The controller of this website is:

Österreichisch-Amerikanische Gesellschaft (Austro-American Society)
Mag. Philipp Bodzenta
Stallburggasse 2
1010 Vienna

Austria
Phone: +43-1-5123982
E-mail: office@oag.at

The protection of your personal data is very important to us. Therefore, we process your data exclusively on the basis of the legal regulations (GDPR, DSG, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing within our website.

Purposes of Data Processing
Your personal data will be processed for the following purposes:

• to provide, improve, and develop this website;
  • to create usage statistics;
  • to detect, prevent, and investigate attacks on our website;
  • to respond to your requests;
  • to process your membership admission request

Legal Basis of Processing
The legal basis for the processing of your personal data is a legitimate interest (in accordance with Article 6 (1)(f) of the EU General Data Protection Regulation), which is to achieve the purposes set out above.
Furthermore, your data may be used to fulfill a contract or to carry out pre-contractual measures (membership) and to fulfill legal obligations, such as accounting. If necessary, we will ask you for explicit consent.

Contact
If you contact us via the form on the website or by e-mail, your data will be stored for six months to process the request and in case of follow-up questions. We will not share this information without your consent.

Membership Admission Request Form
In order to process your admission request, we need the data you provide in the form as a pre-contractual measure. If membership is established, you will receive additional information about data processing and your rights. If membership is not granted, your data will be deleted after six months.

Cookies
Our website uses so-called session cookies. These are small text files that are stored on your device using the browser. They do not cause any harm, contain no personal information (such as IP addresses), and are automatically deleted after your visit to the site. We use cookies to make our website more user-friendly.

Hosting and Log Files
To operate this website, we need hosting services such as infrastructure and platform services, computing capacity, storage, database services, security, and maintenance services. We, or our hosting provider, process the data of our website visitors—such as contact data, content data, usage data, meta and communication data—on the basis of our legitimate interest in providing a satisfactory and secure website.
For the same reason, we, or our hosting provider, process so-called server log files (e.g. website requests, files accessed, time of access, data volume, browser and operating system information, referring websites, IP address, user’s provider). Log files are stored for security reasons (e.g. misuse or fraud detection) for a maximum of 12 months. If necessary (e.g. for incident handling), data may be stored longer. We have entered into a data processing agreement with our hosting provider.

Facebook and Instagram
We operate corporate pages (“fan pages”) on the platforms Facebook and Instagram, provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. In accordance with the GDPR, we are joint controllers with Meta for the processing of personal data.
Meta ensures compliance with European data protection law through the use of standard contractual clauses.
Please note that when you visit our fan pages, Meta collects a wide range of data, including your IP address, device and browser information, user origin, and interaction behavior. This data may be transferred to countries outside the European Union.
Facebook and Instagram users have either consented to this data processing or it is part of their user agreement with Meta.
We operate our fan pages for marketing and communication purposes based on our legitimate interest (Art. 6(1)(f) GDPR).
Further information on how Meta processes personal data can be found here:
https://www.facebook.com/about/privacy

LinkedIn
We operate a company profile on LinkedIn, a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
When you follow a link to LinkedIn or visit our company profile, your data will be processed by LinkedIn as the data controller, in accordance with its privacy policy. If you interact with our profile – for example, by commenting, liking posts, or following the page – your data will also be processed by us within the scope of the platform’s features, and may be publicly visible depending on your privacy settings.
Please note that interactions with public company pages can be visible to others and that such data processing is technically necessary for LinkedIn’s functionality.
For more information on how LinkedIn handles personal data and your options to opt out, please see:
https://www.linkedin.com/legal/privacy-policy
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Your Rights
You have the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object, and the right to withdraw consent. If you believe that the processing of your data violates data protection law, or if you believe that your data protection rights have been violated in any other way, you can file a complaint with the competent supervisory authority. In Austria, this is the Data Protection Authority.