cards
External links (e.g., tickets, social media) open in your device's browser. Sponsor cards in the feed are served from our own server — without advertising networks, without third-party tracking, and without cross-app tracking.
Your Rights
The rights of data subjects described in this statement (access, deletion, revocation, etc.) apply unchanged to the app. Contact: [[i1]]servus@iks.haus[[/i1]]. a.) unchanged. Contact: servus@iks.haus.
Web app and push notifications
You can install iks.haus as a web app on your device. So that pages load faster and articles you have already read are available without an internet connection, your browser stores recently opened pages, images and fonts locally on your device (service worker cache). Your browser also remembers individual settings locally, such as the dyslexia-friendly font. This data does not leave your device; you can delete it at any time in your browser settings.
Push notifications
If you allow notifications (via the bell in the sidebar or when you first start the installed web app), we store on our server the address your browser assigns for push messages, the associated technical keys, the language of the page and the date of registration. We use this data solely to inform you about new articles. The messages are delivered in encrypted form via the push service of your browser or device manufacturer (e.g. Google, Apple, Mozilla or Microsoft); these providers cannot read the content of the messages. We do not use an external push provider.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by turning off the bell or disabling notifications in the settings of your browser or device. We automatically delete registrations that have been cancelled or can no longer be reached.
App discounts for events
When you collect a discount for an event in the installed iks.haus web app, the app creates a random identifier that is stored only on your device. On our server we store only an irreversible hash of it, together with the event, the discount code assigned and the time it was issued. This ensures that each app receives only one discount per event. We do not collect your name, email address or any other contact details for this. You redeem the code with the organiser (in their ticket shop or at the entrance); what the organiser processes in doing so is governed by their privacy policy. The legal basis is the provision of the discount you requested (Art. 6(1)(b) GDPR). The data is deleted automatically 30 days after the event.