Privacy policy.
Information on the processing of personal data under the General Data Protection Regulation (GDPR).
Last updated: 29 July 2026
Our approach
Protecting your personal data matters to us. This website is built to collect as little as possible: it sets no cookies, embeds no third-party content and performs no cross-site tracking. Fonts are served from our own server, so no connection is made to Google Fonts or comparable services. For this reason no cookie consent banner is required.
Controller
- Association
- Central European Democracy Forum (CEDF)
- Address
- c/o Dr. Robert-Davy-Gasse 27, 2491 Neufeld an der Leitha, Austria
- office@cedf.eu
For any question about the processing of your data, you can reach us at the email address above.
Hosting and server logs
This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Pages). EU representative: Cloudflare Germany GmbH, Rosental 7, 80331 München, Deutschland. A data processing agreement is in place, and transfers to third countries are covered by standard contractual clauses.
The site is delivered through Cloudflare's global network of data centres. Requests from Austria and the rest of Europe are answered from European locations — for Vienna, usually from the Vienna data centre.
When the website is accessed, technically necessary access data is processed — in particular IP address, date and time of access, the address requested, volume of data transferred, referrer, and browser and operating system identifiers. This processing is technically required to deliver and secure the website.
- Purpose
- Operation, stability and security of the website; prevention of abuse
- Legal basis
- Art. 6(1)(f) GDPR (legitimate interest in secure operation)
- Retention
- Short-term storage by the hosting provider for security purposes
Audience measurement
We use Cloudflare Web Analytics, a service provided by Cloudflare, Inc., to understand how this website is used. The service works without cookies and without persistent identifiers. No usage profiles are created, no data is combined across websites, and individual visitors are not recognised. What is collected is aggregated information such as pages viewed, referrer, approximate region and technical details about device and browser.
- Purpose
- Statistical analysis of website use and improvement of our content
- Legal basis
- Art. 6(1)(f) GDPR (legitimate interest in a well-designed website)
Contacting us by email
If you contact us by email, we process the information you provide in order to handle your enquiry. Our mailbox is operated by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Deutschland; a data processing agreement is in place here as well. The mailboxes are located on servers in Vienna, Austria, so no transfer to a third country takes place.
- Purpose
- Handling and answering your enquiry
- Legal basis
- Art. 6(1)(b) or Art. 6(1)(f) GDPR
- Retention
- Until your enquiry is resolved, and beyond that only where statutory retention obligations apply
Events and membership
If you register for an event or join the association, we process the information required to organise the event or administer your membership, on the basis of Art. 6(1)(b) GDPR. Data is shared with third parties only where necessary to deliver the activity — for instance with a partner organisation co-hosting a conference — or where required by law.
Your rights
You have the following rights in relation to the association:
- Access to the data we hold about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on legitimate interests (Art. 21 GDPR)
An informal message to office@cedf.eu is sufficient to exercise any of these rights.
Right to lodge a complaint
If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Wien, Austria, dsb@dsb.gv.at.
No automated decision-making
No automated decision-making, including profiling, takes place.
Changes to this policy
We update this privacy policy when our processing activities or the legal situation change. The version published on this page applies.