This Privacy Policy explains how the Global Shift Institute GmbH (the "Institute", "we", "us") collects, uses, and protects personal data when you visit our website or contact us. The policy is provided in line with Regulation (EU) 2016/679 (GDPR) and the Austrian Data Protection Act (DSG).
Global Shift Institute GmbH
Fichtegasse 9, 4. OG
1010 Vienna, Austria
Email: privacy@global-shift.com
We have not appointed a Data Protection Officer; the criteria under Article 37 GDPR do not apply to our processing activities. For any privacy matter, please write to the address above.
Sign-up form. When you sign up to receive updates about the Institute, we ask for your email address and store it together with the date of consent. We require a double opt-in: you receive a confirmation email and only after you click the confirmation link is your address added to our contacts database.
Server logs. Our hosting provider (Vercel) automatically processes technical data such as your IP address, browser type, and the time of the request. These are used solely for the security and reliability of the service and are deleted after a short retention period.
Direct contact. If you write to us by email, your message and contact details will be processed to handle your inquiry.
The processing of your email address for the sign-up list is based on your explicit consent (Art. 6(1)(a) GDPR). Server logs are processed on the basis of our legitimate interest in providing a secure service (Art. 6(1)(f) GDPR). Direct email contact is processed on the basis of our legitimate interest in answering your inquiry, and where applicable, the steps prior to entering into a contract (Art. 6(1)(b) GDPR).
We use the following service providers, each bound by a data-processing agreement and EU Standard Contractual Clauses where applicable:
Vercel Inc. - Website hosting and serverless functions (USA, EU-US Data Privacy Framework).
Resend - Transactional email delivery for confirmation and unsubscribe mails (USA, EU-US Data Privacy Framework).
Supabase Inc. - Cloud Postgres database storing the sign-up list (EU region: Ireland).
Email addresses remain on our list until you unsubscribe or otherwise request deletion. Every email we send to you contains an unsubscribe link. Server logs are retained for up to 30 days.
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object (Art. 21). You may withdraw your consent at any time without affecting the lawfulness of processing performed before withdrawal.
To exercise these rights, email privacy@global-shift.com. You also have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).
This site does not use marketing or analytics cookies. We do not track you across sites.
We may update this policy from time to time. The current version is always available at this URL.