PRIVACY NOTICE

EU / EEA

For European Business Transformation Hub, short EBTHub, a non-profit association (Verein) established in Vienna, Austria.

Organisation: European Business Transformation Hub (EBTHub)

Legal form: Non-profit association under Austrian Vereinsgesetz

ZVR Number: 1203089427

Address: Aßmayergasse 30, 1120 Vienna, Austria

General Managers: Ruth Pauline Wachter, Verena Mersmann

Contact: privacy@ebthub.com (alias of office@ebthub.com)

Who We Are

This notice explains how we process personal data when you visit our website, contact us, become a member, attend our events, or collaborate as a partner company. We provide this information in line with Articles 13–14 GDPR.

Lead supervisory authority: Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria; dsb@dsb.gv.at; +43 1 52 152‑0. You have the right to lodge a complaint with the DSB or with your local EU supervisory authority.

What Data We Process, for What Purposes, and Legal Bases

We only process what we need, for defined purposes:

Website Operation & Security (Server Logs)

IP address, timestamp, URL, referrer, device/OS.

Legal basis: our legitimate interests in running a secure, reliable site (Art. 6(1)(f) GDPR).

Strictly Necessary Cookies

To make the site function (e.g., load balancing, session management).

Legal basis: necessary for the service (Art. 6(1)(b) or 6(1)(f) GDPR) and exempt from consent under Austrian telecom rules.

Non-Essential Cookies & Similar Technologies

Analytics, marketing, embeds (e.g., YouTube, Google Fonts).

Legal basis: your consent (Art. 6(1)(a) GDPR) and §165(3) Telecommunications Act 2021 (TKG 2021). Consent must be active and can be withdrawn any time via the cookie banner/settings. Non-essential tools are not loaded until you consent.

Newsletters & Event Mailings

Email address and basic profile to send updates you request.

Legal basis: your consent (Art. 6(1)(a) GDPR). Austrian law also requires prior consent for unsolicited electronic marketing (§174 TKG 2021), with limited exceptions. You can unsubscribe at any time.

Membership Administration

Identity and contact data, membership details, payment records, participation in member activities.

Legal basis: contract performance / pre-contractual steps (Art. 6(1)(b) GDPR).

Innovation Lab Participation

For Lab experts and partner company employees participating in Innovation Labs: task-level telemetry data (generation time, verification time), survey responses, interview transcripts, and quality assessment scores. All data is pseudonymised at source and bound to informed consent protocols.

Legal basis: consent (Art. 6(1)(a) GDPR) for individual participants; contract performance (Art. 6(1)(b)) under the partner company agreement. Separate Data Processing Agreements (Art. 28 GDPR) are executed with all GenAI tool providers and partner companies before data collection begins.

Partner & Stakeholder Relations (B2B)

Work contact details to plan and deliver joint activities.

Legal basis: our legitimate interests in running the association and collaborating (Art. 6(1)(f) GDPR).

Events & Photos

Registration data; optional photos/videos from events.

Legal basis: contract (Art. 6(1)(b)) and/or legitimate interests (Art. 6(1)(f)). Photos used for publicity rely on consent where required (Art. 6(1)(a)).

If you do not provide data that are necessary for membership, event participation, or a requested service, we may be unable to provide that service.