Hasene

Data Protection

Protecting your personal data is important to us. This data protection statement informs you about the scope and purposes for which your personal data is processed when you visit our website ( hasene.at ) and contact us. Processing activities are carried out in accordance with the current provisions of the European General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

  1. Responsible (Verantwortlicher)

Organization responsible for data processing:

Hasene Hilfs- und Sozialverein
Gudrunstr. 115/1
1100 Vienna – Austria
Phone: +43 1 8901307
Email: info@hasene.at

  1. Website Visits and Server Logs

When you visit our website, your browser automatically transmits certain data to our server for technical reasons, and this data is temporarily stored in a log file. This may specifically include your IP address, the date and time of access, the page you visited, the browser you used, and the type of operating system you are using.

The processing of this data is based on our legitimate interest in ensuring the technical smooth operation, security and stability of the website (GDP Article 6/1-f). The data will be deleted when it is no longer necessary for this purpose.

  1. Cookies

Technically necessary cookies are used to ensure the technical operation and basic functions of our website. The legal basis for the use of these cookies is our legitimate interest in the operation of the website (GDVO Article 6/1-f).

Cookies that are not technically necessary (e.g., for analysis or marketing purposes) are only used with your explicit consent (GDP Article 6/1-a). You can withdraw your consent at any time for the future.

You can block or restrict the use of cookies through your browser settings. However, please note that in this case you may not be able to fully utilize some functions of our website.

  1. Google Analytics and Google Ads

Google Analytics: With your consent, this website uses Google Analytics, a web analytics service from Google LLC.

Google Ads: We display ads on the Google network to increase our reach and make us more discoverable. If you consent, Google Ads cookies will track whether you arrived at this website via a Google ad. This allows us to measure ad effectiveness and work more efficiently.

The authorized service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Scope of processing
Google Analytics uses cookies that allow us to analyze your use of our website. Information about your use of this website collected via cookies is, as a rule, transmitted to and stored on a Google server in the USA.

We use the "anonymizeIP" function (IP masking) on ​​our website: due to the activation of IP anonymization, your IP address is shortened by Google in the member states of the European Union or other states party to the European Economic Area Agreement. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.

During your visit, the following data will be collected, among others:

  • The pages you visited and your "click path",

  • your user behavior (e.g., clicks, time spent on the site, bounce rates),

  • Your approximate location (region),

  • Your IP address (in abbreviated form),

  • Technical information about your browser and the devices you are using (e.g., language settings, screen resolution),

  • your internet provider,

  • The referring URL (which website/advertisement you came from to reach this site).

Buyer
The data recipient is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We have entered into a data processing agreement (Auftragsverarbeitungsvertrag) with Google. Google LLC, based in California, USA, and, where applicable, US authorities may access the data stored by Google.

Transfer to third countries
The possibility of the data being transferred to the US cannot be ruled out.

Storage time
Data collected and associated with cookies will be automatically deleted after a maximum of 14 months.

You can prevent the transmission and processing of data (including your IP address) about your use of the website, generated by cookies, to Google by: not consenting to the placement of cookies or by installing a browser add-on that disables Google Analytics.

You can also prevent cookies from being stored through the relevant setting in your browser software. If you configure your browser to reject all cookies, functionality on this and other websites may be restricted.

Legal basis and possibility of revocation
We need your consent for this data processing (GDP Article 6/1-a). You can withdraw your consent at any time for the future by opening your cookie settings and changing your preference.

For detailed information about Google Analytics' terms of use and data protection at Google, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/ .

  1. Social Media

With your consent, Facebook and Instagram functions can be used on this website.

Scope of processing
During your visit, the following data will be collected, among others:

  • your user behavior (e.g., clicks, time spent on the site, bounce rates),

  • your location,

  • Your IP address,

  • Technical information about your browser and the devices you are using (e.g., language settings, screen resolution),

  • your internet provider.

Purposes of processing
With the integration of Facebook and Instagram functions, content can be displayed in the social media feed on our website.

Buyer
The data recipient is Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Meta Platforms, Inc. and, as required, US authorities may have access to the data.

Transfer to third countries
The possibility of the data being transferred to the US cannot be ruled out.

Shared responsibility
According to the current case law of the European Court of Justice, the operator of a media asset and the relevant social media provider have joint responsibility within the meaning of Article 26 of the GDPR for the processing of your data. We have taken the necessary measures to meet this joint responsibility, to the extent that the relevant provider has allowed us.

At this point, we would like to point out that the primary processing of your data takes place at the relevant social media provider, that we receive this data – if we receive it – only in an anonymous form, and therefore, primary responsibility under the GDPR lies with the social media provider. For this reason, we recommend that you exercise your data rights directly with the relevant social media provider. You can find links to the providers' data protection information in the "Legal basis and possibility of withdrawal" section below. You can also exercise your data rights against us within the framework of our joint responsibility; in this case, we will contact the relevant social media provider immediately.

Storage time
Data collected and associated with cookies is stored for as long as it is necessary for achieving the purpose. You can prevent the collection and processing of this data by not giving your consent.

Legal basis and possibility of revocation
We need your consent for this data processing (GDP Article 6/1-a). You can withdraw your consent at any time for the future by opening your cookie settings and changing your preference.

For detailed information about data protection on Facebook: https://de-de.facebook.com/about/privacy/previous
For detailed information about data protection on Instagram: https://privacycenter.instagram.com/policy/

  1. Meta (Meta Pixel)

If you consent to and use Meta (e.g., Facebook, Instagram, or another Meta product), Meta Pixel will be used as a tracking method on this website. Meta's European branch is headquartered in Ireland (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

Transfer to third countries
The possibility of the data being transferred to the US cannot be ruled out.

Scope of processing
During your visit, the following data will be collected, among others:

  • The pages you visited and your "click path",

  • Your approximate location (region),

  • Your IP address (in abbreviated form),

  • Technical information about your browser and the devices you are using (e.g., language settings, screen resolution),

  • Referring URL (which website/advertisement you came from to reach this site),

  • Pixel-specific data – for example, Pixel ID and Facebook cookie,

  • Button click data – buttons clicked by visitors, the labels of those buttons, and the pages opened as a result of the clicks.

Purposes of processing
Meta Pixel is used to analyze the performance of social media ads.

Buyer
Meta Pixel is linked to Google Tag Manager so that it can be used for evaluation within Google Analytics.

Storage time
Facebook's cookie retention period is generally 90 days. You can reduce this retention period yourself through your browser settings. You can prevent the collection and processing of data (including your IP address) generated by cookies and relating to your use of the website by not consenting to the placement of cookies. You can also prevent the storage of cookies through the relevant setting in your browser software. If you configure your browser to reject all cookies, functionality on this and other websites may be restricted.

Legal basis and possibility of revocation
We need your consent for this data processing (GDP Article 6/1-a). You can withdraw your consent at any time for the future by opening your cookie settings and changing your preference.

Detailed information about data protection at Meta: https://www.facebook.com/policies/cookies/

  1. Google Maps

With your consent, Google Maps functions may be used on this website.

Scope of processing
During your visit, the following data will be collected, among others:

  • your user behavior (e.g., clicks, time spent on the site, bounce rates),

  • your location,

  • Your IP address,

  • Technical information about your browser and the devices you are using (e.g., language settings, screen resolution),

  • your internet provider.

Purposes of processing
By integrating Google Maps functions, geographical maps can be displayed on our website.

Buyer
The data recipient is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC, based in California, USA, and, where applicable, US authorities may access data stored at Google.

Transfer to third countries
The possibility of the data being transferred to the US cannot be ruled out.

Storage time
Data collected and associated with cookies is stored, in part, until it is no longer needed. You can prevent the collection and processing of this data by not giving your consent.

Legal basis and possibility of revocation
We need your consent for this data processing (GDP Article 6/1-a). You can withdraw your consent at any time for the future by opening your cookie settings and changing your preference.

For detailed information about data protection at Google: https://policies.google.com/

  1. YouTube Videos

With your consent, YouTube functions can be used on this website.

Scope of processing
During your visit, the following data will be collected, among others:

  • your user behavior (e.g., clicks, time spent on the site, bounce rates),

  • your location,

  • Your IP address,

  • Technical information about your browser and the devices you are using (e.g., language settings, screen resolution),

  • your internet provider.

Purposes of processing
With the integration of YouTube features, videos can be viewed on our website.

Buyer
The data recipient is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC, based in California, USA, and, where applicable, US authorities may access data stored at Google.

Transfer to third countries
The possibility of the data being transferred to the US cannot be ruled out.

Storage time
Data collected and associated with cookies is stored, in part, until it is no longer needed. You can prevent the collection and processing of this data by not giving your consent.

Legal basis and possibility of revocation
We need your consent for this data processing (GDP Article 6/1-a). You can withdraw your consent at any time for the future by opening your cookie settings and changing your preference.

For detailed information about data protection at Google: https://policies.google.com/

  1. If you contact us

When you contact us via contact form, email or telephone, the information you provide (e.g. your name, contact details and the content of your request) is processed to process your request and answer any further questions.

The legal basis for this processing is our legitimate interest in responding to your request (GDP Article 6/1-f). Your data will be stored for as long as it is necessary for the relevant purpose and as long as legal retention obligations continue.

  1. Donation Data

When you donate to us, your personal data (such as your name, contact information, donation amount, and payment details) is processed to ensure that your donation is processed smoothly, legal and tax obligations are met, and the association's public benefit objectives are achieved.

The legal basis for this processing is the performance of a contract (GDP Article 6/1-b), the fulfillment of legal obligations (GDP Article 6/1-c), and our legitimate interest in fundraising and achieving our public benefit purposes (GDP Article 6/1-f). Donation data is stored for the duration of legal retention and documentation obligations.

  1. Payment Service Providers

Our website offers, among other things, the PayPal payment service. The provider of this payment service is PayPal (Europe) S.à rl et Cie, SCA, 22–24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").

If you choose the PayPal payment option, the payment information you provide will be transferred to PayPal.

Your data is transferred to PayPal based on your consent (GDP Article 6/1-a) and processing activities necessary for the performance of the contract (GDP Article 6/1-b). You can withdraw your consent to data processing activities at any time. Withdrawal does not affect the lawfulness of data processing activities carried out up to that point.

  1. Data Transfer

Your personal data will not be transferred to third parties; however, it may be transferred to service providers (processors) or legally authorized authorities who act in accordance with our instructions and undertake to comply with data protection regulations.

  1. Your Rights Regarding Your Personal Data

You have the following rights regarding your personal data:

  • Access to information (what data is stored about you),

  • Correction, completion, or deletion,

  • Processing restrictions and data portability,

  • Withdrawal of consent and objection to processing under specific conditions.

The right to delete files may be limited to the extent necessary to meet legal retention periods and/or protect our rights.

  1. Visitor statistics without cookies

    We use open-source Umami software to understand how our website is used. Umami runs on our own server located in the EU; data is not shared with third parties.

    Umami does not use cookies and does not store anything on your device for measurement. The information recorded includes: the page visited, the referring website, browser, operating system, device type, screen size, language, country determined from the IP address, and time. Your IP address is not stored. Access information in addresses (e.g., from payment or confirmation links) is deleted before being sent; pages containing passwords or confirmation links are not measured. After a completed donation, only the "donation completed" event is recorded – without the amount, name, or any other personal information.

    The legal basis is our legitimate interest in improving our service (GDKT/DGVO Article 6 Paragraph 1 Subparagraph f).

    You can object to the measurement at any time: using the "Turn off visitor statistics" button at the bottom of the page. In this case, only your objection will be saved locally in your browser. If "Do Not Track" is enabled in your browser, no measurement will be taken.

    Error log

    When a technical error occurs on our website, we store an error report on our server (software: Bugsink). The report includes the technical cause of the error, the address accessed without credentials, and browser and system information. Form entries, cookies, and your IP address are not transmitted. The legal basis is our legitimate interest in a secure and functioning service (GDCT/GDVO Article 6 Paragraph 1 Clause f).

  2. Right to Complaint

    If you believe that the processing of your data violates data protection legislation, you have the right to lodge a complaint with the supervisory authority.

    Österreichische Datenschutzbehörde
    Barichgasse 40–42, 1030 Wien
    dsb@dsb.gv.at

  3. Topicality

This data protection statement may be updated from time to time to comply with current legal conditions or changes to our services.

Necessary

These cookies are required to run the website and cannot be turned off.

  • Session cookie (language, basket, login)
  • CSRF cookie (protects forms)
  • hasene_consent (stores this choice for 12 months)

Videos, maps and audio from third parties (such as YouTube, Vimeo, Google Maps, OpenStreetMap, SoundCloud, Spotify). Loading them sends data, including your IP address, to these providers.

Umami measures page views without cookies, based on our legitimate interest (Art. 6(1)(f) GDPR). If you turn the measurement off, this is stored in your browser.