Privacy Policy according to Art 13 of the GDPR

Last update: 19. March 2025

Thank you for your interest in the information on our website!

With the help of this Privacy Policy we would like to inform the users of our website about the type, scope and purpose of the personal data processed. Personal data in this context are all information with which you can be personally identified as a user of our website, including your IP address and information that is stored in cookies.

In a general section of this Privacy Policy, we provide you with information on data protection, which generally applies to our processing of data, including data collection on our website. In particular, you as a data subject will be informed about the rights to which you are entitled.

The terms used in our Privacy Policy and our data protection practice are based on the provisions of the EU General Data Protection Regulation („GDPR“) and other relevant national legal provisions.

Controller according to the GDPR

Sandra Melzner

Hernalser Gürtel 47/19

1170 Vienna
Austria

e: info@firegeocascadenetwork.com

Data collection on our website

On the one hand, personal data is collected from you when you expressly communicate such data to us, on the other hand, data, especially technical data, is automatically collected when you visit our website. Some of this data is collected to ensure that our website functions without errors. Other data may be used for analysis. However, you can use our website without a need to provide personal information.

You can read more about this and about the technologies we use on our website here:

Technologies on our website

Brevo

Provider: Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Deutschland.
Purpose: Newsletter
Category: Marketing
Recipients: Global
Data processed: User data, user behaviour
Data subjects: Users
Technology: Cookies
Legal basis: Consent, legitimate interest
Website: www.brevo.com
Further information: https://www.brevo.com/de/legal/privacypolicy

On our website we use Brevo to send newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany („SendInBlue“). Brevo is a service that allows you to organise and analyse the delivery of newsletters. The information you enter to subscribe to the newsletter (e.g. e-mail address) is stored on Brevo’s servers.

Our newsletters sent with Brevo enable us to analyse the behaviour of the newsletter recipients. Among other things, we can analyse how many recipients opened the newsletter message and how often which link in the newsletter was clicked. All links in the e-mail are so-called tracking links that can be used to count your clicks.

If you don’t want Brevo to analyze your newsletter, you must unsubscribe. To do this, we provide a link in every newsletter message. Furthermore, you can also revoke your consent at any time with future effect by sending an e-mail to the address given in our imprint.

On our website we offer the possibility to register for a newsletter. Our newsletter contains information about the network and events.

The consent to our newsletter is given in a so-called double opt-in procedure. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that nobody can register with a foreign e-mail address. The registrations for the newsletter are logged in accordance with Art 6 paragraph 1 lit. f GDPR on the basis of our legitimate interest in verifiability. This includes the storage of the time of registration and confirmation as well as the IP address. Changes to your stored data are also logged.

The newsletter is sent on the basis of your consent in accordance with Art. 6 paragraph 1 lit. a GDPR or, if consent is not required, on the basis of our legitimate interest in direct marketing for similar products and services in accordance with Art. 6 paragraph 1 lit. f GDPR. In the context of sending the newsletter, we also process your reaction behaviour on the basis of our legitimate interest in accordance with Art. 6 paragraph 1 lit. f GDPR. A newsletter will only be sent without your consent if we have already received your email address in connection with another order, the newsletter relates to similar products or services of ours and you had the opportunity at the time of collection of your contact details to prohibit their use for marketing purposes and did not object to this.

You can unsubscribe from receiving our newsletter at any time by withdrawing your consent with effect for the future in accordance with Art. 7 paragraph 3 GDPR or by submitting an objection to the processing. You will find a relevant option in the respective newsletter itself or simply contact us by email. In the event of revocation or objection, we may store your e-mail address for up to three years on the basis of our legitimate interests in accordance with Art. 6 paragraph 1 lit. f GDPR before we delete it in order to be able to prove that you have previously given your consent.

Newsletter Tracking

We would like to point out that we evaluate your user behavior when the newsletter is sent. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which we store. For the evaluations we link the mentioned data and the web beacons with your email address. Links received in the newsletter also contain these tracking IDs. The legal basis is Art. 6 paragraph 1 lit. f GDPR.

The information is stored for as long as you have subscribed to the newsletter. After unsubscribing, we only save the data purely statistically and anonymously.

Such tracking is not possible if you have deactivated the display of images by default in your email program. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you display the images manually, the above-mentioned tracking takes place.

Server Log Files

For technical reasons, particularly to ensure a functioning and secure website, we process the technically necessary data about accesses to our website in so-called server log files which your browser automatically sends to us.

The access data we process includes:

The name of the website you are accessing
The browser type (including version) you use
The operating system you use
The site you visited before accessing our site (referrer URL)
The time of your server request
The amount of data transferred
The host name of computer (IP address) you are using to access the site

This data cannot be traced back to any natural person and is used solely to perform statistical analyses and to operate and improve our website while also optimising our site and keeping it secure. This data is sent exclusively to our website operator. The data is neither connected nor aggregated with other data sources. In case of suspicion of unlawful use of our website, we reserve the right to examine the data retroactively. This data processing takes place on the legal grounds of our legitimate interest in maintaining a technically fault-free and optimal website.

The access data is deleted within a short period of time after serving its purpose (usually within a few days) unless further storage is required for evidence purposes. In such cases, the data is stored until the incident is definitively resolved.

SSL Encryption

Within your visit to our website, we use the widespread SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser. We use this encryption procedure on the basis of our justified interest in the use of suitable encryption techniques.

We also make use of suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments and kept state-of-the-art.

General information on data protection

The following provisions in its principles apply not only to the data collection on our website, but also in general to other processing of personal data.

Personal data

Personal data is information that can be assigned to you individually. Examples include your name, email address and organization. Information such as the number of users who visit a website is not personal data because it is not assigned to a person.

Legal basis for the processing of personal data

Unless more specific information is provided in this Privacy Policy (e.g. in the case of the technologies used), we may process personal data from you on the basis of the following legal principles:

consent in accordance with Art. 6 paragraph 1 lit. a of the GDPR – The data subject has given his or her consent to the processing of his or her personal data for one or more specific purposes.
Fulfillment of a contract and pre-contractual measures pursuant to Art. 6 paragraph 1 lit. b of the GDPR – Processing is necessary for the fulfillment of a contract to which the data subject is a party or for the implementation of pre-contractual measures.
Legal obligation pursuant to Art. 6 paragraph 1 lit. c of the GDPR – Processing is necessary for the performance of a legal obligation.
Protection of vital interests pursuant to Art. 6 paragraph 1 lit. d of the GDPR – Processing is necessary to protect the vital interests of the data subject or of another natural person.
Reasonable interests pursuant to Art. 6 paragraph 1 lit. f of the GDPR – The processing is necessary to protect the legitimate interests of the controller or of a third party unless the interests or fundamental rights and freedoms of the data subject prevail.

Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our home country.

Transfer of personal data

Your personal data will not be transferred to third parties for purposes other than those listed in this Privacy Policy.

We will only transfer your personal data to third parties if:

you have given your express consent in accordance with Art. 6 paragraph 1 lit. a of the GDPR,
the transfer pursuant to Art. 6 paragraph 1 lit. f of the GDPR is necessary to safeguard reasonable interests, as well as to assert, exercise or defend legal claims and there is no reason to assume that you have a prevailing interest worthy of protection by not disclosing your data,
there is a legal obligation to transfer the data in accordance with Art. 6 paragraph 1 lit. c of the GDPR, as well as this is legally permissible and / or
it is required according to Art. 6 paragraph 1 lit. b of the GDPR for the processing of contractual relationships with you.

Cooperation with processors

We carefully select our service providers who process personal data on our behalf. If we commission third parties to process personal data on the basis of a data processing agreement, this is done in accordance with Art. 28 of the GDPR.

Transfer outside EEA

No personal data is transferred outside the EEA.

Storage period

If no explicit storage period is specified during the collection of data (e.g. in the context of a declaration of consent), we are obliged to delete personal data in accordance with Art. 5 paragraph 1 lit. e of the GDPR as soon as the purpose for processing has been fulfilled. In this context, we would like to point out that legal storage obligations represent a legitimate purpose for the processing of personal data.

Personal data will be stored and retained by us in principle until the termination of a business relationship or until the expiry of any applicable guarantee, warranty or limitation periods, in addition, until the end of any legal disputes in which the data is required as evidence, or in any event until the expiry of the third year following the last contact with a business partner.

Rights of data subjects

Data subject have the right:

in accordance with Art. 15 of the GDPR, to request information about your personal data processed by us. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned duration of storage, the existence of a right of rectification, deletion, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, where applicable, meaningful information on the details thereof;
in accordance with Art. 16 of the GDPR, to demand without delay the correction of incorrect or incomplete personal data stored by us;
in accordance with Art. 17 of the GDPR, to demand the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
in accordance with Art. 18 of the GDPR, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defense of legal claims or you have lodged an objection to the processing in accordance with Art. 21 of the GDPR;
in accordance with Art. 20 of the GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
in accordance with Art. 21 of the GDPR, if your personal data are processed on the basis of our legitimate interest, to object to the processing of your personal data for reasons arising from your specific situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without indicating a specific situation.
in accordance with Art. 7 paragraph 3 of the GDPR, you may at any time revoke your consent to us. As a result, we may no longer continue the data processing based on this consent in the future. Among other things, you have the option of revoking your consent to the use of cookies on our website with effect for the future by calling up our Cookie Settings.
in accordance with Art. 77 of the GDPR to complain to a data protection authority regarding the illegal processing of your data by us. As a rule, you can contact the data protetion authority at your usual place of residence or workplace or at the headquarters of our company.

The responsible data protection authority:

Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Wien, Österreich
Tel.: +43 1 52 152-0, dsb@dsb.gv.at

Assertion of rights of data subjects

You yourself decide on the use of your personal data. Should you therefore wish to exercise one of your above-mentioned rights towards us, you are welcome to contact us by email at info@firegeocascadenetwork.com.

Security of personal data

The security of your personal data is of particular concern to us. Therefore, in accordance with Art. 32 of the GDPR and taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the different probabilities of occurrence and severity of the risk to the rights and freedoms of natural persons, we take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk.

These measures shall include, but not be limited to, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access, input, disclosure, safeguarding of availability and segregation of data relating to them. Furthermore, we have established procedures to ensure that data subjects‘ rights are exercised, data is deleted, and we respond to data threats. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware and software, in accordance with the principle of privacy by design and through data protection-friendly pre-settings in accordance with Art. 25 of the GDPR.

Our understanding of security is also applied to those processors we use.

Actuality of this Privacy Policy

Due to further developments or changes in legal requirements, it may become necessary to adapt this Privacy Policy from time to time. The current Privacy Policy can be found and printed out by you at any time here on this website.

For questions regarding data privacy, you can reach us at info@firegeocascadenetwork.com or at the other contact details stated in this Privacy Policy.

Vienna, on 19. March 2025