Draft for review. This document was prepared as a starting point and is not yet legally binding. Inspirit and its legal advisor must review it and complete every item marked [PENDING REVIEW] before the site goes live.
Draft · 2026-06-01
The controller responsible for processing personal data on this website is:
Inspirit Center of Burgenland, Römerstrasse 27A / Friedrichshof, 2424 Zurndorf, Austria hello@weareinspirit.com [PENDING REVIEW: registered legal name, company form and confirmed address (see Imprint).]
[PENDING REVIEW: a Data Protection Officer is generally not mandatory for an organisation of this size, but confirm this assessment. If one is appointed, list their contact details here.]
This policy explains what personal data we process when you visit weareinspirit.com or contact us, why we process it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
Contact form. When you use our contact form we process the information you provide: your name, your role and company, your email address, what brings you to us, how you found us or who referred you, your preferred way to be contacted, and the content of your message.
Direct contact. If you email or call us, we process the contact details and message content you choose to share.
Server and access data. When you load the site, our hosting provider automatically processes technical data such as your IP address, browser type, and the time of the request, for the purpose of delivering the site securely. [PENDING REVIEW: confirm the host's logging and retention with the provider.]
We process contact-form and direct-contact data to respond to your enquiry and to take steps at your request prior to entering into a possible engagement (Art. 6(1)(b) GDPR), and on the basis of our legitimate interest in answering enquiries addressed to us (Art. 6(1)(f) GDPR).
We process server/access data on the basis of our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR).
Hosting. The website is hosted by Vercel Inc. (USA), which processes the technical access data described above on our behalf as a processor. Data may be transferred to the United States; such transfers are covered by appropriate safeguards (e.g. EU Standard Contractual Clauses / the EU-US Data Privacy Framework). [PENDING REVIEW: confirm the current hosting provider and its data-processing agreement and transfer mechanism.]
Enquiry handling. Messages sent through the contact form are delivered to our hello@weareinspirit.com inbox and processed by our email provider. [PENDING REVIEW: name the email/inbox provider and confirm a data-processing agreement is in place. If submissions are also stored in a database or CRM, disclose that provider here.]
Some pages embed video hosted by Vimeo (Vimeo.com, Inc.). When a video loads or plays, Vimeo may receive technical data such as your IP address and may set cookies. We have no control over this collection. See Vimeo's privacy policy at https://vimeo.com/privacy. [PENDING REVIEW: confirm whether videos load automatically or only on interaction, and whether a consent step is required.]
This site does not use advertising or analytics tracking cookies. It may store small technical values in your browser (for example, your language preference) that are necessary for the site to function. These are not used to track you across other websites.
[PENDING REVIEW: if any analytics, marketing pixels or third-party tracking are added later, a cookie-consent banner and an updated cookie section will be required.]
We keep enquiry data for as long as needed to handle your request and for any follow-up, and thereafter only as long as statutory retention obligations require, after which it is deleted. [PENDING REVIEW: set concrete retention periods with legal advice, e.g. accounting records under Austrian law.]
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
To exercise these rights, contact us at hello@weareinspirit.com.
You also have the right to lodge a complaint with a supervisory authority. The competent authority in Austria is the Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at.
Where service providers process data outside the EU/EEA (for example, in the United States), we rely on the safeguards permitted by the GDPR, such as EU Standard Contractual Clauses or an adequacy framework. [PENDING REVIEW: confirm per provider.]
We may update this policy to reflect changes to the site or to legal requirements. The current version is always available on this page.