The following provisions aim at informing newsletter subscribers about personal data processing in accordance with the requirements of the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021), especially with due regard to the information obligation according to Art 12-14 GDPR, as well as to information on the rights of the parties concerned according to Art 15-22 and Art 34 GDPR.

SIA Social Impact Award gemeinnützige GmbH (hereinafter referred to as either “we” or “Social Impact Award”) made an effort to present the following information precisely, transparently and comprehensively in a clear and easy language.

Application

This statement applies to personal data processed when you subscribe to, receive or unsubscribe from one of our newsletters, wherever you signed up: on our website or, where offered, when registering on one of our platforms or for one of our programs or events.

Definition

The following definition applies to the purposes of this statement:

• “Personal data” refers to all information about a (natural) person who can be identified either directly from the provided data or from the data combined with other information.

Subscribing to our newsletters

Your consent

We send you our newsletters only if you have subscribed to them. We do this on the legal basis of your consent (Art 6 (1) lit a GDPR, § 174 TKG 2021).

You can subscribe in two ways:

• On our website: we send you a confirmation email. You only receive our newsletter after you confirm your subscription with the link in that email (double opt-in). This way we make sure that nobody can subscribe you without your knowledge.
• When registering on one of our platforms or for one of our programs or events: where the registration form offers it, you can subscribe by ticking a separate checkbox. We record your consent together with your registration and add you to the newsletter.

Data we process

• Email address: required, to send you the newsletter.
• First name: to address you personally in the newsletter. Required on our website forms.
• Last name: optional.
• How you heard about the newsletter: optional. We use it to understand which channels bring us new subscribers.
• Proof of your consent: the date and time of your sign-up and, for website sign-ups, of your confirmation and the IP address used. We keep this to be able to prove that you subscribed.

You are not obliged to provide us with your personal data. Nevertheless, we cannot send you our newsletter without your email address.

Measuring opens and clicks

Our newsletters contain a small image and links that let us count how often a newsletter is opened and which links are clicked. We only receive these figures anonymously, as totals for each newsletter. They are not linked to you, and we cannot see whether you opened a newsletter or clicked a link. To deliver the image and links, your email program connects to our email service provider’s servers, which receive your IP address and information about your email program. We use these figures to improve our newsletters, on the legal basis of our legitimate interest in understanding which content is of interest to our readers (Art 6 (1) lit f GDPR).

Unsubscribing

You can unsubscribe at any time with the link at the end of every newsletter, or by writing to privacy@socialimpactaward.net. Unsubscribing withdraws your consent. It does not affect the lawfulness of the processing before the withdrawal. What we keep after you unsubscribe is described under “Saving your personal data”.

Where we store your data

We send our newsletters with Mailjet, a service of Mailjet SAS, 43 rue de Dunkerque, 75010 Paris, France, part of the Sinch group. Mailjet processes your data on our behalf and stores it on servers in the European Union (Germany and Belgium). Access is limited to the people who manage our newsletters.

Mailjet may transfer data within the Sinch group and to its sub-processors, including in the United States. These transfers are based on Standard Contractual Clauses (Art 46 GDPR) and, where the recipient is certified, on the EU-US Data Privacy Framework (Art 45 GDPR), as set out in Sinch’s data processing agreement.

Saving your personal data

We keep your data as long as you are subscribed.

After you unsubscribe, we delete your name and all other data about you within one day. We keep only your email address, together with the dates of your subscription and of your unsubscription, on a suppression list. The suppression list is not an archive, and we don’t use it to contact you. It serves only to make sure that you don’t receive our newsletters again, and to be able to prove that you subscribed and unsubscribed. We do this on the legal basis of our legitimate interest (Art 6 (1) lit f GDPR).

If you also want your email address removed from the suppression list, write to privacy@socialimpactaward.net. Please note that we then can no longer make sure that you don’t receive our newsletters again by mistake.

We may keep aggregated figures, such as the number of subscribers or the opening rate of a newsletter, without time limit. Such statistics no longer identify you and are therefore not personal data.

Safety

Social Impact Award makes the necessary arrangements in compliance with the applicable data protection laws in order to protect the personal data in our possession from loss, misuse, unauthorized access, publication, modification or deletion.

Your rights concerning personal data

You are inter alia entitled to (i) verify if and what personal data about you we process and to receive copies of this data, (ii) to request the revision, the supplementation or the deletion of your personal data, as long as it is false or not in conformity with the law, (iii) to make a request at us to limit your data processing, (iv) under certain circumstances to object to your data processing or to revoke your consent to data processing, whereby a revocation does not affect the legality of the processing prior to the revocation, (v) to request data portability, (vi) to know the identity of third parties to whom your personal data is transmitted and (vii) to lodge a complaint with the Data Protection Authority.

For all requests, write to privacy@socialimpactaward.net.

More information concerning your data

• Our general Privacy Policy statement, including expanded rights and the Data Protection Officer contact information;
• Our Imprint, including contact details.