Privacy Policy
Information
This page explains how we process your personal data. If you want to change your privacy settings (grant consent or revoke your previously granted consent), you can change your settings.
Controller
The controller of your personal data on our website is:
Médecins sans frontières (MSF) - Ärzte ohne Grenzen, Österreichische SektionTaborstraße 10
1020 Wien
Austria
Tel.: 01 409 72 76
E-Mail: [email protected]
Consent Management Tool
LEGALWEB.IO via KEY CDN
This website uses the Consent Management Tool of our processor LEGALWEB.IO, legalweb GmbH, Bayerhamerstraße 14, 5020 Salzburg, Austria. The tool sets a cookie on your device in order to save the services you have selected or not selected. That cookie does not involve a user-specific ID and does not save any other personal data. It is saved for a maximum of 1095 days and is then deleted automatically. The legal basis of processing is your consent according to § 165 Abs. 3 TKG 2021. The Consent Management Tool is loaded by our sub-processor Key CDN, proinity LLC, Faerberstrasse 9, CH-8832 Wollerau, Switzerland. Key CDN only collects your IP address to ensure the security of the data center. Your IP address will not be transmitted to legalweb GmbH. Data are transferred to Switzerland pursuant to Article 45 GDPR in conjunction with the Adequacy Decision C(2000) 2304 of the European Commission.
Data processing on your end device
The processing operations described in the following text use technologies such as scripts, cookies, WebSQL, LocalStorage, session storage, ... . These technologies store or read data on your end device these out.
Webhost
abaton EDV-Dienstleistungs GmbH
Personal data is processed when you visit this website. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information). Purpose of processing: Monitoring of the technical function and to increase the operational security of our web server, Delivery and provision of the website and Anonymization and creation of statistics. The legal basis for processing: a legitimate interest that overrides the rights and freedoms of the data subject (Art. 6 (1) f GDPR). Legitimate interests: strong economic interest in safe and functioning operation of the technical systems. Data is transmitted: to the data processor abaton EDV-Dienstleistungs GmbH, Hans-Resel-Gasse 17, 8020 Graz, Austria.
Tag Manager
Matomo Tag Manager
When accessing some sub-services of our website, additional personal services are processed. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information). Purpose of processing: Triggering, controlling and managing other services on our website. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data processor InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealandrepresented by ePrivacy Holding GmbH, Prof. Dr. Christoph Bauer, Burchardstraße 14, 20095 Hamburg, Germany, [email protected]. This may also mean a transfer of personal data to a country outside the European Union. The data is transmitted to New Zealand on the basis of Art. 45 GDPR in conjunction with the European Commission’s adequacy decision 2013/65/EU.
Web analysis
Meta Pixel
When accessing some sub-services of our website, additional personal services are processed. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data about the use of the website and the logging of clicks on individual elements. Purpose of processing: Anonymization and creation of statistics, analysis of user behavior and content optimization. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The legal basis for the data transfer to Meta Platforms Ireland Ltd. is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).
Hotjar
Personal data is processed when you visit this website. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data about the use of the website and the logging of clicks on individual elements. Purpose of processing: Anonymization and creation of statistics, analysis of user behavior and content optimization. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data processor Hotjar Limited, Level 5, Dragonara Business Centre, Dragonara Road, Paceville St Julian's STJ 3141, Malta. This may also mean a transfer of personal data to a country outside the European Union. The data is transmitted on the basis of your consent in accordance with Art. 6 Para. 1 lit a in conjunction with Art. 49 Para. 1 lit a GDPR. You were informed before you gave your consent that the USA does not have a level of data protection that corresponds to the standards of the EU. In particular, US secret services can access your data without you being informed and without you being able to take legal action against it.
Matomo Cloud
Personal data is processed when you visit this website. Processed data categories: data for creating usage statistics. Purpose of processing: analysis of user behavior. The legal basis for processing: a legitimate interest that overrides the rights and freedoms of the data subject (Art. 6 (1) f GDPR). Legitimate interests: strong economic interest in the proper operation of the website. Data is transmitted: to the data processor InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealandrepresented by ePrivacy Holding GmbH, Prof. Dr. Christoph Bauer, Burchardstraße 14, 20095 Hamburg, Germany, [email protected]. This may also mean a transfer of personal data to a country outside the European Union. The data is transmitted to New Zealand on the basis of Art. 45 GDPR in conjunction with the European Commission’s adequacy decision 2013/65/EU.
ActiveCampaign
Personal data is processed when you visit this website. Processed data categories: data for creating usage statistics. Purpose of processing: Anonymization and creation of statistics and analysis of user behavior. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller ActiveCampaign, 1 North Dearborn Street, 5th floor Chicago, IL 60602 Chicago, USA. The legal basis for the data transfer to ActiveCampaign is Your consent according to Art. 6 (1) a GDPR.
Remarketing
Bing Ads
Personal data is processed when you visit this website. Processed data categories: data about the use of the website and the logging of clicks on individual elements. Purpose of processing: analysis of user behavior, Analysis of the effect of online marketing measures and Selection of online advertising on other platforms, which are automatically selected using real-time bidding based on user behavior. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller Microsoft Ireland Operations Limited, One Microsoft Place South County Business Park, Leopardstown Dublin, 18 D18 P521, Ireland. The legal basis for the data transfer to Microsoft Ireland Operations Limited is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).
Meta Pixel
Personal data is processed when you visit this website. Processed data categories: data about the use of the website and the logging of clicks on individual elements. Purpose of processing: analysis of user behavior, Analysis of the effect of online marketing measures and Selection of online advertising on other platforms, which are automatically selected using real-time bidding based on user behavior. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The legal basis for the data transfer to Meta Platforms Ireland Ltd. is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).
Google GTag
Personal data is processed when you visit this website. Processed data categories: data about the use of the website and the logging of clicks on individual elements. Purpose of processing: analysis of user behavior, Analysis of the effect of online marketing measures and Selection of online advertising on other platforms, which are automatically selected using real-time bidding based on user behavior. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis for the data transfer to Google Ireland Limited is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF). The privacy policy of Google Ireland Limited: https://business.safety.google/privacy.
LinkedIn Pixel
Personal data is processed when you visit this website. Processed data categories: data about the use of the website and the logging of clicks on individual elements. Purpose of processing: analysis of user behavior, Analysis of the effect of online marketing measures and Selection of online advertising on other platforms, which are automatically selected using real-time bidding based on user behavior. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller LinkedIn Ireland Unlimited Company, Wilton Place, Dublin, D02 X527, Ireland. The legal basis for the data transfer to LinkedIn Ireland Unlimited Company is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).
TikTok Pixel
Personal data is processed when you visit this website. Processed data categories: data about the use of the website and the logging of clicks on individual elements. Purpose of processing: analysis of user behavior, Analysis of the effect of online marketing measures and Selection of online advertising on other platforms, which are automatically selected using real-time bidding based on user behavior. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. The legal basis for the data transfer to TikTok Technology Limited is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transmitted on the basis of your consent in accordance with Art. 6 Para. 1 lit a in conjunction with Art. 49 Para. 1 lit a GDPR. To contact the data protection officer by email TikTok Technology Limited: https://www.tiktok.com/legal/report/DPO. The privacy policy of TikTok Technology Limited: https://www.tiktok.com/legal/privacy-policy-eea?lang=de.
Spotify
Personal data is processed when you visit this website. Processed data categories: data about the use of the website and the logging of clicks on individual elements. Purpose of processing: Anonymization and creation of statistics, Selection of online advertising on other platforms, which are automatically selected using real-time bidding based on user behavior and analysis of user behavior. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller Spotify, Regeringsgatan 19, 111 53 Stockholm, Sweden. The legal basis for the data transfer to Spotify is Your consent according to Art. 6 (1) a GDPR.
Embeddings
YouTube
When accessing some sub-services of our website, additional personal services are processed. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data for creating usage statistics. Purpose of processing: Delivery of content provided by third parties, Selection of online advertising on other platforms, which are automatically selected using real-time bidding based on user behavior and transmission and display of video content. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: as joint controllers for Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).
Contact Form
You can contact us by using a contact form provided on our website. After submission of the contact form, the controller will process the personal data you have provided for the purpose of handling your request on the basis of your consent which you have given by submitting the form according to Art. 6 (1) (a) GDPR, until revocation.You have no legal or contractual obligation to provide personal data. If you do not provide such data, you are simply not able to submit and we are not able to process your request.
Registration Form
You can register on our website. After you have registered, we will process the data provided in the registration form for the performance of the contract based on the contract concluded with us with your registration according to Art. 6 (1) (b) GDPR. You have no legal or contractual obligation to provide personal data. You simply cannot register for the service if you do not provide such data. >We do not transfer your job application data to third parties.
Application Form
You can also apply for a job on our website. We will process the personal data provided in the application form in order to manage your application based on a pre-contractual relationship according to Art. 6 (1) (b) GDPR until further notice, and for a duration of not more than 6 months after completion of the application procedure. If you explicitly want us to retain the application documents you have submitted, we will keep your records for not more than 18 months based on your consent according to Art. 6 Abs. 1 lit. a GDPR. You have no legal or contractual obligation to provide personal data. If you do not provide such data, we are simply not able to manage your application. >We do not transfer your job application data to third parties.
Comments Form
By commenting our products, postings, photographs or videos we will process your personal data for the purpose of imaging your comments on our website and internal documentation of the legal basis of the contract concluded according to Art. 6 (1) (b) GDPR (gratuitous hosting contract to image your commentation on our website). We will publish your name and comment on our website and store your personal data until deletion of your comment.
Newsletter
ActiveCampaign
When you register for our newsletter, we process personal data. Processed data categories: data for creating usage statisticsdata about the use of the website and the logging of clicks on individual elementscontact information like Name and e-mail address. Purpose of processing: analysis of user behavior, Sending information and content optimization. The legal basis for processing: The legal basis of processing is your consent according to § 174 TKG 2021 combined with Art. 6 Abs. 1 lit. a GDPR.. Data is transmitted: to the data processor ActiveCampaign, LLC, 150 North Michigan Avenue, Suite 1230, Chicago, IL 60601, USArepresented by EU-REP.Global GmbH, Attn: ActiveCampaign, Hopfenstr. 1d, 24114 Kiel, Germany, [email protected]. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).
Mailchimp
When you register for our newsletter, we process personal data. Processed data categories: data for creating usage statisticsdata about the use of the website and the logging of clicks on individual elementscontact information like Name and e-mail address. Purpose of processing: analysis of user behavior, Sending information and content optimization. The legal basis for processing: The legal basis of processing is your consent according to § 174 TKG 2021 combined with Art. 6 Abs. 1 lit. a GDPR.. Data is transmitted: to the data processor The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308, USA. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).
Right to object
You have the right to object to processing if your personal data are processed based on legitimate interests. We will then cease the processing carried out on this basis, unless there are compelling and legitimate reasons for us to do so. You have the right to object to the processing of your personal data for the purpose of direct marketing. In this case, we will cease the processing of your personal data for the purpose of direct mail. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to withdraw
You have the right to withdraw your consent at any time by changing the settings at Privacy settings. If you have given your consent to receipt of advertising by email, you may withdraw your consent by clicking the unsubscribe link. In this case, we will cease the processing operations, unless there is any other legal basis. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Other rights
You have the right to access to, rectification, erasure and restriction of processing of personal data. You have also the right to data portability if the processing of your personal data is based on your consent or on a contract concluded with you. You have also the right to lodge a complaint with the supervisory authority. If you need more information on the supervisory authorities in the European Union, click here.
