This page sets out how we handle personal data on this website, in line with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
Viktor Schöll, MA, MFA
Email: info@digitalchinatalk.com
Phone: +43 664 426 44 25
Personal data is any information relating to an identified or identifiable natural person. This includes in particular name, email address, telephone number, and any data you voluntarily provide to us during registration or contact. When you submit a form, we store these details with our email service provider Resend, together with the status of your consent and the date of the last submission. Required fields are marked as such in the forms. Without them we cannot handle your request. Everything else is optional.
We collect and process personal data exclusively for the following purposes: Hosting this site and receiving your form message rely on Art. 6(1)(f) GDPR (our legitimate interest in serving the page you called up and answering the enquiry you made).
This website runs no advertising or tracking scripts and sets only one strictly necessary first-party cookie: dcth_lang remembers your language choice.
Umami (privacy-friendly analytics): we count page views with Umami, a cookieless analytics service hosted in the European Union. Umami sets no cookies and stores no IP addresses as readable addresses. Like any web server it receives the IP address and browser details of each request, to derive approximate country and city statistics and to count visits and unique visitors. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in understanding how the site is used). No consent is required for this. If you still prefer to switch the counting off, you can do so on the /umami-off page. Further information: umami.is, data processing: umami.is/dpa.
Resend (email delivery and contact database): we send all email through Resend Inc., San Francisco, USA, and store your contact details there together with your consent status. Sending happens from the European region Ireland (eu-west-1). In plain terms: the sending region only decides where mail leaves from. It does not move account data. Resend documents US residency for account data, so your contact records and consent data remain US-hosted even with Irish sending. Legal bases are Art. 6(1)(b) and Art. 6(1)(a) GDPR, and every email we send contains a link to change or withdraw your consent. The transfer to the USA is safeguarded by EU Standard Contractual Clauses (Decision (EU) 2021/914, Module Two). Resend additionally participates in the EU-US Data Privacy Framework. The signed data processing agreement is available here as a download: resend-dpa.pdf.
Umami (analytics transfer): the analytics described in section 4 sends IP address and browser details to Umami Software, Inc., USA. That transfer is safeguarded by EU Standard Contractual Clauses (Decision (EU) 2021/914, Modules Two and Three), incorporated automatically via §13 of the Terms.
Vercel (hosting and form functions): this site is served by Vercel Inc., USA, from the Paris region (cdg1). The form functions run there and forward your input to Resend. We do not keep a copy. To keep the service secure, the platform processes server access logs. Vercel additionally distributes the site through a global CDN, so copies can circulate outside the European Union.
External links (social media and organiser): this website links to our profiles on LinkedIn, Instagram, Facebook and X, and to the website of the main organiser, Zeevan GmbH. If you follow one of these links, the destination site receives the request and its own privacy policy applies from that point on; we have no influence over how any of these providers handle data. No third-party content is embedded here, so simply opening a page on this site does not notify any of them.
We store personal data only as long as necessary to fulfil the respective purposes or as required by legal retention obligations (in particular tax and commercial retention periods of 7 years). Your consent record — its status and the date it was given — is kept for as long as the consent exists. A withdrawal is not automatic: if you ask us to withdraw your consent, we first verify the request, then set the contact in our mailing system to the status unsubscribed. That status takes effect for all future mailings immediately. The stored contact record itself is not deleted by the withdrawal, so if you would also like it erased, tell us and we will delete it. We keep a suppression entry for as long as needed to honour your withdrawal, so that we do not contact you again by mistake. Once the purpose ceases to apply or the retention period expires, the data is deleted. In detail: invoices and tax records are kept 7 years (§ 132 BAO, § 212 UGB), contract and enquiry data and your message 3 years (§ 1489 ABGB), and confirmation and unsubscribe links expire after seven days. The hosting platform keeps server access logs only under its shortest available setting.
Under the GDPR, you have the following rights:
The website itself is static, but the forms are processed by server functions at Vercel and stored at Resend. Data is transmitted encrypted (HTTPS/TLS); email delivery is encrypted as far as your mail service supports it. Stored contact data is only accessible to the trip organisers, and confirmation or unsubscribe links are signed and expire after seven days. These precautions implement the protection of Art. 32 GDPR. If your data is breached, we notify the data protection authority within 72 hours where a risk is likely (Art. 33 GDPR). Where the risk to you is high, we also notify you directly (Art. 34 GDPR).
If you have questions about the processing of your personal data or the exercise of your rights, please contact:
Viktor Schöll, MA, MFA
Email: info@digitalchinatalk.com
Phone: +43 664 426 44 25
We answer your request without undue delay, within one month at the latest. For particularly complex or numerous requests the period may extend by up to two further months; we tell you why within the first month (Art. 12(3) GDPR).
No data protection officer is required under Art. 37 GDPR, so none is appointed; that assessment is documented.
Version: September 2026. This version covers the move of form delivery to Resend and Vercel, and the corrected statements in sections 3, 5 and 6. Due to further development of our website or changes in legal requirements, an update may become necessary.