Privacy policy.

The controller is Lebensstimmen GmbH, Baumschulgasse 7, 8010 Graz, Austria. For data protection requests and to exercise your rights, you can reach us at info@lebensstimmen.com or by post at the address above.

Our websites are provided via Vercel Inc., USA. When they are accessed, in particular your IP address, the time of access, the requested address or file, technical response and error data, and information about your browser, operating system and, where applicable, the previously visited page are processed. This data is needed to transmit the website, for technical error analysis and to protect against abusive access.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is to provide our websites securely, reliably and in working order. Technical logs are deleted or anonymised once their purpose no longer applies. Data relating to a specific security incident may be kept until the investigation is complete and, where necessary, for the establishment or defence of legal claims.

Vercel receives the data required for provision and security. Information on international transfers can be found in section 10. Provider information: https://vercel.com/legal/privacy-notice.

For domain management and authoritative DNS we use Cloudflare Inc., USA. DNS translates the domain name into the network address needed to establish a connection. Technical DNS request data may be processed in the process, such as the requested domain, the time and network data of the requesting DNS resolver. Depending on the resolution path, further network data may be transmitted. An authoritative DNS request usually comes from the DNS resolver; it does not necessarily contain the IP address of the website visitor.

Cloudflare is used exclusively for domain management and DNS, not as a proxy for website traffic. The legal basis is Art. 6 (1) (f) GDPR; our interest is the reliable availability of our domains. DNS data is only kept for technical operation, troubleshooting and necessary security checks. Provider information: https://www.cloudflare.com/privacypolicy/.

If you contact us via the contact form or by email, we process the contact details you provide and the content of your message. This includes your email address and, where provided, your name, organisation, telephone number and attached files. When the form is sent, technical data such as the time and IP address may also be processed for secure transmission and to prevent misuse.

We use this information to process and answer your enquiry. Please do not send health data, confidential life stories or personal voice and video recordings via the general contact form.

For enquiries aimed at concluding or performing a contract with you, the legal basis is Art. 6 (1) (b) GDPR. We process other enquiries under Art. 6 (1) (f) GDPR on the basis of our legitimate interest in communicating with interested parties, the media and business partners. Technical measures against form misuse are also based on Art. 6 (1) (f) GDPR.

Our business mailboxes are operated with Microsoft 365. The service provider is the Microsoft company responsible for our contract, usually Microsoft Ireland Operations Limited, Ireland; Microsoft Corporation, USA, and further sub-processors may be involved in providing the service. For the technical sending of form messages and automatic confirmations we use Resend, a service of Plus Five Five, Inc., USA. These providers process the message and metadata required for delivery, storage and security.

Enquiries are deleted once they have been fully dealt with and no further correspondence, retention obligation or necessary preservation of evidence stands in the way. Where contractual or business documents arise, they are kept in accordance with the relevant statutory obligations, in particular generally for seven years for tax-relevant documents. The legal bases for this are Art. 6 (1) (c) GDPR and, where necessary, Art. 6 (1) (f) GDPR for the pursuit or defence of legal claims.

For accreditation requests for the press conference on 20 October 2026, we process the information provided, in particular name, media outlet or organisation, contact details and attendance details. The purpose is to check the accreditation, organise attendance and communicate about the event. This does not add you to our marketing newsletter.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is organising the press event and communicating with media representatives. The information is deleted after the event and its organisational follow-up, unless ongoing correspondence or legally required retention stands in the way. The services named in section 4 are used for emails. Any photo or video recordings of the event are not generally legitimised by this accreditation; where applicable, we provide separate information about such processing.

You can join the Lebensstimmen waitlist independently of a newsletter subscription. As soon as you submit the waitlist form, we store your email address, the time of sign-up and the form source in Resend. Lebensstimmen immediately receives an internal notification with your email address. You receive a confirmation of receipt. Your place on the waitlist is confirmed without another confirmation link and includes the one-time notification about the launch of Lebensstimmen that you requested.

Marketing and the newsletter are additional and voluntary. The corresponding option is not preselected. Only if you actively select it do we send you a separate email with a confirmation link valid for seven days. Only after you have expressly confirmed your consent on the linked page do we activate newsletter sending. Without this confirmation, your place on the waitlist remains; a new address is not activated for marketing. We store the time of the newsletter request and confirmation as well as the version of the consent text as proof. Joining the waitlist again does not change an existing marketing opt-out.

Processing for the waitlist and launch notification you requested is based on your consent under Art. 6 (1) (a) GDPR. For marketing and newsletters with regular news and offers, we obtain separate consent under Art. 6 (1) (a) GDPR in conjunction with § 174 TKG 2021. This is not a prerequisite for joining the waitlist. You can withdraw from the waitlist and have your entry deleted at any time at info@lebensstimmen.com. You can withdraw your newsletter consent via the unsubscribe link in the newsletter or at the same email address. Withdrawal does not affect the lawfulness of processing carried out before it. Signing up is voluntary and not a prerequisite for contact enquiries or for using the information website.

We use Resend for the immediate storage of waitlist entries, the separate management of newsletter status and for sending confirmations of receipt, newsletter confirmation links and internal notifications. Email address, sign-up source and time, consent and unsubscribe status as well as necessary delivery and error data are processed. Every waitlist entry is sent as an internal email notification to our Microsoft 365 mailboxes, regardless of any newsletter confirmation. Further information: https://resend.com/legal/privacy-policy.

We do not use individual tracking of opens or clicked links for the newsletter. Technical delivery information, such as undeliverable messages, may nevertheless be processed in order to operate sending and to identify faulty addresses.

An active sign-up is stored until withdrawn or until the respective information service is discontinued. For a one-time launch notification, the purpose of sending ends after this notification. After unsubscription, we remove the address from the active mailing list. Limited proof of consent and withdrawal may be kept separately for the duration of necessary evidence and limitation periods. Minimal blocking information may remain insofar as it is necessary to reliably respect your withdrawal. The legal basis for this is Art. 6 (1) (f) GDPR; our interest is proof of lawful sending and the avoidance of unwanted messages.

Our website may use cookies and comparable storage technologies. These include entries in your browser’s local storage. Technically necessary storage enables functions you request or stores your privacy choice. Insofar as storage is strictly necessary for the function you expressly requested, it takes place without separate consent under § 165 (3) TKG 2021. Insofar as personal data is processed, the legal basis is Art. 6 (1) (f) GDPR; our interest is the reliable provision of the functions you choose and respecting your privacy choice.

If you actively choose an offered language or display setting, it may be stored locally so that it is kept for further visits. Such settings are not used as an advertising profile. Local settings remain stored in the browser until they are changed or deleted. Cookies may also have a technically defined expiry time. You can delete browser storage via your browser settings; stored settings may be lost in the process.

Analytics functions that are not necessary are only used after your active consent. You can change your choice via the privacy settings available on the website and withdraw consents you have given with effect for the future. Declining analytics does not prevent you from using the information website or the forms.

With your consent we use Vercel Web Analytics from Vercel Inc., USA, to evaluate and improve the reach and use of our public information pages. Page views, time, referring page, browser, operating system, device type, approximate geographic location and selected interactions, such as opening a sign-up, may be processed.

According to the provider, the service does not use cookies. To distinguish visits statistically, a time-limited hash identifier is formed from data of the incoming request. According to Vercel, this assignment is discarded after 24 hours. This is not the same as deleting all aggregated statistics after 24 hours. We receive aggregated evaluations and do not combine them with newsletter or contact data. With the same consent we use Vercel Speed Insights: it measures loading times and rendering speed of the pages (Web Vitals) and processes the page address without query parameters, device type, browser and network quality, without cookies.

The legal basis for the analysis is Art. 6 (1) (a) GDPR. Insofar as access to your terminal device requiring consent takes place, it is additionally based on your consent under § 165 (3) TKG 2021. We do not transmit form texts or email addresses as analytics events. Personal URL components and confirmation tokens are excluded before analysis. Statistical data is only kept for evaluating and improving the information service; necessary personal raw data and identifiers are deleted or anonymised once this purpose no longer applies. Provider information: https://vercel.com/docs/analytics/privacy-policy.

With your consent we use Microsoft Clarity from Microsoft Corporation, USA, on selected public information pages. The service helps us improve usability. It creates heatmaps and reconstructions of website sessions. Page views, clicks, scrolling, technical device and browser information, IP address, times, referring page and pseudonymous session or user identifiers may be processed. Visible page content may be part of the session reconstruction.

Clarity is only loaded after your active consent. We use strict masking and exclude form areas and personal URL components. Contact and newsletter entries are not released for session recording. The application, customer portal, uploads, life stories and payment pages are excluded from its use.

Clarity uses cookies and comparable identifiers, for example _clck and _clsk. The legal basis is Art. 6 (1) (a) GDPR; storage and access requiring consent take place under § 165 (3) TKG 2021. You can withdraw your consent in the privacy settings at any time with effect for the future. Further information: https://learn.microsoft.com/en-us/clarity/setup-and-installation/clarity-data and https://learn.microsoft.com/en-us/clarity/setup-and-installation/clarity-cookies.

Microsoft may also process data in the USA. The applicable transfer bases are described in section 10. Information on processing by Microsoft under its own responsibility and the purposes described there can be found at https://www.microsoft.com/privacy/privacystatement.

Within our company, only people who need access for the tasks mentioned receive it. External recipients are in particular the named providers for hosting, DNS, email and analytics and their necessary sub-processors. Authorities or professional advisers only receive data insofar as this is required by law or necessary to exercise or defend rights. The requirements of Art. 28 GDPR apply to processing on our instructions.

With the services mentioned, data may also be processed outside the European Economic Area, in particular in the USA. A transfer to a US recipient may be based on Art. 45 GDPR and the EU-US Data Privacy Framework if the specific recipient is validly certified and the certification covers the processing concerned. For transfers not covered by an adequacy decision, the standard contractual clauses of the European Commission under Art. 46 (2) (c) GDPR apply with the necessary supplementary measures. These bases must be distinguished per recipient and processing.

Even with service providers that have European contracting companies, access or onward transfers to companies or sub-processors in third countries may take place. Information about the transfer bases used for your data and a copy of, or further details on, the relevant safeguards are available on request at info@lebensstimmen.com.

Provider information: https://vercel.com/legal/dpa, https://www.cloudflare.com/cloudflare-customer-dpa/, https://resend.com/legal/dpa and https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA.

Providing data for contact enquiries, accreditations and the newsletter is voluntary. Without the necessary contact details we cannot answer your enquiry or send a confirmation or notification. Technical connection data is required to access the website. There is no general legal obligation to provide us with personal information for a website visit.

On the information website we do not make any decisions based solely on automated processing, including profiling within the meaning of Art. 22 GDPR, that produce legal effects concerning you or similarly significantly affect you.

Subject to the respective legal requirements, you have the right of access to your personal data, rectification of inaccurate data, erasure and restriction of processing. Insofar as processing is based on consent or contract and is carried out by automated means, you also have the right to data portability.

You can withdraw consent at any time with effect for the future. The lawfulness of processing before the withdrawal remains unaffected.

Objection to processing based on legitimate interests

If data is processed under Art. 6 (1) (f) GDPR, you can object at any time on grounds relating to your particular situation. We will then no longer process the data concerned, unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or need the processing for the establishment, exercise or defence of legal claims.

Objection to direct marketing

You can object to the processing of your data for direct marketing at any time without giving reasons. This also applies to related profiling. After such an objection we will no longer use your data for these purposes.

To exercise your rights, contact info@lebensstimmen.com. We may need additional information to verify your identity, insofar as this is necessary to prevent unauthorised disclosure.

You can lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. In Austria this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria, email: dsb@dsb.gv.at, website: https://www.dsb.gv.at/.

On our website we partly use images that were created or edited with the help of artificial intelligence (AI). They serve to illustrate our offering and to show examples of people, situations and moments of remembrance. They should not simply be understood as photographic documentation of actual people or events.

This note concerns the design of our website. Information on the processing of personal data in the later creation of personal AI creations will be provided separately before the respective processing begins.

We adapt this privacy policy when our processing or the legal requirements change. The current version is available on our websites. If new purposes are introduced, we will inform you before the corresponding processing and obtain any necessary consents.