C.C.C Academy e.U. | Version: August 2026
The protection of your personal data is important to us. We process personal data confidentially and exclusively in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR) and Austrian data protection law.
1. Controller
The controller responsible for data processing is:
C.C.C Academy e.U.
Martina Jeric-Ruzovits
Strohberggasse 15/1/5
1120 Vienna
Austria
Phone: +43 699 11 959 333
Email: contact@cross-cultural-communication.com
This Privacy Policy applies to our websites, our learning platform and the functions and services offered through them.
2. Personal Data We Process
Depending on how you use our services, we may process in particular:
name and contact details
postal and billing address
company and organisational data
communication data
booking and contract data
invoice and payment information
data connected with training, workshops, coaching and consulting services
data relating to use of our website and learning platform
technical data such as IP address, browser, operating system and time of access
information voluntarily provided by users
As a general principle, we process only the personal data required for the relevant purpose.
3. Purposes and Legal Bases
We process personal data in particular for:
responding to enquiries
preparing and administering offers
providing training, workshops, coaching and consulting services
managing participants and clients
providing our learning platform and digital content
administering user accounts
processing bookings and payments
invoicing and accounting
communicating with clients and interested persons
complying with legal obligations
ensuring the security of our websites and systems
sending information and newsletters where an appropriate legal basis exists
Processing is carried out in particular on the basis of Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures), Art. 6(1)(c) GDPR (legal obligations) and Art. 6(1)(f) GDPR (legitimate interests), where the respective requirements are met.
4. Contacting Us
If you contact us by email, contact form, telephone or another channel, we process the information you provide in order to deal with your enquiry and any follow-up questions.
Depending on the nature of the enquiry, processing is based on pre-contractual measures or performance of a contract, or on our legitimate interest in handling and responding to enquiries.
5. Clients, Participants and Commissioning Organisations
In connection with our training, workshop, coaching and consulting services, we process the data required to organise and provide the relevant service.
For corporate clients, personal data relating to participants or employees may be provided to us by the commissioning organisation.
We use these data only for the agreed or otherwise legally permitted purposes.
6. Coaching and Consulting
In connection with coaching and consulting services, personal and business-related information required to perform the relevant assignment may be processed.
Such information is treated confidentially and is generally not disclosed to third parties unless this is required to perform the contract, there is a legal obligation to disclose it, or appropriate consent has been given.
For coaching commissioned by an organisation, additional arrangements may be agreed regarding confidentiality, reporting and data processing.
7. Registration, Learning Platform and User Accounts
Users may register for training, workshops, webinars, online courses, assessments and other Academy offers. Data entered during registration are used to administer and provide the relevant offer. Users may receive service-related information by email, for example concerning changes to an offer or technical circumstances.
User accounts may be created for use of our learning platform. In this context, we may process:
name and email address
login credentials
booked courses and learning offers
learning progress and completed content
where applicable, results of exercises, tests or assessments
technical usage and access data
Processing is carried out to provide the booked learning services and perform the relevant contract pursuant to Art. 6(1)(b) GDPR.
Access credentials are personal and must be kept confidential and not passed on to third parties.
8. Online Shop, Bookings and Payment Processing
When bookings are made via our websites or learning platform, we process the personal data required to process the order and perform the relevant contract.
These data may include name, contact details, postal and billing address, company details for corporate clients, booked services and products, contract and booking data, payment and billing information, and information relating to the user account.
Processing is carried out in particular for contract performance pursuant to Art. 6(1)(b) GDPR and to comply with statutory retention and documentation obligations pursuant to Art. 6(1)(c) GDPR.
External payment service providers may be used for payment processing. They receive the data required for the respective payment transaction.
9. Server Log Files
When you visit our websites, the web server may automatically record technical information, including:
IP address
date and time of access
page or file accessed
browser and browser version
operating system
referrer URL
amount of data transferred
These data are processed in particular to ensure stable and secure operation of our websites and to detect and prevent misuse.
10. Cookies and Similar Technologies
Our websites use cookies and comparable technologies.
Technically necessary cookies may be used where required for the operation and provision of our websites and requested functions.
Cookies and technologies used for statistics, analytics or marketing are activated only after consent where consent is legally required.
You can make your selection through our cookie settings and change or withdraw consent at any time with effect for the future.
Further information is available in our Cookie Policy and cookie settings.
11. Newsletter and ActiveCampaign
If you subscribe to our newsletter, we process the personal data you provide, in particular your email address and, where applicable, your name, in order to send you information about C.C.C Academy e.U., our offers, training, workshops, coaching, consulting and continuing education services, and other relevant content.
Registration generally takes place using a double opt-in procedure. After registering, you receive an email asking you to confirm your subscription. The time of registration and confirmation and the IP address may be documented in order to demonstrate proper registration.
Our newsletters are sent using ActiveCampaign, a service provided by ActiveCampaign, LLC, USA.
ActiveCampaign processes personal data on our behalf. Where required, appropriate data protection agreements are in place with the provider.
Use of ActiveCampaign may involve processing personal data outside the European Economic Area, in particular in the United States. Such transfers take place only in accordance with the requirements of Arts. 44 et seq. GDPR.
Newsletters may contain technologies that allow us to determine, for example, whether a message has been opened or which links have been clicked. Where consent is required for such analysis, it is carried out only on the basis of the relevant consent.
Newsletter processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future, in particular by using the unsubscribe link in the newsletter or by contacting contact@cross-cultural-communication.com.
12. Social Media and Social Plugins
Our websites may contain functions, content or plugins from social networks and platforms, in particular LinkedIn, Facebook and Instagram.
When such content or plugins are activated or accessed, a connection to the servers of the relevant provider may be established. Personal data, in particular the IP address and information about the visit to our website, may be transmitted to that provider.
If users are logged into the relevant social network at the same time, the provider may be able to associate the visit with the respective user account.
Where consent is required to activate such content or plugins, they are generally activated only after the relevant consent has been given.
The respective platform providers’ privacy policies apply to their further processing of personal data.
13. YouTube and Embedded Content
Our websites may embed videos and other content from YouTube, a Google service.
When embedded YouTube content is accessed or activated, a connection to Google servers may be established. In particular, the IP address and information about the page accessed may be processed.
If a person is logged into a Google or YouTube account at the same time, Google may be able to associate the visit with that account.
Where consent is required for the embedding or activation of YouTube content, the content is activated only after the relevant consent has been given.
14. Embedded Content and Third-Party Services
Our websites may also contain content and functions from external providers, such as videos, maps, appointment-booking systems, social-media content or other interactive functions.
For the technical provision of such content, the respective providers may need to process users’ IP addresses.
Depending on the service, additional data may be processed and cookies or similar technologies may be used.
Where consent is required, such services are activated only after consent has been given.
15. Appointment Scheduling and External Booking Systems
Where we use external appointment-scheduling systems, personal data entered by users when booking an appointment are processed to organise and conduct the requested appointment.
These data may include name, email address, telephone number, selected appointment and information voluntarily provided by the user.
Processing is carried out for pre-contractual measures or performance of a contract pursuant to Art. 6(1)(b) GDPR.
Where external service providers are used, they receive only the data required to provide and administer the appointment booking.
16. Online Training and Video Conferencing
Zoom, Microsoft Teams, Webex, Google Meet or other agreed services may be used for online training, workshops, coaching and consulting.
The personal data required to conduct the relevant online session are processed in this context.
Depending on the service used, data may also be processed by the respective provider. The provider’s privacy information additionally applies.
17. Processors and Recipients
We may use external service providers, for example for:
web hosting
IT and technical support
learning platforms
newsletter distribution
payment processing
accounting
video conferencing
cloud and communication services
Where these providers process personal data on our behalf, processing takes place in accordance with the statutory requirements, in particular Art. 28 GDPR.
Personal data are disclosed only where an appropriate legal basis exists.
18. Transfers to Third Countries
When certain service providers are used, personal data may be processed outside the European Economic Area.
Such transfers take place only in accordance with Arts. 44 et seq. GDPR, in particular on the basis of an adequacy decision by the European Commission or appropriate safeguards such as Standard Contractual Clauses, where required.
19. Storage Period
Personal data are stored only for as long as required for the relevant processing purpose or for as long as statutory retention obligations apply.
Invoices and documents relevant for tax and accounting purposes are retained in accordance with statutory retention periods.
Once the relevant purpose no longer applies and statutory retention periods have expired, the data are deleted or anonymised unless another lawful basis for continued storage exists.
20. Data Security
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration, disclosure or other misuse.
These measures are regularly reviewed and adapted in line with the state of the art and the relevant risk.
21. Your Rights
Subject to the statutory requirements, data subjects have in particular the right to:
access personal data being processed
rectification of inaccurate or incomplete data
erasure of personal data
restriction of processing
data portability
object to certain processing
withdraw consent at any time with effect for the future
To exercise your rights, please contact us at contact@cross-cultural-communication.com.
You also have the right to lodge a complaint with the competent data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).
22. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy where changes to our services, technical systems or the legal framework make this necessary.
The current version published on our websites applies.
C.C.C Academy e.U.
Strohberggasse 15/1/5
1120 Vienna
Austria
Email: contact@cross-cultural-communication.com
Version: August 2026