Privacy policy

1. Controller

Christian Decker KLG Simmeringer Haide 294 1110 Vienna Austria Email: christian@derdecker.at

2. Visiting the website

When you visit ConScore, the server processes technically necessary data such as your IP address, time of access, requested page and browser information. This data is needed to deliver the website, analyze errors and prevent abuse (Art. 6(1)(f) GDPR – legitimate interest in secure operation). It is not used to build user profiles.

To prevent abuse, the number of sign-in requests per IP address is counted in memory for 15 minutes and then discarded.

For simple visitor statistics, we count how often each page is viewed per day. We only store the date, the page address and the count – no IP address, no cookies, nothing linked to a person.

3. Registration and sign-in

To sign in, you enter your email address. You receive a sign-in link that is valid for 15 minutes. We store your email address, the time of confirmation and your active session.

The legal basis is providing the platform at your request (Art. 6(1)(b) GDPR). The data is stored until you request the deletion of your account.

Weekly CfS email: if you subscribe, we send you one email per week with new calls for speakers to your sign-in address. We only store that you subscribed and the language you last used ConScore in. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time – via the unsubscribe link in every email or on the page “Calls for speakers by email”.

4. Submissions and ratings

When you submit events or ratings, they are stored together with a reference to your account. This allows us to check who submitted content before it is published. Once approved, the content is publicly visible – your email address is not shown.

The legal basis is Art. 6(1)(b) GDPR (use of the platform) and Art. 6(1)(f) GDPR (legitimate interest in reliable, reviewed content).

Organizer access: if you request organizer access, your email address, your role and your message are sent to the operator by email. Once approved, your email address is stored with the event series so that you can edit it; it is not displayed publicly. Changes you make are reported to the operator for review.

5. Cookies

ConScore only uses technically necessary cookies: for sign-in and your session, to protect forms against abuse (CSRF protection) and to remember your selected language. There are no tracking, advertising or analytics cookies. No consent is required for these (Section 165(3) Austrian Telecommunications Act 2021).

6. Hosting, email delivery and translation

The website, database and email delivery run on Microsoft Azure (Microsoft Ireland Operations Limited, Ireland) in data centers in the EU. Microsoft processes the data as a processor under a contract pursuant to Art. 28 GDPR. Azure Application Insights is also used for technical error and performance monitoring.

Descriptions of event series are automatically translated into German or English. Only the description text – without any information about you – is sent to Azure AI Translator (also Microsoft) and processed in European data centers. According to Microsoft, translated texts are not stored. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a bilingual platform).

Access by the US parent company cannot be completely ruled out. Microsoft is certified under the EU-US Data Privacy Framework.

Map: when you open the map view, your browser loads map data from Microsoft Azure Maps (Microsoft Ireland Operations Limited). Your IP address is transmitted to Microsoft in the process. Nothing is transmitted unless you open the map. The legal basis is our legitimate interest in clearly showing where events take place (Art. 6(1)(f) GDPR).

The operator researches some new events with the AI Claude (Anthropic PBC, USA), which searches public websites for this. Only information about the event is sent to Anthropic – no data about users.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Simply send an email to christian@derdecker.at – for example, if you want your account deleted.

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria, this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.