Data protection:

For us, transparency is not only the top priority when dealing with your donations, but also with your data.  We make sure that only necessary data is processed, such as those for providing a deductible donation receipt, and that our IT is provided exclusively by personally known, trusted partners.

Your data will be used in the following processes:

Donations and sponsorships with donation confirmation.

Donors and sponsors wishing to receive a tax-deductible donation receipt will need to indicate their address and date of birth in front of the authority.  The Epiphany action takes over the official handling of Stream of Life. You will receive the confirmation once a year.  In addition, the transfer details will be recorded as well as the entries in the online form sent to Paypal, if you use this method of payment.

Purposes of processing are:
• Donation management
• Issuing a donation receipt

We may process your data for the following reasons:
• Predominantly legitimate interests (Article 6 (1) (f)) in accordance with Section 34ff BAO

We submit your data during processing to:
• tax and revenue office
• PayPal (Europe) S.à r.l.  et Cie, S.C.A.  (22-24 Boulevard Royal L-2449 Luxembourg)
indeco.cce.U.  (Schönbrunnerstrasse 2/65, 1040 Vienna)
• CloudPlus e.U.  (Schweidlgasse 44/2 / 2.05, 1020 Vienna)

We only save your data as long as necessary.  The criteria for the storage period are:
• 7 years §212 UGB and §§124 ff BAO;

The need to provide us with your data, and the consequences if you do not provide your data, are based on:
• There is no contractual or legal requirement to provide the data, however, no donation receipt can be issued without the information.

We collected your data from the following sources:
• The respective bank.

Donations and sponsorships without donation confirmation

If you do not need a donation receipt or want to remain anonymous, you can also transfer directly to our donation account.  Only the transfer data are known to us, which only appears in the administration of the donation sum as a proof of origin.

Purposes of processing are:
• Donation management

We may process your data for the following reasons:
• Predominantly legitimate interests (Article 6 (1) (f)) according to §§ 34ff BAO

We submit your data as part of processing:
• CloudPlus e.U.  (Schweidlgasse 44/2 / 2.05, 1020 Vienna)

We only save your data as long as necessary.  The criteria for the storage period are:
• 7 years according to §212 UGB and §§124 ff BAO;

The need to provide us with your data, and the consequences if you do not provide your data, are based on:
• The processing is necessary because otherwise the transfer can not be carried out.

We collected your data from the following sources:
• Banks

General contact

If you contact us, your contact details will be received and filed.  This applies to any kind of contact, whether by phone, via e-mail, the online form on the page or via Facebook or Instagram.  The same applies to persons in companies with whom we are in contact.

Purposes of processing are:
• contacting
• correspondence

We may process your data for the following reasons:
• implied consent (Article 6 (1) (a))
• Predominantly legitimate interests (Article 6 (1) (f)): Obtaining information from addresses that are accessible to the public outweighs the interest in data protection of the data subject

We submit your data during processing to:
indeco.cc e.U.  (Schönbrunnerstrasse 2/65, 1040 Vienna)
• Facebook Ireland Ltd.  (4 GRAND CANAL SQUARE, GRAND CANAL HARBOR, D2 Dublin IRELAND)
• CloudPlus e.U.  (Schweidlgasse 44/2 / 2.05, 1020 Vienna)

We only save your data as long as necessary. The criteria for the retention period are:
• 3 years of evidence from last contact

The need to provide us with your data, and the consequences if you do not provide your data, are based on:
• The provision of your data is neither contractually nor legally necessary, but we can process requests only with the necessary data.

We collected your data from the following sources or by the following means:
• Public appearance of the interested party (eg website, social media)

Site-related processing

To display our website IP addresses are received.  The addresses are immediately anonymized, no cookies are set.

Purposes of processing are:
• Presentation of the website

We may process your data for the following reasons:
• Predominantly legitimate interests (Article 6 (1) (f)) (technical necessity)

We submit your data as part of processing:
indeco.cce.U.  (Schönbrunnerstrasse 2/65, 1040 Vienna)

We only save your data as long as necessary.  The criteria for the retention period are:
• Immediate anonymity.

The need to provide us with your data, and the consequences if you do not provide your data, are based on:
• Receiving IP addresses for the correct representation of the website www.streamoflife.at.  The addresses are immediately anonymized.

Use of the online shop

When you place items in the shopping basket or purchase items in our online shop, all necessary data is stored to ensure the correct functioning of the online shop. The purpose of processing is the allocation of a user to a shopping cart on the legal basis of our legitimate interest in providing a functioning online shop and pre-contractual measures (Art. 6 para. 1 b,f DSGVO).

Data subject category:
• Customer (Guest)
• Customer (Registered)

Data categories:
• IP address
• Date and time of request
• Assigned shopping cart
• Articles in the shopping cart
• Changes in the shopping cart

This data is stored on the server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Data of non-registered users will be deleted after two days at the latest, data of registered users will be deleted until the user account is terminated or until the data processing is revoked. The provision of your data is neither contractually nor legally required, but happens automatically when you visit the website and cannot be prevented.

Order processing

If you place an order, the necessary data will be stored by us and used to process your purchase and to ship the goods, as well as to carry out activities related to a purchase, such as processing a cancellation. The purpose of processing is therefore to process your order on the basis of the purchase contract concluded during the ordering process (Art. 6 para. 1 b DSGVO).

Data subject category:
• Customer (Guest)
• Customer (Registered)

Data categories:
• First name
• Last name
• Company name
• Address
• Delivery address
• Phone
• E-mail address
• Product & item number
• Subtotal
• Shipping costs
• Total amount
• Payment method
• Credit card information
• Credit card information storage
• Order number
• Invoice number
• Order date

The order processing is carried out by Stream of Life, EURO PLAZA 5, Gebäude J, Eingang J1, Kranichberggasse 4, 1120 Vienna, Austria, technically serviced by the web service provider indeco.cc e.U., Schönbrunner Straße 2/65, 1040 Vienna, Austria, the server is provided by Hetzner Online Gmbh, Industriestr. 25, 91710 Gunzenhausen, Germany. Your data will be deleted after 7 years. The provision of your data is contractually necessary, otherwise we cannot process the order.

My account

After completing an order process, you can register for the purpose of keeping your data permanently available and not having to re-enter it each time. The legal basis for this processing is your express consent (Art. 6 para. 1 a DSGVO).

Data subject category:
• Customer (Registered)

Data categories:
• First name
• Last name
• Company name
• Address
• Delivery address
• Phone
• E-mail address
• Product & item number
• Subtotal
• Shipping costs
• Total amount
• Payment method
• Payment details
• Credit card information storage
• Order number
• Invoice number
• Order date
• Past orders

The account is maintained by Stream of Life, EURO PLAZA 5, Gebäude J, Eingang J1, Kranichberggasse 4, 1120 Vienna, Austria, technically serviced by the web service provider indeco.cc e.U., Schönbrunner Straße 2/65, 1040 Vienna, Austria, the server is provided by Hetzner Online Gmbh, Industriestr. 25, 91710 Gunzenhausen, Germany. Your data will be deleted after 3 years of inactivity or upon revocation of your consent, unless the data is relevant for other processing activities. The provision of your data is neither contractually nor legally necessary, without these data no customer account can be created.

User data analysis

To secure the data generated in the webshop, we run a security tool that detects and prevents fraud attempts and other dangerous activities by means of an activity analysis. The data can additionally be used to evaluate non-threatening activities. No profiles are created and evaluated. The legal basis for this is the protection of our legitimate interest in maintaining the website and user data (Art. 6 para. 1 f DSGVO).

Data subject category:
• User

Data categories:
• IP address
Date and time of the request
time zone difference from Greenwich Mean Time (GMT)
the name of the requested file
access status/HTTP status code
amount of data transferred
operating system
browser type as well as language and version of the browser software
a message about the successful retrieval

The evaluation data can be viewed by Stream of Life, EURO PLAZA 5, Gebäude J, Eingang J1, Kranichberggasse 4, 1120 Vienna, Austria, is technically serviced by the web service provider indeco.cc e.U., Schönbrunner Straße 2/65, 1040 Vienna, Austria, and is stored on the server of Hetzner Online Gmbh, Industriestr. 25, 91710 Gunzenhausen, Germany. Your data will be deleted after one year, unless the data is relevant for other processing activities. The provision of your data is neither contractually nor legally necessary, but can only be prevented by avoiding the website visit.

Newsletter

With our newsletter we would like to keep you informed about our activities. To do this, we need your name and e-mail address and, above all, your consent to send you these mails. You can unsubscribe at any time by sending an email to office@streamoflife.at.

The purposes of the processing are:
• Newsletter mailing

We may process your data based on the following legal grounds:
• Express consent (Art. 6 para. 1 lit a).

We transmit your data in the course of processing to:
• Mailchimp, The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA.

We only store your data for as long as is necessary. The criteria for the storage period are:
• Until revoked

The need to provide us with your data, and the consequences if you do not provide your data, are based on:
• There is no contractual or legal necessity for the processing, but without providing the data and consent, no newsletter mailing is feasible.

 

Supplier- and service-related data processing for billing

For services such as IT services and other expenses, the data must be processed by the associated persons.  For correct settlement, this data will be forwarded to our tax consulting firm.

Purposes of processing are:
• Billing

We may process your data based on the following legal grounds:
• Contract with the person concerned (Article 6 (1) (b))

We submit your data during processing to:
• Reschny-Birox tax consultancy (Krugerstrasse 8 / 9-11, 1010 Vienna)
• CloudPlus e.U.  (Schweidlgasse 44/2 / 2.05, 1020 Vienna)

We only save your data as long as necessary.  The criteria for the storage duration are:
• 7 years according to §212 UGB and §§124 ff BAO;

The need to provide us with your data, and the consequences if you do not provide your data, are based on:
• The processing is required by law, without the provision of the service can not be used.

These rights are guaranteed by the GDPR:

You have a right to information about the data processing. If incorrect or incomplete data is being processed, you may request a correction or, if there is insufficient reason for processing, deletion of the data. You can stop processing by requesting a restriction to review it or completely disagree with it if it is unreasonable for special reasons in your situation. If you wish to transfer your data record to another person in charge, you can assert your right to data portability. You have the opportunity to file a complaint with your data protection authority at any time. You can revoke your consent for processing only by sending an e-mail to office@streamoflife.at at any time.

Responsible for the data protection regarding Stream of Life is:
Monika Koczi

Responsible for the processing is:
Stream of Life e.V.
EURO PLAZA 5, Gebäude J, Eingang J1,
Kranichberggasse 4,
1120 Vienna, Austria
office@streamoflife.at