Data Protection

The protection of your personal data is especially important to us. We therefore process your data exclusively on the basis of legal requirements. In this privacy information, we inform you about the most important aspects of data processing on our website.

1. Data Controller

risk on mind – Stephan Dorner

Postgasse 16/21, 1010 Vienna, Austria

Phone: +43 1 343 03 09

Email: dataprotection@riskonmind.eu

2. Reaching Out to Us

When you contact us via form or email, we process the data you provide (e.g., name, email, content of the message) in order to handle your request as well as for any follow-up questions. Retention period: 6 months after completion of the inquiry, unless longer legal retention obligations apply or further processing is required to establish, exercise, or defend legal claims.

3. Server Logs

When you access our website, our web server automatically processes the following data: IP address, date/time, pages accessed, referrer URL, user agent (browser/OS), amount of transferred data, and status codes. Purpose: Ensuring stability, security, and error analysis. Retention period: max. 30 days, unless a security incident requires a longer retention period.

4. Cookies & Consent (CMP)

We use cookies and similar technologies. Technically necessary cookies are required to provide the website. Non-essential cookies (e.g., for analysis purposes) are only set after your consent (opt-in via our Consent Banner/CMP). You can revoke your consent at any time with effect for the future and change your settings in the Cookie Preference Center.

5. Web Analysis with Google Analytics (GA4)

We use Google Analytics (GA4) to measure reach and improve our website – only with your consent given via the Consent Banner. Without your consent, no GA cookies are set; tags respect the selected consent settings (Consent Mode / Default set to "denied"). 

  1. Responsible Entities/Recipients:

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as the provider in the EU; where applicable, Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as an associated company in a group context (support/processing).

  1. What Data is Collected?

Usage data (page views, interactions, events), browser/device information, approximate location data (city/region based on shortened IP information), referrer, and timestamps. GA4 does not store or log full IP addresses of EU users; approximate geodata is determined on EU servers, and IP data is discarded before logging. 

Data transfers to third countries (USA)
Transfers to Google LLC (USA) may occur. Legal basis for transfers:

• EU-US Data Privacy Framework (DPF), provided Google LLC is certified for the relevant data categories (adequacy decision of the EU Commission dated July 10, 2023), or

• Standard Contractual Clauses (SCCs) of the EU Commission, including additional protective measures. 

Data Processing Agreement & Security Measures
We have concluded the required data processing terms with Google. GA4 offers regional controls (deactivation of granular location/device data for specific regions) and EU-focused data processing. 

Retention Period in GA4
The retention of user and event-related data in the property is configured to a maximum of 14 months (shorter periods are possible). Cookie expiration times are to be considered separately. 

  1. Revocation / Opt-out

You can revoke your consent at any time via our Cookie Preference Center (located in the footer under "Cookie Settings").

Additionally, Google offers an opt-out browser add-on that prevents data transmission to GA: tools.google.com/dlpage/gaoptout. Details can be found under Google Support: "Google Analytics opt-out browser add-on".

9. Technically Necessary Cookies

We use technically required cookies (e.g., to store your consent preferences in the CMP). These are essential for the operation of the website. 

10. Obligation to Provide Data

There is no legal obligation to provide personal data. However, certain data is strictly necessary for technical operations (e.g., server logs, essential cookies). Without consent to analytical cookies, no analysis will take place; you will still be able to use the website. 

11. No Automated Decision-making/Profiling

Automated decision-making as defined in Art. 22 GDPR does not take place.

1. Data Controller

risk on mind – Stephan Dorner

Postgasse 16/21, 1010 Vienna, Austria

Phone: +43 1 343 03 09

Email: dataprotection@riskonmind.eu

2. Contacting Us

When you contact us via contact form or email, we process the data you provide (e.g., name, email, content of the message) to handle your inquiry and any follow-up questions. Retention period: 6 months after completion of the inquiry, unless longer statutory retention periods apply or further processing is required for the establishment, exercise or defense of legal claims.

3. Server Logs (Log Files)

When you access our website, our web server automatically processes the following data: IP address, date/time, pages accessed, referrer URL, user agent (browser/OS), amount of data transferred, status codes. Purpose: Ensuring stability, security, error analysis. Retention period: max. 30 days, unless a security incident requires longer retention.

4. Cookies & Consent (CMP)

We use cookies and similar technologies. Technically necessary cookies are required to provide the website. Non-essential (e.g., analytics) cookies are only set after you have given your consent (opt-in via our consent banner/CMP). You can withdraw your consent at any time with effect for the future and change your settings in the Cookie Preference Center.

5. Web Analytics with Google Analytics (GA4)

We use Google Analytics (GA4) to measure reach and improve the website – only after you have given your consent via the consent banner. Without consent, no GA cookies are set; tags respect the consent settings chosen (Consent Mode / Default "denied"). 

  1. Responsible Entities/Recipients:

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as provider in the EU; where applicable, Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as an affiliated company in the corporate context (support/processing).

  1. What Data?

Usage data (page views, interactions, events), browser/device information, coarse location data (city/region based on shortened IP information), referrer, timestamp; GA4 does not store or log full IP addresses of EU users; the derivation of coarse geodata occurs on EU servers and IP data is discarded before logging. 

Data transfers to third countries (USA)
Transfers to Google LLC (USA) may occur. Legal basis for transfers:

• EU-US Data Privacy Framework (DPF), provided that Google LLC is certified for the relevant data categories (adequacy decision of the EU Commission dated July 10, 2023), or

• Standard Contractual Clauses (SCCs) of the EU Commission, including additional protective measures. 

Data Processing Agreement & Security Measures
We have concluded the required data processing terms with Google. GA4 offers regional controls (deactivation of granular location/device data for regions) and EU-focused data processing. 

Retention Period in GA4
The retention of user and event-related data in the property is configured to a maximum of 14 months (shorter periods possible). Cookie expiration times are to be considered separately from this. 

  1. Withdrawal / Opt-out

You can withdraw your consent at any time via our Cookie Preference Center (footer link "Cookie Settings").

Additionally, Google offers an opt-out browser add-on that prevents data transmission to GA: tools.google.com/dlpage/gaoptout. Details via Google Support: "Google Analytics opt-out browser add-on".

9. Technically Necessary Cookies

We list technically required cookies (e.g., to store your consent preferences in the CMP). These are necessary for the operation of the website; 

10. Obligation to Provide Data

There is no legal obligation to provide personal data. However, certain data is strictly necessary for the technical operation of the website (e.g., server logs, necessary cookies). Without your consent to analytics cookies, no analysis will take place; the use of the website remains possible. 

11. No Automated Decision-Making/Profiling

No automated decision-making. within the meaning of Art. 22 GDPR takes place.

12. Use of AI Tools

We use AI-powered generation tools for individual visual and audio-visual content on this website. This AI-generated content is used solely for illustrative and design purposes. It does not represent real persons, places, or events unless stated otherwise.

Below are some examples of content used on this website that was created or edited using AI tools:


12. Your Rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and object to processing (Art. 21 GDPR). You can withdraw your consent at any time (Art. 7 (3) GDPR) – the lawfulness of processing carried out based on consent before its withdrawal remains unaffected.

Right to Lodge a Complaint:

You have the right to lodge a complaint with the competent supervisory authority:
Austrian Data Protection Authority (DSB), Barichgasse 40–42, 1030 Vienna, Tel. +43 1 52 1520, Email: dsb@dsb.gv.at, Website: dsb.gv.at

12. Use of AI Tools

For specific visual and audiovisual content on this website, we utilize AI-powered generation tools. This AI-generated content is intended solely for illustrative and design purposes. It does not represent real persons, places, or events unless explicitly stated otherwise.

Below are some examples of content used on this website that has been created or edited using AI tools:

1. Data Controller

risk on mind – Stephan Dorner

Postgasse 16/21, 1010 Vienna, Austria

Phone: +43 1 343 03 09

Email: dataprotection@riskonmind.eu

2. Contacting Us

When you contact us via contact form or email, we process the data you provide (e.g., name, email, content of the message) to handle your inquiry and any follow-up questions. Retention period: 6 months after completion of the inquiry, unless longer statutory retention periods apply or further processing is required for the establishment, exercise or defense of legal claims.

3. Server Logs (Log Files)

When you access our website, our web server automatically processes the following data: IP address, date/time, pages accessed, referrer URL, user agent (browser/OS), amount of data transferred, status codes. Purpose: Ensuring stability, security, error analysis. Retention period: max. 30 days, unless a security incident requires longer retention.

4. Cookies & Consent (CMP)

We use cookies and similar technologies. Technically necessary cookies are required to provide the website. Non-essential (e.g., analytics) cookies are only set after you have given your consent (opt-in via our consent banner/CMP). You can withdraw your consent at any time with effect for the future and change your settings in the Cookie Preference Center.

5. Web Analytics with Google Analytics (GA4)

We use Google Analytics (GA4) to measure reach and improve the website – only after you have given your consent via the consent banner. Without consent, no GA cookies are set; tags respect the consent settings chosen (Consent Mode / Default "denied"). 

  1. Responsible Entities/Recipients:

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as provider in the EU; where applicable, Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as an affiliated company in the corporate context (support/processing).

  1. What Data?

Usage data (page views, interactions, events), browser/device information, coarse location data (city/region based on shortened IP information), referrer, timestamp; GA4 does not store or log full IP addresses of EU users; the derivation of coarse geodata occurs on EU servers and IP data is discarded before logging. 

Data transfers to third countries (USA)
Transfers to Google LLC (USA) may occur. Legal basis for transfers:

• EU-US Data Privacy Framework (DPF), provided that Google LLC is certified for the relevant data categories (adequacy decision of the EU Commission dated July 10, 2023), or

• Standard Contractual Clauses (SCCs) of the EU Commission, including additional protective measures. 

Data Processing Agreement & Security Measures
We have concluded the required data processing terms with Google. GA4 offers regional controls (deactivation of granular location/device data for regions) and EU-focused data processing. 

Retention Period in GA4
The retention of user and event-related data in the property is configured to a maximum of 14 months (shorter periods possible). Cookie expiration times are to be considered separately from this. 

  1. Withdrawal / Opt-out

You can withdraw your consent at any time via our Cookie Preference Center (footer link "Cookie Settings").

Additionally, Google offers an opt-out browser add-on that prevents data transmission to GA: tools.google.com/dlpage/gaoptout. Details via Google Support: "Google Analytics opt-out browser add-on".

9. Technically Necessary Cookies

We list technically required cookies (e.g., to store your consent preferences in the CMP). These are necessary for the operation of the website; 

10. Obligation to Provide Data

There is no legal obligation to provide personal data. However, certain data is strictly necessary for the technical operation of the website (e.g., server logs, necessary cookies). Without your consent to analytics cookies, no analysis will take place; the use of the website remains possible. 

11. No Automated Decision-Making/Profiling

No automated decision-making. within the meaning of Art. 22 GDPR takes place.

12. Use of AI Tools

We use AI-powered generation tools for individual visual and audio-visual content on this website. This AI-generated content is used solely for illustrative and design purposes. It does not represent real persons, places, or events unless stated otherwise.

Below are some examples of content used on this website that was created or edited using AI tools:


12. Your Rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and object to processing (Art. 21 GDPR). You can withdraw your consent at any time (Art. 7 (3) GDPR) – the lawfulness of processing carried out based on consent before its withdrawal remains unaffected.

Right to Lodge a Complaint:

You have the right to lodge a complaint with the competent supervisory authority:
Austrian Data Protection Authority (DSB), Barichgasse 40–42, 1030 Vienna, Tel. +43 1 52 1520, Email: dsb@dsb.gv.at, Website: dsb.gv.at

3D rendering from a hero section

Hero video featuring a custom-rendered 3D aesthetic

Additional rendering/video example

13. Your Rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR). Any consent you have granted can be withdrawn at any time (Art. 7 (3) GDPR) – the lawfulness of the processing carried out up to the point of withdrawal remains unaffected.

Right of Complaint:

You have the right to lodge a complaint with the competent supervisory authority:
Austrian Data Protection Authority (DSB), Barichgasse 40–42, 1030 Vienna, Tel. +43 1 52 1520, Email: dsb@dsb.gv.at, Website: dsb.gv.at

Book initial consultation

Schedule an initial appointment without any risk.

  • 3D Render of a Graduation Cap
  • 3D render of a jigsaw puzzle piece
  • 3D Render of the Rismo Logo
  • 3D render of a pie chart

Academy

Enhance knowledge. Reduce risk.