Privacy Policy
Last updated: 19 August 2026
1. Introduction
Shift + Space – Verein für interdisziplinäre Raumkultur und Forschung ("Shift + Space", "we", "our", "us") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we process personal data when you visit or interact with our website:
shiftplusspace.com
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Austrian Data Protection Act (Datenschutzgesetz – DSG) and other applicable data protection legislation.
2. Controller
The controller responsible for the processing of personal data in connection with this website is:
Shift + Space – Verein für interdisziplinäre Raumkultur und Forschung
Flurschützstraße 36/12/17
1120 Vienna
Austria
3. Visiting the Website
When you visit our website, certain technical information may be processed automatically in order to make the website available, maintain its security and ensure its technical functionality.
Depending on the technical configuration of the website and hosting service, this may include:
- IP address;
- date and time of access;
- requested page or file;
- browser type and version;
- operating system;
- referring website or URL; and
- other technical information required for the secure operation of the website.
The exact information processed and the applicable retention periods depend on the technical configuration of our hosting service.
4. Website Hosting
Our website is hosted by Hostinger.
Hostinger may process technical information relating to visitors in order to provide, maintain and secure the hosting infrastructure.
Hostinger's current privacy policy is available on its website.
For further information about Hostinger's processing of personal data, please refer to Hostinger's privacy policy:
https://www.hostinger.com/at/legal/datenschutz-bestimmungen
The specific Hostinger entity and processing arrangements applicable to Shift + Space depend on our hosting contract and account configuration.
5. Contact by Email
If you contact us by email, we process the information you provide to us, including your email address, name where provided, and the content of your message.
We use this information to:
- respond to your enquiry;
- communicate with you regarding the matter you contacted us about;
- provide information about our activities where requested; and
- handle any necessary follow-up.
The legal basis for this processing is generally Article 6(1)(f) GDPR (legitimate interests) and, where applicable, Article 6(1)(b) GDPR where the communication relates to contractual or pre-contractual measures.
We retain correspondence only for as long as necessary to handle the enquiry and any resulting matter, unless a longer retention period is required by law or necessary for the establishment, exercise or defence of legal claims.
6. Contact Forms
If we introduce a contact form on the website, the information entered into the form will be processed for the purpose of handling the enquiry.
Depending on the technical implementation, this may include:
- name;
- email address;
- message content; and
- any other information voluntarily provided by the user.
The exact processing associated with any contact form will be described in this Privacy Policy once such a form is implemented.
7. Newsletter
At present, Shift + Space does not operate a newsletter through this website.
If we introduce a newsletter in the future, we will update this Privacy Policy before or when the newsletter service is introduced and will identify the service provider, the categories of data processed, the legal basis for processing, the retention period and the procedure for withdrawing consent.
8. Cookies and Similar Technologies
Our website may use technically necessary cookies or similar technologies that are required for the secure and technically correct operation of the website.
Technically necessary cookies may be used without consent where permitted by applicable law.
If we introduce non-essential cookies or similar technologies, such as analytics, advertising, social-media functionality or other tracking technologies, we will obtain consent where required by law before activating such technologies.
You will then be provided with appropriate information and, where required, a consent mechanism.
Under Austrian law, cookies and similar technologies are generally subject to prior consent unless they are technically necessary for the service requested by the user.
9. External Links
Our website may contain links to third-party websites and services, including social-media platforms such as Instagram, YouTube or other external platforms.
When you click an external link and leave our website, the privacy policy and data-processing practices of the respective third-party provider apply.
Shift + Space has no control over the processing of personal data carried out by those external providers.
10. Embedded Content
At present, we aim to avoid automatically loading non-essential third-party embedded content unless the necessary technical and legal requirements have been addressed.
If we use embedded content from third-party services such as YouTube, Instagram, Vimeo, Google Maps or similar providers, such content may result in the transmission of information, including IP addresses and technical information, to the respective provider.
Where legally required, such third-party content will only be activated after the user's consent.
The relevant third-party provider and its privacy information will be identified in this Privacy Policy when such functionality is introduced.
11. Legal Bases for Processing
Depending on the specific processing activity, we process personal data on the following legal bases:
Consent – Article 6(1)(a) GDPR
Where you have freely given your consent to a specific processing activity.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Contract or Pre-contractual Measures – Article 6(1)(b) GDPR
Where processing is necessary to perform a contract or to take steps at your request before entering into a contract.
Legal Obligation – Article 6(1)(c) GDPR
Where processing is necessary to comply with a legal obligation applicable to Shift + Space.
Legitimate Interests – Article 6(1)(f) GDPR
Where processing is necessary for our legitimate interests, such as:
- operating and maintaining the website;
- ensuring website security;
- preventing misuse;
- responding to enquiries; and
- documenting and communicating the activities of the association,
provided that these interests are not overridden by your rights and freedoms.
12. Data Sharing
We do not sell, rent or trade personal data.
Personal data may be processed by service providers where this is necessary for the operation of the website or the administration of our activities.
This may include, depending on the services actually used:
- website hosting providers;
- email providers;
- IT and technical service providers;
- event or registration service providers; and
- other service providers acting on our behalf.
Where required by the GDPR, we enter into appropriate data-processing agreements with processors.
Personal data may also be disclosed where required by law or where necessary to establish, exercise or defend legal claims.
13. International Data Transfers
Where personal data is transferred to recipients outside the European Economic Area, Shift + Space will ensure that an appropriate legal basis and appropriate safeguards are in place in accordance with Chapter V GDPR.
Depending on the circumstances, this may include an adequacy decision, Standard Contractual Clauses or another legally recognised safeguard.
The applicable details depend on the third-party services actually used on the website.
14. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law.
The applicable retention period depends on the type and purpose of the processing.
For example, correspondence may be retained for as long as necessary to resolve an enquiry and any resulting matter.
Where statutory retention obligations apply, the relevant data will be retained for the period required by law.
Technical data processed by our hosting provider may be retained according to the provider's applicable policies, contractual arrangements and legal obligations.
15. Your Rights
Subject to the applicable legal requirements and limitations, you have the following rights under the GDPR:
- Right of access to your personal data;
- Right to rectification of inaccurate or incomplete personal data;
- Right to erasure of your personal data;
- Right to restriction of processing;
- Right to data portability, where applicable;
- Right to object to certain processing; and
- Right to withdraw consent where processing is based on consent.
To exercise your rights, please contact:
We may need to request additional information to verify your identity where this is necessary to protect your personal data from unauthorised access.
16. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that your personal data is being processed unlawfully.
In Austria, the competent supervisory authority is:
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria
Website: https://www.dsb.gv.at/
17. Data Security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
18. Children's Privacy
The website is not specifically directed at children.
We do not knowingly collect personal data from children where such collection would not be permitted by applicable law.
19. Changes to This Privacy Policy
We may update this Privacy Policy when the website, our services, the technologies we use or the applicable legal requirements change.
The current version will always be published on this page together with the date of the most recent update.
20. Contact
If you have any questions about this Privacy Policy or the processing of your personal data, please contact:
Shift + Space – Verein für interdisziplinäre Raumkultur und Forschung
Flurschützstraße 36/12/17
1120 Vienna
Austria