We take the protection of your personal data very seriously.
This privacy policy informs you what personal data we collect, how we process it and what rights you have.

1. Responsible bodies

Depending on the type of service, different bodies are responsible:

1.1 Trainings, courses & content

Responsible person in accordance with Art. 4 GDPR:

Johannes Kouba, BSc — Critical Knowledge
Goschweg 3
2542 Kottingbrunn
austria
email: office@criticalknowledge.org

1.2 Online shop (sale of goods)

Responsible person in accordance with Art. 4 GDPR:

XVXII Diamond GmbH
Fasangasse 36
2423 German Jahrndorf
austria
email: info@webgru.de

2. Collection and processing of personal data

We process personal data exclusively within the framework of legal regulations (DSGVO, DSG, TKG).

The following data can be processed:

• First and last name
• Billing and delivery address
• email address
• phone number
• Payment details
• IP address
• Website usage data

3. Purposes of data processing

In particular, processing is carried out for the following purposes:

• Contract processing (trainings & shop)
• Payment processing
• Dispatch processing
• customer communication
• Digital content delivery
• Marketing & newsletter (if consent is available)
• website security

4. Payment processing (Stripe)

Payment is processed via Stripe.

The following data is transmitted to Stripe:

• name
• Payment details
• Billing data
• IP address

Stripe is an independent controller within the meaning of the GDPR.

More information:
https://stripe.com/privacy

5. Hosting & technical deployment

The website is technically provided by:

XVXII Diamond GmbH
(administration, design, technical infrastructure)

When you visit the website, server log files are automatically processed:

• IP address
• Date & time
• browser type
• operating system

This data is used for system security and is not evaluated on a personal basis.

6. Newsletters & Marketing

If you sign up for a newsletter, we process:

• your email address
• Optionally your name

The legal basis is your consent (Article 6 (1) (a) GDPR).

You can unsubscribe from the newsletter at any time.

7. Cookies & Tracking

This website uses cookies.

Cookies are small text files that are stored on your device.

Depending on the technical implementation, the following types can be used:

• technically necessary cookies
• Analytical cookies
• marketing cookies

Cookies that are not necessary are only set with your consent.

8. Photo and video recordings during training

Photo and video recordings can be created as part of face-to-face training.

These serve:

• documentation purposes
• marketing purposes

Participants can object to the use of their recordings at any time.

9. Storage period

Personal data is only stored for as long as is necessary for the respective purposes or as long as there are legal retention periods.

10. Transfer to third parties

Only the following will be passed on:

• to payment service provider (Stripe)
• to shipping service providers
• to IT service providers
• where required by law

There will be no further transfer.

11. Your rights

You have the following rights:

• Information (Art. 15 GDPR)
• Correction (Art. 16 GDPR)
• Deletion (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)

To exercise your rights, please contact us via email.

12. Right to lodge a complaint

You have the right to complain to a data protection supervisory authority.

Austria:
Austrian data protection authority
www.dsb.gv.at

Germany (when shipping from DE):
www.bfdi.bund.de

13. Data security

We take technical and organizational measures to protect your data against loss, manipulation or unauthorized access.

14. Amendments

We reserve the right to adapt this privacy policy to adapt it to changing legal situations or technical changes.

‍